{"type": "bundle", "id": "bundle--027be0dd-5aa6-41b4-a980-cb64ed276a62", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--efac7895-21a7-4548-b820-2e610f6dbd5d", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--fc20e855-de33-46c0-955f-2a32a567354d", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--c9f6c3c4-a640-42c0-8873-0238d70b06ee", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--444be454-fc9e-4d37-b70d-0ab48956c067", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--384c3f50-2991-438c-945d-e931fe4d0f58", "relationship_type": "located-at", "source_ref": "infrastructure--444be454-fc9e-4d37-b70d-0ab48956c067", "target_ref": "location--efac7895-21a7-4548-b820-2e610f6dbd5d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--fdc9f421-9093-44ea-903d-6b23807f5049", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b26a6a5-3adc-4576-a8b9-4542d84aa1f0", "relationship_type": "located-at", "source_ref": "infrastructure--fdc9f421-9093-44ea-903d-6b23807f5049", "target_ref": "location--fc20e855-de33-46c0-955f-2a32a567354d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--69d67577-9cfd-42ac-b69b-e58be0a09a02", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--f5784069-2f89-4c22-ad9d-5d6e24a31d85", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6b03b85-9ffd-4d9b-bfcc-48fc678a7004", "relationship_type": "located-at", "source_ref": "infrastructure--f5784069-2f89-4c22-ad9d-5d6e24a31d85", "target_ref": "location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--ed64cc28-44f9-4291-8486-ea5abb033d8f", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ccfe384-24c4-4afe-b6a3-36d811f84eba", "relationship_type": "located-at", "source_ref": "infrastructure--ed64cc28-44f9-4291-8486-ea5abb033d8f", "target_ref": "location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--809e9b99-fe4d-4b52-a298-3116d12d3712", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--6c92b5ec-7e5b-47de-9d19-0913f30787a6", "name": "CVE-2021-26855", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--71b293bd-ce50-4291-ad84-3b9a0c60be19", "name": "CVE-2021-31207", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31207", "external_id": "CVE-2021-31207"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--11fe573a-2ca7-4fb6-8aa2-830511287929", "name": "CVE-2021-41773", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--79e2bcfc-7617-4f11-b0d5-6a8c3611ac30", "name": "CVE-2021-42013", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd85ef98-9da5-4809-9272-a03407567829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.193.63.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a577e2-c045-4e8f-9ea7-8c41a7725fda", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.213.196.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6dab9c-39b2-4f03-a39c-4e397d67a7cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.26.107.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4734acd6-7165-4d73-aee5-cb49c3416c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.30.172.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2f6a5b-8ead-4632-a68b-9357923bd0d5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.4.164.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc8cc43-44c4-41cb-9b8b-a9d9dbd3b0b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.62.149.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1446af-6861-405b-978c-110578c6be94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.64.106.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1a8b9f-ea38-4eac-8c2f-95cd8f73367a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.85.217.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26c5d76-810a-40ef-b374-38b7556ec9ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.94.17.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d9d811-d806-4d62-bfba-eac330574747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.27.213.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666f3bfd-b0eb-4760-98ba-56aa9cb3019a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b787141a-68b5-48ba-ad9d-21059510c6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.191.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e489cf7-e719-4daa-8863-2b80eb4e33a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.1']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad5403b-1cb6-42cc-89b7-1d8b8bf007d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69ae31e-1ffd-48e8-b572-0b1820c7b12a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2e719e-0ee5-4c7c-b1e4-527a7934b565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c16bca2-e07e-4c23-86b0-6e415eed25b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879d8893-4928-42d7-8e06-cf72e36930cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f03e11-94a4-4ce9-802c-7753abdc8f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c285ed-5442-42fe-89f8-ce0310af6410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238c52bd-d035-4cca-9f30-d26370a6590e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11018862-2390-4f79-849a-182e2d69d1d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa9b66f-deb6-417e-a560-080298833638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea76da6-5a90-40e7-b7bd-3ddcd9ee848c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93229c32-dc63-4d93-b978-c156d7ee76cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3217cf1-71ca-474b-bb2e-7a5841baec37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f1ab9e-4a4d-4da3-b11c-1a175740fa41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cbcaf8a-eca5-438b-b5a5-bb18d41ea440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd6b610-8b7b-4b01-8ef1-dd99ccaa671d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b105aa4a-4f3b-4d54-babe-87a312297c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a510c7f1-1c56-471d-866a-9128b9b5837f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796439e5-7527-486d-af25-96e63daf6311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea19b0e-76dd-4a65-81dc-a7d47acd89ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b2700b-4d2a-4bea-bfe5-17405ddfcc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14c2076-a728-4075-8e70-774b5c96d84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c797cc-2344-4f0c-a75d-0aefcbd22045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3649cb57-b87e-4ca4-a8dd-a2e699375d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60609f2-a974-4d44-ab12-513d8166a994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27254fde-310a-4672-a3bf-5a7c4d4f05fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5956b788-62bb-4713-ae43-d77ef4faade6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00d4111-cf82-45a4-9456-3a5ca4e675c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6ec2be-1eaa-420a-8353-2c277175154e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adcc1dc5-19d7-48eb-897a-6af33dea4870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed68b880-5ae2-4f78-b1d9-3fb20af0796d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e6a4a7-6f13-4f88-b9eb-599c5689f25b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8361087e-c3ed-487a-b28c-c27b7a7216d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3ae45b-96fc-4b8d-8962-4b19a48f7afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a93a747-9adb-465c-82b7-738da215d18c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f031d925-9f4a-46dd-b5f2-3394d8b5ea71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf49d309-bc34-4ce0-9510-9c7919079433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56624a51-3a0b-48da-a05a-36cce3aaf01d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9f1cfa-4ac6-4569-8569-06b5c3e72f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6658d6-3d81-4651-a541-bd86a3ecb106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f549cc80-7d0a-4d4b-91f0-75b7811ce47d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.31.100.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f32fcba-04a0-4730-9956-b6107578961c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.31.161.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1c5544-77bb-4895-8b3f-4f141f109de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2178e0ee-50c7-4819-a823-a6f67c1e9f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebd9376-427b-48bf-94a0-e0faeb2ea91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.51.6.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657e243b-00d6-45bb-9629-6a9220d82a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.53.136.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6c7e42-e600-408b-8350-e38a3ffe7818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.55.73.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22d82ce-91a1-40e0-975b-8ffea6d6c30d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.100.176.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7deac7a0-de5d-4b5d-8f97-e2eef941e0d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.109.170.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afacc34e-96dd-46d8-b05e-6c95b69e4871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.54.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e87589-fc9a-4aad-81b5-050ea7a227fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.133.227.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f568751c-fe75-46f9-8239-bc5bcd8d3ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.168.37.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee07071-eb47-47e5-9dcb-359b619ae6d9", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.200.242.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6240b45e-029c-4939-899d-0fa250584080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.206.108.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb3dc5d-ecc8-4e2b-9ab9-779428df8e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.240.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef791f67-f7bf-4bdb-85be-3c70788472de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.52.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a47774-3ff2-4ae8-8a19-13b7c31e08b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead03d0b-fcf7-4ed6-8365-4d8551c902df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b3646f-d4dc-444b-a5d1-e7a2eb9127fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742ae97b-ae3d-4276-a758-47d8ca792336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb5bad9-1067-4394-b209-d735f4074905", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1106911c-a082-4915-b055-fe9cac25682d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a434a7d-5159-41c0-a573-107c335a344e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282a46c9-15b4-4aab-952c-f6c3cff34a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249d3b53-4ee0-4e9d-8d4f-46730bef490a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d8ada2-a47a-4622-80cd-e43eeee37d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6032870e-992c-4e31-84d8-0a09ab0d1ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a6d0c8-bf17-457a-bfc5-53400debba7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76bfbbc-43d9-4285-9af8-0604736748d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72833cd-fe34-4a94-a6d9-abd4c0ede750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463d15f1-b2fb-4037-9759-a1425087d4c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ad1987-c214-4993-9fe1-faee3dc2528d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fe0590-a821-4e28-a8cd-770cea38af72", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.117.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b63956-b698-4021-a4f3-8474fc6d2ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f9af73-1526-44b7-930b-a6da3dff8597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32acc9f7-1677-460c-ab63-f4fb46c91598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f6131c-99df-4cf4-a1ab-a5fc132a04b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eec245f-bb50-451d-9f16-9488d85377b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864074e0-a832-40b2-bbc1-578cc4d38470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce70311f-fa62-4490-86dc-1d214a5243a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68435ada-e5f0-4866-818b-420709e5ad67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7024d9-0c9e-40c3-8adb-40e59b6dd6d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109dc21e-6c84-4206-b554-db76af950f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2efd097-f6c9-4242-811a-ca6f6a6c1db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.37.35.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e697ec-407c-43a9-859b-d80f60c44068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.43.6.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354a2b9c-8f8e-44f0-a5bd-1bff694c1083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.8.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5acbef8a-bdcb-4b93-adb9-f5e234593a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.53.69.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbfe80c-886b-4d61-ab10-56178d8ffe89", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.58.112.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b587d32-7009-4251-a8d2-8becfe22c1ef", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.71.39.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906c4f60-a656-42b6-8dde-bed7c12377db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.87.21.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d7f4f2-f2d3-4c55-8863-932a6c13b362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.156.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b6a703-df25-481b-a3e6-9be2f0ab8cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.200.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756c36eb-c20d-4528-8acd-6ffa965b31c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.165.127.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1443aad-013f-45f0-b1cf-fd208d99fad1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.210.148.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5b4cd6-0289-475c-b047-5fa3d5a830cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.211.234.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6add61d8-3263-4a3e-9424-a1f0ede0c562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.115.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f4da98-d53f-4abe-85b8-ea8a185a474c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e19283-0b30-4684-97f5-49e2a35ffbb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.93.12.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acb5983-49e2-40f4-96f1-ed0a084c5f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75b0289-93a1-47b8-905e-9a5335f72e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.100.211.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ff0568-f329-4766-b7d1-25909bf864c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.104.73.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd98387a-3bd9-4560-bc48-ed093591652c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.112.12.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167f681b-aca8-4597-94d1-8cf29b382998", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.115.64.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775cd132-a224-4873-aa77-93b23d0275f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.28.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5828aa28-4c75-41ff-8586-67ebc26c3531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.221.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52f5022-3edf-4cbf-b8a9-5aea610199c0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b137faf-2cde-410a-baac-88c704235584", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.125.103.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8cebd9-1a6a-4b26-97e3-c7e5de2aea4a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.131.61.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140f29c3-6df8-4203-a1ba-0df052892793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5783b220-9831-4734-880a-8ee72be313a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6509803-381f-4f34-9404-ee2b283e7dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.143.10.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a53d011-4f2f-4173-b9c5-cbf648e1af1e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.110.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8a2516-27bf-4f9d-aac6-4282107aa375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.159.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e326001e-8063-442a-9f5c-b674609683ff", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.159.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94da358-a92f-41c7-a719-47d9e7d1e101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.202.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ccd0ae8-b3f2-48bd-9e11-492bfdb0cf0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.147.237.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d300d1-7873-44cb-a307-204ab0e91f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.170.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac67a671-edc2-432e-a9a6-5298267b65f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d3ca5a-7672-4aac-bd5b-66811563c22c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb839d50-8f1d-4c22-b502-dfdb25b54924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.28.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0ab61d-850c-40f1-9776-fdc1e46dcf8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ec4021-7464-4b91-8510-af4347bb38fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.68.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69f5463-2e4b-4c5d-8f48-00917b85940d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.154.77.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24c34ff-93df-40dd-8a66-4970f628711f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.158.125.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47320a66-deb3-4206-9e9f-80ad84a51210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.160.232.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982e940e-210b-4232-a096-dbacb0b0ca70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.34.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e269dea9-3a93-4992-b6e6-92b75b515782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.163.167.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f555d403-e8ec-40a5-9a60-22aedb3db5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.167.89.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7364c867-66a1-47f7-ad65-3c028cfdf84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.169.252.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ecec7d-604d-40bb-8740-0a57ce17c1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.78.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee635068-001c-4f10-9d49-6774ec9d6799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.227.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d6e4a5-cb57-4b64-9bae-370258874f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.227.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6b22ce-1f72-4178-8644-8e2a2bf3c25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.175.51.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4be0ff-84f3-4d64-9e28-e7e7487d87b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99374364-fc50-44f8-9e3d-79746d21793d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.90.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b650aca-4243-457f-ad58-87675724cb82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.176.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ca7653-5ac1-425f-9a70-0cb3800a6ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.184.179.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb1b8e9-1cc1-46b9-abb5-fc1e85190e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.191.50.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620f7783-8e84-4438-91c3-f42fee97e445", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.192.209.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80e2615-960e-49bc-825f-75f7425d24e3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.196.132.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a16fdd2-e106-465a-8cdc-be07ce9fa5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9eb58b9-b224-4d0f-82c1-b431f9f52e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba6d3e7-e159-4aea-80f4-10feb713126a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5213f383-ab06-4962-a52f-e85b55667110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400970b0-0a99-43d4-88af-a7d9bf3c4838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59ea888-a294-42c8-8ef0-6d8121b0a06d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa553669-6f23-44b3-81f4-f977403aa2f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329cfe06-33a3-4d1d-9348-3b6bd9b999b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.58.1']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ce4e2c-ea80-4085-87ed-790b5bac65b5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.21.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8cb739-5321-4a96-8d0a-1478c113a434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ea25a1-1370-48a8-a6cc-6984cc12a43a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.211.18.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6dcd72b-abba-4526-8e42-63ccef1f6561", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.215.165.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d76615d-feb4-4f07-9274-e31cf56c783d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.215.208.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d04f4e-fd7b-4b7f-831a-e09526c5019b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.217.154.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ed0998-64ad-46d0-adc6-ab655d8711a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.241.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8036256e-29ed-42a2-9bec-8f3ba1feb4f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.225.87.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d23654-cfc5-44e3-8b7e-1b92ca71f50e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.226.124.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd2b93a-6db3-4f69-a8c1-8f951f413b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0f8d53-bce3-4281-aa5f-4f0e0b00f499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e45889-8e5c-4e9b-8763-e9991350654a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01860d8-3950-4f1b-bf23-725efd597cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84ecd68-cb63-4159-91ac-88f7b12b0208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00959f23-c371-4fd3-8d0a-a55df79866fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787ff54b-7859-4419-aa04-c79355e2edd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3805b3a-618b-4e27-a9ed-ca8f23fb2281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad61814-7ee6-4268-913f-4bd504e9284b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed30b151-69cb-41e2-8bf1-20664919dc22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40aac06-006c-44e2-aa17-0363fed45f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8808a74b-ca9d-408f-a3f4-5deb28506d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3056ece8-a498-49c2-a638-ef6b4d88a26a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7bac35-5a6b-4fe0-a423-f58c80f5387f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27f5285-9d16-4c79-930a-6f7cee1e476b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f02ba1-e947-40d3-90d2-ba5e2cf1aa78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ccf74ba-7edf-4db2-b4d6-645394d5787e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9950e76b-84f4-47dd-98e2-4ae1f24c1321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e400fd-3610-4268-ab26-464f3724d3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393e3b42-d5b0-470a-af4c-39628575ccc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c06ee6-f264-4e3d-8d08-ab8098947717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0346bac-58dc-4d2b-ac92-2ae2dcd2f1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860358b2-50ad-4340-ae7a-8e881f71075f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272ad5dd-e6c3-4748-8dce-c0a8746634e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a512a058-a12e-4ff2-b529-2131f66e19ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3d9f97-9daf-493c-8026-6613f196a5cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.236.190.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c0084b-72b8-4b1b-b663-b94b2c816f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.239.175.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d722adfe-d74d-445d-b5c0-b9861900fa36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.244.172.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780042c9-d655-4745-af76-7bd7277a87eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.244.227.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bedd670a-749a-4e7b-9126-403544dbdfe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.245.27.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c24e2dd-8a0e-4a7a-ae20-d922c21ea1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.247.13.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a14631-dcf9-43af-9bc7-82ab381866f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.248.120.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2629d036-e53e-4107-b5d5-0246212e9e08", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.249.87.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59ac257-b1f1-459d-97d6-91b64c2bf3c0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.26.136.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9633d6d3-63d4-45de-9e98-73ec3233d3d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d51975-8339-4ff0-b686-a0840e0935b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63193d1-a01e-4567-911d-9f2732ff45a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd2242a-aa00-4a8c-a025-e2e030bc17fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.38.219.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f986e6f-bfd4-4cad-a476-593462137183", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.41.247.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce1c2f6-9792-401b-8e50-b6a66011c35d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.42.74.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df5081f-1e4e-4a38-9832-d443cd536e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.49.62.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55fc3b46-42fe-4cff-999b-b5e917586701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.54.101.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c01bfa4-ed8e-4008-9d1b-23c733d7fe0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.57.224.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e405fc-484f-4b07-bdb5-cb073be06e6f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.61.123.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9951044f-f5ba-4043-867f-bafc8733447e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.67.163.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6465c8-daae-406b-8f3d-3093ce067036", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.67.80.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830702af-6f9f-4802-bb45-d6d0df727b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.69.189.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f9dc6e-9c02-4d00-b873-4f8df127096e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.69.219.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a79582-d33d-45b2-89a4-91f3421f53cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.7.81.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6bd2f4-c487-4535-8450-2ae9f949a355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.183.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1079b772-1b63-47b4-baa8-c67ed0b2d571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.71.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf12848-65da-409b-bd45-1e71f093b0d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.76.88.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c760585-a577-4afb-a439-88cac8163c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.175.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e05246-8c0e-4caa-8659-1f714c943ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.242.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be00f27-8be0-4c14-8c44-571781411615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.0.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf62889-cebc-4c38-9e6f-cf435c44d3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.1.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee982de-f62d-4cff-a341-d9d540b70e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.132.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a081a338-ba38-4396-8262-18213e38acf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.20.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48297bd1-a50a-4461-a977-7a05d7ba04d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.85.91.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613a824d-96f4-4f31-9e97-19ece6ede656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdef821-8736-4b91-9185-fbc660aa972a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711900dc-44e9-4202-af48-953c96fb583c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3ce636-74ce-49fa-8102-55bbc733237c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a0b45a-a7ec-486c-801f-ce7a4b729249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fdca66-da7b-4896-b541-198815182284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42aa714c-4d97-44de-9772-1c6783ca9558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ea872f-0b50-4b8a-87af-228bfd8a98b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92a9b5d-cc18-4a66-b66e-c5ddbc3b9d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2b490a-9eb4-49bb-b8bc-f1efe20394ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.205.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c979706-4361-4a0e-9b3f-d8d87ccf2bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.206.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ff71c1-fed8-4ccb-9da7-b4f659b08566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.77.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7946f7ff-f867-412f-8aff-92adb24efe45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.98.149.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6499794-b5bd-42a5-b456-854178e3c856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.19.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e449d8e6-388f-4aaf-8454-5eb8b0850d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.143.221.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a59915-ca2a-491a-9263-a9d77bd77a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d281dcc-e4e4-410a-8319-225d4ea20fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4904a4e1-99a8-4c16-8d4c-5acfdeb82430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0d1b2c-a5b9-4b19-8a66-c608e03b6005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ad5e19-b1bf-4466-9f3c-502beecc4fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20075f8-26a5-4a43-b295-5af4a2b6526b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f075e6f-4b5b-48e3-8d55-3c671ecc210a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48617de2-ad8f-4006-82c7-625442f3b1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1f8851-1f81-4cb0-bd6d-05b2df3d0cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0480e168-cd27-4d86-b675-9d02a2bbf4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4323a1c8-fe30-427c-98e7-c72708a4d997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe12f0fd-e95a-4189-8567-2f54c1550460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce58112-12d2-4f80-a054-aba3b5b5b12e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31df063f-5247-4268-b032-87bf933b0fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7009221-f123-4139-89f6-a51a20e365bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f6bb71-d505-43b9-bf3c-646333a32cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd4e869-570e-4936-9bf2-eac88b3129ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b350e875-37ef-481d-9431-78b6f52a663a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8d9ab4-c704-49f8-b3d9-8345bb7f1b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2c7a87-40b6-4e1b-b6a1-7fa1e5708df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d228508a-6be6-413d-bf82-5914abe91d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49731ead-3d92-4747-b3b8-d2febeeec531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5c5cb6-38e7-427a-91fb-aa68e5fb347b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.0.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ead4b1-fdea-4360-a179-5caa718d8eff", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.11.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b4937a-38da-4222-854e-dd953fae7446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.110.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309fc235-b626-45f1-a4cb-174f87ec6692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.131.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238c4f5e-d395-4a64-9177-663140b6d108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.18.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329fa29a-6070-4a10-95c6-be328cab449e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.221.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72c5b05-e329-47d8-919e-21ee3922067a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.91.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df36ebf2-4f19-4055-a630-75925894b5e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.159.220.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2c1084-1142-4f12-8753-9327f9e28545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.167.199.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee124904-8510-442e-b997-c90f29d18a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.168.142.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41f17e7-fb44-4549-bf74-d3728c02e3b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.168.4.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bf67ef-6bb2-49f3-b922-f9084ff48a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.10.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba5c0de-eeb5-48a6-a36e-41d7ede8bdfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.135.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64671deb-fabc-4e14-a4e2-a6ef0828bbf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.147.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b8f7f0-9800-48d6-912a-0ef990add7d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.149.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7985d366-6fb0-493a-af15-82ab27b16bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.154.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8b99ce-b866-4fbc-9f9b-5cfa0af8a025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.8.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d1656f-31a7-4f0c-8c2d-649960944d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.9.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b05798e-ecd1-40d9-9777-bc07effbc095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.27.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bcedbf0-e509-440c-84dd-9c7c7daf0f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.28.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf862656-1ce7-407f-968e-481def349941", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.208.108.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df6761e-db6d-49b3-b90b-81256c2bfd79", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9cb8b5-5ae4-4d14-94b7-7357cc85d074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.223.56.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e82c4d-ca11-4efd-88da-5d5a0478376d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22aa26b-87d0-4f96-b24b-5d088efbfea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.94.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f769126-c206-4d38-b28f-ab87b2437937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.201.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2b20c8-6eb9-4bf9-8348-393dff7f2146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.66.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f50ca7-c1ea-43ed-9574-d95fea4de7a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.83.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5509a06-20d5-4ca4-a0a2-ba679b055e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.151.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09338e88-fa13-4a3b-8e64-5bd8b95f7758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e20f7ef-41c5-43e7-9c1e-8220b9c1986f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.240.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16fa719-bc29-4242-8c2e-af148b34a439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.32.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc87b9c7-2ac2-4f61-b46e-f456558f407a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3de75b9-4c80-4e66-98a5-1e18cb43a80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9baaa81-d748-4689-897c-21c25085cbc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.37.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840ae0fb-40f7-46f8-bb6d-55193c0cdf4d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.38.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13516445-cfa2-48cd-b90c-ff320582f63b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.42.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8836697-23ae-417c-a484-3aec9cc96f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.43.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a50643-e6e9-47df-942f-01bf68b77058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.244.74.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd1293f-0cc0-4c04-894d-d8416ea1425d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.245.245.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86bab95-6e03-4737-9863-11a5e0cf003f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.247.160.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7a17b9-bb81-4bbf-8497-33cb1398889a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.115.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4acd1a-8e95-4191-b67f-0d9d99d9ec35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.126.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e408fa-0353-4786-b6ac-bddad7ec42f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.130.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7549b23a-e49d-427d-a4cc-b1c412ef091f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.160.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb705d5-e30a-4901-9377-45d087ae5270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.208.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469f9017-6e83-40b8-b325-7e72ac890a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.228.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca1e9de-d03c-425f-aff4-3397df233510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.237.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53a2721-4336-48d5-9a32-3dc36e79754f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228b98b0-4870-4872-92f5-ac112a32c88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d165dc4-41d6-4fb4-86e9-9b8a271409f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.180.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbaa3be-5ba4-4b2e-9ee3-6f420dfb1d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.238.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d93308-e345-4245-8101-c6cc2947f6a1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.159.125.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf83590b-d80b-49b5-a2d2-73952afb5936", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.186.184.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f254fc0-ad50-4282-8e51-c84c122385c5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.233.67.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e015db-5c9e-472e-8feb-6d4ed29043a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.245.101.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c330269a-83a3-4e38-b546-7ec4438d113c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.66.135.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c7445b-fcd3-4097-9ddc-ccb353e90a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.110.208.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf21344c-0d7c-4f4b-9725-4710b71d7d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.107.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de181499-f242-4a38-8c3d-d7d492266e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.110.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5811ee55-6e86-4b66-bffb-8c54ee6a35b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.121.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60f740a-5c58-43aa-b8ef-4ecb1fce13ca", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.18.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36937454-123b-4064-ba42-56683b08c15e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.170.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a9c076-4ed3-485c-b905-6748941c1507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.14.56.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb93a47-2574-4d63-a14a-13f5a76a416e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.240.29.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef16e86e-830c-4195-bc31-82fc45c042bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.32.29.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52efd71-f1e9-444f-9821-15935f213a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.32.31.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025b36f6-252a-4d84-9751-73c3aa8e5e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.38.195.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6b839d-7584-4d4b-94ab-5ad771d8e5c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.51.149.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66f69d6-1dd2-4298-807d-36703d3fa662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.51.21.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34b1549-1a0f-4d1c-a5d9-4e4ccbeb19be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.52.49.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da844a1f-d058-4640-b03f-0ec5cb642e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.54.53.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5e9487-6e20-4279-bad0-33817621d19d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.13.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec77f5da-14ec-408c-a247-f4b4a2f1ea84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.139.1']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090acc46-84d1-4c9c-952a-e496bdec66d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.141.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061c7dd3-308c-4972-ba06-97710edbb163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e9384b-31a7-4b0a-ac48-f08f94654b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f176cc7-2150-4423-b8c6-b4188b35f43b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d0fab7-2c63-487f-acd8-08f16704d60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf76a5d-6dc4-43ca-9309-f541bf65a9d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83692148-f37d-457f-93c3-4f981a29dad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34639314-dc93-4687-8189-ba7656d5b931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a91ee77-7e95-4358-8d31-a1c9c1bc3d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc32d00c-1c8c-4b1e-ab05-4a311695da58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36d2fe1-ec79-440d-8ece-a387d9997eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.154.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e78802-ada4-4b5b-81ee-a1e74a780ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.169.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64eaeb1-ee25-49a2-a1c9-3063cfce5196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328629b7-d6c1-4b58-9a14-9798a0e9ca62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.184.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d12f52b-64e0-47d8-9a0e-3fdd2114c1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.188.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c029d33-a538-4095-8063-1ba5c3de94a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02ef719-6085-4216-af82-36ffba09db98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8a02ca-7c5b-4ce6-9c2b-076a980f9926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f15f667-104a-4807-bdcb-535c9251ee45", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.237.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe1cdbd-6b2d-4814-90de-8ba0694790f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1f891e-4af8-431e-9fa3-d33d986a1843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb177bd-6c54-4ad7-95d3-af30ca42b17d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef52d81-d298-4049-b633-6acaf7161faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c2aa65-86aa-4c2b-8129-6500ae36f3e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d768099a-9b3a-4532-a332-98952ee34596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--856f41cd-5cc1-419c-a9e3-1910363ed823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe22e60-7033-4249-9dcd-e635ef371c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6cba287-0bb5-4da8-bbe0-7f083182fdb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e98fb3-35c1-463d-ba47-730ddc2b603e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c88179-f505-4a4a-bb71-d5a5a46037da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de0633a-9181-4a0e-b9cb-925e92fd938b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b882d712-f659-468e-8d21-49f3e47f42c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2db775e-206b-44b6-a87f-afc73073ba8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4c6b04-dbf7-4a66-86c4-9dae05155bd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221a9b4e-6609-445f-93fc-e65ed0313e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b1411d-840b-4b84-a406-922ebe31ea69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c0129a-61a4-4f0f-96fe-ef6407c5b342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94391472-036e-462e-bdce-d45b49074166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5148c19-cafb-48d2-81bf-3cf16f9becfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ae1ff1-f0c1-46b9-bc79-c6ae188f9d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b864b92-c5bf-4fb0-9423-527768a867d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e6889c-b686-47b0-8090-225e938dcc73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efb556c-75bc-4444-a712-4d21decb3397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29830d01-971c-4921-b877-f02bc0faf8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4d351a-dae3-48ad-a5c3-be4b1afe80ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e230d8b-3007-4cad-8af9-0822cc31b09f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f5d415-2a08-45f0-b2f4-3ff04715918d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0060824-fa3c-41cf-b9c4-8c33524045c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede9edb3-e890-4e69-ac02-29f1d7a2bfda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9fa2ed-5fae-4eec-8e63-bf2e4838bf01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbbf047-6509-4bcb-b0fb-e75401991a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8fb1f0-86ec-45eb-a207-972f82354e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754026a3-41ef-4b46-8dc3-af0432b6b208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487342ed-b79f-40e6-918b-6fd3b8a4f721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e128ff-5e66-4412-b00f-e4ee4bb63774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8df994-7a6f-4a74-abf1-8bd65bc54f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c72209-e723-4fd8-b539-c586681fa85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8678811-ecea-4590-a9d9-f687095c789c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ff68ec-545e-4325-93d4-671837da0d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae67157-4f56-4e7e-9e7e-a766bc307691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a584bf47-03ed-460d-bcfa-7a739381dcf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768e749a-85f4-4916-b93b-1a122950133a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af63adca-0b95-4b2d-a470-65ccb3b3fa7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac615a86-30e5-4edc-a7e6-7b17b9b226a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80dcce2e-b957-41f6-9fef-701d48b1f8fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550d64a2-7cde-4803-8349-25946e5e9487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.152.44.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888da556-f325-4f14-80a0-214f774bc7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30dbe2e2-26ca-4d11-8c1c-edea251dfc43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.170.247.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76aadfb-f176-4fd6-98b5-71ab877af472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.204.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab57c052-3285-41fb-a578-a9b648d990d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.252.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c628b8-109c-4fad-b4c4-91e304496ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.95.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03183106-1608-4c17-9b00-9c63055166dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.182.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680aa51a-6143-468e-8314-8d8223eaec20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.90.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9731e9-d9f8-454e-97dd-428f11c3429e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.141.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7d9852-2a09-4767-8ea4-0e4e943f84c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.180.69.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d49b394-1158-42ef-8abc-e31088150562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.181.228.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae77904-cf04-44a9-be5d-7dd3230fae8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.19.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc648ed-629a-4fa4-9681-995aca5a3a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.24.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fad6954-9195-40ac-b898-0a21c147a877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.26.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16448e6f-0f8f-4aa9-ba03-1a31c8e3ca46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.22.153.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e61f973-6d28-4dff-a45e-27dac68e477c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.147.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6443bc62-3e5d-48ac-852a-29b10562f164", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.17.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7644525-dc01-46a7-85e4-79a48e9b7c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.7.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1a3373-bba3-470e-b22e-bb4f9fe910a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.22.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085a7c4d-6345-4e9d-986d-01ff0c5ab5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.63.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06ed57c-5a80-4300-a446-f5d8531b30a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.189.241.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac5c81a-def3-49b6-9a9d-f17a2b685983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.117.222.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d1dffd-e63a-4599-a0dc-0fdc167e564c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.175.215.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1535c09b-7c33-424f-8c5a-943a6cd94bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.186.48.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e497a5-9e56-4539-80e4-0af5799a6524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.176.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c60967b-4008-4faf-9e78-683babce6415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.180.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b614c9a-aa8a-4cc1-b135-3be802674d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.207.174.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0fa8ce-d0cf-4753-b0ac-c9157fee4a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.236.86.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb532bd-cb2f-43d8-a9bf-2810dca048d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.237.96.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5e4019-ee39-4d88-9262-99fbe0a969bd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.71.254.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c8675c-917a-4a5b-8887-75176898a232", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.10.176.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea120f65-3492-48c0-aeab-bff2aee4e96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.177.178.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43af2d60-17b9-465f-b74f-823494b14c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.177.179.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f1ffda-2cfb-42e1-bffb-420511eb95e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.177.180.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b162f6b-e55b-4c73-a7da-17f33b784316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.177.181.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8366247-ce0f-4a77-82ad-9b88a8e1dc3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.239.15.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83471bc-2bb1-4045-92e1-22ac0afd1055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.35.80.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b059e1-d637-42bb-88d2-28b60d93413e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.36.23.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764e24ee-cecd-4d03-810f-86a15a63d2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.40.200.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34542ab5-5ccb-41f3-aff4-7a60a8292142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.87.174.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5dab3e-af0a-4a4c-bc2b-1e3f68c9243d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19cfd761-825a-4b5f-8927-cf4d780a324f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39eb8e1-73ec-4eb5-b007-726fbe1a499f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fab0f0-7ea4-40ca-9e7b-21820f605f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6bf2b1-a330-4869-85a4-5568385c60ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.185.227.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52968ffe-e044-424f-9161-f41e537ee9cf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.198.221.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4ba530-613f-4967-bb2d-7cf30c57518e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.253.92.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3092a33c-5ac8-4d3d-b72c-6d7b4381ccf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.26.163.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee980a1a-4ada-4e7c-9625-2f5acc3c0db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.40.55.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15cec041-d5ea-43ec-a3f5-c829dd1351b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.102.169.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1f0d3b-c22c-4517-9b68-34a4d3c3f937", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.102.222.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce03703c-e55c-4af8-ad40-8f65373da428", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.113.106.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbf0707-34de-43e2-b946-98fcf73f6532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.119.196.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98deb92-5818-43a6-b46b-64f88eaa66cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.121.24.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee45463b-a61d-4926-8b2f-875aaecc0ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.121.24.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85da388-3844-4374-87e4-f0837f286964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.121.24.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110b4a7d-9cf9-4a30-95e6-309cbb99aecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.121.9.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e7d1dd-c528-46ce-8994-b7bc35d60df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.124.56.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4389003-7324-41c8-a6d4-557b39382c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.135.179.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167d06e0-bd44-4c2e-8202-fc17c61463d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.15.89.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeeba20b-6117-4ec1-8aa5-be818fdecede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.165.89.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61153e8f-f6de-43e1-9c66-80d46e4694a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.198.128.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6511005-d795-4220-94c2-02812104bddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.27.178.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db6bf6e-c76f-4e20-b241-4a26abaa10c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.216.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac54f84d-42fa-4498-acae-1e7fb2aa1c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.217.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bce0df-d735-4809-a22d-ad3c88f114c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.74.38.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b528e129-442f-45ce-89f3-ec07c409000b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.98.36.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4330f99-46a4-4f6a-a58c-451f2b22164c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.130.212.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd686bf9-95e2-4fc9-b343-d94111646adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.131.183.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beab4ecc-77bb-4f4f-bd56-3a0a66dea1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.131.200.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9eb0a5-b313-4223-9289-ae60599fda65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.156.7.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b25bc4-f365-4dd9-959b-a0630099e411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.176.89.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33fd0d0-1889-4f85-ba0d-3b9c3727b6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.183.200.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08b657b-f2ee-407e-93e6-a069a9204b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.184.10.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106a79f9-d525-4fcf-a2f3-c9f2754ff4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.187.151.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6743f654-cf41-4d90-bf6e-d085006a8a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.214.18.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33559635-4405-4dcc-8b56-c918c9397070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.30.190.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18805233-7730-4fac-96d8-478460a52c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.31.103.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de31855b-0bf6-4d00-8c06-d429f5a19368", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.111.53.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1851b2-d6ca-4e57-9e34-1d854b5e1ac8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.129.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e306cf-2b04-494a-adca-05e447187b26", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.129.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337dba5c-72e8-4526-95d1-3654297183af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.129.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30f94c6-517e-4895-b89e-e1412e603cf1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.130.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4274cbf4-e460-4196-8595-1b513f521612", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.130.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc1fa93-114f-4a40-b785-fe471cbe63a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.130.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6e80b3-b883-4c33-8d94-adc06cf5315d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d08e5b-73af-466f-8715-af5c12660f14", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.132.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692a5ac6-82d6-41a4-83b2-8a280cea5197", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ea30a5-1725-426d-aafe-f2c5974feefb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c797af3c-91b9-47c5-a91d-fb21de1d4267", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29160848-5d4a-43f9-817f-d9897562cdc4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.138.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e31aea-1fcc-4565-b46a-52e952475612", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.138.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b201795-9725-4c85-8fbc-12b13ecd2c43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.138.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9144b99-bf96-4cd4-bcfc-1a93f5be2062", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.138.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3dcbfd-1e89-44d9-90d7-4d81e87e4ac3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ceaac53-9d2e-42fc-bae1-a67e229e568a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c354f9ec-de5b-4fbd-b765-b3304a07ec77", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d853b77-0959-4d32-bc82-c783c6a415ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7b8f40-ebff-4d1d-8b0f-7e7ff338ce3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ac6345-96e7-429a-85a0-b422a007c662", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8537c7-946a-4c29-b430-b7a577928bc2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4368bd-970b-49f4-81ba-4dc53fa2567d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2070a6-338e-431d-9bea-a0a583a62b19", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.143.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bcf7b9b-71e4-45dd-8282-4b001c2fb6d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.144.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb930ae-c3a9-4167-b8d8-5ccbd2289949", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.145.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b4a00a-2053-439b-9f80-21971f7eaedb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.146.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2faaf55-4834-439e-82e2-909fdffcac01", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.146.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63451c48-b960-4dfc-b322-e998b7cfa36b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.148.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ccabd94-d467-4c6b-8018-cc466f7f0ccb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.148.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce919078-a022-4b20-a417-a71340d6c4f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.148.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e486c7-4309-43b6-ba3c-1ac9741b3951", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.150.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80333a7b-3146-4c91-86eb-44899690cfa0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.150.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c77aade-3afd-405a-9dad-c5d3c186ce04", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc15895-1e5f-42d0-bd86-aa7baa1aeb90", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c94123-0f97-4ef7-ba34-f8b2c5cdbc10", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b0a921-abbe-4185-9d12-205db4ec1d49", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad002308-5037-4974-a8e6-88a659e16698", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5a3861-d142-4dd3-8d6b-4ab830e12d24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64c248f-1057-4ab9-b6ab-c6796cbd6772", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c67e9df1-977d-454b-98e7-0c3aeec97bd5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a3fb4f-084f-4445-8a73-347d8be76f3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.157.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062912b8-9cf7-4d46-94e9-cb027a3ca240", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.157.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--080cef5e-ed19-4122-93b8-862f62ffc627", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.157.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12723b36-fc29-40d7-88eb-c2a15abd89b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f013b7e-8439-4096-8ce3-2f610e72ab90", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55cdd13-2410-4a17-a40f-762e0f2a0afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.226.237.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cd7756-a5c8-4551-b019-3764b864523f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.29.11.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e152ba5a-4abd-4f50-bb74-20cdc65522a9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.213.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41da0118-c1ac-4244-8e0a-539ac169e5df", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e97ab26-fce5-4e7d-ada0-f20f068724b5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.92.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70dbbd0e-a986-4df1-a75f-cae5316c3055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.80.33.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c73194-ccca-4daf-b257-8bdaf626fdea", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.80.35.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82958d84-255b-456c-bda4-754de5534f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.179.102.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b84b9e8-eae4-4853-8b5f-16da2e6c7bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.187.37.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdc80c2-97a5-483f-9bab-04ed620dabb2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.165.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9128cf2-50ed-44bc-9f17-e8ca0153e348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.244.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6fc761-e6da-41af-9d15-970267843637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.69.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20545c5-a838-4071-859e-65eecae77d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.97.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6cf91c6-dd14-40e0-8a4c-2976fffb2418", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.211.153.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05f8b7c-36c8-4b16-bc22-7dabd115e633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.227.26.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b20cb03-ba12-4b3b-9bcc-e85163f9e760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8897a50f-2368-4cb2-b6ff-f6ca9d3d3075", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.42.75.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d8a034-b263-4419-98cf-78e91b6dffff", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.68.208.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921802ac-5f55-43f2-b115-7178fe25a2eb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.78.226.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de18d32-3658-4b7e-bcf1-3d2c488d44f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.85.243.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0949827d-1159-4c55-ab3c-42b1d5c74a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.167.5.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11eb1274-8807-41dd-a877-fd04f9f6811e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.178.131.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55549334-48a3-436e-a469-40bb0eef76a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.178.131.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a007effa-1210-494a-9b43-915ae29ce7e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dace034-b948-44df-af26-3493ca6240d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3d528e-e19c-4941-9a1e-a0d336e9364b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9694c4-f2de-4bf1-934f-dad983c04710", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705a4b0f-9a01-4160-ad4d-54461bd8f3b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feca24b0-421c-4306-bc41-b8adf9a3925c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2f40bb-b8ca-4780-9a8c-4cc85392fa1c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33745db8-f056-4fe3-9ebd-f97d9a057177", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc80fc74-c7bf-4801-b2fd-97fbfacff102", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bdd61c2-c996-438d-be13-e4730eaede41", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.203.138.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a04c2a7-541d-40fe-9e64-a66c40dda2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.204.148.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab3aaac-8983-4581-99a2-422cfed939cd", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.204.148.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc868b51-ebb9-492c-8bd1-5cdb49fc4550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.255.235.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211028c2-5cb8-4a8b-bb21-d2d792858320", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.26.10.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8f6a8a-18b0-4436-ab15-b1fe9f3a39df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.167.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301e200b-0629-4948-bb29-9653a8678630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.231.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c38baf8-b355-4070-b1d2-c88ef200312f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.1.172.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d99ba9-5e30-466e-8649-51955923dbd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.164.191.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2791d19-9b98-4338-8d57-c0a8b1ae8a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.177.102.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399ff1ad-b9e5-415e-ba25-d5ca084063d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.187.180.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46487922-4809-4958-9735-9559ca9c467a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.198.222.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dcaa339-fcdf-4ae2-82d5-2c9c53ed9ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.209.24.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005bf386-4f8d-4401-956e-d35634eb0f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.242.152.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7939a130-31bb-4135-9210-87286919461c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.245.140.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c76639-008e-4a09-9054-44bf0c206810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.247.76.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e47849c-45e5-4be1-b717-ed1450d958ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.250.242.1']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e907241d-fb74-4867-9eb2-bd5b7bd7b0b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.35.207.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b1bfd6-b881-475a-9c79-aa4c8f106eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.40.249.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a17819-3e70-47d2-bb1b-aa7dae8ce15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.213.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a53160-a996-47af-8e15-6373f5585165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.80.234.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b1f8a4-0f56-4d0e-8012-f6048e8fba3c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.102.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81bce1a4-82fd-4940-86b5-dbf9e0d6a19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.104.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a3d0d8-2669-44a1-bfc7-3c8fab84cea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.116.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17ea801-740c-4bf7-bed2-7eba9333c6ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb00d349-ef09-4662-8f54-091396a8e148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496961f0-e640-473d-b802-55fcc1fd73c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33d4052-7f4e-4ab0-b6a8-37ba0a6b6512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725c2619-1ad2-4b64-8ef6-2504f37ab034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba7ad4f-26da-4886-acd5-b67576253eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace35278-ec80-472b-b598-94980bc16849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea72fb89-357d-43d9-9ed9-0b7d7c8d41af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.38.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39342b0b-d261-468f-b50b-ac7c6db2e8fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466c3c64-9a6b-409c-a3af-5e66be9a8ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf829ca-a2c1-44ec-a9f8-284cfb0bd77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81633b26-e644-49fe-b393-6c9e5a576085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32ec00d-4ec7-42ca-9c78-ca4e84dac80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec10e614-3cd3-442d-960f-f84f3c125835", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47d5f93-6975-47a1-b69e-ba29a239e242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e39b2ff-b6b9-4e1a-b859-522ea20f5351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b9bbea-5df4-4f90-8e09-c9feb910ed21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310e97a7-f615-4442-a20b-de0b3706c6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7678a4b-f9e1-408a-9e56-4978a1868321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e568e9-4664-4518-9c9b-5063aca9c389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9877d1d1-1b86-423f-b556-21322eb55c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61ba88c-b287-460b-a091-366f6c5c3101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035c2607-6999-4991-b109-2c9800470a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98637ee-df62-4c84-9215-151ba82da9cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244e26bf-db4d-43bd-8d79-ffedfffcbcd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a139802-625b-47ec-ae40-f22c1bd95940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da05c24-d797-4a25-b5a1-56a9391f4751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b39744c-e5a8-4ea1-9663-41c8357d3228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2bbbec5-caf7-4643-a7be-cca23cf8eaa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d073bd-98ab-4694-b7f7-f924d86f5cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0da969-0250-4050-930c-d9c444afc9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6485f9-7dba-498b-b39f-fc9764ca2033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43152ab9-7987-4893-8b2f-65bd0876fe6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79061b46-97b5-4b07-879b-f8e95567f014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ac0294-9699-4ac1-88d7-45bba8aa424c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4fc8e7-88bc-48db-960b-c0f4344f9c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71ebef3-e3fb-441f-ae12-e462c2f9f6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5879ce3-fcf1-42f5-b0c4-0f78a4b2889e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd974b4c-d601-4795-921c-a1319aa6b578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e9ee35-a6bd-4022-98de-c6b50ce6e3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.73.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfaf504-9930-4382-a682-af8aa14358fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3be3ac4-2777-4ff3-bc2f-9346eb462355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903ace61-b9fc-4d0c-bb09-0b68c70b1362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8389b2-3360-4219-a6c5-845750167f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.228.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31db2b6d-7596-40f4-ae46-a47aaa7e0861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82999225-45fb-43fe-9aaf-93d2134f7725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef9411c-3bc0-4d6f-b281-14d8f58729e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa18a31-03c6-4c8e-8a9f-46af22a8e22e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fadcd67b-2e20-4b8a-aa3d-375f2603c66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b81591-5e06-4b8b-b12f-5f7e93ea8920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0ca778-3462-4669-8c65-c3bfade32e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f8d2b8-da28-4944-80e6-01b876f174a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7bb48b-891a-4300-bd77-cfd686820fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5fb67a-6465-4e22-a304-abe6814ea682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.248.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8d2bf6-44a0-4155-986d-396863b518fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc16c62-c766-47d1-b19f-70b2731b4119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47799778-dad7-4b36-b9f2-9145086f7811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1544e1-3430-4908-b479-57ee63e81aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afef6a77-a697-4e03-835d-1f778af7031b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09efc688-9e56-422b-b957-2a51913ff7dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1910a9-bb5a-4257-b2a4-5151a618310f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7477476-eb1c-40e5-8ec1-f234dc55ca94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989c8413-d659-49d3-bbcc-fa01ec848516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1e75ec-5ac5-47ee-9b04-09491c02e281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f4a0d2-882a-4ccb-9477-ec7080bd9908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69668e6d-e4de-4f8f-b385-69aaa870b955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005aa69b-5586-4dc8-8ba4-44d4fedc45f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f352e7b-63d6-4fc8-95ee-8043d6af010e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5a0a65-37db-49f6-9ad1-9e2076cee979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.78.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03cd6d92-99fd-4864-95cc-2a1556718173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.216.88.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbeba99-4ddf-4fca-95db-d03e7de1acf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.25.100.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc59944-0747-4b22-8355-6e3f4dad4548", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.25.146.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0344871b-3365-44c9-88f0-dba49e27896d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45acfb0c-aad2-49b8-9be1-ba5726c5c02e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69842d8f-a9ec-4fb6-a573-e4aa6b18309b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca09165-c989-4f2e-aa9e-3fca64fd2764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2e9e97-12ac-4aca-85c2-4147b18af299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43539cd9-9b43-490b-8c96-be6a9f5c1cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab5eb68-c9cd-4acc-b6c9-e17184cf6c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a74c23-fedd-48c6-b574-91a70aff7694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21d5654-4e16-472d-ac3a-4cde3dd87544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.110.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c856cdac-e53d-45b8-afa4-6d871f64e426", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51d3836c-e951-4e6d-ac75-2f16c7184f5c", "relationship_type": "indicates", "source_ref": "indicator--c856cdac-e53d-45b8-afa4-6d871f64e426", "target_ref": "vulnerability--809e9b99-fe4d-4b52-a298-3116d12d3712", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2afb80dd-f7f7-4aaf-a673-84c5eff4c080", "relationship_type": "indicates", "source_ref": "indicator--c856cdac-e53d-45b8-afa4-6d871f64e426", "target_ref": "vulnerability--11fe573a-2ca7-4fb6-8aa2-830511287929", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af091f45-36b4-4049-835c-e8a312f10de7", "relationship_type": "indicates", "source_ref": "indicator--c856cdac-e53d-45b8-afa4-6d871f64e426", "target_ref": "vulnerability--79e2bcfc-7617-4f11-b0d5-6a8c3611ac30", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b11f82-86b3-47db-80c9-e76da465fb24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bac6fdc-0df5-41ab-9bf8-382d881ecb03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e2cff4-b4e3-4dff-8b51-14c748ec3a31", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8087ed1a-a300-40c8-8c75-db6fcf5eead6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04347646-5822-4300-b777-13a724812dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.38.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879dd48e-e99f-4fb0-a5b5-a5b07fe03059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.39.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d09181a-042d-42bf-b9df-331fb543f0bc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.33.113.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9a516d-4f2b-4e27-afb7-7c98b8d3b6db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.41.137.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0572e1-5fc5-4d7c-a163-c220acad55c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.125.119.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91beb5d-1131-45d1-a852-f65d2d9a113b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.157.76.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc54c46-13bb-44d2-b23c-3dc8c9f00bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.203.251.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c60ac8c-706f-4924-a64a-7a4dc959762b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.209.12.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c8ba4e-131f-4137-99cd-0b2d8beff587", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.249.100.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65808cac-d263-4ec9-b22a-12625e6e5c35", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.249.100.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c1367e-3261-4556-88cf-057c47fbc367", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.249.100.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c76aae5-1297-42b4-b17a-257c7bd230e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.253.93.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53bd6f65-a51b-4aa0-b4b7-0582c5d37480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.130.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e7e859-9598-4b10-9c81-dea4bb4eb867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.243.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69339781-3f4b-426c-8f27-4033abf837f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.51.141.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b337c5f2-6ee2-4fda-b465-b47df31e7ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.73.7.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a37371-ba0f-47fa-867f-1b871400bade", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.92.70.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46bc24bb-2d8a-4dfa-b96c-958f8caca0ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.92.81.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc13ab25-6531-4629-9969-e975e3951044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.154.188.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6f4c6f-3e76-47e6-8655-0a9df234d828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.68.228.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254887b8-f29d-4b4a-96e1-232ddc1d91d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.195.54.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cbe128-a18e-4c90-924c-48b689525616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.246.18.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2ab9f7-0c41-46b2-86dd-b68d63546be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.27.114.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0f4488-475e-4609-998d-9fceb1942ed0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.109.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d42f97-9d15-4ddf-a5c1-6053fedd8aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.110.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd2c706-b68a-4461-891f-d8ee516e850a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.36.82.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31082420-fe96-4feb-ad34-fd83e3453d66", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.151.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a976830-dec9-4e77-8288-ab1f581fd91e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.175.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1894c493-d703-4d0f-b3cd-a384037e699a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.4.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e56b7a-4e10-4482-8ed2-695cbf7414ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.76.158.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ef6f26-50a5-4099-996f-015b89f4743a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.121.60.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9d5a61-6ce1-413d-95f4-315a8849471f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.131.238.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46af71d-8a36-40a8-aeee-941dfcebd534", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.162.19.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054b9967-d039-4313-907b-416548d5178f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.165.84.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad4a50d-5071-4419-b7ea-91958ba63223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.171.125.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11f0c58-af7d-4214-a5dc-dc73b9f98204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.187.10.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db618e8-3c97-43bd-a547-e901cc927959", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.196.156.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b17087d-1ebd-4a76-a7ad-9e38009dece8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.197.13.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40eb2218-823d-4911-832e-ace2071298da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.202.144.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d954d362-dddb-4116-9bca-0da533c29f8d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.229.13.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56269666-2ca5-464c-9c59-cdfa85346fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.84.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a1eea9-aacc-4ffa-b645-91b16eaf5bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.41.119.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177bc40b-309d-4c62-a9af-91a43527bec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.239.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3427868d-f41e-46af-b6a6-a37bc049a8b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.54.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2f0801-357c-461f-8cb3-cf877f0622ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.78.125.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982524d4-96b5-438b-a5f4-2998514514ee", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.114.30.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eefc390-6778-4cb3-bc00-e08a2edcad01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.117.12.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cdb6bf-2c2b-4a37-943e-4f3e203ca574", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.170.115.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4309848-096f-4058-a843-0591f61396f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.176.99.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e134e7-e677-4270-8552-3d33579a0189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.243.72.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56b32ca-6333-4929-9944-40389eb2576c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.51.196.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179c89df-da47-4b4a-be21-005b05b9e5ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac9a886-0e6a-4008-b1c6-737f93de8f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a5497e-e09a-4dbb-bcc7-6d97c7467873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf7f3fd-23e4-4cde-8b80-503a166da949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.97.137.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de735201-08bd-46b7-8390-6173ea25fdd0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.138.72.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe09e7d-458c-41b3-903b-78028d00a254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.16.178.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7318e6e-9490-4460-b16f-b6722ac706c0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.167.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7a8313-9686-4a25-b682-7009d42eda16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.175.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c566dec4-6081-4d4e-aca5-49a7e657bce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.223.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca76063a-a80f-4edb-b961-ed5a37cd8509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.162.187.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86154a46-337c-4f79-b000-69908ac87348", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.171.35.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e760861-c4e6-417a-8813-25c21d168d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.191.138.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06cef7f7-f11a-4709-8336-f84128c9aa4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.20.157.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216479df-254d-4f4f-99c6-38c556a09b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.207.35.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06bff8db-8533-4e03-8933-23c340611212", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.100.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251d0ccd-8e9f-4d65-a033-ae0042ad34b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41915fe-c1bf-49a3-9087-3bda8677c544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.85.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c326ba5-7e4a-4d4a-8193-477e495d6f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.25.140.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b25d745-e146-42d4-a805-229c2cb5c62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.253.61.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84e7c4a-b198-4760-b5ac-0a2d6214233d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.106.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6840566e-bf03-4746-84b0-e603cdcd263f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.57.181.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06849982-7ce8-4474-a432-abbadc0ef0d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.192.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d53816-2023-4836-928b-71d47894bda8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6362da-bc54-4e6f-96eb-a7730893d764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8f36cc-3ece-42c5-9c73-bdb57046b378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed91a46b-e620-4a50-8bf2-59cbfea1f712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e49011-e26c-481e-818a-af90608cb37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c390db-f1cb-420c-8cfc-3b9a12ef7f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1529ce27-c770-4dda-b733-6fce16fc94b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dea1366-d7e8-4365-9eb6-1d8b0639ff6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7c9a75-c108-46a3-87f7-2409af12e5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4edde5f4-a643-42c5-b054-0169d2be5117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7112f07-39bf-43eb-9ca0-21738d620a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7ac355-db49-49d2-98a0-8964ab17d6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.97.198.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f3e919-8b50-41d3-92de-858b22496906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.106.67.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce71634-f8c0-482b-8d55-264e4b28df76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.108.17.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edfc9af7-07d8-4230-a041-992c3b3739cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.195.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ffaec27-f2a0-4859-8101-98ed1f4e5f65", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.157.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe915e3-c6c2-433f-9893-ead1afdfc91e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddeb0780-6d4b-472f-a8f7-0bcc5fc181b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d833f12-477f-44d0-96c6-c64d6aaea92d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ce533d-53e2-4648-aa30-394f2d4aab4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.132.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9143b435-c188-4f42-92ad-b7f1969c25fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.220.234.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b8264b-60cc-49eb-92be-bb3823cad40c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.220.236.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af6e981-9f0a-4b50-a704-4caec90eb5fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.221.204.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501e1ead-1001-494a-ab91-964371aafab9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.223.3.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f45f63-9c7b-4751-93bb-b1e3ea7294b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.227.31.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9fa475-7e52-4c3e-80f3-76e601025410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.238.222.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157aab6c-da15-482d-a01e-281d4fe3e4eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.253.250.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1115b18e-4fab-43af-93c4-db0242254a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.179.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473870fa-de00-4e91-ab10-af848986e24b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.18.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38090ad-0224-478c-a1f9-4d666c600e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.71.175.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2effbb91-c0e8-44dd-a691-e4dd29264c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.89.52.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0160a939-f132-4b53-809d-abe6175f4b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.113.159.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec899d52-debb-4220-ba7f-162ad4f04cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.132.94.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab89b95e-1fa0-4171-95c7-77faa6b618fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.160.91.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58eea80-fc1b-4592-8541-b2b8345c8e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.189.98.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477b2129-e30c-44e8-af2f-63107e5505f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.229.225.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d92890f-3cea-46bf-aeb5-3475614f7a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.230.86.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7adf7e5-e3bb-498d-bb0c-9d1b82231857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.24.128.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b25d3d8-6763-416f-b6d9-42510b97fd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.34.46.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0114fc30-dfb7-4039-be00-27b066bbacc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.46.239.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f14e2a-0153-4495-a7ba-3c2f1d983416", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.76.228.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a1ef45-c528-413b-966c-57becc7d7b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329486c7-2cd0-4aa6-90df-8695085590d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992c636b-082c-4944-891f-78c9ce3a84d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbc0ba3-40db-4028-b0fd-004385b0b3e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.118.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348b8441-0492-4af5-90c1-11162c17d252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f583980-6ee0-4868-abf7-23fe31c12b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.43.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc2a1c2-887a-47b0-bec4-872c8db16695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.44.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e237e8a-b6f8-401a-908a-cd1cdcad7812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.106.221.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82b02e6-bc57-43dc-bc1e-d4eae61d54f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d49d8b1-b464-4819-b8f0-1c523615d3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b7f335-ddd3-4825-9994-fd5881981c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1621785c-c270-4e40-a44b-eeafc29e3060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0363957a-5648-4a95-b96e-7692bbdaf5bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.231.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1fc878e-0c9d-44a3-8644-52ec7b0a5136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4338654-439d-47ba-b5a6-14a8d49240c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759c0ef0-0d63-404f-8c0e-b9321f77d734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43bb176f-c295-4979-881c-d894f6d90b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30bd161e-c2fc-4191-b1b6-550f4da5d3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f821a172-2b7e-4179-879c-fa0c5fcdeb33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c9ad85-e619-4ce1-ac02-6269134d6525", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.225.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0154e7-c339-4f5e-9ead-6a8bb0571fe8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.2.204.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660a01da-d4e7-46c1-a810-522d9ea40c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091fe6e8-4d2f-45c9-bb10-8c39020afb47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83711a69-cead-401a-8bce-09bc25a9d137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c87b2b6-610e-4bc6-9138-6dfc339302ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.203.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e06901-398c-415e-8cdc-c1981904e433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e24b384-e938-4c22-9f77-39eb21bf42df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.8.124.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b375e1c-0939-4e50-ae4b-1f536a656f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.50.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec1f009-932c-4e40-ac56-fe2c17073f53", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.146.243.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff7be96-13ee-40e7-97a2-ef52f0a17453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.152.24.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2986f81-b821-4d52-aaa4-d0201e9d93fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.222.173.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bcb96a-6b55-4710-add8-d43950b2087d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.213.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043dc2fa-3ad6-4e07-9a72-d108aa5519e1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.213.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9972559-ea90-44bc-86cb-b6ad8c18ae31", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.28.84.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29f769d-a8da-4f72-bc55-13fc30963cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.140.137.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7487bee3-b5aa-4fd8-875f-8c065782eb27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.219.1.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ae371d-580a-476c-a562-89fe146ee8ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.58.251.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757cb40b-8812-4e79-9dab-91286af22862", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.59.106.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ceaf19-5af6-4055-93e1-8338725a2d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.76.181.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65576ecd-03fe-4b50-96dd-3dd36811ed41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.83.216.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12d6e6d-ab00-49e1-aed8-c0b871ffabcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab040c78-f5c7-40c6-ae62-8c90ecdbcbf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622efb6d-d9fb-4f00-83aa-b22976793c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605b5e12-934f-4b6e-ba2c-17c2c9492447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd292ae5-7039-4cbb-a8ee-bc79fbcab121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.115.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04264791-8e1a-45da-8e4a-312d34252073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.115.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083d5eae-259e-4e62-948e-8e8a9122d920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.115.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a70e3f-f491-46ff-985b-7fab964e1439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66f51fd-9512-4a4e-8e05-e670630cfe12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b286c0-bef4-49ba-9d91-ad49cd950e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.121.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0362aa0-827b-4689-8ebb-e82dc02a4507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef896d8-8054-466b-a68e-e1c0d7dc5af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2672e462-b386-4ddb-b4b3-bd63f5e85190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4706f30-2837-49d7-af2b-fac36fd8b2d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c312159-bc26-47ad-b39c-165866cf8106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6497cfc-d403-49ed-9b0f-7dbd3b445213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2f8733-21c3-4611-b947-e77935332098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5101591-9549-4136-bf67-6e4e72fe3950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfd4f2e-140f-40e8-b2c3-92284c7f35be", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9ea63f-4f63-43e2-b11b-42e11136f8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.255']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de2ad6f-82f5-48ed-88a0-35367dfd0f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbe58da-8167-4d1c-a5de-87c153fdc707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca17879-071b-40fe-93ef-21a68542cb27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.64.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1214f7b-944a-4e22-81d3-c0272944ab65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.71.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b2948f-356c-47e3-a192-ecccfdd5b28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.95.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc22b4b-c51c-45e1-bfa6-596b94048edd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.61.152.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058723fe-6a76-4e05-87ef-26bc5a6c0204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.153.158.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51fd6ca0-9a27-4ff6-9ed7-1da366f93630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.145.115.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae7ead4-85bd-40bc-b1d5-9eef47c41d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.106.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ad5e0b-d2f6-4fc8-8247-f0400c03cf08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.113.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2838d8d7-5547-4592-998c-fc9c47eb7ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.116.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb9b738-fb1b-4441-81c4-4c2796ce5e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.121.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b2a602-8346-468e-a08b-7ba1815884e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.123.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da93153-3c5a-41f8-b7db-c532361fbee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.125.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1dcd6d-9ca9-48c3-9b88-ec0d425782bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.30.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5760973-e93e-4f22-abd6-4611aed1b52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.30.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9131343-ea8f-4a8e-b3eb-235b3e30340d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.239.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f3509f-2d56-4659-8c27-ed711f1d9800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.10.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a763691d-de95-40c3-a578-ad5c649105f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.115.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ba799c-034c-4e0d-8370-3e2740d496d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.117.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889ff3bc-838b-41fe-bce5-a45a8bd29ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.127.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a061c2e9-0e65-49b9-9d8f-ac65f43e8fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.145.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1cba03-c661-4fa8-9005-05697d074e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.49.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7374072-fdff-49af-9862-f7e627cb40a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.62.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a52de1-722b-426d-b05f-f17505674822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.63.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049a8bbe-596e-4987-baa2-61bf276eb691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.64.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5ab422-6d1f-4691-90b6-e8bf318d4989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.66.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62903f59-4c9f-4d25-8646-9b6ca3f1f909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.7.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497d24cc-e3ad-4ed7-bf44-2aa35f26b727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.70.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfd7baf-2f44-42a0-9a13-103a99c0ab8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.78.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9632ff1-803c-46cc-be01-35e585b81a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.249.11.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663be1cb-ff4b-4572-aae2-8306b10ca412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.66.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc1d892-450d-497e-8002-2d5ce318fb38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da2cf11c-9d7d-4244-ac6a-eeba1ccbb099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410757f1-2946-4455-a745-158526569e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6ad79a-fab3-4d6a-bbc2-9a2f98f6fa9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99f6809-02ed-40e7-b53c-d6a07a6bb7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccdcf2e9-c517-416f-805e-8a7cf862f3a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea9b6de-42b3-4087-9720-81dc7445d855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0f09a1-b315-4f0d-b9d5-7c81599d3e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a0bae2-43ec-433d-893d-236418f1a218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7b3410-20e1-4f0f-8fcb-b47f81d0c20d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a24f88-b874-48d0-bfa7-06caf9c7b371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.148.236.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84fdb55-1c20-4036-8291-ba3b07385935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a594c51-7b3d-4688-934c-1d0a9a91e2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624e818f-02b7-4a65-a73b-2e9c435880ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed6eca0-8084-4bed-bb53-612246509228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0610e2-df81-440e-bfb8-b119a639b7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c84e978-eca3-4c83-a319-76e730b7742e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8805fa6-b873-45b1-a97f-b690a28bd898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b364ebe5-118c-4095-b27f-85c1b630efa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.97.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe92e59b-e0e6-46ca-b3c9-8fb5690c0d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.121.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c92ebd-d4af-4008-9980-194e4e44c417", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57846ef-4cf2-4ca7-a0c8-e8216a49d8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f11b1b-a532-43ac-b38b-be6b7d37ad1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2baf65d7-d9b2-42c1-99a9-7525c7bcea91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539c3807-a770-441a-971a-4c337c649976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0a3d75-92b3-486b-bcc8-378f2c11ef05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5aa8a08-3e2a-4c80-94aa-d09e2f764176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436195fe-6a2f-4b0e-84cf-3d54d2640d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b575390d-e3b7-448b-9678-31491a017320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e074c2da-cd83-4ec8-a8ee-325889e64889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea364f35-ded0-4599-b795-fa1983a5caaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c619c33-c04f-460d-bb7d-d2f086f066f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f059f563-c44f-4333-add3-2d9f15392a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e62887-bfe0-4a75-b8c8-980232f1a69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08fd55e-a8c8-48b6-8ea9-f3b06eb8b845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8892f0-a9aa-42da-8ce7-dd584f3d2fa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5c2131-5cd4-427c-a1d8-4aec22353b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9d5bf8-ac39-4543-a260-8e37465d2fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f80ac78-2cb0-421c-b790-6599bb325d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d9bd416-c9e2-43c5-81cf-b63ddf33f0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eba91ff-b245-46b5-ac48-403494bd53d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4eee89e-2a68-42ad-85f7-76dc0fc26a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bced8c-79a1-4119-98a9-ee883197e374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557c84ca-5fa2-4e7c-a8b2-13e9d98c2b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1167368d-d3b5-4dea-b88e-696d02a78a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea15d21-6639-4b29-8167-77d28bccbde5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d44cb1-4b0a-400c-bcfe-f98e9c5ff7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940d1c45-188f-49e0-a1cc-aab08a61768d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d12357a-5c02-4071-a728-628c3fa04f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76e6a90-ee6e-4f1e-8b8b-8341e15de6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53b84df-6eeb-4ac8-8b39-f98317328e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9326cfeb-d1b1-4293-a8b7-c859aaa1954d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c68fbc2-a014-4559-bd53-ce372a1ae81b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d793b24-c617-47f0-9eac-cbb0b308243d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a05cf9-4e01-4483-b8a6-9ae93312b99c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3412760a-f90e-46f1-84b8-e4d4e54e18d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a49b4cf9-af0d-42c3-8b75-df9f90bfa558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3dfab2-4b9a-485d-ae3c-2e89cc270dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea1fafa-9535-4d5d-8aef-95a47ee62129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56bb4adb-7787-4b9a-8534-aaaf0179d99c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c681e5-42f6-4445-b5be-43fd08e35f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab66375b-3c4d-4b58-bc5c-94ae61c965a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0663d2ff-e94f-4a3a-80c1-6c794c137bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3297862-0fb4-451c-b269-fd412449f943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fbde82-b979-450b-b7a1-3608f1978177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7789e189-3ca9-4142-a65c-d8a5da2b2880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.109.232.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ea9c1e-dca8-4864-9005-2a9cdd82abe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.116.210.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6463ff-b61e-4e83-b31e-d929f1cdf5d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.143.176.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90e6d25-53f2-4391-aacb-e1276bbe38fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.143.177.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf567543-bbc1-41af-ac64-53f5c93d9baf", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.117.183.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f18c4c2-00e4-4529-abe6-e24cd107cfbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.101.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--015f444c-9207-4cfe-add5-343939940ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.105.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2507f2-72dd-47fc-aa34-6930d5fb3dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.108.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32fea7e2-883a-4f2c-a7d3-72eb9f23ef65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.134.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256144fc-7cd9-4d34-84e8-a6c4f81a07a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.138.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28a6b1a-aba4-4561-a2b4-2e98df38214b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.158.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1600192-a319-40f1-8863-a3e42e84cdfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.196.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aca5a55-032b-4cd2-b746-4da5dd06ab4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.20.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dec5b0b-5dfc-4b69-ab7b-e38b5484bc43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.20.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9fbff7a-54e6-43d1-8723-37e30a1535d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.207.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a660c6-76e5-49db-9f96-fadef4301a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.21.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dabe178-042a-421d-8ab8-d800fbb642fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.27.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6dc800c-e33b-44dd-b42e-f7e05ead1947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87f2d96-dbaf-4438-9c36-b519d63227fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.55.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1330e2-7c67-4a8e-a496-a251a4b8e002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.59.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7b14c6-c364-40ea-9a09-40fc2201644d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.77.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4275403e-f9e8-44de-a201-5621ec9d9cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.85.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b75259-b297-4385-96f5-788d1122d782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.96.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bcb81b1-9ef0-4306-bfed-931049f0ad11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.134.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8899d7-ccda-4865-8509-407dea0d3db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.205.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5813fbe0-ab51-4d5e-a0ea-01e421da5032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.215.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a65f65-6892-48dc-8098-4cb3b7aefb62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.216.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ff45ff-9889-4843-b788-e1bd2e9842be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.222.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a2e908-c14b-4e2b-8210-5a7c2d0e8212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.24.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549f2655-f3e2-4f98-b6f1-9196a2510c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.6.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043cc6d1-980c-4247-a8e0-e09c25950167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14718bdc-08c1-445e-b5df-ef07c11019d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276ed64b-1dc2-4ee0-ad33-f37654cde74e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8363219e-59fc-41ac-a338-7204886380b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.243.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f63dbc-2351-414e-af75-504ff929bde9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b419e2f1-036c-4d74-9b9d-4421c6c4ca5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.9.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d32e695-7245-416d-89ef-376c71170710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.91.107.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--565c0e15-1eb7-45f0-bedd-293a6d060a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.91.109.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6983ff4-229c-4a14-b807-29a0dd76eb76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.43.255']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7dcb9f-cc7f-4b3d-9385-aeaee3e4fbf8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.59.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a649ce-5252-48e6-9765-2b3712f7778e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.135.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f367ba74-9ce6-4ac9-9caa-b3220e2534a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf7ff2d-9fbc-4c82-86a8-a89e2cb26884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74347d0-0700-487d-b5ee-2b7353fd9f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbbc5afc-9001-408c-9521-0e0c517d47be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c76015-266a-4427-8cb7-8f819d34da3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.116.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104cf417-2937-4e68-8ae8-ce8a95868734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.117.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef395474-0f32-46ce-8963-72d4f6d7e41c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.66.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25323260-6bb4-44bd-a89c-1fe4443c6629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.70.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37aedb3-f682-4c6f-a95c-81fa0e68b890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.78.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaeb7a58-8e6f-4a74-ad9f-993b50f5deae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.170.72.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443150cf-3b49-4cde-95a8-8c295d5542bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.170.72.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc87bc36-31ab-4653-8737-b05b66e39c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.170.73.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b0b632-8a9f-4107-abcf-b86ada7003b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.177.206.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e458c9-060d-4615-bee7-e75ef6f85e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.180.185.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bed6df8-9349-45b7-b343-d1f2cf8417c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.180.213.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e47b2b-79be-4d90-94cd-1eeb8317b5d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.198.30.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049ae77a-2c38-4575-b19c-f13f1191bda4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.212.70.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6a1750-f5ba-4aba-9af2-52f8d16c983d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.224.132.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33971489-4e9e-4a12-bb11-dd229f11d14e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.224.43.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036ece1d-4862-450c-93e9-e16238d77ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.10.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26a9214-87d7-4d1d-b894-9db272d7882e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.11.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6509746f-ac46-4112-8e1c-7c6f1100a3fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.130.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d90364-d1cd-4638-b996-9c7ac23ff5b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b1f7f6-0384-44d0-abff-abc879acaa79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.183.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109d25d0-9d6f-4e1a-a1f6-557d583db79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.42.255']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b19d1ba-9db9-4d59-9f07-92c6ca5c9fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.76.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02800d8-59cc-45a6-9b68-0ea467e0ca57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.1.105.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c28ac4-3a8a-407a-8a5b-da3498adbe80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.1.107.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013a593d-028e-4c08-8982-275517ae2599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.112.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eda262c-2408-4b7b-926d-0b6d12f68a27", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280466ca-7bf2-4933-ab39-7c800ba522e2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c483c3-abf3-4116-9b10-4515891bb14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.123.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3399aad2-7035-4538-89fd-28672e4195b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.34.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9157ec71-d344-48e4-99b3-e6196026e98b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.45.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc3ddd1-f483-499f-9a57-7a7c95a3fff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.82.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea9a30f-4443-4f88-af5a-28d86476c811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.95.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f912c372-ec57-4cc2-bf47-1fd36792bb5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.154.198.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f3c2c5-336e-4892-8ab7-10eee66cbc5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.171.31.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618bbc05-e453-4756-bbf1-e7d8df4c6bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.177.234.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cbba9f2-4761-4ed4-a0d2-b1f0cf044449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.207.141.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d2ace2-070a-49c3-ae5a-e2a1e3b72395", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.21.56.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a0273b-0902-4733-8e56-53a0fe52e73d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.218.101.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3783c9d9-9c7f-4b4d-893f-74bc95f9b9bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.238.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c122d154-7d4f-4016-938b-e3be95024701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.104.0']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ccf04d-c852-4663-9007-664e36b7c651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.29.170.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d099cb-05c5-4ed9-8371-d4d517e2a4be", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.29.181.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953a2897-8d0e-4328-ba43-2baf34486ee2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.29.215.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f602680f-03c0-4dc3-9cf3-696f044ea1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.99.25.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efba7cdb-19e1-4237-ae81-6dcc8d87f9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.143.151.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b31b35-6118-4a1d-9648-70540561e608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.233.190.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dfb9d21-0b7c-4adf-be99-4a7484fd0d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.238.153.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc6a20b-b6fa-4b5d-a7fe-576a7061951c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.246.124.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6cdde5-75ef-423a-a7d7-cc42369cdf18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.249.22.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b776ff-133d-4b4c-b44b-0b2d8357f24a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.83.50.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a1aff9-4d8e-461c-814a-fd523cf14af7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.99.190.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc35848-5f60-46ff-8242-f4e4c1d5308a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.101.98.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5705a4d8-216a-48fa-8a01-daf0b943ce49", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.109.168.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336ce7af-7697-45e3-b2e6-909913458a0a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.187.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ac58a4-5f75-4bc7-99ca-b4bad8b7d43c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.187.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2bb09a6-ecca-4a1c-9139-a4cb7cbc68c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.45.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7396c2-624c-41b0-91c6-7c137c88ac73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.22.28.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98276ad-3479-4156-868e-9d4257223aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.10.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe46a288-def6-48a7-a7f6-744a8fd2fa15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eebfe7d-c39b-4775-8340-d42d91a57f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588e32a8-4a80-4630-bdf5-f2261e767c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.9.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b072d4cb-0eb3-4057-a38e-509e19300ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.118.47.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1dfff0-2d8b-4a41-a970-c4d8882da38f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.171.240.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc60e1f-4fc4-4632-8dde-fe910e030981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.247.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187c6911-5a83-417d-8cb6-1eeeee6a76dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.104.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12987520-a38e-403d-aced-fb42f2ca3598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.112.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d58210-a050-4112-863d-1fde63b340c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.114.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb4c6f0-2fa3-4e7d-8287-41677523663c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.116.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf3cf32-8f1d-4505-a131-bc983f896001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.119.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60a56c8-c5b6-48db-9e2d-0c304906cba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.124.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa18c2c-c575-4861-93f8-e0e76e42febf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.127.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e521229-e34e-4268-a688-8e674987ae9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.145.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8e1018-9634-4ed9-89f4-cb10c0e3b8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.193.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dff46b5-e94b-467b-b6e1-28178b09ca6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.194.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb1592c-5c0a-48d3-9170-157bb0016eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.199.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fda69ba-9803-4fff-a4a7-dce53759464a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.2.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9b251a-7298-4f7a-8982-a355d8dc024d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.207.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadfa310-845f-4fe7-a157-a41ab5903be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.236.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32d25d4-ca71-4f74-862f-1301f496bdf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.248.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e028bdd-7317-4546-b220-3ed985e8825d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.251.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d58714-d609-4392-b7ee-6efbb7f5d27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.28.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd71030-c3bc-45e5-9ac5-8276f2a9bb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.3.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09b1b9d-d430-4055-acca-d5787b082baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.48.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d300e1-3ffc-4685-b632-21fe318418db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.63.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170f9e5b-7f55-4972-8fd3-1d41b68d2e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.65.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb5ad85-69d7-427f-b901-f232a265148f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.7.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325e6670-3fc2-42fb-beb3-8d6c2dd5e679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.73.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4ead48-6be4-4fb9-b014-2a7e03176fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.74.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21aa934-8a04-4fea-a616-13097a7c3f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.9.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abfaee5-d31d-4ead-a377-e99c28d8a1b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.0.248.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc48442-cc9e-4108-b715-db5d899925fa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.165.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d03af1-e704-4368-92b1-f8c3a9853fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.182.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed846a43-54b9-4cf9-9996-bf6a80f31d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.206.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693aeff8-c62a-4e71-b20f-2e761f54e9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.211.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777820a2-abf4-4b39-9d55-f9ddfa1e2a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.12.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9baf26-d34b-42f5-9df4-968b3f39ffa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.122.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9fa016-d23f-48e7-beea-0da60c918234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.123.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26737082-80b7-4ddb-a101-30f0d6c56004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.153.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fac8fdf-52d7-4d13-b325-8ce6637620ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.161.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15c5ca8-013a-4195-9cf0-a30afa15e402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.162.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a07d4be-2d76-4861-906d-d26e18d29e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.169.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f47af1-976b-49a3-8753-ab0497daf2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.188.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e824a99-382e-4fdf-946e-12e71241b434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.190.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698bf9b4-24ec-415a-bff3-3ec9e1a19ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.32.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8e4e71-0eb7-4d12-afb1-dbd0369b3b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.44.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a600e2e-3bfc-4666-b423-d8bb58586f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.68.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f9e761-a610-4ddb-bd06-859a2a745ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.154.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c050c9d-b208-49e2-bf82-c2af89ff430a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.164.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27670f84-ceae-4e60-b3ae-812c7bb48325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.168.1']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f3a59a-a44a-4fcb-977b-75038ee91a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.171.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9404f6-8113-4a94-a0ef-163fecbfe7a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.175.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab29551-1f06-4cfc-8f18-3775e8b6ef4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9618aa-9136-415f-a082-6d8c98a674dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba6c5b0-ea4e-4db5-9076-59ca65914a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d597f9-a760-4ab7-a3e5-36c60478b44e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f4e10f-62cf-47be-91b6-2cda15f3a18c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc3593d-30ad-4383-b880-5d0e2d63cce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082bd480-43c5-49c5-bfd1-1815cebd73c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba09e07e-70de-4a55-85ab-a3d0b6bc5fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0ee444-92c8-420d-950f-300adda663eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763c7f39-c888-442b-bf73-f7151252d323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5099374-1d9a-4169-b964-b68a77f07017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2090e42-c8eb-4fc5-88f2-e2d74f1415c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537d5c51-709a-4fef-98d3-00652a664d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1738effe-f88d-4a30-9efe-f0942f0cbcae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa22080d-f298-4b52-b9e9-962c782cd047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003e7676-f85d-4320-a0a1-ee79c43f8e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c26c46-9bd5-4a22-9ef6-2ca340cc0103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5514920-eb40-43f8-9bea-183c47f6a736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ec6334-4b8f-4b5d-bf1c-18c2fdbc7635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c53dc3-282f-4048-85ee-0896aaea2f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb2e1f0-9c22-4478-a5b3-67d8cf145a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b237b4b5-5f7f-410e-8606-9e90798870db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.227.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06fac8cb-747d-4996-95e0-28848bf4a6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.92.135.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16dae21e-0fa1-4948-b71c-c29eaef8a538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.95.213.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b717f64-59e8-4fb8-9fb3-02204f479c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.219.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d9fe0c-5004-45c0-b5b3-a828420566a9", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.108.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f263492-bd2a-479c-a6ad-25aa67e13aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2b1782-a6de-4d4b-8a55-3a270b173fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.92.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70fda70a-80b7-4d02-8195-4c068e827862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.74.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eea2be9-cb5e-4666-8b92-dc6fd83a3ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.24.19.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b22c8cd-4148-4d34-bb4e-5fe2d742aac5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.16.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f6e25b-9410-4922-a21c-65fe755d8e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.25.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3d19f9-0503-4f44-b798-4596074af429", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.29.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a79a957-91a6-4c00-a102-b400bcfb6e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2021-31207. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31207", "external_id": "CVE-2021-31207"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80c47bd1-5c78-4c1f-bb7c-b88f54b67df5", "relationship_type": "indicates", "source_ref": "indicator--1a79a957-91a6-4c00-a102-b400bcfb6e1d", "target_ref": "vulnerability--71b293bd-ce50-4291-ad84-3b9a0c60be19", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ab671a-f1f5-43bb-9882-e444428b43a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.116.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b024ecb5-0a5f-438d-ad43-1e25c344ce94", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.148.119.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37fe960-2e35-4e3e-85b1-93a58acdf88d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.120.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e8b9a0-59db-412c-a136-5c8ef5a3db9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.134.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ef3266-5fe3-4443-b75a-27efa69e3cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.166.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d71dc9c-3d22-45b0-bc18-80cbe1988d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.175.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d299543d-1231-470b-a7be-73e3da42fa56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.226.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc8e892-da5a-42ed-8060-60135cb206ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.234.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51dff5db-c770-42bb-8db9-ba9392d05008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.41.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5be1ecd-263a-46b4-8ecc-e54dcce92562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.48.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cb4406-e40c-4abb-a8f0-6ece88900559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.75.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6df11e-1839-4821-8668-d33197f45fc8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.199.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be11719-1b96-47ad-965e-0abb06e00551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9877d935-fff1-47c8-967e-a3d4b97be994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e511e6-3794-4d8f-91e7-c32dcbeab9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c127935-5ee2-479a-8964-8bbd088e2738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87cd98e4-ad4f-4de1-8e2d-0d7f6fc949e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f5ef0a-ac67-4cf8-9d56-75a8e267738e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f648bb00-b217-4439-a393-a8e66d840598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.139.136.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f092d5-e3ac-4ee3-86e0-fb923d7ec215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.133.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe85de79-9617-4219-b711-bdd08a7fd163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.136.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0a3fae-153b-4e76-b4cd-403f1aab4861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.136.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd1d26f-2e7f-4e09-ad10-42b0f03f278e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.150.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945c2f41-6cf4-4f55-9a68-c56383cbadaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.167.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0176f852-0b5f-4936-8268-10f301463a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.169.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491c5664-6f7f-4555-bea8-3948433a0860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.172.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33235c24-7177-4d35-98eb-ce924522bc8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.174.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59cdb71-aacf-4caa-871c-6dd9954df461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.174.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7052fe-b007-400c-9357-4f7f8553a3b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.187.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864cef95-46c5-4852-a3f6-bea94d788094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.212.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d069c993-8c0c-4330-a3ba-1bf70fd010f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.219.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b184f7c7-c8aa-4fb3-84de-9e9ee9c94d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.223.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e69a72b-bd0b-40de-a798-db1a5cedea61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.255.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16aeb218-50d7-4045-9196-182e0530712d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4f4326-e6ca-4bbc-a2f9-454e67ec8942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcbe3f4-ba0c-4aca-9de2-74103b2a1d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce376b21-5acb-49f5-9999-f6a682dd2bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee189535-8140-4eec-9918-5cf25631a8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f886c827-9e24-424c-9288-b9f62704d659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aac0b3f-42df-4d10-8eb1-68e77bd83c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24d55d7-2ca0-4768-a5c7-c25c7565b7ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe999aa-b295-440b-828b-050170ae1efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694cc04d-5c15-4f1d-bd76-33e322caa843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6095d589-32dc-4c0b-9936-f93dc1eea1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb98179-bc06-4e42-b205-f6a984de0406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683d3c3b-ed74-4ee8-862e-8145b408baf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85d9391-d4da-4b03-94b6-ba7153ee3ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba049a5-2dc7-49c9-91cc-4d0bc7587260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92f754a-e76d-4d5d-a77f-027b22e1f171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46a32b4-7bb4-412f-a0b6-df6b1267b62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8abfe4-3007-4a4b-b6c7-0d45c9ce4f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1d633d-f27f-406d-a4ce-af84650f7985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc5a038-c3e1-40e7-affb-0fdb46703bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a713a1-d0e9-48e8-9fbd-237400121d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccdbfb20-6ef1-4c6e-bc1d-d4d1aeb37555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc30afc7-4fea-49cd-9c6b-74c5417ad894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95696c1-ab4e-49da-ac04-885edc80cb06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7e7a35-a759-495b-93f1-444f512d8ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40144f5-6000-48a8-8677-32dd828b2567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ca2083-3429-466b-aca9-8e064f9b0581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e3eaf8-dbda-4c60-a6a1-8e30b575acdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a694168-051d-4474-928a-f632a88c6640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e764bf85-483c-4cf2-986a-46733c5557cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2affaf2a-c41e-483e-bd47-72545fe58b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a579046c-4c76-4c1c-9544-a9c917f7897f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe04fc46-27ff-4687-837c-5c61158772dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315b86fe-75b7-42a2-8a3b-9942f6cb406d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0a8a33-45ef-4c97-a33d-297e0ba7ce14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6d9973-8a1f-4158-85b2-767f50a7b2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e09887f-e011-481b-93b5-ce5dbb4396f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d6866e-e389-40fc-a224-d670223f5ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042aaeac-dc32-49c8-81f7-273d97b8bf99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a646ea69-2af4-43ee-ad36-8e0485cb22b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ebd4ee-f9bb-4e24-8bd9-7995cfefe926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a839002-cc5a-4d00-a0b8-9607e1f3ef19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9412b34-ddbc-4809-83af-41ace5315d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f204580a-49ee-43b5-a704-639969e979ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54d338f-3fc0-45cb-899f-eb9b9385bb2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2063aff4-1eb8-49ca-b891-b342ea36a98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1109d93b-3f46-41fa-934d-5fba9f5aeea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0296215-154d-4a74-b1b6-d85b400e9127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f103235e-1d8e-49ca-a892-205467e4940c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed8bcf8-020d-40d6-9dfc-f720d2fd42e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--babdab0e-5399-40cd-9299-035fb3e873bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ce83ff-d52c-413e-815b-4c933d870aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54db00a-dba9-4521-bea0-d5ab69a4a613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb73347-f47d-48b2-95ba-615d4df1f6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a03ce8a-9492-4b7b-87d5-706af9019c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5dbca6-8ffe-477a-a9fd-df86f2f965a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6510b34d-17ae-4f9b-89db-ba1a4ede6df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5383718e-fefa-44f0-ad77-a16840ccbe8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadb9060-3d82-4f40-af1f-10129d7b8c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f885c2-ba92-49f3-a9ec-090f47ff28f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4e9544-2c3f-4c96-9e32-cc3a8da57b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9f3705-62a1-4731-99ba-23e2d85fb2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df905c01-2279-48ce-b2ef-777695d2b16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0718823d-7546-452f-bf01-5f495c7a0f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6022541-899f-4573-b913-688e493b44c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec4a348-1ab6-4135-a060-e4cee0b14953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdef7f6d-fcc5-400f-9794-ef64fa0c486c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733a6f09-e7a4-4d37-bd30-859891a7b0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9efc62db-723c-4a32-9cdc-a278e5315da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac7e88e-cef8-45ca-8836-141d85085831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08cbc74-adce-4a79-b299-2f36eb394602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da1c164-c84d-4f18-af9d-b66a4f1f37ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61da154d-373f-4487-ad1b-99f090d242ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc415e9-b101-44ca-832f-ea6456cce2ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a0d777-111e-4822-bb6e-e0dd5cbe76d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff06a79-ee19-4519-9c8b-153c1da49177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4cb76c-79ef-4f40-bb12-48fd0979641b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24eb9904-b53b-436f-b085-909223845b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65aff3ae-a66d-4693-b94d-91e4a121656e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0151024-58e2-4555-9f96-14676ea3e397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082c6cdb-5084-49e7-917b-5746d484c198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f6081c-5772-45fc-9db8-348710c45344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2200da7e-f849-4399-b97c-baf80db87083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bdfba49-5037-4e5d-921d-66e344730788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4a56a8-34fe-4f4a-8e25-96d7b6e49d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399eb72c-efb5-4538-bf26-3b599a891186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea160e4-a9ac-419e-9019-03499fb0e7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8be4ae-abc7-4bca-9df0-d701f1c54211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6b7a24-3e9e-4c43-ac29-03535f5ae140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8848a338-7508-4ff1-a7bb-94c288a9270a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca609f5-fb90-489a-987c-99b438e0c68a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a3d296-3934-4077-8c98-7cee09c11ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff02e745-bab0-4611-96f0-a49ada7baf59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202c686d-ba08-49ee-a0b5-7ad9b5f0b4bc", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5facb402-1103-4a08-ae70-fd4fa0e3ca47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98e165c-6033-47b6-bf87-38333d34782b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2a9169-e811-492b-90a7-436cabbf11e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2f4297-ec64-43b4-9bec-936b73559ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eede4fe8-95ab-44eb-b1e6-4c456cf322e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26770892-c7bb-4dfa-8345-a7d8be33fd84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9106be1a-07c3-47e5-bee1-918dc6738a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b692197f-17bf-4d3f-85cb-b6c7ef0f2ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486cf641-91a4-4863-8675-a10e451f0275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857bd7b4-f38b-423e-8a38-90963bc59d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86fcc7d-0ea0-4f62-ab8c-6c0653812f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aef677e-577e-4215-b1d3-57c9ab2cc59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68467bd-211e-41b9-b6b7-ab6803b83e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f12175-7d8a-4323-a357-fd9cc546a1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bc98ba-6adf-43da-9cc0-b93c9ba05174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4b7d05-ad68-4fc2-a6cd-ef0440a28f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85386a1e-02dc-4cb7-bb7b-f158f643fc0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280acf44-320b-40fc-9781-92d56fec3807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8162344d-c547-49dc-a6a0-0263a182a952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b57a4c-30b5-4151-b6ad-669ebd4a5b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99e4c94-daaa-4fa8-93d7-53125cd1179e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335e6f10-d2dd-464e-9ce4-2858c2eba6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455f39e7-6755-4161-a3cd-9434cc66561a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ec1710-26bb-4d73-90d8-a808bf32eace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200ad3ac-225d-4260-9f87-eadd37eaecad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39435ed2-e8eb-49c3-9676-2b887f3512ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3740c5e4-fb84-4111-a3ae-fa11c8a857d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84563b70-d5c4-4417-bd6e-77cc471b9a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b56829f-e090-4000-98d0-ebbb01864b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946da925-57e0-4c9b-9402-7c28ae5a221f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7a65e0-f7fe-47a5-b0d1-4c94ef3c4d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17da96fa-22f6-4130-a07e-2114d3060544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1565637d-7cc6-4a44-9076-92546e531f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c2d80f-2d08-4a3c-8a37-8ee54c18ace6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba78dd8b-5fb1-4e7b-a9c8-8862b7dcff0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca0c04a-3673-42da-8a5c-fdbdd503bbd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fccd4da7-4331-4276-962a-589c9018af03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be97f15-8664-4f2e-99d4-d14b34a15d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc7d4cb-c885-4b02-af5f-7dade3fdd3d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3ab031-86df-467b-9d4b-2f3449423b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a11aa2-4e62-4dc8-b644-2b41e53ae519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef506c6c-4414-4acd-a11d-0174b478667d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71359afe-96a2-4ecb-b44e-e5306b9a5ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba4f9a2-dfd7-46f5-82bd-532ec4c366e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a59942-404f-4521-b5a8-ee3900b4043f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba18a0b3-9ce6-41bb-a890-c7e22848f16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c4ac90-77a5-41cf-9fe2-5724c4454703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452090d9-cf8e-4368-bcb0-eebf66388bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ba673f-a954-4f97-8d3f-b10ee97a38dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04acae75-aec8-4783-b582-2d86543bf9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd098fa-59c2-466b-85f8-d57bdb13e739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8b00cc-3443-484d-af11-afa24c64dad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedbe61c-66cc-4093-8a22-973644cf6e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00095584-8827-4ac6-a158-ce8c445b3b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7227159-8242-4c4b-929a-46be92be0fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd15fa5-64a9-4396-9161-4bec526c0cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2234a2-cf14-41a1-b799-2a47e72b55f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5a0ee2-7964-4ba9-88d1-8d69d8778e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2461ff7a-c715-4910-8bb8-c344176d30f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92eb839c-0883-4338-955c-012958b8d475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a6c46c-9bb2-4901-862c-220ca1828254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c521976b-20eb-4ec6-8539-3af1828e9fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbad0074-c753-4b73-8ed9-3cee99dbc308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828cc618-4d0e-41bd-850e-63533f2b85d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b98a4ea-4d3a-4375-8bd6-b0c8cec67dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c526c54d-b9d2-48cc-9554-09da2feae255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1304523a-13a9-4d1a-b7c6-42b84a2b0e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac79d9be-7362-403f-a9ca-9e5a33757ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ada55aa-26d0-4890-a62b-472b35ab5a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1ce7fd-ec66-4bcc-a289-80799aaa701f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde2d290-f779-43c3-b80c-97b776696a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd2696d-4b2f-432e-8b44-328df7b6bd93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fef4816-bb50-4a8d-8a4b-779663335d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29a687c-12a3-48f2-b030-2275464e2972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2276b737-9012-47a0-b613-44399a6c73d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335c78cb-fcea-40a6-a930-347c59d0bd98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03119e3f-303c-4a8a-8a85-feb5afb16e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95401644-5764-4306-a3b5-40923711c455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921b505e-d388-4ecb-afa1-00bc60671356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5468b9e-c9b0-4e28-88c5-83cb44cefbd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab2e3a4-df2b-43b6-850b-17d4aa146d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3cd1c0-5c41-4ab5-bfcf-912622beb8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5319a3c5-4b14-4add-8c22-51a392ede83a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8153d52e-3a00-484d-a246-36fde2713858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb0cba9-e507-49fd-9cab-a6a9adef505f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdcdd58f-ab11-433d-877e-7bb1f4b19f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b798fae-1438-4d50-8c29-48fe8104e0cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25fcbbf-037f-438c-b9eb-c5676697084f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5813d9-ba1f-4e8b-b92e-26ec73ffc5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d45f39f-6aac-4953-9ff2-d497ce714b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2249c7cd-6409-48c0-9744-a1b7add27bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--171b8742-5dc1-4eef-b80e-0cff108e7a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2153b432-c2bb-4182-b035-896eefb0163a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.197.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b6580e-e794-465d-8070-82b3a413b4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.199.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cdb2c2a-dc84-4e88-821f-85414cfc7d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.211.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b71276-0025-4d3e-9bc3-167c8f66d112", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.50.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12f02a6-1a24-4072-873d-c457646536e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.60.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b375d3-f771-4b30-8579-f28b5b785d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.144.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9c139c-a4c1-4681-ad0e-1596b1f88a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.183.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd87b83-92fb-47a0-8dc2-9120098582a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.5.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec93dce8-0335-4702-9c2f-dc3d425b1d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43dd33e-7cca-4bbb-8821-8b14112f29d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbfd93b-7604-4974-b3bc-7cb27d756b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5019a7b2-2adf-4ffa-9bab-e6e0cf150ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969ce51f-730b-4775-a720-4b290a3c2a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd0249d-88d1-4a86-a41e-f68fe33e6399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115e85b8-5167-4e45-b9a1-5c6ec0ca69d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.245.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05308cb4-bfc5-4fde-a856-530ce6a94842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc55c6fa-3214-4127-b720-8613b9fc1688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a0611d-ef93-463b-ab4b-bed21cb6371b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.102.234.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0dd96d-a502-424e-a27d-df76dafc8d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.88.82.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368ad29d-5fb9-4d05-88c9-18d24d04497e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.156.110.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878b8e22-3051-4397-b655-64d4ad458da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.157.122.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6e8779-2b21-44c5-9a50-e780b3f0a631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.109.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbfba37-fc71-437c-9b58-07936e1544b4", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.165.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7418f74-002b-48e7-866b-499b1fde9649", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.184.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fe2168-1a5d-4b01-b240-b57db87a2cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.162.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a2a9ce-7292-4da3-9e65-157d2264150b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.169.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991e7deb-6e1c-4189-91d9-68a543845b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.233.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4d4174-6c86-4b01-a10a-a1b7be299af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44578e7-bc23-451f-832c-b0486b39815e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c17976-87c5-4d80-b9cc-655e8bb24cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc41e6e6-c681-4b78-bb25-7c5416b07d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce79f683-848a-4d57-9c62-a1d698a1b9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8987859-6341-4480-be22-c47f4fcd354c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88dc55cd-37bc-499a-a9f9-32701a89f51d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3038021d-505d-4dc3-acc1-acc1b8ef3824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8df523-0f1d-4f27-ba6d-522ca310cab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3927ca-3d0d-4054-8846-f3f665688345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5c2be1-b60f-4e51-a975-13513dc34217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997bff73-a6fb-4c79-a0c5-ba88daee323c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41f252d-01a2-4d3d-b8e5-96355f4efe26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c84116c-26cf-4bb8-8290-aeb329af55e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5fb6efa-0edc-4af2-be7e-1ad44c6f5de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b361323-ce94-4e09-9731-7b265ccf281c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe30f56-ee8c-4de7-aff0-a52e9b13ff61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41601e5-e5cb-437c-a74a-2368d6ef0b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1db4b5-04d2-4788-adf2-0097edb61345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f931a60c-b237-4ba8-b156-bc7e20713082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1687cc71-4232-49a1-bbf4-c93b74fa1013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c647e7c-b3a6-4974-82cb-3fd6d1d7b873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adff1020-d61b-4e58-befb-4eaf48c4630f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a654ddfb-33fe-4413-bd72-670805e1f931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439d6664-8cef-4ebc-967b-5b12afc9662e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780f28ab-6c35-48a3-b642-ac440a031017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8deb9f71-2a19-4621-ae5c-ed446c733bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf5562a-7e00-4199-9a78-66ef0067c8b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71310bcd-253c-4b50-857d-232b1b7515d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea50550a-3bd6-48d5-8ae1-c654f31febe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627c455f-b725-47d7-8ba3-27a888bed1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb76460-5914-4a8f-8127-86ad0d48d8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549616df-6586-4468-a89c-99e4c08c9ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767812de-0bcf-4628-85ee-9f59037ae54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50dc5b96-e62b-4339-8e6a-c17be1b36bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c2039d-bdf2-4266-947a-ac9ee20dc35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a690c7-4733-4d9b-8bf6-93b2f27d65d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed15043-2785-4d53-9636-f2b4f6f9644e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c823bc7a-7679-4328-b8ab-3e5ab5cdeb1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b15ba82-675b-4d4c-8292-2b936e488e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ffe997-6a9f-4a3c-9bca-1a02930b083e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdb8930-a8a9-4f26-9b4d-01d7fb3fe9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9b3bdb-4aa0-462c-b013-069586da840b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ac1245-8316-43a7-9b0d-ec3158cfb74f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d4db2b-a6c1-4a79-8ddc-48440880aada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce5b4fb-71a5-4f98-b185-0dcf819e1296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5388728a-b9d1-41bf-8fd1-8c1b516e5156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36733281-06bc-4f2e-bc40-a6ef28ae6fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--530751ac-f271-4d10-9f7b-8b282726a00b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783ca54d-89bf-4ae3-aa20-c3f1ceb35ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd40c05-c684-448b-a51f-c643504e218a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a1aaac4-96be-4a4e-b39a-cfd0ff5384e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4136a805-c813-4f56-88ae-a81f6f2544a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--affaec3c-e848-4691-9be3-1f260ba7e363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213377f0-a85d-4dfc-bd19-19c28cfb92ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b72357a-6e60-48e6-b267-2464db74bf45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8707d201-3685-4757-8965-f20a3bde00e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.12.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc65a116-115d-4440-8309-07779c1f4aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.197.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0cda457-5ecb-48c5-9ac6-ac269c5d21e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.136.214.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2bd0fe-439f-464f-9e2f-ae4392e1b2d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.241.83.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fb13ad-fcb0-459f-8890-e8ae8ab1f060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.255.177.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb9e277-5c02-49d9-b81d-14d49b866f21", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.141.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed74d57-3133-4c76-b9d5-8b0a0d2580b2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.169.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a7ab5d-cefa-444b-9a5d-58c5582907d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.232.230.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd49d9a-ba40-49a6-8f76-d14c6be651a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.254.83.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9804e29-bd59-415a-aa37-ea54231d73bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.228.163.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cda762a-f811-4e7e-890b-8ef8910667db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65da6739-7894-435b-b6c4-5fe18d90bb50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34640858-d020-4498-a243-ccedbe17e459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd9d369-9380-42b3-80f6-e42f6029e4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c70408-592b-4999-8656-66de663f8c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da84582e-70d3-4c3c-a950-882fc1c61d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9a72b0-f4c7-4f8e-a3a0-1f5dec01b496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a551271-7940-4deb-a497-ebea21f3366f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c91977-78e0-4f0d-8dc7-88f7d9133a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71bb3ce-5b4d-4ee2-bad2-b03c3318a37d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12895c3-f67a-4ec0-9f6b-e08a6b7ab0c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb4a095-ef2b-4070-951f-e5a103782675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3560bc4-a91a-401d-b614-5980f33ca0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab655a9-b2ba-4c0f-aac6-4db550b85f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790d3848-d284-4cd2-b5e6-59f4a77f1e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbdb4b3f-aa62-4e28-9f80-4dc25afe1183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2cd5999-2b53-4289-90ef-988af221cc11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8414a2ab-d96d-4a50-a570-ce0ac9de39c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb18707-44ea-471d-ba2c-031793df097a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202563b1-c48b-437e-a9f0-f746571864fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6995b6b3-8f72-4454-a3ec-4944ff7543ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c38d1fc-6f82-4010-834a-afd4fe696bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6419bff9-a696-4f41-a66b-4524db5d17e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1921b19-467c-459c-8069-f91e2921702f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dca397b-6846-43b8-8382-4d6272076670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a077dcd5-4ebe-43b0-913b-0e37eee70a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485ae497-f549-469b-b046-d31fb3c726c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0eda55c-3178-4c23-9bf9-dd9e31ede76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa762d2e-4be7-4bc8-8230-caffae29975b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ecbdd8-713a-4d70-bf4e-4681604cb4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8653c180-b547-4a84-83aa-3a2f53563dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3796a3d-ab66-4074-a90f-97d348743897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52825697-d51f-46f5-871f-c14ec749c0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d55d99-54f4-4d18-b739-94d4893e8f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf04dda-9d56-4238-8a03-dc466368c766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f00c01-7089-496c-8fa0-7b60b0fd785b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c805deb-ac91-4e65-9c59-11dd52cc983d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c79ab52b-5679-48c7-b21c-5ed389a5aa98", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893b6d59-f834-427e-8124-3f8ac551f393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c096f5-12d5-4899-ad97-d9332c6f89f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415caba5-66cc-43ee-8f01-8b31cc474341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d849ff29-20e1-4ac6-b922-42d43f7eee84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65d6550-9574-4248-863c-64913b7d551c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f59ac3-6850-430e-9379-ed12da1bb777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc8765a-770b-4ae7-9d0a-bbd470f09bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a061c3e-48a6-422e-bf6c-c430edb2a80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d222e80-c35a-4d7d-98fd-136c9099cd01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384e0cff-2379-4762-9645-8f7293a01c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebee639b-e46c-4794-b8a2-3862edd0a5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb660e5f-a4a2-4b1f-86cc-173162fe33ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a7468f-3e52-48e4-8997-962b5f458c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05043992-301b-4064-bcf9-1c3cafeaf860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcefc165-98d9-4c23-9649-ab7d09e9e4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b738fd6-dfd2-4398-b420-4d97eb9018f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f55ea8c-806f-4f3f-b181-6e87763f5633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4738a110-a6bf-4e3f-91ff-0315c36ed94e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.168.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f09fc5-a87a-4e9a-a08b-6acb4321fdba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d0cc6b-9462-423e-9d45-ed4eb4cf1307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f25c2d-9f49-4f43-a4dd-c72c4b53f0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2aae8ca-0b50-40de-9e9b-845509cdb114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9260e401-4b6e-4c6d-9940-866916febdba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a55eaea-eca9-425f-afa6-3285966dfc31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.173.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401e0f53-3c65-4604-8335-31691617a952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.174.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afee12e0-5ce9-4e1a-816f-43f4fd9b6403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576278cb-0358-4293-95e2-1e0b0072142e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5dbc51-e9ad-4d7a-bbe4-5db1ff923ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c4d775-d026-4d39-baa3-906392c8ea7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446c9fdf-1bcd-45fd-a6e5-60de4f83dd75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d1147c-03d6-46ce-bf4d-84b444accea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561e11ce-81f3-430d-94cb-d1de88640b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6297128-2e35-4ecb-928d-370e11e41fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5709443-54b6-4fba-9b0e-238504b68af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396557a0-0685-4b20-ba68-dc9a963a5029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ac93bd-a445-47c3-b78f-22cca228c09f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55eda37f-dc10-4114-9547-ca29cb2d4979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c401814c-1812-4aed-a5ff-4c8c8e43b75d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93072903-14cd-4742-bf02-fcd892173e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063a9f41-b534-4478-b9d3-fd58432ac0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.191.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e7c09a-5af9-4758-a2ae-4ffe97e2b0c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43484a3f-6ed9-4705-bf71-fac6651762c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f94444-d2d1-4162-83c8-1b5072d372f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56736716-c235-4b50-9c03-e856f649f032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec026446-69b4-42ac-a10e-46ddc09d4bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f0dd42-e21a-4af7-a307-95afdeb51d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e40518-18f6-4c6b-8ad8-fee215ae11dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ff8ca0-41de-4ef2-bfa7-98e24ed6bf9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3183a1a-8a0a-4587-8f5e-b06678b644f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d5a59f-58cd-4551-ad5d-7d4057a54fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8ccd64-acfe-4179-ada4-adf5ef75ff91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46411103-b28e-424f-994a-c89623873226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef6b46e-d71f-4837-aae8-858fe8c7256e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae6743d-cd29-44ee-bd27-513d4ecb59fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4433db1d-e62b-4672-807d-11c46fc369cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b7b11e-c193-40c9-82c0-4c91c4f767f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ff403c-810e-45a7-a670-8b0459f2d85c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e22156-8233-48b2-8490-ab7d6640851e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6172231-ca65-4a81-9c3b-f36ff57f4033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e6bdb3-c301-4ddc-adec-8b3ba06a1d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90c4f19-60d1-43b3-8fd6-3b2152bab178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812c8ffc-ea18-488a-bf99-c452c4a021c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b43f2f4-d308-4f15-acc8-1d4bcf24bbc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6869b17-1d3a-42f6-9257-1f406bdfc62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182af272-6147-45a2-886d-e4c30afefa87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31ca9ec-12f0-488d-bc64-a6558c526157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842acb3b-c971-47cd-9d7d-66d2b479945c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c604659-b93f-4b62-81f9-7922c2b60b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48346b19-aba3-44c9-80d0-c32d45c74f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce5b011-338a-4f9c-8737-8c069378fcbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e308991-7803-4567-87e2-8e414b634aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e0c964-aafc-470e-b5b2-afb72f912d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26dd0ff-99b0-41ff-b1ce-65b505fca0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab46737-5da8-48dc-9c99-fe741eb90772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.211.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f77372a-bdd5-42bf-9047-d3281c624b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ef6789-4fe2-4cda-ada6-3bc7273ba85b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88876f5c-759c-4fbb-9703-ba23014eddfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30401eb0-628e-4d83-87e0-8bd121b5c5f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f748ddf0-d801-4e23-9a7b-ee81e1cab852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21dc5b63-c231-474d-a313-a54a27c945a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3144880e-63eb-4222-a17b-50ff2cb46a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139868c2-5b24-45a9-aa8c-92a5c00117c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18c0d80-49b6-4d88-90bf-3d8621e91197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.219.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4caab174-2c2a-4a06-bc02-9b3854a78369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b0d4ce-5f65-4e38-a654-cca6b9e26049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1be441-bf28-42a8-9f19-215c2d5d29ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f49dd937-6dcc-4b9b-add9-e52b4e0b88b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a40778-6edf-4e65-b7de-eaab72572fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891c9190-7425-443b-82a7-562c15f23a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7672717a-4180-4459-8fc8-a2a4580f9228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a33636f-90cf-46bf-bc5a-d6b5ee316368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bbf1ba-f8bf-4a89-9773-426aee8796a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.228.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c3852b-0d8d-4286-a855-7a36a4acb771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d40b1b8-7cf4-4824-a672-8b57cc89ca39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e53813-0070-471c-8e32-846f5ee7cc8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ad2e2b-ed52-43a3-b781-1a9e84c81273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26833c01-7e35-4cde-992d-c39568a33b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e66d73-3c6f-44e1-a676-2e5488dd908b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81d7c47-e115-4040-9fe5-3296aa6afb4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4678a255-1e50-4964-b862-a6b7cefe2cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344224f1-0384-482f-a325-df8cb5c202fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf38e6e4-fd17-4552-bf87-cd08ac66c681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8458788-63f9-44f6-84ab-3144751707dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6f82f3-c191-4875-801a-761072bedba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89155176-3e32-4eea-8a76-3e775e5561f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47cd2d12-fce3-4610-a7da-032dd37af648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8555ce2-c6c3-404d-9934-ed485380acba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa39d97-72be-42da-a435-c99e8a18b1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3bff49-12bb-43b9-b808-d6993e46639e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c64a943-9426-4f11-ab05-b0a9a64e01f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5a3efd-1f92-402e-bf44-38277b624342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33d1344-9718-419b-b3e1-148c39b33915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68248185-a620-46fc-867d-0571fe1fb0a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584c4a37-7744-4dea-b960-1a7ea7e20d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362c28d0-6303-497d-b043-8b0b81a99c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5317bbf-3237-4c0d-b80e-000b079f26dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c409eb-6ec0-4689-b5a1-c6f8089c555c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8614b94f-e27b-4f8e-8401-4a78cefbb575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77dd065-9c92-40c0-887e-a994369ef740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e51f570-d65f-4402-aef7-8b41f0cafe94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf882aeb-aa36-49e4-9145-cf2183ea9e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1bfeff-c23e-4396-bfd4-6487c81feddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.249.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9042ec7a-07bd-4ddb-b44e-69e48410a4be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.251.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b785ea-eaa6-46fa-97c0-bc3e44720b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4da9a0-0c8a-4cfa-993b-0bcfdd96c7a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.160.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5020cafe-66d4-4cdd-8dba-f6b05d4855e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.160.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd42ea1-c0ef-4af3-a957-82ad8a16910e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4df84d-7114-4e9b-b75d-ab146fb0a924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.22.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dfa5b1f-0d32-42ce-ab28-ac63b172fdd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.248.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12843392-c087-4694-adfc-c35c5e3a2dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31662e43-a8b7-452f-a15d-b3c8410ca40b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.67.46.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541e9400-301f-4964-8266-d673f439afc6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.13.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a9f1cb-d725-4b2f-b989-db2a094e201a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.13.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3197c4-b956-4398-9832-f5448c22c463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.40.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4da94d1-70e5-4b55-8724-d2e85af96ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.40.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6334109c-d538-4f04-9923-f59de165557e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9cb133-08d5-42aa-9e4b-0a12d1255b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.126.55.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6cf2b5-4858-4a42-9fc4-6a91d2df8622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.14.23.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c489ec2-8ac1-484b-8e3c-a83a47750deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.146.235.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37b6ec3-25d0-4b36-ae8d-7cfebc6c4a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe97c17f-0171-4354-b00b-96563212e5a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.119.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e53bfb-8c25-434e-b3d7-7af1808ea60b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.146.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8007cec1-a51e-464e-80b9-3ef83f668b17", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.18.197.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4531a116-236e-47b3-8ea4-4309f3cd341c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.56.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfec55fe-009f-415a-9d62-9abf4cbd9b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a41fb5-3fea-403f-893c-7addbf6aa653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55de80e1-8428-4c9b-8d8b-64624bed1654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76799e30-1364-4cdb-aedb-bad288e458f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3a8e61-3a5c-43c0-b48e-97d1b2d59eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611408d5-5e9d-4d55-afcd-364edae1305a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cfa833-6a7c-4ae9-83b5-d1419230da4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2945a9-4870-4157-aa09-52dc75c38b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6344e832-9c65-414c-9040-36aae17864e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01c472c-2163-4773-9a9e-2f759c18705b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7d83ca-cb71-4f30-b9ae-272791f83650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92879fe3-d56a-4a0c-ba66-2d0edd1c3369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7d286b-1ad5-40a1-b301-a153a3cc157f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d50e04d-964a-458e-9b84-d458afd5d82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.205.145.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af98d89a-3eb1-4c9a-99aa-bddf7b4fa6ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.209.4.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4188e507-aeaf-4d1f-925f-8d71f5f07d6b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.29.237.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889d404f-fd3f-43c7-ae8d-532c502ebeb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.43.52.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415d4223-5169-45ff-b033-ba51df2e6abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.43.57.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0308861-8184-401f-9bde-78e45f830c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.57.212.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16b6b3a-b9e0-44a2-965a-6697885403d1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.70.207.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1693c852-cbfe-474a-855a-27b5ed2aecc6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.16.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa06288f-f4d7-40bf-926e-fce20e8adf55", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.196.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5cfef3-feb3-492a-9053-0f2aa5869425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ccbfe91-8628-47db-97a7-d83a3c252019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b321edb2-0202-40f9-97ab-8fe1e401703f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e168259b-b54b-4c50-ace8-abc0d1cd43ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b505804c-9388-492b-bd3d-76d85d44baab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf0ca0d-abd6-4203-af82-e09cb6f62ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0bfa357-5a95-474f-a208-0150e16cc6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a40f9dc-1207-42f2-a9f7-1ff777c1b581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b779d2-3a96-4e68-a592-f26b0c750e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f3e067-01ca-441d-8b4a-a88f54676bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255d452e-5f7d-414d-8c16-15bc61614a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472a6fb2-10fb-4b80-8483-d3f74832fb8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4485fe-d0b6-48bd-8c2e-fd5ef33f3cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8cf0303-511d-46ac-a250-748f12ff136b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87307dc-44d0-4f26-a517-517097f63273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30cd594-e589-4c00-bbe1-132d87440d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f44e0f0-c2bd-470c-b9f0-11cae980ae33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947947ec-2e32-44ea-b4c7-9ecaba9a6482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d89d8a3-ee33-43f0-8aab-cc7bfc94dc1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cab1f95-39f7-41c6-b414-1993500e73bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c497bd-faa2-4b4c-bd90-e7ced75d7bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--748151b2-87b9-4583-b2f6-5875671fb587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55d0296-5f1a-4b93-a3ae-f2c4368a6369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d005e7c0-b016-4067-a34e-a223f2f4e2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc4a1f9-8508-4adc-806e-ec041b067ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fd14bb-b228-4962-8f85-29dcb0499f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7be48f-a6a7-4f31-b748-ca4b0c77dcac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36ca13c-17d1-47df-930f-feb1205a6247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3f4250-a1d4-4a42-8a6f-ab0b401fc358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeec74e0-0047-43dc-8093-6cea5d07b6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a8dc1f-3460-4422-bad8-6acabe6e996f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ca2716-f06a-414a-a75f-b21b8def850a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7629bfee-bf24-4acb-8dda-ac7c83ea1253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b166aa5b-03c2-4df1-9e6a-1bc091e1e973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66bddb4-b4da-4424-aceb-c9e85fc2fb59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91279ebe-4640-4294-bcdd-645df0bad103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44144510-09e9-484a-b71d-b283b371b14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd915b8-3421-4803-ac78-ff1bc7c939f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9502b4c2-b1e1-49bf-ab4f-0b16dc3087a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd2d000-28f4-478a-8a6c-9b59f8dbe99e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9791229e-c568-4e50-b4b1-e3a63fd4bade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9e5fbb-f320-4fbd-b219-87c16cf6e623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a23cc4-4a33-44c7-bd50-34e9efc3b7e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67078377-af90-4963-b8c2-8e0aea56891a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e09e087-e0cd-43b8-b94f-e088ff79c514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591b367d-2e21-4447-ac73-7b47c950fa78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e82edaa-1b2b-4fa5-aaf5-d7c96dccd2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc02103-f4d2-410b-b38d-94067bbec817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d899c9-b611-4e50-a7b2-4107db9a883a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d779eb4f-7d56-467a-9ec5-45dcbb3a3532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e612eece-2386-4575-8012-7ca87f6c63eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.13.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007dd91d-8460-4d9c-886b-9682055e5740", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.4.244.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bbf5135-2034-4720-97b5-f754335f47d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.146.39.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8ad73e-451e-47c8-a13c-ec49067b5564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.235.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7a52d4-8c05-44fc-9017-3950a50050c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.163.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399fbf12-6adb-4359-9b1d-611434579dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.21.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fee88a-d5f6-4ee7-aebf-cd11474d5ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.232.13.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d430886e-9d3c-45a4-afdb-76f5e9934954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.229.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441c2882-eadc-4bd2-bf80-f870302db387", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.253.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373a3182-ebc8-43cf-87df-ca215f246109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.41.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d301111-918a-4fd7-a21d-522b03e94861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.67.31.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e7d9b8-1628-479c-842d-b0def92d7f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.0.0.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961e0435-c808-4b84-8c27-e74bfdf3b6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.30.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c5a062-3d7a-410f-a55e-29eca3134e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.45.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af94929b-a239-4457-a4e9-7337ed5f263b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.119.202.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b979cf3-f247-4589-bef7-90be1bd0076a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.173.100.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3895a3d-d8ca-47a5-93f6-2eb857317d15", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.18.14.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395cd31a-b688-4cd7-8938-fc9853e2b5df", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.119.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b5f1c5-b5cc-4311-bd8c-48e2879a69cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.12.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bae85c4-b728-411b-8bd5-ad259be8ce9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.129.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847a9491-197b-4c3f-8627-33203ac50016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.14.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e58d0c1-c154-4155-89f5-156a0c9fbb48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.154.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33de4680-08ce-4be4-9470-9ed220fb9655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.185.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96924881-bfe8-4090-baf1-269ab476674c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.188.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bcbf1f-91d3-4895-bd31-1b88eb41cdde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.191.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa8831f-34e9-46f2-bc04-42d9bcbd75de", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.205.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4659e162-23a2-419f-9e65-ff71832182b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.219.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0002f7-b665-45ef-9030-d08836a4b28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.3.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee56f0b2-b4c5-4801-ba1e-dc850ae584fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.9.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0dab00-623f-4268-8279-e81178a470d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.136.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76db5260-8e86-435c-ba02-398feab5f02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.240.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625efb14-0cde-4cc9-8a00-d787d0dc3a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.40.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4900f083-34e9-4fe4-80ca-9ceabf23fe31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.81.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd61d589-20a9-4350-a60c-a7996fd6102b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.88.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900825e7-4562-4410-9142-0ab0d88a99ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.89.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11868fe-3bb4-4b94-bd3e-7813b80c39a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.91.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81a0d41-defa-4e9d-afd7-8a7aa19c857c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.166.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6c3763-2931-4cf6-b740-0d720cfe564e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.166.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b99b960-76c1-4acc-8599-4009315d56d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.21.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf0096a-f39a-49d7-8028-20e63a6d9501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.21.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e2bf88-195e-4fa4-b120-22391eb820a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.241.1']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3052f191-2f6d-4427-8bc0-b88ca70a2494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.25.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf59dae-f690-4177-9316-e3c18d35e22a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.3.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7116c2-4847-4473-bd37-c75571382d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.3.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4029eab1-4d70-45b5-8196-7886f7484b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.74.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4299c9-4579-4d83-9294-cc39ab1a8f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.74.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af12cc00-9183-4ce7-93a1-aa1f20b4bf24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.77.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73a76d0-3414-463e-b4c7-1a663f646a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.174.211.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10777352-11b1-4142-b692-d3097a0b362a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dba6bb2-7522-4bea-95ae-a4363451ac6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.112.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604d7bf6-e2c3-4f69-9126-8f5c409e7167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.86.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7592ae15-241d-4d95-ad90-16af3b6f5d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.247.218.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962d686b-9da7-4bf6-b8ec-df4ec05280b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.227.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9879038e-19af-4b2a-aa06-85f4282b3390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.208.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031ce32f-e6a9-4852-9a2c-c08f64ccf788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3cc4af-092b-47f9-bdf6-9172e9839ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8bb878a-e840-49c6-a0b9-2bd521a784f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.182.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3d35fc-04fc-4777-87b9-8607c30529f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.186.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ac65fb-bd7b-4a77-aafe-3ec90f92b052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.22.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6fa1b46-817e-4af0-a7bf-8ebad8f09a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.44.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c3dcf1-78f4-402e-894d-6d9af9959b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.57.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1019427a-3021-49f7-9bba-ced061af3532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.83.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7fb466-73db-484f-9ffd-be14429da911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.103.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37478843-93a9-4a2e-a1fd-2a4e45272ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.109.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c842146a-a9b8-4ec5-af54-d67575e63f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.110.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0c6600-bd8e-43af-a120-17dc0c6591cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.121.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b20f68-c73b-4351-afdf-b522f333a0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.128.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a291dc-f963-4268-80a5-1430e7658b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.131.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b221ec-50c8-4f74-8083-408d92b02834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.150.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69eb7b2f-ea2e-4703-8e36-c85acc1a7221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.159.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcbedb6a-b76d-492f-bbd4-68e55b9a4e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.160.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6edfe43-bcad-4331-89d1-87b4825d1d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.162.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021c49a0-35a6-4e01-be38-ff07bbbe1df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.169.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c00c9d-b589-475e-bdc8-dda9649e2469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.176.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746896c1-4f62-40ee-8aac-27adec59ba87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.181.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ec67dd-d6fe-4b0d-8a32-29c619406bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.183.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d187fcd-712e-4a13-bd0d-dc4638c47e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.186.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d115a3e7-1edf-496d-ac95-4174502dcb8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.217.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb68e28-a9cb-4ad2-bda7-a0ea9281af71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.36.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd298cd7-963e-4008-b316-4d5529933066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.97.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34cc181f-84e3-480f-bd52-f11fe5f9551f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.168.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac09ba8-67e4-4af9-9b65-b246d7e47da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.182.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a136be96-9df9-4475-a1c3-70a043d346d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.191.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7236a4-e47d-4198-a8d6-550d520ad498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.1.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62166724-fc2f-4616-8062-68769e7876bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.113.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1986da45-4a7c-4946-b6c4-608aa778bb03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.135.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1697ea-3123-4c61-bae7-0941ff849037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.155.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f55567-2fe2-455a-8938-48e1fdd3b2c9", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.156.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03571465-8c90-4665-8e39-a24ca77c8d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.226.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2377974e-a7aa-4978-9382-8c55a1c643f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.30.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f194e6e6-8689-49e0-a033-84f9e12e61a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.86.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f4eca1a-83fe-4895-ba6c-75f13ff529e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.97.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332e6aeb-bc42-4f91-86cc-be8ad58054b6", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.147.197.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a189b2-1b8d-461f-83ba-f47508f812a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2ba92f-31e7-43b1-9cec-766bb3a10709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ba7d91-a98c-4fb5-a637-a289401bf0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffe8333-20c7-4d8b-a67c-434601372df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf6cead-00ee-4410-bd30-51c21e3268ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327b3484-4e56-4c77-ad13-493b26176b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8955da4e-3170-4e12-91e1-0dfff8e48897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a83be0-9659-47cc-a4a0-1ee3611410ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f17de1-78db-43a0-9c72-6ad4e1939230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.187.180.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832bb353-2375-4a1f-91e0-5233807e3837", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.47.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f33f8d-6dfe-4439-8e9b-036c71dc14e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.22.193.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb5cc75-b1b5-4737-9748-622dd2cee5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.238.24.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7dac4a1-4353-4543-ad82-8f11394906a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.20.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dfec508-7fba-47bf-a7d7-278729b9a6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.1.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd11578-e001-41b5-94b6-659be54c271b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.122.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c73aca-3234-4fc8-910e-0f809a632b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.126.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c266298b-b04b-4f2a-bbee-dcb1a6f1473f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.15.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ca9362-8a09-419d-86d1-f32fd4b5fcab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.169.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54288665-3e8e-4ef4-b3a9-3339e19f1ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.190.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4134b30c-7304-4c67-b31b-f1f849622f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.23.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abbd516-0d82-4e2e-ae70-8cc4602fb46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.5.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aaa9c7a-77bc-4bf0-b73f-6778e1857a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.57.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b225841-b43c-41a9-b169-240f2e79fb9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.58.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14063e0-2ac7-4946-a00d-bd7560c28e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.61.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa6745f-e9a9-4872-add7-159ea949956b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.74.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb003893-f453-4720-8060-33ba476e54d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.79.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2658eaa-7699-474a-9574-d99420006658", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.81.95.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55cbd63-d205-4335-ab59-f4283d52f9b5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.76.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef6f697-793e-4855-b9fd-2a93832e6aff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.114.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c735b9-1664-4402-921a-117a44efc5a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.158.216.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbba34b5-3f38-4325-8eec-e1d6fd24f14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.158.216.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8050ac61-b7cc-49d4-bba4-eaf1442df175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.198.15.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f041c416-729c-4622-b894-ed886d314587", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.198.46.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc63cb3-65ee-41b1-b61b-ff9a857893cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcea4c77-4ded-48c5-9193-6826b4cebe74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dceae4f-2c6a-4dce-a75f-a86cf6bbc290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408bf723-0881-4596-86a0-6eb74552d489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d849a472-7ee6-466f-b9b0-5bef9fcc33f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6aea7ec-50a7-45bb-b07f-13fe6c01a3a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198a2b27-2fd0-4c40-aa61-5b36403b7232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4dd9e9-bb15-4e0d-bfaf-d92e40863677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40585271-a88b-49f3-9b70-25404566b55d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a0622a-1664-4d36-9215-6f0906da8ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5601d67-25af-4df8-a63a-e3c9f90dc394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2e623d-2444-40b2-9ac7-7630d5dcb08c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a8fa5b2-4f21-45aa-9995-4de5239c6bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af8f2990-6d69-4b10-b09d-d0602cd21ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b051e4-2142-4a5b-b86c-0a90173eeb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29778cc1-9c68-4f5b-9ca4-7dca9583227f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40889f50-fdd2-4a78-9a14-43ff37c0b0ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2163a44-116d-4920-81a7-2b33b08475e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd12f360-1514-47dc-9878-ef719ef408e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cf412c-c567-4f78-983e-04c8f7218a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0e6888-75d5-4f02-ac26-e45f33c9affd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4139962d-c2cd-468d-b1e2-7b7d76960d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b61654-d9ef-4c8e-b99b-44baa0dc2889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e16da3-13a9-432d-a804-99b9d02e72ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd38d1e0-1971-45a2-adb2-adee21173585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5821e3d-1640-4fe9-9f5b-2a694b2d784e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae1be6b-1ab2-4c41-9bf6-3d8c4d74cb42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be25d072-f4ad-4785-808a-f4ee0381beff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5ada73-1fd9-48e3-b1e6-dc18e305c904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb7263c-61fd-4288-8aca-894d5cecb291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edddb859-5fb3-43a8-a5fa-70acfb0993a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8059007c-6f75-4396-a456-cce89bd348d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0a0a88-ce18-408f-8a9c-97f3e2af28b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c42348-8deb-45bb-af66-207c94dca7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d235d0eb-7e4e-4984-a103-5331a4e0e95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc8236a7-b3ff-48ed-9663-ab7d55855c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30161729-9d28-4c56-b1fc-fdb258034123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5cef013-f981-4c28-947e-d77785f81c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b7c42a-e71a-4032-bd72-40c24c397e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c712a018-c55d-4069-9ded-14af6a06a6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c782e9df-548b-4d15-a3ac-34a474f29fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a084da43-5f27-486f-86ba-abf4d5c3ff54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c3631b-c5c0-4c05-9ffa-63dd2b8606ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87401e06-b335-41d6-ba0d-e73de5370053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593e6099-bf2c-4edc-bd21-311e6ff91266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce47fe40-791f-4a51-9486-deeb3a30efcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19418323-e986-492a-8eb4-69fceab3a519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b871df-aa2b-4484-8e17-f091ad0bcc47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4851b304-a5b8-407f-8273-5f903692733a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a6fd9a-8aaf-4d57-85a0-114a5716d003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d09547b-cf9b-436f-8a20-98885ff195fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c073aab-3e15-43db-97a0-e140aa495290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29e0a99-53d5-4c23-b820-a7311767b748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d869812d-7f54-4c46-b7c5-31ff2091f7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791b597c-5d91-4638-bd97-2d143f4b1039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abcea839-2bc5-46a2-a932-9da14da99695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa5dbd3-c318-4eac-8198-01c9a7df2935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f785339a-c3ed-4f07-870a-dc5421d77007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c981438e-c7b9-4b66-aa33-f469e552d27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18143cbb-8e47-47de-af4c-c1d6f1c3501a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfc50b4-2c82-4832-90dd-a308087a800f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9f9c73-3924-476b-b3ec-44bb79ac3b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61cf3c68-63bf-4581-8298-ec2a0b8f263e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554f9927-1afb-4efd-baac-1c1cc7d2ee3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdff7be4-a2d3-4935-9906-b1777ed118e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45fb07e-6511-4f96-801c-8f8a3f5044c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34acd8e5-6df1-4d92-8a72-4aa95b55e722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03071e7-1477-4a39-a692-509f2ba6b5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8df801-1aed-4c35-910b-ab97763b94d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c977a95-2c11-4d41-b5d1-3b7a370947be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6654281-7562-4730-9469-1f031d482f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783c2237-e21e-40a1-8c55-4a17a198e805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41083ed6-a485-48c5-b931-c00e2951d0f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d5bf4d-cfc9-46eb-8f3b-104f3d56af31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a462e6-01ea-4b4b-92ce-34046e2fc68f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd419a8c-1807-4ae3-bbd8-102316f39d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddd7a6e-d3c3-481c-a98c-4745e1ce37a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190d596e-53cf-4fca-914d-373b900817f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e4d1b4-d7f2-483e-add2-2efd50d7eeba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba957d40-d415-47a2-9fa0-fdd0da7694c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736caa41-d570-4f51-aae3-4cc0b645554a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78e5acf-577a-49c7-903b-cb0cde644391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0c1c0c-76ac-47d5-9010-fd52b6b035bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2eea6d6-ae9f-4483-86f9-858f722d4981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52723952-2278-42e9-8099-38994e0efc95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5abd8b1-0a2a-4410-83cc-aa3472755321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be38dfca-84ee-4697-81c8-cde338737648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b76c75-b9ab-4ec6-8053-efd861fbaa17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e35470-8dbc-499f-957e-5cfca7ed01ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc425af6-4465-4bed-aa2c-b874721f2c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf78888-1b1f-45a4-963c-e626afffefba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b97dd4e-9fd9-4833-b9dc-164588a58f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb788f2f-d787-480a-9f92-2dfef933d958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2980a6-0fd2-4f18-84b5-467bc7545680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b8af6c-20be-460a-a190-ac2d2ae0b76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370161b2-5049-4d99-a6f1-18c67a0d9ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f4dd3c-3e02-4ddf-86d5-2e5e09345eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77660a42-19bc-403e-a768-8bd93b70bb5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c40b33d-4eb9-44bc-b222-dbf52bb60a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e788956-475f-4cba-9c99-516252a5885a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ad80fd-ec49-4b20-ae6f-b783a45a2ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c64c81-66ca-482f-b322-452b3eb1a5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d871c715-5f9b-4e5a-965e-8ec9b4ef22a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec2d034-af80-4ca4-a3dd-41da22edf0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400fb5b3-f65e-4c83-8ef1-dffe421121bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d27f0e2-47b7-4e60-afa0-118032d4fb1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b5ed478-3131-4ce0-a5e9-0eac98dcc943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fd086d-ae75-4726-80fa-22d9233487e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46f3003-20e1-4ba8-94c8-06219486b68b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93dfd0c-a09e-4950-8604-e41f460350eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7701f2b0-8fe3-442c-bf0f-9600e69c8c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab9e33d-3fb2-4987-be9c-56c788d15577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17569752-c450-4a65-b1cb-730754d5e6e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb577c22-ed88-4f57-8d47-1cc02e11a8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f799a98-36b8-4194-8555-aed20859fef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95b3146-fdd5-43f4-8508-f50e300c17a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c62338-9441-418c-b806-6b829ec12e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0e5f35-b182-4e10-9b78-2c6e2c34a5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7039881a-e059-4f2e-beb2-1310f7f6db54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3413d807-5f90-4784-aecf-ba277825d6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e811bf2-3c08-410f-88fa-bfcaf3babdce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df262d78-ab81-449b-8adf-8c4a674e9e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec3c7cb-0d9b-4bdc-a981-0b5520a682f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26934110-c43f-4df1-94ec-d82ad8212554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28571362-30f3-4f5d-81e9-ea246aab6e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4970ee8-618a-4edb-a97d-fa5ab9ca0b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.39.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b5eba1-1f73-4905-8f2c-7b56e21a21aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.114.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a56ad7c-a051-4987-b1ff-aa08dc1e6916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.168.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d59c0c9-55f5-4b1b-893d-637c82bd5b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.168.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea45cf61-e58e-4e19-a6fa-3993515d5709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.210.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafbf21e-5b8e-4ce6-9c88-13fab321bcc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.94.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9558d9a1-734a-402e-81a5-666fc2f64040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.99.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7da3f19-5d5f-4093-892b-40aed989fb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.246.205.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34922d0-6239-461a-a4da-5720c12e6c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.4.163.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ecb51c-173f-43d1-a26a-a1922fa5c60d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.55.133.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df72a3a5-c8c3-4b47-ba3f-c642230b56e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.213.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e650c0f-91ee-494a-896d-e69c3a14c9ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.142.92.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac19838-f0e2-473d-a234-9e208bdb9169", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.4.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8cd6ab-dc1e-4a64-b84c-8291bedd3ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.163.24.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f0c7e5-1736-41bb-8a9a-e1a5af34e376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.156.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4f7cd1-3063-42e5-a093-f94f999009ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.176.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2603ba-4e7d-43f9-afcd-ace12449cea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.185.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7030b3-5775-4a30-978c-6a4030f07020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.117.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a1c009-60a8-4b52-a4af-6bf8f09c99c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.161.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d8ded2-c53b-4886-b98e-b34422344f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.232.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a41cd0-3ac0-4cc9-80e9-8ff85b4c9381", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.74.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86387153-a6b6-401f-830e-308d9b00c8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.140.166.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfd4f61-72ff-468f-ad38-0e7c962c87c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ecde72-339b-4657-ac9e-3f45aa00ec2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4909332-faf9-4870-a174-12e60b397624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5faa0e5-5f21-439b-a0e7-2303dacaba8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8273d1-74d9-45d7-b998-a38577dd599c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b25a3fc-cdcf-4654-a04c-095877c6cc08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0baaa409-d885-4bb1-8ba0-d52421f7857c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e291d15-6a6f-4045-b7ac-62a108e95e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31b1e1c-51a9-406c-8e6b-220418cb1b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521fd7b8-fe4c-4ef1-b0d9-573954d1a692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76fa4f01-d0a9-41f0-98a5-35c91e557b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937080a0-da7b-4819-ba73-c2bbccaa433a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c260f96-7e29-49d3-83e5-ca588ced1e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5409944d-dd1a-4522-bdee-d370aae71f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2f3237-cb05-4bec-b09a-773e812b0468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf7b9f3-0653-41c4-b045-091ee68cea63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f66dad4-42f1-42c5-8951-81242e77635f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86b49cb-edd4-496e-920d-04ecb1d62ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9936af-b645-42d9-9b12-cdf587a261d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa295ff-7642-4245-b107-1d33e81b5d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bcc4e7e-1fdd-49ee-ba6f-6a5fde6ff5a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57fd936-9f8a-4364-8ca6-0fdc6092adb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d487fa97-cab2-4c4f-946b-74c02026fa5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22a4200-dcdf-4540-8dcf-97cbed5d8235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4958583-deb9-45f3-b0d3-2c376e5cd5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9c61ab-193e-4a0e-a43b-8d9d6a68b8e4", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98b9105-8537-40ce-92f2-dd51d48833c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ec5f1e-f0d4-4136-aef2-32d5da09e8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b6e8b3-d744-4dc6-92c7-a238b23c1383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1445c0-9f6a-4215-981b-7b8ff4e4bc7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db1b37e-a128-4a06-9c3f-e0532f246f67", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f59abcd-6cd2-44c0-a6b9-ffece8e33c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39df7430-b98c-4c53-b616-ae0ef71b0245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87846008-1379-41fc-8a6a-e984c137b697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd28e85-1035-4793-858c-869908221f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c87b8f1-3b6e-4d8f-8a46-ca71733e1a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e4700a-4bf8-4dac-a607-5d2e7a6947b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a839df-38e1-4dda-b702-20f23fca1d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92949e7f-f495-4698-9d9a-dd4bd64ff415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754e29e1-396f-4b63-9d80-a25628524927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af83842-5c67-4832-bcfc-5a8cdfd0ca5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e835dad7-e0d5-448e-9e0d-1ec77db4bfc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae829df-4756-4f18-996e-65247b7d5655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4149bb-e394-4fdf-96be-074bf2ee122a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e75fc5-d35d-4334-9489-9f95c6673298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dfbf17a-24e5-4c86-9512-137a58b10514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11563bc1-a526-48d6-9bd5-fdccd11a5a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02946dc0-3617-4ae0-940b-2a62ecbe8c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf74125-46bc-4b39-b900-08b81788ead9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482f1c7d-a422-4c78-a673-9fe0803fb552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6adb32ae-fe94-4f8a-93d3-f5c9010f4469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520209a8-e8e2-4881-b6c1-c34264b8d5c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa824d36-b1ba-4859-8c65-9e6bc923dced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea0b81a-2251-4c23-98c4-1f0c320ce9cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f54f93-5631-46ce-b48b-53be6347ae3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828974e8-9aab-40f5-b218-25beb34d0739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c4b9c6-638f-4695-a10b-b46cf75beee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8ff909-3460-47cd-9e7a-30beb3914fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.136.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb470ed5-c06a-47e3-9c47-1571e199ae1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c3527c-0c57-4ed8-897a-8f9274af54ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc1d43b-2d28-4493-aad0-2d4ae8821b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18743c91-90ae-42ab-b5f9-5f7b03057a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb0f700-99e8-41a8-895d-97f121fd2811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094f2995-52d3-4d23-85f7-f40becfa3380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e1d8ac-da9d-4b0b-a961-0d6b91a8315b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde1f791-2a0a-40d0-84ac-23f3d099ee9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5856c028-ad72-4b3d-a844-e10512d48a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0cfcc9-822f-4ee9-906d-0ee2d0d4de82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2217683-25a7-4f88-b8b7-b27e5f3e48c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e146d3d4-1650-44a5-b15c-5d8ca8b77523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b40d302-6202-492d-9f02-7324e7322a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3661a7ba-5e89-4898-ae9a-8e48541e3c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c4362e-8a1f-4b5b-b4d9-cd2cf3e8b419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df7c94e-b872-4b9c-b86d-79271e4d3297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a237fd14-5111-46a0-8aa9-716f4b5402dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e84851-3857-4795-8706-f5407223c32a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd29c91-6806-4a1d-87eb-871256138f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498c5f0d-cb96-4946-9ab8-05632b7e1bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d53fb02-dff9-4d12-9b39-2c750a9a6224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a88eda-731d-4c6d-93b1-9e13384ee919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8189ea3e-b136-4571-99fb-c9de6aa26d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b59cd9-389e-4a4b-9f5c-d8a1d21c642c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e844612-5ee5-478b-98cb-2905761e14f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c2b6be-ad05-4490-b083-b7676a73bdd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01e52c5-fd21-4663-b4b8-d75601af84bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c63b3dd-926f-43c4-9823-102d96ddc67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033c2326-5ef7-459b-834c-fde692af66ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152ba5c9-d7ef-4720-80f6-d4ea57c60eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c06bc5b-2ff7-4c18-99e9-86b6346f785c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab88e68-b455-4da1-85a9-e32b2113883f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4904b811-9a10-469b-bf24-9675f61b5273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312e5b3e-58a0-4282-b34a-0f81848803fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be72fa9c-daf7-4eff-89f9-48d72da2eba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a4f8ce-64da-4c1b-9d90-8c50b3bfcaa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f5f9a3-0b43-4e1b-b727-7f46a8fadb69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262267d8-82cd-402f-8977-509bbe30eb85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871f9b3c-5d56-4920-8517-38060d43957a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd0cf66c-0439-472e-b302-911907bd8ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe38d009-9922-4834-846c-140b3f359e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961606bb-e72d-45d6-ae97-95b6cb6aca84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7306ce8f-a062-4ec1-8f2c-e5d92d2f61e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144e8bc5-514f-49ea-aee2-040214ae251c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2ecac3-405c-4aca-8cb3-da52033a208b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787ee569-c424-49fc-8c1a-f1696df4bdb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe634d6-ff7b-4435-baff-4aac36539be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d60ce0-ab0b-4ff6-b42c-5fb9facc5d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5838d1-e35c-4499-8bdf-f6875f5229c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35c8537-3648-448c-ae8f-0c4a410afea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c38d74a-05b1-4491-8b5f-b794eb5beb92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f163863-335b-4021-9211-7fd83b374c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1826e596-3559-48f2-86dd-ce357a06280b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a4b81a-44bc-4a11-88d3-07992a18116e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6d540c-cbf2-4a19-950c-fab3570c1f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beccfb41-1540-4a10-8b04-888352564f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44dd457f-a782-4604-a4d4-c19ce4531a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf7c014d-0199-424e-944d-72e8d735e474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe134ecf-50ec-44af-8d79-b022e8ac06be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a19111-7ed0-4db4-a0f0-89a6c6051e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ece642-00b5-449f-a45a-cc8c17975ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266f4aca-f7de-477a-bdd4-ce1905eb0c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d88aefa-7dc9-4b80-b05e-d329298cb107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed779e4d-b2e4-4cf0-86e0-50b6ffa1751e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02544515-2617-42ff-b2b2-653f3c933700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe54632-40f4-49f5-bdaa-2fd438e2134e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0894104f-c05d-4044-ad00-835beb868832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7ba998-57db-4f6c-8da1-a2809a74d4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbded124-a72c-4ac4-a177-0fb39d169da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e7bdd0-2167-45c8-a88f-f4bbace7a1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37baa0d-be3f-47a6-bb9d-0e40443089b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8122344e-5abe-4656-aaf2-58e17ed88d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab327130-eff4-4cbd-aff6-5aa9d6c25033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6b0a35-f7b1-4e1e-9cbc-8329825bf904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717bc3f7-8d02-449a-85de-33f4bb0119d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec69102f-920b-4413-ac19-531bb3c1583b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b77f63-811c-4f41-9cf3-60c2586c03b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd5fec8-e7b1-41a4-9aa3-c439ebc4092d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7521fd4-3f3d-497e-b68b-78bb63451a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c39fb11-fa07-4349-9cb5-7988a352818d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9c72f7-ab3d-4eb1-9d08-d966a11305e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0ea68b-fc4d-4a8e-a8ad-4f2463dae7fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112f09f6-edb8-43a5-b2d3-fb5eb0938be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a407fd-9bda-4063-8ba4-1e068bf0e765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8138ba-0a9f-49a7-b669-17a6f534c2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba34ce83-2e0b-4b2a-99d7-479447ed451a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0fe4ba-e307-4e76-983f-6c9bd98df163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c0513d-71a0-403e-88fd-f4f2a7648dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820bda4e-c53a-4710-b3e9-4fc709feefda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedbca55-892d-46b0-9cea-ef210dea1b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b2566e-47da-4b29-9fd8-cd28903141e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e53cff5-dc0d-42ae-98e7-f21e9f8738fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe931c86-8882-4429-bfaf-704973d738b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa07270-7ea7-4684-947d-0f43585c48b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70157c34-9d9e-4159-b540-6e5bcdcd60d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d3b977-1a7a-4fb4-9f48-b07e47594e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc154020-5d13-40a3-a7bc-f770b0812bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6964d148-db7f-46fc-b456-4cc0819c9528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5be259-2281-4b63-9f23-6688d4af56e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112d15f4-a634-4e6a-a424-a4d8a3b51449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0eae3ce-ee80-4034-9324-48946bc66dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b23c6cc-cdd0-45e7-b482-9dbd987a568b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2e9c00-8a16-428a-94bc-5cb3b19f522a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ec9301-8c47-41c9-b135-4539c6039d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3ade7e-82d2-4135-ad73-55ec061f59f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5255241d-a52e-41f6-aef5-864590d0fbe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a995de-83f7-4927-aa3b-a547c476619e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf467269-d624-4384-af90-10e830110bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec9fd6b-1fd7-462a-a5d0-44a62eb67596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3718dd-9d7e-4dbb-b774-a97b2b49ddd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446b4246-b728-40dd-8827-ce51c1307285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab795ca-588f-491d-b068-e65090d3d9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5782101-f882-4d69-b28d-d49d0d6e521c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc701294-55e3-4ef3-a5f1-7b000f8e389f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdc6bae-9401-4fc8-8eda-263f8c1af4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9e28b6-5ec6-4f05-aaad-f41969d5fb24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee85a350-f4f3-454d-99dd-f0680deced38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa8296e-f52b-41da-98c1-3d15abb5aa59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d46954-2df8-49c9-9bb7-52d7fcdaa0d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fff0408-e59f-4bcd-afa8-36cb4860e089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb992639-3b40-4ed5-b1ca-bfc0a771bb49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f85662-3e2a-4784-879c-a1f0a5d389dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598bf969-f3ef-499a-a60d-27a635ca1aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25dad8c3-292a-4ab4-9c5c-63fb46de5a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74599e50-fdff-486a-81f5-fd6b9cd2a419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3972832d-5f5b-424e-bab6-3a703c3827e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4120d5-d04a-400f-b395-c284aaeffe3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62018ad2-386a-4802-8622-9d2a5199381f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40253f7-95b2-4b5d-8339-b720585f44ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7706d62-c09b-4ea4-92e4-36277653e754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40531529-f6e7-4e8e-8002-88f9f6aa4246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e64a9b8-f8fb-4866-b8c3-605ec3d5c56a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90980ee-6c9f-44c9-b75b-452965ed7529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107c7d9a-0d32-4671-98ca-3b2493c24408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a48158ae-8bd9-414a-9c18-c1865ebda7b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9900c069-ad38-4ff3-a13d-ef013e706621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b9e8758-d0dd-4add-8c3c-54d98b15cfc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645c5e43-4b95-4f2e-9c6f-c92230a1e3cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc9de14-d6cd-4d16-88c1-79d5fdac889f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e04abde-9fe1-4a13-b145-67a1b25bc9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82ed710-4b79-42bb-b1b6-a1716dfbed09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e637e668-8b78-4b62-b85a-9fd16d5a70bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b999ece2-9956-40f2-abe5-a87764e60ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6b7637-72ca-4cce-bbe6-0b561635f205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5679c0c-7f09-42eb-ab0a-a13cc8a54106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42d7f68-5810-445f-88b1-1effa3b13ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed55f8f9-a99f-4827-a187-5fbe0bfe4f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7641079a-fc6c-47e1-b9fb-f378392cce1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d517d027-be65-499c-9a11-355004b85ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe8a020-f55f-4436-aa45-edab99c6686b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.33.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a351c0c4-c998-43f5-95c7-fcaa0432d994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.33.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f68d6f-f582-418b-b647-1fb42f918176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba6c3f3-d7f7-4563-bc6e-a0f63e400989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f847f0fc-d1f8-4f18-ba39-d02c26e59530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd59f7b-4b67-499f-8c2d-23518741626a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26f3ceb-7642-4a17-8a90-d506d99ea7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcbac93a-d97a-49ea-a36f-fb9066068be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93a18dd-ac8e-42d5-9aca-038bbe55e314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7ece43-c884-45c8-8848-c5a6a7ad9310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd5cee1-9835-4b31-8bb6-765f80866d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec87c94d-fa1f-4653-8394-4459f7b7b3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d0d0b9-ef0a-4845-97aa-8f9a9d14758e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865a91d3-22f5-43f4-95bb-00e758528bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3075a9b-3c4f-4746-a994-3d8276c5ff72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2b4927-8366-4ba3-9a9b-bf2f5b9d6d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb1f7f4-faa0-4f3f-b2e2-29deb20d5d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767792c5-16c3-470d-8d56-2224933d9f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ed8adb-7488-4b46-b0ba-4190057d407b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14517fee-61da-42af-8e30-3088910c508f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b941f1-af2a-4d68-bfdc-10d4e8535ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b34c89a-fc4e-4211-a2fc-e96d5c548011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9553facc-61ca-4afa-8ae3-19b04c5a6830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c67752-bede-4ee0-8915-b855f52ed21f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfa963c-7ec2-4691-b173-1a3caf811db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e84a1f-aaad-4ec9-8cea-9aafd79dd9be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f92491-9448-4782-8a69-2a3d03f1042e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abaec167-0f14-452e-b232-1bd41d7abd37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beda9b4b-eb4b-4b9d-aec8-46a3469131fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a49d18-fdae-41d1-abbc-97b13d2c1e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8cf0a55-7ba8-4fb9-8d57-e1695832fd52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5147ff-5e90-4c77-b2cc-d11f58d8296f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0840743-c0a1-4bc8-a927-116d901d6616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6b784e-2e64-43bf-8b55-a2324e21331b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.45.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad278cc-7557-4a34-988f-f42d3a741e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d40dbe4-7f39-4b8e-b0ff-f1db5f09f024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c447447-7837-498b-b2f9-413143846043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95998c66-ee88-45b7-8ecb-0ffe32f2657d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdabcd7-0ee7-4374-808f-7fe3472836b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6b91b3-2f2b-4e0a-a6b1-a03fae7e2eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2779c7-9a9e-4f66-bc9c-a83cc9c43ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a7f232-4ae4-49cf-a5d4-c1c6609db61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3adff496-6539-411a-9800-ed3da68c60dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a948038-3342-4508-a6f9-d113dc6b023b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b27f8e-e3c5-463c-b495-b7b8042764d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0535c70e-1e0d-4e42-ba0f-adac0499e140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.188.140.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d96728-a3dc-416c-839c-11d7d0cd982d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.0.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2848e89c-b27c-4f39-89fc-a91778ada50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.119.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0321150f-761d-494c-ac00-c393c25648c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.172.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d8f96d-3a99-416a-8078-b53931252296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.176.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faeab41e-855b-47fb-b617-4e18e20260c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.176.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5a1897-1ce9-447e-8926-c0b370460570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.184.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f833f3c-5f30-4e95-8e13-7addca3ef8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.184.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6a934f-06fd-45a2-8188-a62c93db0aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.248.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de02b305-05e4-49e3-9650-34afdee851b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.47.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e324f79-1e25-4992-87ef-8e04783680f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.57.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62aca7a7-ee14-447f-b592-4b610533ff8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.60.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3635e31-a23c-4fb3-8ecb-8a50574a9322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.76.0']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b8b17e-a5f9-4388-bbb1-18ffcb7da7ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.78.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973d1c22-950e-4f1b-a697-7e534f98ca1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.179.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7686d93-fde3-4694-bd2c-a3e6e386a329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.197.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549477bc-1d8d-4dee-91c2-4916e8380e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.209.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e993fc-b52e-435a-8722-f7abddbfdb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.21.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd510e91-54c9-4b1f-8190-8e50ca24b521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.47.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310d26a5-932e-4134-9e64-98d09e3796aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.55.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22781175-3c65-46a7-b2b8-490713bc4ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.84.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6ed8ab-838e-47a7-8c3a-228c7558342e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.84.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e5122c-a483-4169-bf3c-1d53707a3b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.129.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bdb9cbb-e9ae-4b32-aa28-8fef953b7f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.160.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5127365-8cc2-42c6-bdb0-f6030e717eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.33.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2562dd68-0dec-4478-8357-4ffcd0ad7e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.68.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bddc9582-14ba-43fc-9867-4f2dfc5aa795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.73.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405a41d0-69e8-47e3-bdff-0303d8e2b71a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.176.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae87c7a-dd64-4662-8268-68ff6eacf845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.224.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e31c7a-17f9-49b2-9fb9-436da0d0c29a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.237.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf405cac-a4e2-45bd-afde-8feb922a6bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.148.70.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279acb62-f8d5-4bbd-aae3-f6ea8e928b54", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.62.41.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f29a19-b26d-4375-b7cf-8e6963ac59b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.106.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec574ee-da13-48d0-b6d8-b7ff83c52cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.130.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e82e1c0-83ff-46d0-9b8f-0d9dbfc41b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.139.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56cebc6d-603a-45e5-9095-cdebbb7a9f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.145.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78f92bf-28e9-4454-a58a-dc8c95d58cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.153.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230b1b89-4788-448b-b2fe-fccdaedf018a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.204.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60fc4d69-1cc8-45d6-a8f5-88f67c7fb01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.223.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93409960-3904-4c14-a057-cb4a0f896f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.245.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee75b6c1-b235-4bd3-a8a3-b2ebafbc6935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.254.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458f7683-5606-4dea-adef-37fc548d4376", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.76.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950d9f00-253c-4c30-9702-3cb543c070c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.89.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f89dd8-0da1-44b1-8d5d-89dbace60672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.179.103.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6f0906-de5b-4b01-878c-1da05f3549f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.233.25.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76ef397-7e65-4a3c-91d4-619b782b14b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.58.249.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4db11a-433a-4f24-b6f5-b6fe60a523f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.132.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40cca623-8902-4988-8809-c02b1d4188df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.21.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727cc58a-7dae-4116-ac1d-25c2f61ffe0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.22.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9b6a34-3cb0-49ee-8862-7ff700dc95cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.239.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b918e328-eaa5-485e-b65c-2fe30effa52b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.254.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba90149d-664a-42d0-8b16-09e29d42f318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.5.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e482cd-6ca3-45d1-ad9a-125eae56842b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.95.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5946d4-ccab-4af6-9695-f52fb3e15386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.89.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07dc4c44-7d79-4676-a945-2b430d5c6ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.165.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8dbed3b-0990-4bc0-993d-065cca6c03b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.165.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6f56a9-174c-4a7f-9c6d-c686d0c572a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.171.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241900e0-0824-439d-9d4c-82250e3c9fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55e17c0-270f-41d7-95a7-bc67e53d8f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ca3c89-e512-43f8-a992-ffbbe2d21b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02796c4c-cae5-4907-9949-e2dc53531bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b034d23f-d5d0-4ffc-bac5-cbccef4fb7e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8feed0-e602-4372-858b-2fe52f0bc897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff964ec9-b966-42d4-8ff0-a638db6554ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae20c9b-ddbd-4f26-ae72-923d2b618678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2326a86b-a7cf-439d-9820-5783dc4c5144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5629610-7ce4-46eb-ac0a-7374f0dd74a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c592fe-e662-4800-9208-cae4962247ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9457365-7418-428c-8bc1-e5a2ff8ae67e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4af7e8-aacf-4a47-80d4-626cc03cd351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5520c87-a22b-414e-8c40-a891dae2ec36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2d679c-49fe-4ba0-8705-527600c86538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f3bfd6-7766-4f16-b6ae-79a5daff5bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd0b106-0720-4cda-a73a-07fe68c5efc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca250fe-8868-47d3-b1a8-294a9af89b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98fb992-e877-407c-b0d3-3ebda8ca4f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f63657d-4b85-42a3-8ce3-169b9b784e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1338a55-7b98-413c-b8e0-0ca6131647bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f01897b-0d25-42cb-97ee-72b718051aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57fbccc-76cf-4f5a-8f07-9412891dafce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657149aa-25f0-4623-b7e3-ca2e4fb713dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ba67e4-bf0c-457c-a33a-1e8213b07014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89dbc84-1db3-4462-a210-524002af3965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f0f06f-eb71-43f5-bbea-a630ad881740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911253a4-880d-4d59-9383-c4b3d2adeded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d84999d-cffa-4e54-9225-8a2b6a466997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1654863d-cbf3-4e39-bbf8-815b799a643a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f7a5a2-3b69-418c-bd8e-0b2d7ad349e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abfcd762-0609-4c8b-96b3-46f841480ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f68a48a-9efb-4e32-a01d-b97ddd6a4869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf7ac76e-2628-45c9-882b-f48c8633f6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0501d8-4cde-41ec-ab37-7ffbf8128fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351a1d15-cac9-4796-ba5c-2db3b9fca361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f216e224-f7b4-4280-8fa3-a022afaa2673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57e7114-45fd-480c-8fa1-e9eb7cd59923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3c1ca0-29c0-4f5d-907f-3fd2f2c311b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65820731-332c-4f83-b302-49184fe8d172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136c967f-ff66-45d9-806c-3f63abe98205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1430add4-14c1-4858-8942-0065801276c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a498240-b6d6-4fff-ae91-bd6bdb15a54d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34165d76-d340-459b-9099-9ca3c47be911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956c7fee-96ae-445a-91ef-281649192887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c686e6-1c83-4183-8c17-e0912c26d755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8bfa09a-2f59-4b3e-b4fd-bcf656dc98c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531cf591-ed3d-4b3c-8eb9-fc57958c61b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e357c852-e4e4-4fe7-9812-faaa4414e33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07fce67-cccf-4e7e-9a91-69f4ecffe9af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61dc078a-1758-43d1-84d2-4bd561dc4d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649d5520-ddc8-4e2b-bb2e-70ba32d4a0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea98652b-7a11-418e-ac18-640444271854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35021cf9-ae3a-4458-ac81-b6fd1f1687e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a10e11cf-f8b8-4587-afb1-d85809cc3d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37337f9b-6dde-4250-a7bf-08c16c564541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad057276-0e39-4b01-b4d6-6731ccc87bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd443b18-8acd-47b3-8d5a-cffea57037ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad234997-416b-4fb1-88b7-ef950ec49ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.109.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ceaa95-44b2-44ef-aee3-791dc344d7ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.110.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7896de1b-e0a0-485a-91aa-86d22e85e391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.179.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdab0bc8-1337-445b-baac-aa26b159a2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.188.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafc3386-7a3b-4337-9f38-25e9f42e8b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.2.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173a6eb7-102e-4c85-9cea-29d5c4d03084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.2.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334661bb-9879-48a9-86a7-2953ae129eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.2.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb31c45-d792-4ae2-af08-860a460f6104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.201.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880cc01f-8b67-43b1-abd1-583c8179b13d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.225.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6776e35-ed7b-4fac-9646-03c79835012d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.226.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4b1e73-5ba8-4bf9-b3ff-b72d9cfb693a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.233.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b85ee3b-4f79-4691-96ea-7360dd7e2992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.239.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b972ef9-5c49-4569-bede-45d7a2992488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.8.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baafdf53-0e4b-408a-8677-6578737148d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6bc011-f1dc-4a60-a81d-908150c8a1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.232.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5eb60fc-c5eb-43f7-b8d6-b8821f43cf0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.146.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7dfd555-acfd-4759-84d6-1b70202bf52f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.95.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9972121e-b073-4216-85de-7dcbf41544f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.95.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8201e770-d1c6-4daf-9818-f5d9bfcfc277", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.167.228.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ad7839-89b3-44b3-a306-132802a7a889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ccacd8-cce9-4a87-936c-a989a197066e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.197.250.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3aabfae-e5af-4045-9b38-5097587923e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.255.161.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d958d84-bd40-4b02-82f8-de9a21d2f189", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.113.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a9257f-a783-411e-b34e-7c24cb609793", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.148.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73169ce6-bcc7-4baf-ae1b-ee7b7ac4567e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.160.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c489e9ad-e00f-4b8b-9a14-646e59debfde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.37.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e18076-4269-4c24-bea7-a9923110fdae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a9041d-f56c-4234-9cf7-b3dc12a34a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d95a0799-bca8-445b-aada-f07437a9c445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea226b53-dad0-49fa-8c40-4326cfa3c77c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfe02e0-68cf-42c2-bca6-575759c82ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a589e2a-2655-487f-8132-c355d7f0e966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebb9fe9-0616-4fa0-846b-e8ce2750effc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c6b287-c769-43df-b577-0eb048d6a818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18887ba-6c9d-4033-ae9c-a66e703e8403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.247.241.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4d9d4f-203c-4d59-9519-85d32ee66ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.167.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044ce97f-b8ac-45fe-9b6c-02b1158df97e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.173.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd8bd8f-e58c-4ece-9714-7689e63782a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.177.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33238350-e5cf-4752-bbaa-57141d5a96d1", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.9.225.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62181abb-37f8-4913-86b2-5e68a75e4b99", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.228.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882c5c4e-7525-4d6b-9d37-d925463bc33d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.117.8.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d6400d-6902-4f7b-afe8-f139909d093c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.12.10.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3762907c-9ffa-4e7f-aa9b-8491bcae9d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.120.30.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f9b1cd-8d6d-41ca-993c-a7e7c55f5f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.211.125.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a12b29-c82b-480a-beec-795ae60e56f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.221.207.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a284b1-b6fd-4327-8050-d97de1851ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.197.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e47b6f-a9ab-4a9f-856b-1c5b92032cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.197.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba25ead-71eb-481a-9c0a-e9a613ccbfad", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.141.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d042c27b-2875-418b-bffb-224623040d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.201.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4a5457-2845-4146-9c95-bbe2879e75b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.35.134.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d93aced-2daa-4e86-ad44-ad5726d478b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.80.9.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5e2f7d-2587-4ef0-bf01-ccc3ef133a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.100.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be2cc5b-b162-43f0-96b2-ee5ba50f7d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.105.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df7f8c0-8d1f-4aac-94d2-53e8c8f3c89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bd6ae5-7298-4ade-850a-e74746379f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0d19f4-874a-4e2c-8cab-d888baa731d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84775b0f-dce8-40ca-9e5c-71e225192e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.13.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a62bc02-3f08-40d5-82ef-3950ab4a8dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38259894-90ca-43cc-aedd-0896013f9a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6181409b-84e2-4597-ae7a-2a6d3e431b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9489bf2e-642d-4c6e-a102-3098ba6144a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9aceb1-d517-45a3-9b46-eaeedf7b1901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6958d527-aa04-4ac9-b2c2-c54a17b1dc93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1c85f3-ea7b-4920-bbe8-8f82ab6b44f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8baacb5-506e-4b00-a6e6-f3b8e7bd7120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4926f1ac-1e4c-4c38-aa62-78337acd890f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf6cea2-179c-4b42-93f0-ec2145e43ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f523fa93-7602-48a1-80de-8d0f73326af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5433f0d3-4a40-40bd-ab36-d60bb27b032c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54093a0-3465-4b3f-80d2-a4fe1148a1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef862640-6fc7-442d-9f79-11c03bda2c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4daede-54f5-4755-92fa-27d1066a1898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9aaf3f0-da4f-4537-a079-253bfca56fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3142c92-4f91-4860-8d6c-4410b4d745bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0c1347-4b4d-4a39-a72e-d0fc3cb4a096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577236b4-6576-4355-9dfe-83b02ff7f07f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07c4f35-df6b-4a35-bfc3-214dcd90a85c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.209.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3478ca-f04f-404b-ac4b-774035409794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.209.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4043c9e7-ceef-49ba-b425-04e51e2d0c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.209.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f323e83-a4bd-4bf5-8b5c-51fc67608776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce7b4b0-e7b4-41d6-91c6-0166b4b81b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.93.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b6b39f-3c5a-4a41-aa1a-8d633ca0cc81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67819122-bc98-4393-abe1-823bb82de29c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca6065c-098b-4321-86c5-66805279bac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.197.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7deb39-6d7c-4af7-afe2-8304b97d6f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.218.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27ea846-2ce6-4ca6-ace0-89cc57cd488a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.219.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29fee7e7-74c2-45e2-9d83-431a458d3169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.221.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0b1a81-b84c-482a-a4b1-f3630a5e050a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3328a3-5e09-40ad-8c9e-0cd6d9737aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afee74ce-be4c-4fd9-a8b7-113d27c668bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096094e7-8f5f-4053-9a0c-b43988f49279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4513ee4d-3934-4cf9-b083-63a90e44864c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0942e6-a34e-47f0-9f03-bc95cf987b5f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47447f8-5fe0-4d76-a27c-0acca48672ed", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a38b89-bd4c-4375-9c2c-e3d23d31f962", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bad3f04-b3bf-4df5-94dc-21270bc53a04", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb83743-7055-4bd4-b0d2-4f3e1b8dbe74", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f9851f-d0b9-48e2-a9e3-208640854526", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.173.200.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037215a9-7880-4bf4-ad54-3cd3dae3fbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.236.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1046399-666a-4209-9f23-d925cccfac65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.244.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81c914a-b321-43b5-bef5-3baa4f577852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.250.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0057b5-8381-4b19-84d2-0d1c5c357b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f336f209-4fc1-4ca9-b399-93df82175659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6813704a-5779-48bc-b4db-fb96c89f6d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db42c39-69c2-4a9e-a4a7-023223074980", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.185.24.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860fef79-4d2a-4144-827c-2bacbf4febee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.191.171.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934f2e21-b1a8-4b88-8542-bff507d01024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d001466d-1f18-40f3-8bea-ffbdffb2ab36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab11ff1c-80bd-4328-9580-c0ccc05f8660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.105.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25369246-e996-472f-a449-ce3890f068a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a64b9a1-3f66-45ec-9a23-38619de8b834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.114.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39725a64-245f-4a0a-90b7-3e2b9c3672fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713e1ea6-743d-4592-ac35-ffb3083ed5fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca0d1b6-435c-4f0b-a1be-79689e5d3cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbde302b-6af4-4471-bee3-d77711b4da7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199c91cb-fbf4-4c37-a18f-48e39abc1671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f6c07b-3868-4173-b1c0-1d22372c91c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388e2671-668e-400e-8db8-5e42c5c09935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ff001c-e838-4486-984f-0289420608b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71dd7d0-ee1e-4323-bff6-c5e0acd0bf38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299772f9-2c6d-48d2-88d5-e79a6538a8b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c4281b-9514-463b-a0ac-fa7640e709b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529affff-8b6b-43e9-a446-f6509af932ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de4c039-99fb-4ac3-8d2f-796f6ed68a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd25bd98-67b1-4b89-a45a-267db0a0ba06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164a9829-05f8-4103-abd7-15cb5f3ef562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9ec874-3580-4a73-a907-7584c2de010a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fddcc5e-718b-4e3d-8f28-2e722dd62adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.122.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60870f7e-f2e0-462f-88aa-313a379a0351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.225.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686f1176-1d51-4a95-88ea-87d4b3b9f90b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb30a863-43cc-4233-a824-9313cb227c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291caaba-de0c-4e80-a285-a5b8a1a2ef75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0d1b6b-6455-45d3-819f-3a4e81cd5ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.224.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816c2e77-2f62-4714-8621-50e9e87a88cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.225.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1437bf51-ca35-404e-8080-6fc2bc15f61d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.225.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe5bfa8-1a03-465f-ad6c-f1ba37df8793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.226.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f44c5a-e484-4a80-ab29-a29eabe39596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.24.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7b02a5-b831-4a93-93e4-9e0c65a74d52", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.48.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6cde08c-b263-44e3-82d2-8de1b1ac20ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b178e4-1e8f-45b4-a929-23135649eb3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.106.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a3ef9c-0881-4c2e-82cd-9e25b4e77f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2988621e-7cfd-46f2-9dc5-bfdd393422a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79838fbc-b847-4a33-b37a-38478b5a9046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.201.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b26f643-54aa-4fd6-89b2-3c79e6f1cdc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.224.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10002d3e-7b8f-4dcd-8f72-1b52d51533ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ad6740-beac-4b0f-a948-6234b7337b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d05904-4bd2-44de-b740-486bcc0bba26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07b12a1-93c0-4b08-b372-bc081197fec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c514eeea-4945-4676-9794-56da8d71d40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108a90c9-be3c-40ed-8bda-c83e54008e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3264b8-83d4-4917-b1b0-dd147288ac4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca78493d-157e-4b64-bbf0-f3064f56139f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec93574-615a-4d19-a21e-fb61e5687a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d118817b-321a-4d54-8f37-7b363d34c4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4822dd64-6d98-4faa-bd48-5abd7002913f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148bd75c-ff52-4d7c-90fc-286d10b30e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc855d39-b50e-4324-b917-0c4d88580a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d55b192-7a5e-4930-a234-c3305e758260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb24c95e-57e3-4dfc-8c79-da2c2e69e061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.217.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a3bec2-f453-43a4-bc9d-328188c1e680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5983431a-1f88-4e6a-941a-9ebed6362146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3186e1b4-8f25-4e4b-bb08-7e66654f855c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07df1e7-54b0-414b-89b5-5bff7211c74d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c088f68-65e7-4e07-b984-793f734a4f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc84bd9-5b19-414a-9209-2fab8dd6a914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4c0bc0-0eb8-4639-b78c-9815ec58c246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d305c4-06a2-4acc-a882-6657b3e16079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8452d0-984d-4e3a-887f-b717dccd11e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35177333-d5bb-4dbd-9992-eab4ddd9e9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5921647d-117d-4309-ab24-27db87c24e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.240.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a49f4a0-7666-45d2-95c5-2abfaabc4cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.40.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9eef14a-0d9c-4b70-b92e-9a1ccba3df33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197f8c1a-bd37-4883-bfae-6241e423381c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c138e0c8-d11f-478c-a279-dfd2ede3e46c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5caed475-7d2a-4762-8e2b-9b718905e24b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4833f5e2-b4d1-471c-afc3-2a9dc4fce07d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67236a86-7d65-493a-bf5d-121653e07bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314ccf59-3db0-4ee8-bd78-24b0ccc29275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c0f2f6-0e3f-4790-9c30-d131abcd7af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.119.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0881201-b156-4d4d-bc4f-f4aa373b79e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c198f584-17b3-43c7-ae76-a8ab22c0a520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69806eb-e4a5-4c44-8f89-07938d29d722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e54397d-8d74-41b6-8196-7942512fbfc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.127.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8009b908-f1f4-484f-9057-fc03c1f0bac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d2e4da-d7c3-4bd2-9ab3-d86d4d65e9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674bcdd7-4868-413b-95b8-c1baa68b4820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61f0f05-4dae-4d80-9550-71b162afe4d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7caaef8-17ac-4699-a84b-5cf85f1e237d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528b2b2f-cc9c-4066-938a-453a23e7b8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487aedf7-063b-48d9-af2d-0a7e879ea86c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fd3c71-a236-4dcb-aacd-bbc2248cca09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd68a694-f630-4b32-bb48-64257cc69af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8108c6a-f488-42b3-848d-0ec08c022ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03605ab9-6d73-4a0e-8e08-b718e18bd5a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18e075a-92d1-48cc-a733-acfb4337d693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d3c519-a282-40da-a474-fe1a4b1d8215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5f55df-8e77-4499-9030-de4e591f228e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33eadbfa-d707-4731-a33f-f7c9a932e807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672db1f6-df38-477b-a956-584edf47389b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ebb799c-bba0-4995-ab6e-9ece128c834b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f73f99-4e28-4948-880d-ffd76ce95628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a454ee-cacb-42db-aa83-1e9f300e9f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e37a3fa-1849-415c-8ed6-e44df4533e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40af70f5-81b4-4fcf-84ae-0fe279c87a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26e12b7-e045-45cf-8f5b-222ba64444b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5256dfa-afca-4653-a169-c99c42f6044a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4bd605-7916-49d3-b36b-04dae18436fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7db2ec2-e7ac-45a6-ab55-333fd692ae0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd928237-56c7-4b4d-9a33-05052c279b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.64.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed201e6-85f7-4d48-be35-faceccb6bfec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.64.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11b567d-af52-4474-ace6-0e2feeb98130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.71.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af252e3-1bef-4076-b204-b0b8830d3043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.106.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc9608d-71c3-4cbe-a305-9d8e8d62406a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484f6550-1ca8-4d9c-ae3b-1972ea45a059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.16.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7510215-8d9e-495e-b5e4-20fa7eb0e90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.225.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e2ea2a-5b86-4e57-b8b0-5a7235ae094e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.89.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b817fe0c-d594-46bb-b8d6-7e6f2f532de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.247.32.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05492632-a249-4d8b-a8bd-03f9dbe85f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.26.242.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acce7796-b655-486e-90f9-a0f0228f5736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.64.192.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb61b463-f222-4ca1-a150-44d76b39dd46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.68.229.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055b4de4-7b50-4b02-8d19-908a2b1fb00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.68.229.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c948b8f2-54b8-453d-82af-6f835e6ad395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.69.224.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028b0f4b-b435-4849-a271-f0c060be5388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.70.162.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b428b6c-3e69-4772-b2db-dda8a62d6b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.71.241.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6100e2b-36f3-4b88-b35a-3c48dcd5c75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.102.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cf8e4c-231b-4968-b26d-91fd90d3da3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.103.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0292ad-c337-49d2-b9f3-a8c630fceef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0974e8b3-427e-4cc9-8820-ea9ca95cd35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2cff4a-eda0-488e-a8ca-a997e27093a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa93a21a-ea8f-47b1-b2a5-a05962f6ab79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25764a31-c966-41a9-814e-97e17d0e4af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc51811f-cf9d-49b2-9680-6f6eed7cc261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca799f5-1309-4f62-8634-d2276a354197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66fe2e03-9253-44ff-afd2-7c5f2f567034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--704a9300-f7a5-4fb7-b5f9-2278bcf76bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6adf3cce-deb3-43d2-8c43-348c6222cb66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6942f65-2d56-4104-a2df-cbeeff1519cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0586c4-dec9-4e47-9a6f-aababcaa32a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcabcab6-bc4e-4910-97b5-82924ab6283f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da4a83c-7901-45dd-9aa4-84d3305b18d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.96.172.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f74890f4-99d9-4124-b34f-543e8bd568c7", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.197.14.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671c7e45-99c4-4c80-8005-467b8c4223f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052a7818-6a40-4334-bc2e-bbd62614f5fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.70.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff4b0ac-43da-4503-b5ba-7e6d6d490edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.92.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93409e0-a201-4d49-a26b-71d32381b857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.213.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8067cee3-f5ff-4cb8-8456-b40f669bce74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d102188-0fa6-4db5-930a-5f1173ee2326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.240.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9a9b0b-d0b3-4f99-bf3f-c81d9124174e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.243.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee6c182-2d2a-414d-bcdd-ce07d10da37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ab69a7-1097-48e3-b7cb-66754c70999c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.155.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61cba58-72fa-4a6f-a8b7-21404a37374b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.236.82.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842fa80c-5195-496f-ac2b-37b1c157a5bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.217.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e406a34-775e-480a-8b1b-6a9620eff8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.192.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc60d77-e15b-4bb9-89b0-b8672212e2fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f46375-d424-4217-9876-2e54cf911683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.212.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d5043b-d317-4a01-81a1-3d8243702619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc05f90d-236d-4b1b-84bf-0f9cff1964b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35e313b-a219-49f8-8fea-10c1235abc00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0460bd0-7a82-45f9-9a40-942788fa1ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e02a31-fbf5-497e-844a-d596ec836dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8902d236-2a7c-46e7-8e88-5b743733c995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668d9ea5-807b-4113-9a42-ded4b095a270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e894594-19fb-4dc1-a9d3-4fb4bcffa59d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbbfe5b-c586-4b6a-88d2-ff8a1c0b9493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125b07d1-435e-4c2c-b056-a08c0dbbc97d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8cd9555-2ce5-4ef4-9622-94d8580dc10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e04c2e4-a1b6-4331-b4a9-c19a3b641cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5debc57-e6fd-4fb4-8984-0307bb1dcf34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.226.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b8ced4-0dc9-455d-9ec3-a00379a982fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.227.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338ecf91-f6aa-4fbc-96da-1845346dbed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.230.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a24c0a-441e-45fa-be4f-aabbef2175bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.233.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9651fd24-a815-462d-9009-e82748c739e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.237.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e59c5d6-61ac-4cf3-84c6-15d8eb65e4ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377532c2-afa8-4438-8d7f-e25bd55ac176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2be2f3a-6776-4ee3-a94f-64e8bb07cd89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.247.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c3ad00-0dcf-480f-83a7-2be16690f01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.44.62.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b3d731-a16e-4a92-9d07-11c3502059e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.40.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a530e05-881e-4311-9179-585b65d1232d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.44.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a0ebdf-4151-47ba-be0e-b2303a5943e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbe7083-1ed7-468a-a418-33eec036dd29", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.10.74.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f7a886-80fe-489a-baef-ab2300dfe089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.196.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba60702b-b12b-41b1-b7af-bade1aea1fa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.228.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b87af5-8353-4ab5-b2f0-d8d45d245880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.237.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0d8eab-680c-48ba-a9a7-322e5f56cb0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.192.243.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ef190e-0d93-4676-a878-400ef6a26889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.202.18.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c6272e-1e21-4928-84c7-585933b0c250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.203.61.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a71c07-2ac0-4420-80a0-7d069ab7501a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.209.246.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864a69a3-6055-46d0-a5ed-9e45b642cd84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71cef75-7e08-48b2-aba0-033ade08c257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d1d031-3218-45b8-8502-87aefeb9f95e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c0baec-814c-4541-8bba-1a7dc036ee88", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.109.97.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5827af-f97f-4c0f-ba2d-79b87a45c99e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0041ecfe-bd40-44f1-99f6-a867f221335e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e494f59-8c65-472e-a0fc-612a9f6aae6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.2.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c15caf-b75e-40a7-85b8-ea89337de38e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.195.117.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f60afb5-6474-4c40-b6a2-bcc6e4a04a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.205.85.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c334bd-9ed2-4b3b-ac3b-f6755ab9cc2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954e717a-4167-4366-adbd-2e89ec693594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.39.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc183784-a0e4-4f43-b8fd-ea8f8dc03f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c95e355-313a-4d4e-8e01-a7eaed3ab4fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1b6827-9f7b-4f28-9517-14aa042ccaad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd31ebe-2ccc-44ca-9e32-fb267d842e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bb9f78-53e8-4b65-be6c-cda293f43b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf4d333-4e46-4503-8fdd-c204ae971ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3b5e32-bb01-4e03-9beb-95c417c158b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eeae703-3eda-4ddc-9b97-11cbbcc0f016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87e29ac-a53c-42a4-a8bc-b637fa132755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f0f620-550b-4f67-8035-bab971b9141d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1572fe6-fc21-4e2b-9d31-1ae99972f347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a535cba-7834-4154-b3d5-ad468ce0ba27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8892ee20-86cb-4f7e-87c4-af3b26d1d394", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb374e0-a879-4ffd-9c0a-23010e0a3cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e00d9c-f07b-4498-937e-3c0ef82cd990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670bc9e3-9ce9-41ab-a1a5-fb21a094f06b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--050c81c6-5312-4ec9-b967-517a56df1b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55f0fbb-fe9a-41c5-8dfa-eafde0599178", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d96533b-4a40-4ad3-add7-0d5f716f73ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d52e638-5297-49bf-8711-ca342abd1169", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c79f04b5-7cc9-4c21-b780-0dbcb807a213", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50d29db-221a-4979-8e21-4656a2ade442", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495186ce-f578-42c9-9854-ffa8e6d8b046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80556c90-da12-42c1-ad7d-7d448b4ef085", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b426d28f-06e9-4005-9408-cbb230242fda", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ebdf4c-6c4a-448d-a987-3352deb1abfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e86ff00-d21f-4ae1-8151-d33af1a85094", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ca4549-a960-4c27-bc05-06cee1a6ca2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5be9d38-4b89-4ec8-9637-091412eee562", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa8d5ea-7920-4c2f-b5ad-66b18684e3a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08f8d95-cd70-46c4-aff0-e2702387b4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.144.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a126538-e6e0-43e2-9e01-4d4c3fc8eb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d24c361-46e1-4071-b1f1-5db8354f0780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8f1630-9c6b-4fe2-adbe-e4bd17227673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40357ec6-60d7-4ff3-b262-e30fad9b72fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b949d978-93c1-40ad-b9b4-421331fb95d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7fb3dd-85a9-4aa7-871d-4b24cc367ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304a55ca-6c99-4b12-aba7-69d8ece4acea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5e7144-8821-4bbe-8c93-e702eec0da9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c006c726-bc16-4a87-86c7-1cd7e965b176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6ff8c3-019f-43f4-8fbe-40b53f7c93b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c956417-66c6-46ad-b03e-2f080335efd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8039b99c-2d12-4c71-a4f2-60de5338c2f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7762fa7d-2f8f-47c7-8346-c2cd1e6c706c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708722eb-5077-4c3b-8114-1c9a3c930b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc5295d-77f4-4d0e-b763-4d52f0677f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27298a2-cad9-4adf-bd5a-ffc376414a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb98c9cd-81f5-4fc0-b61a-defb2aad9ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953360d8-09a0-432b-94f4-590c0e59f553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f26a9316-9eca-4f1a-bba0-6c4766167da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a13933-3e82-45a3-a253-d9a6f3585df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbd486a-3ead-4b4b-9a4c-5ec5558674df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d6d61a-a646-430b-83d6-914578a18318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf577016-3676-4673-8360-41d1114ebeef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3633788b-5a05-4608-b1fb-6c3f0b0d18b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8272b6f-bcb2-43f3-b173-9f27714ff53c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63c5c49-db4d-4e76-bc19-2d2cc41f5b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2465fe19-3ef3-4ab7-a0b9-ce2235fb7ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb31195-705f-47d1-83b0-dbd4d4ee5b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.91.64.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22023531-f8a7-4e00-a22e-65eae63f9478", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.10.108.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a986d51-c830-49f5-9749-184718c32626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.124.88.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e01e0c-6538-4aaa-9b74-67351953e512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.128.7.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbde248b-bf3a-4ae7-8a64-59e44e2553a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.172.66.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b20edee-c408-4c36-a41b-0382b1aecc05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.185.93.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45ec42d-62d1-4bae-b4bf-441894567438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.22.126.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361f2749-6e04-4850-bb36-89888bc0e537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.22.44.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68eeb65-39af-478b-ad26-b82ceaabeba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.54.159.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede07fdc-b2d7-4844-a75a-2cc36af33ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.84.111.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487332d4-07ca-4aec-a151-7753eacd5bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.144.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2bac53-5082-43bf-8833-cfad5f2c4300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.221.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff86539-b9b7-4728-939f-a285a59c2071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.126.243.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18c05b7-6b8d-4c76-8aa5-131c0188500d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.155.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c7c33c-7372-445d-9d33-568f3151372b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.227.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45d3822-36ca-4004-be00-83b2cae05201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.227.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126a4615-f2cd-43a5-9476-a5a1ea520805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.228.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f41ec95-baad-444f-8f46-c533c1fcf6f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.84.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4edf91a8-d87c-4f2b-9ff7-6db42a792174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.95.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d100ebda-1460-46ef-85ad-e6088ecd91bc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4c02d1-9a05-47da-8b55-0fa8fd88a01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.54.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b81c5e-852c-4cc4-ad0b-bb54b9ce4670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f946df23-ad45-4192-873c-20a6308346fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89aef7a8-fb01-4ebe-b49f-94ef5bdc5731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.176.78.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cbaad29-1aae-4629-8236-178998e93134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.185.129.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad2b426-1479-40eb-a8f7-dfaa833fffb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560e0ea9-3bfb-4fe5-86d7-4403a23780b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc58b7cf-589c-4ba9-8c47-5e3fffe88d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dbd4fbd-bd38-48c5-bd62-fff3b61124be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.245.199.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99e1ad9-54eb-4420-a3a6-8dc584a0da2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.44.173.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5740589-407e-4cdf-be5f-91de13d3ac9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.216.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20dc781-6326-4d96-8e82-1494e6565eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.217.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc8a0471-bd5f-4fde-acef-a6f7640c0f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.39.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f817b9-0661-40da-a6b1-9ebddcf7bb31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.88.64.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f44cde-ee0e-484f-a3a7-7a8cef0cb4d7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.105.131.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d790c746-c5c0-4249-b71b-2b864fddf3e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.127.154.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca077f96-1d60-43c2-8454-ef1f0c6e82ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.32.58.255']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9218e228-e0ad-48db-baca-01df8745750c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.146.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0576fb3-f1ea-42f7-84e5-61e1407868fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.163.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c0c6d9-7d2a-4f45-8f72-c7d1cae9e37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.168.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17996a3-0deb-4cdb-9e61-20e6062d4254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.182.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a785e18-31f9-4806-854f-8a5f501a25a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.137.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6cab8e2-3c9c-403e-b54b-00d4c75aa7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b2fa9a-d520-48af-ae12-cdb970958769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4443db08-269a-4ad3-8055-5a98d3a977f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.133.212.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8a249e-5bae-4939-b12d-3a9efb5b80de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.135.40.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def1195a-7a77-4ef3-9a4f-e549464341c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.143.235.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2258aa1-578e-46ee-9d09-62a327c2cecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.156.243.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a102ad20-f8d2-4ce6-b8ea-1326f94c2de4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.194.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b67436c-c983-4a61-90ea-97ef74d10854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283296d5-89ee-4894-8db9-d4e759144e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c70840-be27-4054-8454-284a75649b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.191.102.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c94f6d5-97b1-41bb-8608-8bb086d4627f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.191.175.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e89079b-0992-441f-b6f4-0b8fdd4d7a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.191.243.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6034c240-2369-48a3-b458-e30bd9694aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.191.246.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abdb463-6034-4164-8727-8456f0c7f368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.191.247.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da29c36-35d4-49f7-a94b-a128dd224835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.204.217.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edee2822-cc28-4ba8-8d3e-c41abdf538d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.212.169.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c95d0c-c6c6-4161-9665-36006d0df09e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.212.56.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff16123-ecbe-4b57-9d25-d3c78829e580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.144.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc31481e-2073-45c8-9e60-73e7d79f3e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.169.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a22a07e-a027-456d-a63b-dd3e8c64318f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.234.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41bc3c9a-b79a-4dc1-a236-c5f09bf2e03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.216.150.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054c65bb-027d-4af8-aff8-f312e3f14ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.187.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440d7d1d-7f88-4d11-b0db-644dac6fb4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381c03fc-db83-429f-9ae8-6c7ee8a043be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.213.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4ba3e5-ffb3-4d72-921b-0356b214137c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441932b2-8176-4598-b29b-9bcd633dae4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.222.144.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abb107f-f550-4753-8779-fa7a9c77a1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.223.134.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e446adf-83eb-4ccf-b2b2-8df27c097e1e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.224.14.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05772613-09f5-4dc4-bac4-bde3cb41789e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.224.39.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4bb817b-3df0-468b-afaf-2b923e5b9eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.226.84.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f71595d-ff78-47a0-b777-b9e6d65a6c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.234.191.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47102932-b02b-4be1-a2f6-f9a19bab331b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.26.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b299e035-cbcb-498d-a9cb-76d5084193b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.141.211.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eae45ed-6b03-4c1b-a922-6e1c789612d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.148.27.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a133671e-7a7b-44f6-a8c0-2d38cb20a00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.125.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7634a37-7eff-4dca-b6ad-bf7a6c14fc6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.126.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f53631-5798-471c-ba32-27989f3df5e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b63257-4fe6-481c-a968-3ff28df26622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6028b2e4-60dc-4837-81f5-27b93b75df7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.182.234.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aedf474-76bc-4bc4-a445-127cfb9fff4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.182.234.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f0615c-289a-4503-8fb1-f4c6d1987882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.139.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef05b02-3dc7-4b7d-99bd-96f0efc2c63b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.176.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a354d453-b0bd-4fbd-97f0-5f77ab2aab0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.2.135.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e4290c-ed3a-4854-9491-8f425739784f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.210.128.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286e4659-1b08-43a9-ae88-637f12f4df4e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.213.44.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b56d5b-25c7-4e73-a6da-e7e2a7bd4355", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.216.244.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38be212-2b7e-4da9-9a8c-2e9962cacb44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.243.57.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f00edeb-9eed-45f9-a4c6-7b97e40478c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.246.177.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--001dfb45-96bd-4612-a945-c50085617f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.143.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d40081-5792-4209-b65e-3e69d5374b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.176.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf71b96-f39e-4e44-b8fe-6351a81f65a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.138.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2666e215-cf79-4cdd-84d3-e87ec2729cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.32.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21262431-12ef-4eca-9078-a3226ad5c270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.238.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f82dd6-c275-4d98-8d11-fe7eb7dc2928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.231.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f3e700-6608-417d-bbb7-769aa94a4be8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.188.148.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9492fa-464a-42a5-9afd-26721ef6b1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.87.150.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e1ef9d-46b4-4416-8421-cc3454d2c1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.228.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0feab117-4f87-49d3-9f09-e4bb204fe4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.127.113.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649aee13-61b3-4100-858f-9bdd960d25f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3718aec8-0eb0-4880-aa66-db3e7115f9c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.16.3.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119bfc1f-8ac2-45c5-ae2b-f4aeadddba42", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.190.222.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd77e85-655d-4f2d-8a0d-4ed595adf353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.208.28.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd78ed5-79b6-4005-b150-9796554ad58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.54.23.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b574818-4f10-46f4-a396-d457ae7ab88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.54.23.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738c3560-5e0c-4b9b-b740-47bec9ed6475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.54.23.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b73b436-78e6-47d1-bd3b-5786445d3d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.70.138.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8668816-63c2-4aeb-a74c-9c2f45cc4ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.85.117.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e577df2-3821-4040-83b0-01d6bb76823d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.88.190.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e3cfc5-d22b-42b5-971d-2947c2f08280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.92.202.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70453a2c-bde6-4412-ba15-c09ee67a190f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.95.33.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fac8506-0fe2-4b12-b20e-460a899ed4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.158.251.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56202d9b-b1ec-4d67-aee9-f4bd9fd35f81", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.165.212.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84f1329-5c0b-46ca-8472-36aa3c73ae74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.221.20.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba46229-247b-476e-8096-20796365e3c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.241.54.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df66658-3bdc-4744-b2b4-bf07fb906246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.249.114.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5f2226-0e3b-4209-af3a-fffa08afc00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1ccc83-a66d-4e67-b677-c84c8220ab5b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.56.243.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e77a28-a79e-435e-ba72-27bc697e65b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.35.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e827ed8-ee83-4ee1-873c-4bb6a508fddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.35.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94294fd1-ac9b-43ad-baba-dd30e60cfe7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e48d064-e128-4bba-a137-d5629d5ae75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1cdbfb-2635-4086-985f-10f00f714436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da52e06-d5c2-47f0-bde9-351ad41e6f89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f550002d-f580-4583-897d-92a747bc37c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960ca4e7-09f4-4455-83de-15223de91287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946cec89-8184-4cd0-87d7-8a60fb904887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd718767-6000-4047-8fe4-1f608bc1f42b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3e73e3-7088-4d1f-8448-670d853f40bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55830657-ef30-4f80-8e31-345f1069e861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1828784d-5e04-412e-a7f3-9f7a89b67e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a45b252-78f6-4212-859f-fcd7fcdc89df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c0226a-c329-4507-9d16-bbd5a3545ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3735a3-1270-49f7-9c89-27241f34fed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3375a8f-914c-406f-9fad-be75e69eca2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0d08bb-03fb-441e-8b0d-7f0f23434dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bed51a-e3d7-49da-8cc5-98c6a96dd9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87b6e42-0355-4306-beab-50061050e5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513acf26-4a80-4e91-8f74-829fc3b69474", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a260de6-886c-467f-bdbc-1a71c8a08aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a68bffb-d2ae-478b-a4c6-09048a765f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab0e66d-8f96-4c7f-9e1e-1dd5bd08f50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df8b2c4-2ad5-4f0c-981f-f0a90f710b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d2726a-7e11-439b-a008-0b062a98d5f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6349b040-5a7e-4e7a-8773-82ef241ddf1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865b1b86-b254-433d-9968-52a834ba7a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb3fd04-b32f-4f32-bfba-b6cfec30b41a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4073cb-f084-4cb5-a5e7-b8d405ade669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c16d6a-63dc-4f76-96c9-3fbdf5f2219a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149e80f8-ece8-43ab-a4df-79a07459946a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d18155-cdcf-4a83-b23b-8d144f616813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cca725-fd7e-49b2-9ff3-85d788283822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc62a4c-5b86-4ff4-b013-70d3ce91f5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e957581f-fc28-4267-88dc-12ab649d5c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d106b5-cff3-4455-98ae-8310631cced7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d95827f4-d335-4210-934c-8f8f8176ac92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee173a06-f6e2-47d8-91f0-a81abebd23c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff7b056-4d40-44b4-8d2e-ae88f179851a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccba06d6-ab86-4c9f-8ce7-cfa2e66c3b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df856c01-c5e8-4914-be58-c7517f094305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3f222c-5089-48be-9ca7-a3a3bb27fb03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f605c17-1a60-43de-8df5-2b0f7378399e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912d410a-92b0-408d-b242-93f486e7adc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f411dc94-b08f-484a-bb35-09c477c3eb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d726a5c9-aa57-4850-8b45-51761a6f7794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ab6632-0564-458b-982e-37f6ecbec293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff8cb3c-7495-45dc-9131-c26d133f08c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700b3676-27c5-4a20-bb42-3b62de32069c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f6f909-ea96-4f64-905e-17de439dd646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679b9b07-0eb2-4ef6-a632-c4e0103029fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163f88d4-3f62-4b83-8b46-abd9a268135b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c667b72f-c657-4bf2-989b-59dbe8f38304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78db79e-4f9f-4b70-a1cb-9a9ef827052a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077e44d4-a553-47b5-8b56-56409790369a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f82122-0332-44a0-9d9e-30b8840a2988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd8caf9-e989-43ff-bcb1-66d42342f649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0355dfd-04e5-4ce7-bd35-c2ceddc2017f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea00102b-54da-4fef-8675-334824f385c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e419c061-18fe-473d-9896-e65c0fc84467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90710ad4-06f9-4032-94de-c1bc7904d200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ae5579-bbbd-4fac-a8ac-443dcae58214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3803f7e7-e93d-4d05-985b-92849aa8f68e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f58a8d7-195a-4afb-a33c-0491dbade736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.107.179.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1542e451-e1b8-4e4b-9d89-9a54298eee94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.156.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7caccefe-7e72-44a4-b6bd-b9866f70989b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.157.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2984bfa-e91e-438c-bbcb-952198597c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.157.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064a5d35-5638-45b4-bad3-43e80ad2162a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.78.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550e5461-0011-4ddf-aa89-c23471674f74", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.168.147.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5936287a-4b0c-4db7-9c28-976c9c0f3897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.87.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1b9a8d-c87a-477c-88fc-2ba940296bd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.101.33.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2c389d-d3a7-4a91-b126-b793a6ab50b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5963105e-8fc9-474a-b964-fea2d103948c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.113.139.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef252d6-71f0-4f7e-ac61-34d570cfeea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed15b51f-e16b-40b4-a511-469f460fd225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263ca908-5eea-48bc-aa16-a0fa57e59f55", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.122.141.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9d464a-8ad9-4a7c-a0e0-9e5aec02e652", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.126.200.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9009f5-58c4-4d6c-9f87-97932cbb7c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.153.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3176a963-27ac-4cfd-9a0f-643f6cf0b8f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525325e5-6d15-410f-8b52-1d77542222b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f8c3c0-9048-40df-aa58-78e204ede7cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aaf27dd-5aa0-4d40-8b99-6a611a76fb17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26165ab0-24ba-4dc0-aac6-c516eb7716eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.151.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aebc50dc-a2d4-490f-8ac9-55a9a28a22cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.14.58.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357a821f-c96b-4125-abcc-da0682c54248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.150.191.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb3de5d-abfa-4f8b-bdae-77bed5a6a02e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.150.191.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2261759-7b10-4fa1-80cc-e8d9b183f566", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.156.73.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5f9960-76f4-4f95-84f6-811bbdb63018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e057a5b-bc46-4ee6-b2eb-9a419f284f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5533418c-0fc0-4827-afae-5019cf9d0db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.18.152.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cccd3dd4-1323-4de5-a6ba-c882bd014434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01fc0ce-330f-45ae-977c-b0251be90bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e632650-fd35-4f2a-9d3f-fe363c59dc56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee11b1ca-42cc-480c-bc2b-fdfc0aab6ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f946f79-c679-4f18-9ad0-f5f047c898fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.181.8.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d2969d-c904-4d64-b635-8485460f39fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.169.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4903c554-012e-45c5-8fc1-68012cdcb714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.188.249.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b42b4c3-535e-480b-82ee-3b6277dba1d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bae3209-00c2-4bf0-b192-7ed84e7c1551", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad568fe-e4ba-41fa-af12-716c24d35027", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788a192b-939d-41ef-97ae-471d6c29789b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e4e5c6-ef9e-4fc0-b9ba-d05d12d2240d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053cab03-54bc-4441-a091-f39417faab33", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0e92ab-3a5c-46ea-8a91-84395f80baf0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4460d022-e359-440c-9193-1f3f075dd14b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3db840d-ff2e-43a9-b817-7a601e9fb566", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354492c4-40e3-460d-a1b0-378f6ec95c53", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84587823-9083-4dbc-92cb-3791dc632533", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bcddeff-c5aa-419e-944a-9310c2fc5502", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7462c01f-f529-4972-ad0b-28595226d79d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4bbf547-d32e-4e7a-b6b7-692754bd0567", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd9907a-e363-4cf5-985e-07776f983e44", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8baf3d-8a1d-4be4-a7f2-b4b893bf5db3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819e9f35-dbc9-4395-a3b0-c1f349306d04", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cfa003f-83af-44a7-bdcb-0974d183b167", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60cde80c-e09f-470a-85b8-87af3e3b9753", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44521e84-30f9-42cb-8f1e-5d0f84603b13", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc37beb4-f585-49b9-8aab-10764f457fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.77.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1966f10c-6ec1-41c6-8f45-8afee1a87dee", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.13.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3157d23b-2cf2-4f93-b224-467ac029738f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.13.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c169c4-17dd-4124-8a41-d3f9bbac0edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9470e865-dea6-4bfa-b853-34c4bb4f1b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61d9139-b672-4a6a-9e59-2e17e5966d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d97c318b-b95d-442b-8c12-fe9ec19f546f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8896dd-ecc7-4222-a3bb-5b07867ca1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd7528b-ef64-4ac6-9708-479342931fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0fcb05-b95c-4f46-a44a-68a5f0510796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.215.164.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8650ae-d49f-4779-b5ea-64fff9c4fefa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718cbc9a-4cf0-469a-b324-cac6466546fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba2beaa-0a27-4ac6-9dec-4bfcdc1503b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1645b6ad-3af1-4367-8840-968099ab1d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceab8d5a-6c7e-4bff-9309-02fcf627d717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e76267-b81f-4ee0-bc6e-622cbfbbc935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--154650d2-e770-417c-94b0-a0b7ce4ea064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a32dbd0-4dbc-40b9-8769-f0f84a65e9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ff848d-f178-450c-b5da-cb04b45c906c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82581327-34cb-46ca-b179-07316c5498bd", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa1d6e7-9a01-4136-8bfa-d51520cb0115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d918cc6-013e-426c-9f84-1eb7fe4809bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf02d456-d8ef-46b1-9e21-dfcc33c704fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fede4da-6b3e-4167-8138-faae1405422e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82fe60c5-031b-4879-8ebe-cadcab0e76f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67b8a97-1d09-4e9e-90c7-24b2dd00202b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff1da0e-476e-46d1-86b8-24b15efb0475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946d3e2e-ac20-4297-9f7e-d660c56200e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afea2bb-b1e0-4728-ad66-af65f25dbd55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91a129d-059e-4cdc-ae74-58024203ebb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725a59cd-1b03-4bca-8547-b845bb268171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac021a14-0fad-4b2c-b761-686e37527b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1842753-2a13-4b25-a5b6-8170d43e9b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.0.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58902586-348e-401c-bbb2-85821bcf4fe7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.188.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4126c5e-1a3b-43cf-bebf-8dd07462efce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5927f06c-c89b-41b6-8733-9e20f575f6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8156db1-1203-4d93-95c9-d4d6cc011d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.139.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22727245-0436-4fbb-9bcf-64a730e60602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.219.133.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16abdb33-1941-4a32-9062-4eda95848efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.220.100.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a5379c-d77e-4dcc-9361-6d60121391d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.220.101.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b9dad5-04b4-4a61-b71e-a49e9517dfc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.221.237.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f406c9-4993-4fc4-9fc0-707e0a685b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.222.138.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45987643-0fcc-4ba9-bf87-7ff05f6e6929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef3908d-c427-4e0b-abbe-7d2425a1e67b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049b81d7-879e-4d76-96ac-8e8450d2ab2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907fe458-2bdf-4c3a-9159-6e893aefae90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7fbd38-f822-42aa-8cb1-0e0ea8e4064c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b700c27e-70ae-4344-948c-21bccc1b6197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2971ae7-9689-4de0-afbd-aa6431906325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6a2188-b946-4d96-ba3d-04a5547288a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7b71d8-bb62-4963-a810-a73efd7e96af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c8403e-163d-421e-b64e-bf84767337f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea7f8534-9a05-4e8d-bc65-dfe115553358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d028ff-9d56-49ea-b157-9a0698643ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5e4ed3-aaf3-4df7-b9b4-70967f2dfc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4d8690-64a7-42e9-9e6c-d179824d8261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67703a61-abf3-4c30-8408-d884c1f3f80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cab8d24-f66f-4ff0-ac4d-11582a9612fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d536345d-c188-43ef-8c45-4dedf914ffcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af56af23-eec0-4c50-bb39-27055de12ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64d8cef-0b4d-4d90-a77d-e848f3d71454", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f085ef5-1c48-437b-96e8-414d29fbc877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8b6645-7531-426f-b900-f0d91273be56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eef21b8-980f-488c-b90d-f9215d7d9b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc753b67-9ed8-4abb-916a-1f8407b3e565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd00ba6-cac7-41af-a70b-4d1ec065ab96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2100f03d-76fd-427b-8129-bbea7123d68c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aafc6fda-dcda-4f7c-82ea-16435924a9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84289371-ddbe-4043-8c6d-eee69c875244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06031e00-472b-4d52-a1a0-6769782d8f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6f8833-841e-4548-8297-06930e0eefe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5fa5cce-6d01-48e9-bc3a-d967f0d0c213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df01512c-a902-4e8b-ab26-74676d6716f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316e7ba6-3111-4ee0-8d51-009fe703905c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9053e8ca-d130-4b98-b56c-266fd8c7bd91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b33088-4907-4a88-a0f6-3a6aeed0d1e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d34fc1-44b7-4ff4-8658-1f87e954463e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ee3ecf-0dfd-4801-8017-6eeac1991fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773541cb-a982-43d7-bf19-332bcb0237ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77cb0f0-e80f-4485-a49a-a62270ebe60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529d85cd-d349-47d9-b3e0-009303ebea31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.228.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57cdf113-0058-4b5f-8d36-ec8540fa378a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.89.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34084e62-d069-4964-9a3c-7166a27cf471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.93.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475ab29d-30ee-49ea-91f6-220e3b269923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.93.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34b5d2a-54ef-4532-8cbf-5048d2fa36ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.93.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03bb6fbb-6612-4497-b821-39f0486c8f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.228.72.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65b1ab7-a67c-45b9-803f-dc82c29c3b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.233.210.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b240af-2cc0-4ff9-a8c3-bb6d8e10a1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.234.69.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8353c25-4679-443c-99b5-5d62c9920465", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.239.84.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a72363b-135b-4fe2-86c3-aa4f2133aa64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.241.208.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3678fe66-8048-40ac-8a03-26f01c96c46f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4087b4ee-7339-4420-8a45-2b4defdd48cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16fd6d8e-0c25-4cfd-83e1-b7401b7d7e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb64711-dfe9-4983-8f08-c29e603fa935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52439a6-8269-444c-8a4a-4a2edb4c39c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb1cafe-06f7-4433-8276-b8f984359adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1281ab61-0835-4a61-8356-f29dac522076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b955a0-ae93-4f52-9339-a3e3f48887f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfeb845d-ff7f-4858-8c9d-92948ca5a68e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb88aa15-51a0-4bbe-9fac-44089f907db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022382bc-0278-4c31-b160-3ddb5df012a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99fa0ab4-3ec4-4f16-978e-09c21c889c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99980390-41b5-4a5c-b6a1-31cac0b44f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77130c45-3da0-4919-ab64-f3a58c411f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e773bdd6-27fc-4677-9941-815b983f2dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd2b63b1-3d99-421c-8229-8aabb291d445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328f6e35-343c-4212-808d-feff616777e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5fcf932-1718-4cd8-9d46-f8d9edb1417e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ddd0f3-8fe1-4f22-8670-a78a284971f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0232638e-0dee-4f59-95db-4056a89c88af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a223179f-6af5-46b8-b106-c21fbc9981ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d52d1f-1e61-48e1-932a-d5d30c2eafd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b193334-1dce-4250-a9ae-027594b58ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6902141-7f08-456a-887a-6816c2cb6413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa6a6c1-0511-46e6-b200-0be6b36c4a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.232.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d71e6eb8-df05-455a-be65-e01f7123e352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.233.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed1af7c-0ed6-472b-b5a1-16f47e8a88b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78611f90-4736-45c1-8264-8a8ed8d3c2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6afadd4a-ca8b-4d4f-a997-c43ff3c722e6", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859a83db-5ec0-4f4f-aa34-95ea16a4a1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b59f1c-bc3c-4fd3-8e54-b0337ac2d08a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.246.188.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222d0b70-b9de-4c54-9bc0-86961baa0bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9803e3-525a-4e8f-a5fa-ddfd3f445c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ae1e40-81d3-4f82-8139-fda208d59766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9267c5-74cc-49de-bb1e-46d4e43142a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.27.119.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63800566-dc36-40ce-b794-78c8856acda2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.36.81.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf283ba8-2ede-4107-a0ff-b413d71ab600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.42.181.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e94265-8235-413d-b224-127ae144e9a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.53.211.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb16c2d-20cc-4116-b0c6-885dc8120b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.63.197.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ea1610-86e1-49cd-8c05-11e681ac81e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.65.107.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd838801-d3d8-4dfe-9f38-55aa22d94376", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.8.107.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ec23da-3fc2-4be9-b58c-3223079fe723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.82.139.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd234910-df65-45dc-982b-234cd94db409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.91.69.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621e24b9-0707-4b9a-9cc8-0df89fd238bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.92.26.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e78580b-3bdb-43d5-b1d4-3339fa27a122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.182.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f110b44-603c-4423-a539-4b1555afad78", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:openclawglobal", "protocol:openclaw", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fe05e2-0f97-4966-9aba-082c58320a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b068515f-facd-4a2b-926c-9ed711458c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.121.222.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8419ebc4-d163-4f87-8b42-0e915e1ab328", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.13.122.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39044dd0-897e-4659-825a-ca5879dcf092", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.137.131.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5c4d4e-ef62-4bf5-a0d1-a29fa8b74d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.233.184.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d16d22-a82b-493f-ba66-a2d42ecf82ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.249.45.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a9c710-9278-4192-beb2-24461d4c4aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0366f4ef-bc78-46b7-8a12-b5559d84cbcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.122.60.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff33a9e-e4ac-483f-bb58-e24142039eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.133.181.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9749b079-c865-4cc8-aed8-8f158cdc47e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.141.121.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725a5882-6586-4f04-9f11-c3b1e18d139c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.16.96.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1cdef78-4fd7-49b7-a31e-a5e6d6ca4ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.17.224.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ef6e1b-1e10-4204-9f4a-f45b31dd0d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9064e6fb-1fbc-4da1-98d8-42fa29a5ddbc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.21.16.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a2c41c-03a2-4a01-9ee2-284d6af0298b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.233.80.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ccfdb19-1e50-441d-bb26-29560d442254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.234.63.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf2523c-eb87-47b7-b8a4-b967a1bc17e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.197.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26db7e38-be22-4c4c-9a84-217fb1c79a14", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.152.238.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85097348-42d5-46d8-8eff-db161054e32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.121.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169b5a31-3370-46ef-a9b4-f64d76995dad", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.246.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa5265b-89c8-43f6-973f-59fe700cbb2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25455ae-72b1-40e9-b8fe-202b26b2b601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566d5c04-41ac-49f7-a038-8babee4ab685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6e8c49-e55b-4cfb-ba4f-0318d0cdd31d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9926a60-f82a-4e6f-9b35-575436505e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15694f7a-d865-4e95-a285-e79c34a6d217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebd56b6-4066-4f1f-a3f4-a9e711502cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fada68d9-ea0a-4745-bd94-3210787125c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cea9ae-e31e-4bd0-8e0a-970b498dc152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5166991-0399-43c8-a215-96c04d5e675c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f469ab7-8d7d-4567-aee6-28825cb0e338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da0fd90-33a3-4abd-bfe7-f2e6b913cf21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa55d805-29da-4669-a719-284f680b8248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2951665e-cd5d-4b19-83e2-52e3edea562a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f91fa95-0aaf-4fe2-8281-a75304fe1261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4720d19-f5e8-44f4-b901-7b9ace3ced76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee15fb7-5fc7-4360-9811-312858a4b42b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87eba706-6541-49e3-9a5d-87557e2ac3e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c496d7a-6a79-450e-8407-90db6f37cd38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71cfdf01-f411-4991-9c3f-d14787712e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99004f19-fb36-47c8-9f6d-e09ae4a608eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b832f0-7f9e-4658-8c37-f327b5319397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cbb0287-8408-45a5-9f89-48ce3ab104dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5170cc-5459-4dfe-827c-27bd7ba26f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a161ea3-b18d-444b-a839-8f195eabb43d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26036638-8adb-4750-b677-1e5c66c9aaef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe27a1f-546f-4535-ae76-1ce2ced869fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1cbe035-4ef4-427b-85d8-e2c6ba93d3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.28.59.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc8bfaf8-2645-4567-af14-dad8a3624906", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.40.21.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de7e2b8-c85f-42eb-981e-e08b9bd38109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28dbce70-4be8-4f54-9548-1633d84e88d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33566ab1-7a76-44c8-b9a7-a54cb40f72da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641978ef-7d1c-4060-abba-4d12ec38ebaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd302b81-2eb8-4f26-ab0d-5fabfb72cefb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed7eb8f6-0c9a-4dd6-9eed-87efe8af295f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.1.171.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7fedd8-1506-4bec-9c87-3ce8035a8a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.13.254.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9505eda4-3abb-461c-850d-88ea5c79bdf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.13.254.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1051e67c-77d0-422d-b76b-3c1833b47991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.131.119.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3af4e8-5579-42bd-b37e-9d14fc0ad745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.153.1.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f9660c-3f04-4a81-b8c3-548d219e7e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.37.11.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5183cb2-9eb2-4628-a41e-fcfe4826b5df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.119.187.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5468acd5-6882-4954-9623-3f395e5aa70b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.119.48.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33537df0-ef73-4acf-b0df-17fbc75d37bb", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.131.217.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc91470-2a70-443c-a0e0-3664b37c9c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.136.56.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd46fe73-8547-459f-a719-f798554bbf20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.148.112.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594bdea9-a08c-42f8-89a2-e2c3e7d8300c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.153.21.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82e48e0-0ef5-46fb-95c4-39876f25e7f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.171.108.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a60d98-1a97-4b9b-8ef9-c964a2865069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.202.7.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db29443-88fe-45fc-b84c-0c9237c65d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.239.208.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d900c7-1718-4cd9-908f-397059b93e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.50.37.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb3250f-86d9-4596-8c31-a088acc007dd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.60.242.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe40591c-3643-42dd-8c02-2e8f7c9305f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.97.252.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2922f32-67a3-47fc-b836-dc4ea1dfe163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5b4f1e-c21b-42ee-8400-4d839fa414e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9240bb55-5667-4caa-b2c3-68dbef9d764e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45819ca-e330-4790-8566-502afaac6b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.241.76.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f625ea-d409-4f62-8706-41c4d1023d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.88.178.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52bd52e2-eed1-46a0-9172-d22c66c1c990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8aa6b5-a312-4aa5-aa05-24c5863ee37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798098fb-3922-4c28-b0bb-497c8d2cd378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f55741-7585-4579-885d-1ab5b3f22557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c13e8b-daae-48ef-89a6-8ac493eb9253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab71e7a-ba7f-457b-a74b-8f5016de466a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea4f740-7d64-4733-8470-8f75f508d529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.168.192.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e284e67a-b0b0-470c-889a-0e8e44821514", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31cb243-67b7-44a4-81c6-752e91aad2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.194.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0e098c-f65d-4f54-8add-22504e9f0901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.198.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d302117-8801-4b57-a0d0-a207029b2979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.220.50.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1014b69-cd54-405d-bbe0-fa2e30e19ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.220.50.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3193ec2-5f0e-4f2a-acfa-8d992542b246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.226.69.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b78d70-0525-4a63-958e-b16eddeb6e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.193.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2ee8ef-8b4d-4d37-a159-21574b7e21e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.210.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92ecce8-cff6-44e9-9d3b-3ffc0b353020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.240.203.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae0dca31-c1ee-452d-baa1-9f43f11c7fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.248.150.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc23728-a587-4d78-9b70-cab38b96e899", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.209.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf6270a-1ee6-4d07-a1fa-27423e852014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f422f3-24c7-492a-bfb7-78d093274ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7daef8da-0a02-4547-8372-478b411f8306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.127.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc3088b-4592-43f5-920e-570a8bc1d81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.135.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90c7baf-1817-4faf-b7eb-2358cce36e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.145.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8316ef5b-cfaa-4a93-b4ba-81f1d7b906f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.206.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b76def-c7a5-47d3-b16b-1be841e8e383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.34.62.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771e11ca-2ed5-4846-881f-23a46b4a4011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.34.80.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfe3fba-e1f1-467c-88bd-e4d4867b978e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a977ae6-fc6b-4d10-ab5d-910bbc041901", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255eebd7-2d8a-48b1-8b7e-1f11e9bcf8fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.95.10.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fa81f1-05e3-41c0-b8ee-6a4a9c0bbd3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.95.95.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a6b8c2-2c17-46a1-9832-effff0b6a13a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.43.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d1520c-a58d-43e9-aa80-ee0b1f75dc44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.148.63.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342b80c0-16f8-414c-930c-7d1b27d7f6d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7a78ba-1bb5-47af-ba51-5f90770052f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9849c6-644f-4b9e-8d79-278ed5b5a0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7030db-1ec5-48cf-81d8-d32b745f5c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8d9e7f-7877-411b-89c8-119c10bc94d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b114449-4f29-439c-8494-8bdedf256b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf994709-2b0d-4868-bd1e-ebcd4c7b6f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb4085f-860c-488c-9a9d-470e6de93cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b48cbb6-4afd-4724-9b44-a8f1c02f7668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccddc518-fa32-4c28-a988-e6f1f2f93584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48120b64-12a0-4701-8181-ca8b4f483148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6151f40f-8570-49c6-b280-0512c375e4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3078e94b-32d5-431d-98cb-c786f3932844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4f2c28-3dfc-4aaa-9447-22ecede9cf24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0979d696-a530-4c9e-8090-deabf9ec3c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42174022-6e8f-4570-9729-e929ba055d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de41d31-ed49-4898-a09d-ecc86aebad75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a759da60-191a-4f0d-aa14-881a14fb7805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca43318-7921-4c9f-9a48-ba8f4cfb2c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da35300f-ae80-439e-bb9b-abef70b4f361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9465ea-42ba-463e-81ed-a52365d449be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7ed167-7ae1-4c9e-a81c-4ce7760274bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2850205d-4326-41dc-9444-87989c1e64db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0f8125-d372-434c-8771-28dc196469a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d560f1-f1a0-4c68-b428-d7fc3b143d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1d1eff-44ab-46ca-ab67-566c3bc96bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cefe0e-1495-4e39-b7d7-619c197981ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91cb0818-ca8e-4ebc-8d2f-deef9e70cf38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378f81ce-44a1-4eb5-90d9-0038b2885f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b171e9a9-705e-447d-b890-3c989038781c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bba950-293f-4347-926b-b37549587bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc569e15-cdef-4c41-bb72-154a50988a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa95f584-980e-451e-98ad-68fbd7d63dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b183e3cf-90fa-4aa0-b913-a0664ae6db2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7380ea6e-f1c6-48cf-bafc-08d58c8adfea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c1fe21-d280-4a66-9a13-b3bdd9d912c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68dc6c9b-bb59-4937-88d5-2b6d1f6a8b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9359fc-28a9-4c7d-bae2-3663375b3332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde84c9d-1c69-46bf-b94e-bf5d78ba58e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eecd03d0-bf8b-45bc-aaf7-85f1109be115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f0172e-fc69-40d9-bdee-2868a6910e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4f5025-9dcf-4a0c-a2b2-19cc2b689958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d1fe86-937f-4089-916b-3b70dc11fa36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108c40af-d556-43dd-8c18-a315a35ba83a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a256af2e-1b8a-43dd-ab0f-67ebe7c52e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd95bffb-bd63-423f-93b7-5db9e005a4bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29730f8f-0651-4fac-bdf1-bf1e64ceb349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9878ae39-3c5f-408d-acb7-a221e7a0e072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6ea62f-bed4-454e-a692-f3b42283d97d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2edd3eab-25de-4107-ac1e-d5e67a67db3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e91bb2-8693-4795-915a-3732d140d9d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee84863a-2e8e-4b43-97a7-c955be6a7d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9041aba-af8f-4ab0-8197-6f00c2ee297d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bcac746-1f95-4ca9-b7f5-399c1a2595ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4795903f-d688-4497-a82b-7d26a8ef81b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e61d14-66d9-41f0-bf3e-36ceb6a5827d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab425492-679d-489d-8ef4-74950019e2f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611809ce-26f5-4be8-80a5-3e811fdf2355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f856923d-6265-444d-9a76-c6f4d32a5b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c4bd7f-b132-4016-a434-7018300fe031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348e8437-475f-4810-8f9e-f582cdf55dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9b4421-c4b9-47af-b41c-72f1002461ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4276b32-ece5-4e17-8119-921411d37215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c3eb21-8997-4c0a-92d8-d2b9d4698cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149b6bc5-716c-4e64-8c8d-c00c57f6c12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855a04df-8d43-44ab-80fa-402d79e4ec18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206afcf0-a444-42b3-9867-a2fc6e7d5cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6526dfcc-a4bc-441e-af4b-f064dcb653a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aab0e38-678b-45c5-82ad-0610dae3eae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69550ea-a54d-4190-8163-9d08febbfb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9679ff6c-2178-427f-951d-b36992384b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ee90cb-2dda-460b-a556-c46b15a08678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbb6a08-579b-447a-b71e-e8df76e1ae95", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d874191c-b8d4-4185-b880-9f5ac5afc02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d1afba-e913-4bfc-8081-14f7b87d72c1", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5bcd63-5d49-485d-8333-947d0e9391dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.169.194.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1b7aaf-0adf-4d23-8a71-43b6c1e701e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d1fe8b-fc84-43e2-b11d-cbdd3583e408", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8999ec3-1f93-4887-9d7f-7cd691215ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c881fa67-feb5-4c4d-8b1d-e52b637eb38f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde6a49c-48d6-4870-89df-5c1894506e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74259e7d-28b6-4617-b7a7-4ac61ba35bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a65cb28-0f03-4b3f-bc2f-a3e513b79e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7bb27f-68b3-468e-b59a-727a3ae4f5d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5adb0880-85c8-412e-bfa6-95659b9cb2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f94bef55-53ef-4c7a-844a-d8d7f4b72cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5574b32-d3ea-4bab-89b0-788b33e7200f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169105f5-ac66-41f5-b76d-3de70c26991b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c5edb3-ca21-48c0-bd54-6c9ff9a5a219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61351c1-093c-4587-bcdf-d326ddd70d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4349cd08-cf8e-48b3-a26c-020f8a7050ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ff8bf8-9a41-4489-9c1d-aada63292dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7bf80e-25b6-408f-a55b-5ec1393ad7a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb33a25a-1c3c-402b-bec0-85ba1ea91ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34b6304-9ca4-4d9e-a1fb-8f1554131af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe8ccba-2d79-4f2e-851b-4809c10d7dfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d120983-6386-46a6-83a5-2d0b9e3f0002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2396102f-9fa7-4460-8bf0-53dfff2548b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93574ea9-3742-468d-bbd5-f1d99b3f5e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe928c05-ac6e-41d5-a624-f9fa3d53246f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2464ce2-b7b8-41fc-81a2-8f1bf3a349ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e6ddf5-8d80-4d38-9900-f2c2aa3e5e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5981627-a652-43b0-a0a7-e9254e2c68d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21da97f7-a62f-4f17-b7fa-1004a1a54e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae24fbb-027c-4905-8c14-4f6cba7c5c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed842eb-a41a-4885-8535-aa1b00fa415a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db75ca3-9225-4cce-9701-50c3fcbd23ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39da4f28-6b3e-4b7d-a65a-aefd5fd1a48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f2a724-a41c-4cd3-a65e-8d0f481cc8d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbc6041-3cd9-471a-a884-1184d8d752b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e97f103-bbaa-470f-92fd-01289d716642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8393bef-9511-4aa4-b2cd-d1dd48fc4c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72adf55a-aec0-4093-83dd-c27588d736fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991f7d3d-68ed-4d4e-bfd5-89cf1d8bf525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f143155-273e-40a5-b6b1-2bdc3f74d242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c00a9f-c0c0-4fee-b6c2-f7e7f50b15bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e46697-c7fa-484b-9967-197fa8bda457", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e966e945-87fe-4ad3-9f24-14a74d38964f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d550c09-9fde-4729-941f-abb095bef281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de398b29-ee2a-418d-8af1-eded642a7306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525653ae-ca94-4b52-a509-5ea56a288eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e972cde-105e-4471-8702-d53206af0f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2ff0a9-a593-49e7-93f5-b720944c812c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ad78ff-1bf4-46c8-b3f0-318be9d9ebc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e06386-fdbc-4a68-8b0e-d3d71c506995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e801ed62-4a6f-421b-bc96-3a2277e13ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7575e60b-4b90-47d2-a0cb-ed954f601e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ab0fed-1349-441b-81f5-00e04591f3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37272e3-e086-494e-a468-9895a95f7377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2924432-8d1a-435f-a855-6ca16d430f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c8f278-f170-4c7f-86f6-43255a100151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c5ac95-da30-416d-885e-5d4b5c089640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23eb59f5-09e1-4734-b107-d69e3cb383c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46286a37-92a9-479f-b04c-3db31060eec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.22.147.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97ae90d-d999-4b76-bc56-0dde4dff8afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.227.179.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072691d2-85eb-4242-90c7-c212b4fde79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.228.139.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9644c833-300a-48f3-965a-7c0fa1b5c5a6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.123.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df03439-6621-4694-b6d7-40aa12c94de2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f19cbf6-2a78-4e03-b682-cc334b3beb42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19782490-ad7b-4149-b81e-8bb84c0d9575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.26.115.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba76dee-8df6-4586-9121-7b7b14391235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.29.13.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e76eae-7849-4587-b312-8c9b8f00bd3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eca8ecc-067d-4704-b0f7-fe744587ca47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ed61e8-613e-4c2a-90dc-8544c3f244c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18eb6fd0-181b-4715-98c5-ed0812f99c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd2d2ba-2cfb-4c93-81f3-0390505928f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c31a731-c6aa-402d-b76b-1b38b515c863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4e81c7-3a26-4fac-b922-eb1e2a505eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c06cc833-4e1b-420b-9e85-092a2b9730b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978c7ab0-2887-4cb3-a86a-c6c9258b5d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b6256a-0e99-4d63-a538-1047c5a9d429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737c6850-fbd7-4734-870e-6fc5fb704846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e06522b-deb5-4754-ad68-8714f274112c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7448ab85-feb2-4c2a-b309-2d61893e19c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64cd8789-f370-4adc-a9a8-228f858595e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d1e3ea-6381-45be-b32a-69ecd6569456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab9d04f-5b23-4025-8b19-4bba73671591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c66f687-617c-4631-9aaf-b1dd343bf575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a545bc6f-0314-4868-ba05-d64bf4f25658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d40857-23b1-492f-8588-05f29262e45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2427ac2-3b49-4eb9-8cf3-584c552576ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1871ae-7619-4e44-997e-8243e3db7924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da97779-12df-432a-a3ac-db818aa82111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5aca453-955d-41f0-b904-b8b0cc9fd336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7482ba22-8a84-4627-bae9-95589d7a6831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146e1e5c-c3af-4a62-acbd-ee56a84fbf51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37114761-56c6-44d1-a8b1-7f5bcce03efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbb91f6-077d-414f-a93a-aba860da0669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968b6ddf-f569-45d9-a739-0f93735ea9be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cddbfab-d29b-499f-bf17-942cc1f57a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb75daa-cad1-4067-96ed-524b94803d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9840bb50-aafd-43f7-8247-862c60ab85ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841f50cc-3437-4d9a-91c1-484aec947b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115630b0-d043-40f9-8f86-630641008bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96bafc6-57a3-4dc5-8708-58df71a7c728", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.33.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e232120e-8029-4378-8760-cf20c921360a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.33.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7c1d35-c697-439c-a15b-78cccb893cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.70.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e39a78-b33c-46f3-93b3-d5e87137e03e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb7bb9b-6256-4e12-abbb-11fcac766f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.233.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470c7109-0304-4485-be08-d647f4526443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11750d83-1537-4754-91b1-06420d4acf28", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.173.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d032c5d3-be42-48ab-8fe1-584bc68d8e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.174.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ea64f7-7e35-439c-b191-c3f21fdb3e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094545a3-7d00-4f63-bd7a-2d3ca17c0ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35caa92b-44ff-4235-ae5b-e7b800e88e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db47313d-d7d0-4624-b645-7252aef3cc6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.166.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda03fa4-2139-4907-99dd-1c4469d348a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.203.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0693e558-4b6d-4c2a-b2ea-7bbff5afda51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fab758c-ce47-48c0-a718-d3fe973e8f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a753d69-4cee-4fe3-afce-a2ba3b60df3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a501f2-1546-4bef-b2fb-2cbeb4d81a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936c9be7-fc7c-4572-beb2-b4b14c6954e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe2876c-e03f-45e8-8e65-7d9bf33b5a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57952fbc-6902-4493-b25d-780d6c12a51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e642e811-a550-4dea-b984-acf2c8bfe710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9153a20-44e8-4c6a-ade5-5718592e9ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f963d4-8bfd-4829-ab3a-05d80c78f396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605270fa-97d5-419b-8bb3-a9360dab643e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cc4234-27be-43a3-a263-a55d104b5651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f5d931-ceab-4d2f-8af8-c209c012daf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb413138-d3bc-45ba-bfe1-7b085b40068a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941aa49b-bfd3-4679-b4a9-6915fbd67a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214ba8a3-a3eb-4aca-accd-6354bc559b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed2e55c-0faf-4e9e-96cb-a51d2ee139b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.79.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749db61f-4f4c-4cfe-96cc-13c21122254c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.85.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74cbdce-12cc-433e-a36f-c5ac1482e00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.5.237.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47786e10-1d8b-473b-bd3b-e99e20c24fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.5.49.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c399ab-49bc-4446-966d-3f9ded036800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f5c266-148c-4d4e-9908-00c132892851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad2aa97-e2b8-40a3-b2f7-3f1c8904917a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e258079-8d5e-4cec-9a81-f686dfd28e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c3f262-f5dd-448b-88db-fdc7ae2e8910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24774b6e-6fc0-486e-9a8f-87306f4af92a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55451822-d51f-49ac-8857-a87f75c493a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845611a6-cd52-4064-aab3-5b883b8c1a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde35fa0-8581-4b9c-a40d-718b1ef7374a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0b2afd-18bb-4bc1-af6b-4940797962ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724a168a-e62a-4a6c-87c6-066aac947457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59798214-eb7d-4b36-b7d9-61c075fcbb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb7bd81-f8a3-4638-864b-4c9c25cf363e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9d59d9-5f8b-417b-8a87-a12243af659b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b406448-ccbd-4a2a-96d8-9686be909172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79cf1f51-6eed-4113-aff4-f214cee0c12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e29de16e-094a-4136-847f-aeca96ad9f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5c9d19-c0b5-4900-920d-92b067cfa5e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d66fac-b98c-4c91-88cd-604c4275eda1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ab7bf0-8ac6-4dde-bed6-789d3c9a1db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77fcd7b-b885-4f91-9100-c1a4b66c644e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec299d6-0c37-4e51-b222-b1e9769fe6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0390d395-30f5-4893-a89f-03b04711a6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.206.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f033dd6-eb8b-4569-876e-5f7ea084936c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.62.107.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d733919-1b43-4282-a9a5-410e7a0e2a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0538bbff-6043-45d7-bff7-ad4edc94b9ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90bc0cd8-4e2c-4a46-af73-ed459e363957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac1b2c5-b103-44a1-b1f5-a9d04715f23b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e140f8f2-a3c5-4988-8cf7-e2449c413768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5627960-e017-4b7d-a3cb-c928b818c4d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08df3c10-575a-4b0e-b4f4-bed333a6506d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25359677-0db6-4e11-8d92-a3fe3603b3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb1292e-f171-4b43-bb75-d8918e553571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de79b32-6f7c-4713-88e4-4182c91ba6ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528c5715-7d1f-46ca-aefd-1b56d6b7d4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.160.220.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c278db0b-ec52-4f86-9cbd-e164edefa7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6600d7f-9e8e-45b2-93f1-b135c305d933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c9aae6-0db9-4289-b944-55134717a53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dde1deb-1f6b-47d0-8c96-3dde6e1e65de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2ed40d-830b-433d-bb2b-b7dc3f6a91f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e29751d-607b-4ba6-9b94-5365bd9a235a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.191.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1d769a-4616-40a0-9a4d-a24c4c7d6a85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184dc6fd-c3d0-4e39-8bfd-a51190a9d6fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf40ac77-7abb-404b-af91-2731f86e99cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509d6ad4-04f9-4f4e-b841-0b86c300b6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd447b3d-5870-48f9-8196-ea60febdc316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb85c27-317a-447d-9ec4-28e1a9ededfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71c3b59-afa5-4750-b514-5759cd1ac6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1367039a-1990-422e-991f-7738af45d64c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa8c341-7567-413f-afaf-812f4b884a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71eab8c9-0f2c-4281-913f-6bdf023da59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1261837f-3ddf-4b69-975b-77372401880f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d410eba-448e-4922-94f7-3f1d1738d6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ad92e4-a638-4c89-b3e1-d4e05df57643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb69d6c9-5cfb-4191-993f-427f443f62a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db76d96-f411-4543-bf51-29b1950a8f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2aa0e4c-709a-479c-b636-b89d12ea562c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0e5839-b9ed-4aba-b707-f5f2ff7968f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4445aa-6d5b-4ebc-a4df-9691fca53b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8794e331-b70e-4e07-a4fc-c437fc208fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2454d950-1c55-4338-925b-41a294ff9519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352d7fe0-09fd-4534-b2ad-f09de0378efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57acb370-f498-4e56-a612-fdd2a6540ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7ad773-1a8f-42a2-9a18-255c1f9a0f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f455e9-8bf9-4f7d-a1fd-7adfe13c3d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb84b138-4576-4935-a39e-c7d60cc69343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85458e3-22aa-47bf-bbd8-bb867681d5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943f807f-82e1-45e2-8e98-79d85d4e55c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446b5a51-bd95-4d7a-9a02-e5984a1f08bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf680739-fbbf-4439-846e-ff2629018bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3e3010-1886-4264-bd1b-0a27d4304dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546ac15b-2055-4da4-8491-ba56814cc332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00af0ac9-9bc4-4068-b9bf-813b48cccb23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a57340-e393-45cd-93de-2821f33210c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d3152d-cc91-4c84-af7b-26e949375f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b91bf5-6966-47e6-9fe6-84fd64912124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75508485-c14d-4d97-8e37-29b672320bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5739add-7b79-4ec9-823f-05647b358471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a97cc6-2630-4d69-afa2-7289dbbbd04f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4a3efd-4f20-498f-8e7d-88f392003367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6033b1c-5397-44d6-a664-b6fdd682f33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4e2c30-57ee-4768-a1bc-1348b1177152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dca413a-5d4c-4de3-a468-f9394807162e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd7d66e-9bc6-4f13-955b-850c8796f088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b1b111-0fb1-491c-8eb7-6fafd7599f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac50525-fa47-481a-869a-74b2088dde57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d220100-0494-417c-a87e-d7ae02059257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f72b9f-0c76-4422-abf6-c96c2fdfb98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab946d9b-7b25-4754-bc7b-4309e10c06de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb3a3de-ff33-4cfa-a7ff-e062038e1813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c914c8-2474-4c28-87c7-a0a72830e1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4fa04f-a671-4b22-afe3-9b43638b112b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54f3f7a-38a1-4088-8b84-d86d626b36cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6d1156-bfb8-45ee-a808-6562d02e8274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776de050-8482-486e-94a4-6efc3113f7d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aad87a6-d3a2-46b9-9faa-4dfcffb5b312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf31096-e57a-499d-8e7c-d46f506325b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57fc3c0-606c-4a74-9131-5bc3225f6801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca4ed3c-9ba2-44c6-adbd-a219dbe07ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd59afe8-0106-45f8-b62f-fd302bdecfa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80bb2f0-1eb6-47ec-aa78-e134d38da045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f11ebbb-2f57-48b3-8e6b-47b1b8353c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab4ae5c-44c4-48e2-b5fc-a9c719a989a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b875df-e4e0-4b91-a788-2ea049047dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf71fec-9248-4418-8d32-ea0375f96eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d77d91-6256-4dc1-b4dc-47b1dc9a6d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c1b77c-2aa0-45d3-aa70-6ad9eca4dbe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5727a357-f782-446f-b72f-71de4e5c4d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70d1900-a08f-432f-8af9-afd3ff96a107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ce5809-b05e-42d7-9f34-1728542630cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df17f6d1-ff4b-4fc2-80a2-619ba91ae4f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33451b59-898e-46c8-afe9-8e9bea9d1dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc366c5-1cd6-418a-a4ee-c21f2c306781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f7cd5c-2b5b-438f-bd71-e8f7af3933bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491454df-08f8-4b15-8c72-f9c1f3094b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5189b39-bed1-45b5-a2eb-c3af00309309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.201.41.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3148b5cd-bac5-45f9-9296-01828be63d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc593df-dbdf-458e-a2ae-1bbb40ea0830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a246c5ad-b2d2-4b67-a8e5-e126c47908b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042cb9ac-5e35-43b3-8aa4-1dd66f3ec495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac594fc-cf3e-4808-9e1c-c52a234c52e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45cc916-9279-40ed-baae-c1be9de79277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e41d5c-37f3-4d3f-baf6-0099333e390d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5940647b-30df-46d4-bd48-29a16a286938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4d658e-8d45-4a4e-a27b-5c014aacfe41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d489cdb1-2082-4e25-97f7-da1dd23f683c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a0eb647-43c9-4ea8-936a-eef8fed5bd9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358c5d7f-2816-4801-a51f-5cac8a361864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bc20ea-5dcf-4e9d-98c0-647251a0b903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c090ade-1526-4f66-a4b7-651c0b2ee439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68279271-62c4-49e3-95f7-200fc52d397f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1f0131-0414-46be-9e62-216be1332005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269e8d97-e294-4fba-bc94-71385cdea26c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c4a0ca-d2d8-4f79-9cbf-815aa7f8c171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29cdc126-f577-467d-a040-c6065f2e8393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9240d12b-a221-4b86-950d-90830ed55707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7f3652-0b09-47bc-af28-74f3ce275bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.211.96.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4551c5a1-06a7-436d-ba88-afef446314ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fed1a60-52d3-4ecd-9737-007be0ca3dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7695cc05-c15d-4c50-a6e8-a43217235e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4cb8e64-a49b-47d8-a1d9-4c0e9ef57ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e483a5-f8e5-4431-adad-92fe7461d20d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d94cf3-39f6-442e-9a6a-a721db0a547c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a298be0f-68ab-40d1-8a9d-2773b204bce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181af18d-8ecb-4152-bf29-4015ed858ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.239.78.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e150bb57-ef97-4859-9473-8201ca2faf6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb8ab26-b027-4d5c-b4dd-68673a6b2819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.87.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b078cc4-886b-461f-aeb7-0e428aa13811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.93.161.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c0d677-4854-4bda-a776-6a5b04da23b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192de271-c46a-43d5-9f51-5c51877b5219", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439838af-3980-4a67-a2f2-185ac55fee92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.179.236.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e8648f-dc26-4865-9988-ec45101e5186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.188.175.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bd94aa-c3e5-4b89-8308-8a87abbd0a69", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.202.19.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1810a57-27eb-426b-8d95-61ad78313ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.202.81.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6366f72d-9531-46fe-ade6-26cb5bb1ccbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.204.71.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a86f678-4531-456a-bf69-fa53c7d1fac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.240.181.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419dbbc5-ac3a-4721-8771-571ec91207a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.245.54.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ffb4ec1-60cf-4f53-b18f-624869ec2696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.245.54.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e3bd0f-2fea-4726-b9c9-7f829f9315a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.33.226.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4b2c29-2358-4c0b-acfb-7b45fe3e7a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.43.74.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68588665-47fe-4fc6-95e6-96c154dd287c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.43.74.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5aceaa-98ef-4049-86a8-c1244bb33e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.43.80.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4569829d-dfed-4b88-91c1-cb1e4d4a1633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.43.83.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbf1b65-dffb-41e6-b5b1-28cdfee42cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.46.106.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4434c416-9063-4761-bebc-4c8c24a2ba26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.46.111.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76372bf2-576b-4dbb-8c1a-7c038b73dd05", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.74.112.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36624068-27f2-4f96-85f6-7e0ed81cbc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.77.29.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c663056e-a27d-46a6-a5ba-3079d6c77a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.155.134.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92830a9f-4a1b-4af3-b4bf-f409a02c71d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.235.16.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69aad3d8-cd9e-49df-818a-f1259fcfdea5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.248.207.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038f1ae9-a16f-4e6b-8b38-7b1eeb184508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.48.241.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287e2492-6c4d-4410-8ae5-ffc0f3ec38a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.177.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7a01c4-3683-42b2-bb5e-012d952374ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.179.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9674c3-13a7-464b-b2a5-85a30ef8e5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.179.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a837f620-6d83-4c8f-9414-f90f527b2017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.135.49.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3cfb4f0-df6a-4bcf-a047-3c701d44a0c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.145.140.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092d9623-3593-4f08-be16-b6b83482eb72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.176.52.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227e4090-bfe7-47d4-a85b-7979cd32e859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.176.52.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53ca163-5818-43d2-8dd4-c0f9b1ac24ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.106.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e092f69-5c33-4f99-97b4-3795126f0f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.122.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91228517-c8f7-4e36-b51f-97ceab77901e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.70.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c768f9-2dd9-439d-9daa-df735208a71d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.75.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd802907-9b19-46a6-ba49-95637504ef88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.82.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c98fae-d59a-420e-8061-e437a55f944b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.82.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45aebf4f-77e5-4ade-9c83-282ab2b121d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.89.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69df50de-3220-464d-b5cb-f266e1e4ff54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.192.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0dd4e4c-de5b-4fce-9293-47eb34c889ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.199.1']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e26b762-7943-46e5-b333-c4a60497ee01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.199.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1c4b20-a552-450d-8201-4de1a0b018a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.199.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7269d8-b56c-4336-afbb-1fa8d7478a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.201.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d559905e-25dc-4d93-a52f-106572213a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.202.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e741286b-7abb-481b-aea3-ee50d51ee117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.203.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbc231d-1070-4411-a0e3-0713d281f37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.203.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f200e5-e6fb-4bc8-9ac5-9c4788e1219f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.203.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7fcbae1-a1a6-4c05-b3d0-f39d6662d994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.203.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f672e7-8ae0-4305-b624-2a15e9b11e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.203.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642cccf6-8975-4b4b-8fc9-8661b1aaa1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.204.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64871ef4-f1e8-4f17-986d-6fb7d9313583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.204.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b61eb0-4fec-4d05-9a92-50d653dcd1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.204.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e8ab56-eef5-4084-8886-2b77879faad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.204.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29376f2d-0351-41ac-8f16-e48f8f63bf4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.204.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c769f3-e83c-466c-9836-ef3bd66ebee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.215.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2e9b32-9e9e-44d1-9895-620f009166d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.218.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d115523b-ddb5-4e1a-bb9c-fd1a25f38c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.220.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e43374f-3b25-4f63-9e80-2fb650c27806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.220.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1602d1-9bcc-4991-ae13-0bfe119d2cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.220.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa52943-21c3-4c22-8ec2-224788a468ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.220.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71a6a03-baa6-4f1b-bd3e-fa93bcf7b995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.239.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb11e1b-ccce-4a3b-b9d5-bc5eb001f599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.106.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea434bc9-367c-4f7b-9c8a-8080a56937e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.233.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befd078c-f7b2-475d-970e-48b5b9a4e267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.249.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cdbfd3-214b-48cd-8406-692155528eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837bcb4e-1c01-46c0-9f1b-5351456cccef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d56fa9-49bd-412e-a809-516459ac8b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3284211-be10-4e4d-aecd-fc703bbed3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c520d43b-a065-4ad5-8238-79d648dc2b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25fc244a-bc40-4b80-abb3-2dae2014be35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4eaab5-76d2-4cfe-ab90-973929b6460d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3edbc109-0618-4bef-9751-e7c9c1b8c86b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350777f8-6234-4fac-bcea-bd497fe2b346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f1b263-e325-4e54-89b5-0100e69b34d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff85364e-2980-4741-899d-6016107a169e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f3e474-0bb1-4adc-a826-a252f57fb020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b38a442-eb46-41c3-ab60-19714477e166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52fbb87e-522e-45a6-a30e-c1e9eb41ba80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d0f61d-fa4f-4c99-a3fb-f8cc00e690f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82977eca-7327-4999-b15e-44607f62ba86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b076c42-eb8e-4bda-8652-fdd0812c1a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f116138-f340-4783-8ad9-71155e02f449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce86d876-3941-4e1b-925b-6cb9e3503caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f537c090-7c06-431b-bffb-f1a6c668173e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0768bf4d-f50b-47fb-b1d5-ced3252e93c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99080aa4-f113-460d-85ea-49a1623bb637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414f3a9a-9fe2-49a9-a964-d5cd427b7912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5377fc5-b5cf-4a4c-bf99-0db3c055b943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83ef2d4-b9d3-4846-b7c9-bbd7dace018d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43102241-b575-4d95-9a23-09ecc8407b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228c11d6-61a9-4dcc-afc5-a1c33f95618a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe49be6b-4b98-4b2c-b0f5-d036c0822765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a60e369-9bf6-40ae-9f0a-0b29a0c5870a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc86f048-4165-4b7c-bace-06b066d9c489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331f92d1-d465-4ffb-98d2-d05c0a4a7129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eabf2ca4-7f84-46b4-a847-89909acb95ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560c6701-5889-45eb-b5d9-22651702fb0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be0ecc0-2f16-48cd-8e5d-1b2aaf31682b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed182301-09eb-4f40-a24a-eedc51592494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65cbf23-e9e0-4a97-802c-66be524b6622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06fded1-2273-4ab3-90bc-ec4ba2dd7d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4191a849-a459-4a29-ae0b-8d1dba460ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26c6cf6-b7b8-4b02-b46e-e7d49a57a90b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574a3d10-d961-4984-bfa7-91afda10d511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41b17ed-dc25-40e5-8771-aab0ba4afbc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08003996-b020-4da0-b99b-59611f1ad046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cf0a26-3209-4baf-9200-1cda96ceb163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa674d7-36db-46ea-8280-9eb042f00379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8836252-9851-4733-bc57-4f55e963c128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0de670-a264-4c83-b942-c1ea750d6330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9626c040-e232-4f36-8ead-8ba5ec4878a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32b0f0a-d3c3-4d71-8d87-fcd6af9c1efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81469473-05db-438b-8e6e-0e3d1d0bc9be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38921fdb-5db6-4daf-9ce7-903cf7ff2c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07dfeb0-5f03-41b0-bd80-dad73cd1c306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d824c9-667b-4e1e-84c1-daff73600f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef92dff-1678-4d51-a5e5-269d9438ee7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb63cab4-42d6-44e7-8260-ac52113dae8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45b8cc8-1210-475a-b456-c3189f553ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5941efb-2a44-4e06-8846-4d17a3575309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0baaf44-e73c-49a3-ac44-55a59b9476ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3461811d-961b-4d66-9c20-043f6003f1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1418ce11-82a4-4ad3-90ca-f3facba4556e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d579ed-c44e-4de0-94ee-20509baafbcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5f64ae-d757-477c-b1cf-92b2179b51fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40ab264-6eba-4583-b763-85ed21f4af10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41aec433-f8ed-4808-b993-3a750b35e82c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190b98bc-1035-4946-a298-3fdf702a10c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bf3a34-2f79-4710-852f-dc3f7480c90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f022f72-524f-4642-9a9e-82c664c9c5da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a649229-132a-494d-a003-eb466c3cded3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2185361a-56b9-45cb-83b7-af0c66e9c8c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f37d8c9-166f-4a81-807a-506ac8819767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1890deb7-751e-451c-9938-fc0629e1025f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1f9938-fdf3-43b5-9590-76b96994d04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b797ded0-afe5-4360-9a7d-c8eb32697205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe506a0-d043-4ff7-acfd-fe5ea470799d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d42ab0-07e2-4719-909e-32bb9f57afef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed04e14-95fe-4132-b9a6-336ef7b8d34f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51dc9bfd-3c0c-4b39-9def-d10d0f7e086f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326ffc43-5ba1-4af3-b86b-5e4c14df0a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e5748fb-e2b9-42ad-9793-cd6938a58ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0a1423-d9d3-4afd-ac49-7e44039a0206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5c9e12-dec1-4a35-b520-8231681e6261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53fbdf1-9b92-411d-b3c0-df773a684d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e68fcc-fa40-4722-b6ab-50ca960a243a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e666e29-8d66-416a-9b58-56c3e9b1f319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da834ef1-b8c6-49c4-8201-7b295ddd433f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928a7da5-e2a9-4c06-af97-ccb14c90cdcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef075aa-d4dd-453c-873a-c45e097e5738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc9348f-2144-48bf-8b4f-6a1c6920d2be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e0184a-cb4d-4f0c-b688-a782d5123bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af0f21f-6e68-45ef-b094-0532e1397340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42db2139-5a03-4d8f-8517-5602d25a8073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32fa8df-4af7-40da-8811-548e21a993db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89674988-809e-4d37-ba5d-30f3b797743c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9ff8bf-5970-4e38-aa15-f39865183152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61041526-1b89-47e8-8db8-7d320fc81ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e037366-df80-41ed-82dd-e01409bdc6e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c826a81-38f1-4606-912d-18b60e147341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ec6245-0f2f-4e3c-bdcd-ee5c82b5688b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9291d8-0a0a-4353-b964-fc7ad7cd1342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab5a0d7-9900-4db1-b96a-715503e9e6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef56dfa0-b4d0-41ca-a9d3-ed2ad33d7b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2f4479-f3c2-45e9-8d37-aa7caa82fdb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9a9bcb-b51b-497a-82b9-6de38b2fe0cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afacbbe3-877f-4cd9-8d3f-08e758aee602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ca8801-1e1e-4882-ad44-919d5eb8f787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4f7396-994d-47c7-b332-024d2c3ae236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6b9974-f2db-478e-ba21-6a2352e0f3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d74aae3-012a-41bf-90a8-08935a539821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66814ae1-e0f1-4306-b49d-0f53605290ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac42158-585b-406e-ab10-586172b6e608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57c3ae3-b9ee-48bd-8a92-239aff387d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f662b11b-f9a1-46c6-973b-9fdd9d61fe2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.255']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc20c991-fdc0-40dc-b827-866b5bccda01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505a79fb-fcb6-45bc-9fe8-885e0302065a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c5090e-8dc7-44cb-b313-038aa27623fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fa14f0-5e63-4a27-a8df-a07765e2bd8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce9a9c5-77fe-4004-8212-729f41b54fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab35cd7-ccc3-4ade-93b2-d14e50536719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306883ea-d36e-414e-a962-29435f0ee37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad47e619-6d01-4497-84f7-8e85e043e5de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658390f9-982b-4415-9356-cbeb7ee1ea6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d093a9e-8a31-42d4-861b-8649f73cbd27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870aafae-9a3d-454f-8dcd-304335f59dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dcc083b-3e88-45a1-ac68-aea211138e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7962fa-5ec5-4895-9f1f-080eaa85da7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5e8fa6-4ee3-43e1-9af0-e3b50cb5ec48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1cd9bc8-822d-4e6d-bd0f-1993092269c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936ef8af-c037-4575-b973-e5f6c9653a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b7e46e-7424-406e-91e0-69b3f2c1aa62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dcdce97-20ba-4861-a912-ebec970b1b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b9dcd8-2d77-4786-bfd9-491fdf534e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--023cccd1-d6cf-4ad2-8cd2-baf9f45def4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ff17d7-f97b-4b6d-b121-b5ce389033a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef75eeab-4296-4f34-83d3-434d36b1be7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cfc2582-b7bd-47fa-b4ba-1f5265fccc7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235132be-cdbc-40b2-929e-de1c06995d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b65f55-ffd1-4003-9797-65d185d68e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06eae46-e9d7-4a82-ab64-d47bfe2e4c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4ff488-52b2-4e2e-9afd-bf038a446232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69bb06a-3d37-481c-b3e9-96cf9cb66fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9772ba02-5ce9-4d7e-ab0b-ecd626e5f920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f9fd81-1f56-441a-9e8a-3ee7052564d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13392148-49f2-4c5c-97e8-dcb019757ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46d0321-d95d-4429-9b01-f3660f9fa2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4584ca0-0da6-4cac-8551-0aa02a592a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a74860-cf04-4e9f-b656-1f029c1f18ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122895bb-1be0-469d-8799-0c1c2112bab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b161936e-ddc7-4425-8433-8d45b8ca28f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85af94ac-f547-4e8d-a20e-c042a647c912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52291443-17e4-4485-90e3-0df961c98e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad00dad-b4a1-4e8d-929f-b58b2d267a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7f1133-9e06-4708-9c17-7e3fbb6cb85e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8dd018b-3e77-46dc-81ac-9dba42f6ffba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9642d534-9094-437c-88ae-89dc2c9fd5a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8434e4-ba3d-4ef0-952b-e776cb49039e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5633f58b-c9b4-4cb1-868c-cadccb1043e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3088671-8437-42f9-aa7d-847c784a766f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac296fb-c585-4e8e-aba0-f04304bcba18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b9ea07-18ab-406b-8b5b-b56102559748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cddfbbf-f311-42e6-baa9-abfd993f8c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b24847-9665-49e4-9c5a-d4cc885c163a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df93f29-2f7e-4371-a2ca-7fa3f4ae06d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99280a81-e6f2-44b4-9d1d-a8bf1690a765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4194598d-a0b9-473e-8b61-ed4cf61791c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1250b5-a4f6-4786-94c1-0c32a484b70a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e6775b-26d1-4431-9eda-8e71a6102a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6593bf-4d62-4391-af5c-4043654f168d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcca1043-a555-40df-b5d7-be3ae283f97e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.244.240.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4455eea-9ced-4de6-888a-865813eabe04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.37.105.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176d8ca8-36fe-46e4-abbd-d9000686ef5e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.86.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da6064b-0492-41c1-8f89-f9aeae7ecf40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.91.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa86c20-d67e-4ad7-8b4f-9ad9df4044f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.134.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecef0ee-3d65-4bb0-9b38-b44d8b2de526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.199.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da38daca-f96e-439f-87ef-713f975db845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.50.140.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0b399e-b3f2-4fc6-9b60-d53cf1abf688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.50.200.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de00a6da-1b01-40f1-8cc0-5999be2a92b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.71.56.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72be8026-8d5e-457f-a9dc-91f503f02bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f769f82d-99b8-4c60-b453-e396a95b7045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25cc8747-d93d-40bd-ad0d-623e666ff4f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.57.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b34b3d8-c822-48aa-8380-4ec325410643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d65e548-4368-4e43-a583-6a531c5be77e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.119.200.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750d930f-ee0f-47b7-9194-07c9e158879f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.63.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edc54d1-17e2-4c4b-b1d8-39c0a6a8a3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.245.176.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9207ef73-e082-4ebc-9aa7-810eeb670532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e3349a-e359-4804-bc9b-c51400d97879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6da319-af84-42d9-a878-31c626aae931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba87dd9-f6cf-44f6-92ac-b49217a70fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca203d7-34f1-42c3-81d0-7143b32dac61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b4b2a8-7482-4a12-aa52-bae7e456296d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b875bdb-3669-4efd-829d-fa270cc10987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e1ace7-8682-474c-985b-b4b01b39b90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f4f5e4-8f85-46cf-abcb-285542b41ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff5d200-de1d-43f2-b771-52f17d064ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ca8f65-78cd-4226-93d9-2f1464bd4e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e370a906-1a49-4324-88cc-2c5c5024ff7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2977ab92-2f53-46f4-b99a-7a29d4358660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af44680-695d-44aa-8273-014738e6d0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82462542-03b4-46f9-a4c6-4bce316a76d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5748861-1cf8-4de1-9194-63e5d9d72615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--234a3b4b-3973-4831-905c-29b13cd76ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a240df75-be2b-40c5-8f39-f1fa7e3b545c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393d03b6-c419-44a7-9cb9-3a89585d4aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd3198f-e0fd-4f3c-adfa-5c603bcde588", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879458ca-4eb4-4ede-8c93-5fc2ab813313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4fef512-8f6a-41ce-ae43-b62da85ecb37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1c23a9-66fd-46e3-8020-2ec7d9fd2df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f24e56-728a-4780-8358-b5c395ddf20a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af1f9b3-1191-41ef-b5e2-21ebafeef196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f941e6c2-9ae9-4256-8d5b-a05945c8a797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ebd264-7073-4e95-ac22-53553ce3d4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f279c59-51b1-488d-a205-cc61daa43e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb55ee89-a72f-437e-ba57-b374fa13c249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a585ec5-4b6e-4664-ae6a-ecd14e0df999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2318e106-86e9-4054-802e-93d2be5ea8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3dd5d4-55e7-469b-bfe9-e882b6f27b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18cbcbc8-a215-4728-9282-57488891470f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7903f4-ec47-432e-b962-998e3f0709bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa01926-aa8d-4cec-ad64-f0d873170d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191b3f0f-b846-47c0-afa5-4fac508ea6fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9224d5c-a3e9-4fc4-a743-3b907b4bfef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a492d00e-bfc8-4dfa-9295-274cd7988be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e916103a-9bdb-4da4-b2bb-afeae338ec81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1626dcad-0aef-4deb-bdf0-8773b5080d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6688c21b-371e-4294-9997-e7f31debbe3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f0af84-dd0c-444f-a967-56bcc45d4e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2af3473-df0f-45f4-b20a-ceb653097a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ba31e1-225f-4a8c-b64a-7fb7b5cd7822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2639e31d-59e5-4085-9d4c-21debd5758d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3457baa-ffe7-4b63-9028-49feb9d7ba05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c8c591-f016-4ca9-a96f-2360501b49a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b337e7-4233-4909-a967-e9ae7ae91b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e1b762-febd-447d-8ea6-fa300d852b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbf0760-1df8-493e-9cea-445f8ef9e38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13cfd687-6147-46f6-afed-fdf47e12e2a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e219903-6771-43fb-aacb-3ed9472e436f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.32.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b141099-c74b-4b3b-adeb-c8fc62d16ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.181.119.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445751a8-150e-43ac-9c01-be1fec349fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.80.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8c00bc-1b25-4248-aa40-976d23da4df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.157.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780121af-86a5-454e-b1a9-18646af9a171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.165.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1629a97-178c-42d2-9457-e49a276feab9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14f1337-f7e3-4b1b-82fa-b66f2178914e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f39f56-166a-4ab9-9ec4-20815d5d334d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff6ac71-cbad-41f9-9cab-7a3e6fd89839", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261a23cd-7a58-4fea-8e3d-88ad4867cf1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b09405-c763-494a-bbd4-29ff6da26dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.88.128.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81cec46d-153b-41ec-8c5a-947cc426f81e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.108.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa085653-4fb0-4194-942d-124052c97613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.115.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6735e357-bcca-44f5-855b-7b2310ac3935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.116.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a478b698-e895-4571-912a-a8a315a11fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.117.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064ccd8e-937c-42ef-b126-c2ae8a25f2ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.40.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b890f9-79c8-4ad1-b332-0407e68f223b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.88.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0581a43-ab5f-4383-a9ed-8878b50bb682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.89.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b382e4d1-0c47-44b0-9c91-6f4ad3d22aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.92.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f53f09-8967-4ff8-9bac-b374b6934c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.97.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7c29e3-b3b4-40d9-ba05-4286dfe0b054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.168.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d60cbd5-9fbf-4e7e-a510-b568d71add61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.168.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d12fa03-05b9-4c81-8b8c-8258d2dd8ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.196.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161b7c3d-0b42-4e83-8503-503e381e9877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.205.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ab80dc-3513-4be8-9528-bfab3a2086f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.32.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f401f05-125e-43ab-8a68-014263a63205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.32.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89846934-b517-49a8-b131-3cd79b9b6810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4916238d-54f9-48e1-8cfa-c51689f865f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d389ed1a-e6e4-4b20-b4f3-446edb1afe10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e9a44b-2752-4d70-a46a-152f0bbe46c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09257a7-ba3a-446e-be5e-8c01c9632776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d76690-86d2-48b3-bf81-46eec2c80d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecad5a7b-e9ff-46ab-8e05-6d480579c425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.200.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42abde43-e63e-4326-818c-3552ceff8906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.202.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a8d8df-ded6-4dde-b480-7a5e10b8349e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4b9a41-09ff-4aee-890a-32d35e86f098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d970ea6-878f-4163-9a5f-2c0ef811ca54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96595794-10bd-47ac-8d10-999780f83eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91e6eb3-887c-440a-9ddd-0ba8be5a8592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bebe52-ac88-4461-9a3c-9e82c2bd7680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.225.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65934b8-813f-465d-8982-5ad6b4869d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.233.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f60686-006f-4ab9-841f-a985cf0d12cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.233.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f4cbb9-93c9-4b5b-be43-918a041fcc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.248.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2253be62-6199-48ed-89de-46be4b8cebee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b989d9-c9b7-45d9-aea7-9fc4d5ab95d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23bdbaef-0766-40b6-abcc-97696d818b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbe10d7-3cba-416d-b357-7477b9523d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d6aa3b-842b-4e52-8018-3b4ed464c46a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.72.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7d4319-782f-4fd6-87e6-e204e83486c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.86.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61dab96b-24c4-4110-b448-bb7d5f0040cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.86.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af84686-842e-4fab-a547-d19f28f5de07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e821d0ed-9700-4ef9-a036-fabaa14efe6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e508ae-a7bc-40e0-bafa-e267708eab2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377ec533-fa88-485b-804a-e6d32ceb0542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.138.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894227c7-05ba-4205-ab99-89c9ea618c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.139.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9b8868-77e1-46e7-a236-9f1e502e2b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.87.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb3ffd7-4e07-40d2-a864-ab24fdac7e99", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.87.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea4b1b8-aa40-43ac-bba0-0e86fd3209d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.88.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--914dac73-23ea-4704-81b9-82b95296583f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.153.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53ddbc8-8ec6-41e2-bcbb-3d93c3a957c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.157.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945f338d-f296-4e65-961d-844ddbcb8911", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.185.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc85377-d873-46dd-8031-1ede057e94c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.187.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd5eaa1-121e-4c71-914d-9b1297a871d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.200.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0c4ff3-70b9-4d5c-8177-2a06c55199c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.203.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629c9d44-004e-4306-99fb-dd5bbb66b3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.208.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3cd16f8-e8e2-47fd-aed9-9f519ad697cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.210.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f44bf7a-e67b-43fb-8848-c57486c77ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.217.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ada487d-2371-4d75-b11b-6386e2796ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.218.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6342325f-a62c-44e7-849a-334e1ac72fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc396568-701d-4ea9-b5ee-8c1586e23c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2afeff9-12f4-406f-ba78-6d5573ec54de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61d0457-148b-459a-8ff5-24eb1e5eb75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.1']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79bbb45-c01d-4c00-80dc-d53f4f169d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb6b201-b9bc-4f13-834a-1fcfbbda7020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e51b92-dc6f-4c32-ad3a-f0b8b4ce12b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1d74a7-2031-405b-9ce9-1345e00ad14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbe3880-a4fd-40cd-8376-9cb942c3fd1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.78.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb05db0-0c69-4aa2-acd1-76d2ee231610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.78.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5035bcd2-52ea-4487-b46d-1bb2c76738bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.79.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c661ef-f2fe-4945-b6cc-12024ffa93fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.87.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a387738d-d632-48a2-a5e1-13aaf1366b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.89.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e4ae74-800c-427a-83de-51abf7d29978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.89.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a367b9-2a13-46c5-a806-919fb63bcdf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22267322-456e-4ed4-b020-9e0f3a72e949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.94.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7494b102-c4b7-4081-88c4-7ce19b610bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2629d64a-2e7f-41fc-a500-13e6f715e04e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcb1336-3d52-4623-adc4-c687caeb6393", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f74c6834-960a-4647-9d04-a61fedfd0775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fae51a-e8cd-4548-842f-fc9a2fbbee61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--570f81f2-499d-4582-8f73-5d90c85f92b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4687202-2074-4901-9b1b-1154a4e1a824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.201.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27af1249-89b7-4451-b1b2-40fd03843c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.224.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2242ca5-9291-46c9-aebf-0c3f8134de64", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8bcce3-d1d8-402b-bee0-2e3b409ec6cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259f6c3a-a6cb-46b7-9d35-5b3a9cc4b8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7e2d65-5758-422f-9e15-c732a2b2b2ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.195.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b93d01d-a853-4dd3-9dcc-f1256df57b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.196.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396d7919-1ca0-4d4f-9549-7501a0d06336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.1.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77039283-7922-4b6d-a223-709122fb6290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.1.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71004a53-1da9-4c20-8d96-05dd79433997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c67f5a-8d23-4643-806e-0295c630bfa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a83d46-9ac7-4fad-ab6b-85f06512456d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3931462a-2b3b-49c7-9e53-15cebf0060fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff0050b-3310-49b0-a83a-33bb47c4c912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8371395-ed78-4d70-848d-38a9c563d24e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfeee11-01c4-42e3-911b-36eab524ef61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0120718d-069b-4ac5-b9dd-f859208d83c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e754e7c0-453f-42a2-975e-0f88827e126f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd76afda-eb07-47af-bc2e-a0e138223bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--162bd2fd-fa82-4b94-9bc2-0671b9b7eb58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1626fa4-8fc4-4df4-984e-aa9f5b6e945b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683dce16-6dcf-4b96-b7b1-42e2cfba7162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8ed946-2637-43f0-8968-e591db22a4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.20.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0c2cae-e69a-4e3e-a65e-f2c8d9adbc62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.27.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8b4436-14ef-4b9e-a339-69e3fafe7686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.30.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83ec4e2-572e-4517-ab48-fed4b9e1060c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1caa806c-3568-4f99-b3da-65442b2e1485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5a95ba-4815-4e79-924d-87309b48bec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68e82e0-0105-4abd-8c40-d52c7b3eb852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a067f036-dfde-49d6-9e75-e548258f0c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b831ec47-e66a-406d-a405-d3dd12b48577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cccd01d-3c64-45b2-b047-7b1cf2453a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3acaa0-a2c3-4c19-992c-3de0e5f93559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.39.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2fcd2d8-f854-4487-b372-25ab907a31c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.4.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6a18a1-b88b-4379-ae9a-6d827d48edac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.5.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7383ea-a1d1-440a-a306-4016a6e2fccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.5.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee38ac51-c66f-4e94-aa0e-85a4830289c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.5.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625daeea-e7f0-4ac5-a874-c588ba20595a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.57.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fef1707-5fab-496b-b3dd-c72ecb368501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.6.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ac9b3e-2cb5-46f1-8172-925307ca7640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4fcbc5a-0a1a-437f-a05e-b7cfa2217162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f36facf-cbed-4612-9fc8-4173df69cdc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e13ec5a-f586-462b-976a-3e3eb50b51e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdfcc5b-c58e-4dcc-85a9-6d9850035b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ba077c-7ce9-428e-8eb3-bc4d01377188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fad5137-4c6f-424b-8f50-c2404cc22098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef437f2-7b99-4738-aa3d-1ea58d196872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c9a7e1-2dcf-42fe-b63e-581498afc88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.113.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa34c0f-4909-4ad7-bc39-2cd8947b3c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.114.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa43e65-47cb-486e-aeee-c3878cdf5301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e805dd9-5b2a-4a94-8e25-b6be329f2b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e87372-ccbd-447b-bb43-7ca495ef9f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdf74f6-c398-4401-a0ec-688442e043b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1bcbbe-74cb-4372-a129-1a2b5a507a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f571d0d5-f42e-4608-b7dc-dc56410dbb1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f165b5d-af43-49a5-99f4-f38c0879b839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aceab53f-ea89-4527-9f56-2392b88749c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb0b13b-fb0f-4cdd-9789-4d7e31758aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2bb634a-a6ab-421a-8138-88ba92d14f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c42d9ff-eb5f-4fab-8825-f07ade0a59f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761c7f44-cf7a-4fdf-9c0b-cec2c67fd6d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79eea8cc-8372-41bc-8689-a4d19f1ae433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5988aca2-9ed7-4771-b59c-cf78305cc4bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9464890-569e-4360-b955-92bfc4957e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d72f108-9016-4280-b72e-77e5e0b21ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e03ff38-8b76-4238-92cd-01f437793c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d98b7fe-1ff3-4ff0-a0d2-4f5fcf64c94d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e2f3f0-2248-4a12-84df-23854961caab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.0']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43373a78-a948-4be3-a735-3c6b3f36b9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290d0fc6-c2a9-4ba7-9c56-008aed421cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294d1540-9376-496a-9ec7-4922a73a3861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac5072c-e33b-43ee-9756-3f99b13d7a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aca9f5f-3cc2-44c2-9c77-8004ac48ec7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c2f134-2f6a-476f-9f67-4fb9aeea6530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66d9a06-6683-4b2a-9b5e-a11477b61bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f052675b-983f-4f2b-9d44-4ab0da47f454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4810a872-dea8-411b-a6c7-2ff8866fcdc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff748ee-f51f-4159-8e7a-9b601c4816a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58404ece-a80a-4aeb-b3fb-0521d0735e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d179e337-5645-4ac5-8364-77e1eb316372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afea24ad-39d7-49cf-ae11-a782c872bed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9600108-ad30-4e98-b540-455ef76738c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455f58a7-bf52-4fd4-be31-1f3f0da56f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3da4ea4-1c09-4af4-aef5-958e55195507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd592891-9c6d-41d6-8d73-09902f28a7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728c9eb9-7b76-4cd2-8ba7-4e54f047d806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b513ca-62e6-46dc-92af-8b589d2d37f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3422c051-d0e6-4876-b09c-ef85b9000c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aee6052-b506-4f3e-95f5-263b17997c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.8.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aafe2a3-c70d-4728-ace6-62e3b1a14d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.99.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c2cc1d-0fb2-410e-9aeb-c2aef2e3d4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9d1d5f-33c6-49fc-83ce-1d4ac29eeb48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae91310-9221-49ba-a9f6-e97605f7576f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3eb28c-d75c-4097-b9ee-81d6d7b8e265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6cceb60-a2ac-4507-87b3-8008f9dba19e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685b32a3-f8f0-4175-ae1a-66e44ff84bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e84f858-189f-443e-bcb5-f8e0944bba85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f56cc5-a974-423b-a6bd-e1ae7d72b840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08028828-0b99-429f-9da1-a7aa6cf14c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1a0fd8-cc30-4a97-9789-b0ce4bd4c798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94b10ce-cfda-403b-903f-ceca15fd6202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ee4e12-cf58-4a33-9742-0f4bf45bee37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df123407-0eab-4b6d-be01-cccc4a338d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae461493-0b46-47a3-a1aa-e2c336a6fa9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d95806-d7f3-4c43-a460-b9fd5a109a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1234d61c-e588-49f9-8982-0184795b0736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ea6ba2-57f2-41b9-8669-59d3a6effa0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1f2e8e-e4b5-4d88-8a29-94bc13631d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a244c6-46b8-4c8e-a5c6-9d8d0f28053b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e98372-81a0-4619-bb80-d2d025abbbf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef7d9d3-46cb-4682-83a7-5bb9a19aab04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b72ccb6-a2b3-41d2-9139-f7216d1b55d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb8eb97-53fd-46c1-b2d4-24ba52a852a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5edfe826-f500-4208-bb21-b472aa888a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29fbf9c9-6b05-4802-ad88-ca07973bfa7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f63bd0b-7898-41d3-b97f-acea94ed7739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5281900a-94e6-430d-bb86-a7893f276e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9fe32c0-9900-4578-9ecb-902088881e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1735852-5c0f-4aef-8ae3-1dc2005923c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828739dd-ab8b-431a-8507-698a006fc926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0648d46d-d78f-45a7-a869-eb4921c0dea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98dd71a7-bdd2-4215-8b1c-a75aa5bf6069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28d456e-3d43-4b38-af3d-f122c4c32267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2430acb1-fda3-41a9-8edc-02b54bf2c08e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6022cb11-9c2f-4d28-b6b5-553c1068a902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c36ae86-e5ac-4073-80b1-656d1e5ba43e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b0ab33-9533-4c05-a0dd-50af07c858e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e193e0-e42b-42cf-80d7-9cea64c016be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af93161-d4db-4a4c-903f-a76de2aa1d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4a8035-741a-4512-8640-46370c2c217a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c15a3c-bbc2-4782-93eb-d03c9b26dce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.50.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45eeeed6-7b47-4c38-be3b-a2d58fd0707a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c088da5-db14-4db8-991c-32cb83272d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87571f8f-7ab6-4413-8c0e-8bbda4fc986e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.80.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647c932f-0a20-46e0-9b0f-6b1949cb92d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0d00e5-8542-4781-92c5-66585ba4eeaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d936952-4273-44c6-8b51-216212c252f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9e93e5-fbe1-4406-8e6a-a0203c68410c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca7a483-7ea8-4d2d-a9eb-32658e936a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d9a6ba-1306-4590-8fd5-b6b9d7121344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27660ea-b6ae-4160-8df1-d84ad20d4287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.85.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d0cadb-ad3e-41cf-ba73-3eea6924c59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022563de-b1af-4d6e-b649-98e4efbdc9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1dd40c-0746-4746-90ad-e516f0cbc3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9980dc4d-de76-45a7-a925-041023dcdad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeac3e24-4328-4e44-b9cb-9a63e5e504b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa26e991-c176-4fa8-8ebf-8ee7a25fe3eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce9fde3-60cd-42ab-a763-8988c0fc8153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f80ef9a-3190-4be4-9b73-97e5e28df916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7168eafd-cfc0-40a4-9b24-7d6e0fbe2f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.9.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bedef9-061e-46a0-b263-c8de395c5e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.186.232.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f5fae9-6351-4f67-b82e-e1f26caebc75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.146.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e76ff03-5d42-4e01-bbf6-76b7fc4c3004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.198.248.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36450438-9f5c-4160-814a-6946077c54fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.203.42.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d66f5d-5507-4880-b5cf-f3808c3af77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.210.107.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1df8ba-2549-4140-a593-420feef6df17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.212.59.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89103e6c-70a5-4392-9764-b0139cf1984a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.213.62.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb453fe2-83cb-44fa-96e8-c35e96c4f60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.56.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d75e87-dc82-4bbd-ad7a-ba56ea18033d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.58.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a64a2e-bcf7-4bbf-8158-bfc7296594ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.60.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84692b1f-4582-4ccb-80ef-3bb1d14375f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.66.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d8dfa3-932f-425b-9f90-7168bb7bb88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.66.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ce3666-b95c-4c07-b911-847509c6d595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fcb65a4-2cd6-46bc-974f-e2a0823fd2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5834fe9-17b7-417b-949b-661d75055bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd8a383-eb5b-4786-a819-dccc36b00067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.238.10.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242f3711-5526-490c-9350-53ac84749e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.19.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c095f1-8dd6-4aa6-8ccb-88df54c83b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fdfabca-81da-469d-8df8-d954315b7f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac05a02-d363-4440-b811-9cf26e437771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ede8524-cf34-436a-a4af-4b8f74b40b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9967f5-f96b-4cfb-9995-551fe25ab1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292510a6-6b2e-49b4-99f0-f1b38ef7f7f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.57.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9865a2b7-cf94-41e4-b7df-57557cd22f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.35.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e45e38e-9c54-4d07-8039-cfa0036d0b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.46.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--872fc244-ea26-4654-9a95-4aa13dbf0fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.216.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea64cde-769f-4802-b0d0-67e1b6baad57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.216.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14424318-7285-48af-8168-16211bc2c4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f13b27-2414-4f45-8d4d-b1f51684a02b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.250.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc98f8d-20f0-43f7-a358-aaa9687302d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.41.0']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be304764-7f8d-44c6-abdd-6cc5c76d69ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.104.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e71250-bc43-4ec4-aa51-7eea5183fb05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.84.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a46d85-8979-47a2-83e6-8ac6d78e9ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.225.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a043be28-a83c-4d9d-91d6-1b6df1f38bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.226.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5883643a-c074-4433-9380-0ed6a44be790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.228.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720ddb93-9418-406d-b6bd-dbaf0d98ec13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.231.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f0f046-6bca-47ed-8ea3-0c02f15abbd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe02adb5-bf15-432c-9acd-241bb7f1aed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.245.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d9be3c-e9e3-4692-a645-285c178c8838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.234.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a11840c-e385-43f3-851f-bfb28a961acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.234.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b908cd-5da4-4963-ba46-3d6927b04237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.235.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a6e4c0-8a59-4784-b363-916bb610ffa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.2.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a85d69-3a91-4fa8-9234-7e69195b8cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.24.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485bce98-999e-48e7-8f1c-cae16e12ff6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.3.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67d7784-5911-447a-b0e0-12fe9d1a5f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.35.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1594b3c3-f57b-4679-80d6-b0f033d56c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.42.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a85039-a5d1-4f49-9282-b52896fa6e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.72.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461478f5-8c23-429b-bcdc-33e8f11ca2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.73.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a784d382-2140-4f94-8f42-0a1f5b00395f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.88.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81fbd9e6-d3ca-41d1-b7ff-dd1b5bc40685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.97.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f71d9c4-6be9-411c-b6f7-957c89019466", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.63.80.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf8d648-9df1-4b5e-810e-e3a12aebe7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62817c4c-c472-4642-acda-49ee456f4590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a10031d1-81a2-4308-8c38-11b594af5f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c442fccf-f5cc-48ec-87f8-59d6d9b18a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662fce81-e6de-4e20-973b-0d70c1de8c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fbc33f-e542-45bd-baa0-4559a330fa2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b9b234-822e-43b9-a9f1-f1bbbce27418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d71872-8cb7-41d0-a1d5-f583762ad812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f116f92-979b-4a9a-8aac-1a1214d6b676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336e5825-d207-429e-86b8-91c476e51637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6d3098-3466-49a8-9ee8-0be8bbad232f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a759968-aa08-40c8-86b1-76f5411a0734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea086e6e-43be-43ce-8bd7-b1153fa3a98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164d160f-1cb7-4d7d-8ea5-1dcb181ef97b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2a44ad-0455-4c46-949b-8c28f865c8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085bc997-63f9-4beb-ac7e-7986c389f95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad87076-2100-4277-863c-79a0996b5f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d762b70c-5cba-4326-9d8c-cf84ada61c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1eed11-e464-429e-9dc9-ef6b4d2d48db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597e32cf-4ad5-4210-bc65-d7ae4291aca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b630d538-4d37-45d1-befa-6b185a411987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43b65ab-6307-4999-85e1-b10f7c63bdab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcff59a4-8ab9-465f-b2f8-98420dcad7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9f0a30-f4d2-4c4b-a995-fe40ea709e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678ce209-69b8-4c94-8854-1b69973f5e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42821b6f-9d6e-48c4-85d1-6eae95f4eeac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea535ea2-0db4-432e-9656-6b96d6fcb6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd0334e-0284-42f1-ab6d-adc0d0b5dd2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3dbb77d-cf97-4501-aaac-7a487ef919df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bed3fb7-04b3-4f37-afe7-43bb706693ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb749e64-5c12-4263-8d56-62c8874c8c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d56aff-4fca-4126-8aff-316484786193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83410ce8-6807-4589-942e-49e0d4134fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157f7605-701d-486b-af51-d6ae0993156c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf8e3da-658f-4dd7-8b3e-98c16250a374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab434a8-dddb-4879-9c7b-04d857d5d310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d424986-1b07-4aec-a2f2-e8c0da1ba845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4ba395-b0cb-46d6-a3eb-e834d5df4735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e283e2-fa35-4da0-b501-df98602659cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c68759d-6c48-493b-ade3-d8d02e4aa401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad98544e-19a3-4e38-8fb2-e92942a9336f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12271403-fe6a-49e3-a25f-7e908c30b923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181377a4-34f3-4c51-80d6-c0584cab6d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6e9d0a-d6a9-46da-aae8-11619523846b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1909a5-09ff-42ec-bbc8-e9187a0a11c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10873e3e-3728-47e7-8818-4e7caf553462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.97.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9374f23f-6e26-4f5a-9f75-5fb62275e36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.97.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24283bc0-d1ed-4632-8a26-cb9826ff9f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7bf1198-b89e-4183-8d82-dee1e30439cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a749384-05d0-43e0-b68b-a27d0225483a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.144.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bd5aee-0931-4b1f-80cc-ffdfa4992a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.145.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e24d6ce-38e2-40b0-b58a-e604ca5a226d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.145.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14092227-aa51-4ac8-a893-89115076879b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.153.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae705e8-9c23-4910-8df8-312dba7e638b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b70f9e-3b30-4944-90fb-f066935a715e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d791805e-9cfe-4e02-9019-e8cb750de8f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731a9997-62ae-4e03-9268-ba708d61a86f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50aed1cc-86db-4946-8717-c97b39971921", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.168.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c767ea-5434-4564-8643-15cfd43194d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d3c7ad-a193-432d-826d-0ac060c0bcb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04f8872-29e8-45ec-9bb7-9fdd1e085e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.185.255']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c4358f-5ccc-436c-9d9f-8953b5a2790d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3293fda8-2085-4946-8846-49896c5e6edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a30fd7-cf9a-4d4b-80b4-26cdf9c541a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2c9b9d-a1e2-4a6f-b160-b1ac915b3ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b29f0e1-aaec-436a-8425-4ef0dab64ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89798ee0-5512-4316-9ccf-2aaae8a12dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb45f74d-ed5f-4a0c-9cbc-ffa60691f716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5dd2bf0-cebc-4551-b63e-bc819a7fda89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bf3cfd-237c-4df0-8188-c67074df0735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae7bbee-1d15-467d-95eb-3e5dc4e40f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69483b77-d85f-4ead-95d8-bc1b6196b2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689da808-d490-4a90-8263-62810f52ac33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021befe9-379a-433f-949a-10be12172282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d236a0-a290-40a2-9ed3-7f51742d33a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a09542-28dd-4ec3-a210-dc680b5c2790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ffaab8-f1db-4785-8dfb-d87689d5d1e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3f9351-69f4-4a1c-a9e1-e4d9c5c20345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d526c9d-f8f1-41e3-b026-86fa44520286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6d6f73-ce32-44af-a594-8b655e367373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9014538-8c58-4863-9886-143f138ad3d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ff067d-54fa-41d9-9779-ef9c484ce5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f98af1-0049-49c8-88f1-f549f92b0903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630d1a78-3cb2-4d51-8681-07d61280781c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f12286-05f2-4b77-80a7-a2bb03b684ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f81d12-73fc-4f83-9304-771a5474d03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c790547-fa99-44b0-8ed3-af5a742be7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446a677c-8b51-4eb5-8747-bcf1fbd5b48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98eb5ce8-9802-4a57-a2bb-542dc5910beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b22d64-7818-4afb-8b8b-6045b9a2cc8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882e05ec-0cb4-4590-afe1-edf505698ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f6ce5d-e070-4bc9-9b1e-0ecb444548b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d867f215-50f1-481e-9737-ce4932234615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3069465a-9d30-45d9-8fb4-62309215fc2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910d8bec-aa81-4ed0-8b8e-c6f5eb954f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6002441-b6c9-44a3-9bd3-b0c71c5a7cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e18cb35-10cc-43bb-be7c-49d151746c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36b3d85-5711-4e2c-8385-68b7509915b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7acf46-abdd-41ef-b6a4-3792aac2f867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc53d215-8809-48e5-9a59-2e0b9fd79dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca85852a-e268-48e8-ba5b-0b19946c390b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1537c816-c7e6-4e05-ae5d-24519285d99e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f02abb-721d-4b77-a205-b3a9a5ddf91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4b43e9-6be9-44cb-b75f-ae66c0b6d443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95fc73f-04fd-4094-8f85-95136993ae19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2558a9e8-5ac9-4250-a37d-5d72605e5b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88642f5-fdd6-4bd6-a34a-52f69dca148d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfaa553c-6acc-42fa-aec2-1bc9fdfa5df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2455ba-071a-4120-8f40-c3b323e723f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300df458-46c0-49dd-ac3b-48853ca231f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15bed7f3-c1e4-409d-b44c-c61784e37217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878c2806-fbf2-48e0-84d9-564e27efa0f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8179415-a46d-40ee-b590-344de3cfbd21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94f6952-1803-4f19-90e9-b69b462430fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f64d46e-91cc-47f7-8900-82e7c81ab31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d83746fb-2e2a-4b47-8749-a92e8b48c322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4194f96d-e1b8-4f86-b2e1-5dca54a3806d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed01a9b-cefb-46bc-a3df-b5f3ee22daa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91971e9-aefe-41e5-a3dc-bc88adee7f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705fbd85-7774-4e17-9ff4-6596b5fa142c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131fe4b4-7ae2-4239-af54-d87ef5b6ccac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9bb556-cee2-4993-9368-ed0fc568f481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e94e89-c25b-4edd-b2b0-fa3159be97f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1831e73-1395-4def-ad7a-1fc3337ca403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b549ce3-15a5-46d9-8839-3a0aeec97de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f4c5eb-3938-412c-ab57-1c4222871f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93862fee-0929-4e4c-84bd-b773a8426869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdca04fa-a706-4308-a10e-05be3efdf6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9088445f-5877-4e70-bfbf-f4b799aefe2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c787084-9446-4555-9fd0-3688c550d00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0b7920-5ea7-4f84-a0f6-6c43acba66d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7721f77-5cb2-4fe5-a9b8-c06d887c5629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.202.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780e8224-9b8e-4422-b350-8e11947916cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d889ebe-bcaa-4c57-86dd-51604933c224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32c67e2-397e-4645-995d-df53d75d9aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47a8f33-07a2-4c3e-8ca8-bc39e138218a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.72.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5133786e-5420-4312-b8e0-507519c809c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.80.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93981f4-473c-4fad-b21e-ba8bf3ce7147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.83.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93e1a69-0d71-4745-aa49-b36a41a7eaeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.83.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1123d0-f2b2-4e1a-bb44-2cbf799c7b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c056788-640c-4d28-ba55-fcf6e5a8d080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b67176-8fab-4c88-a36f-961684ac8712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9254a2-004f-44cf-b3c3-3409cf5772ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0035319c-86cd-445d-9e9e-dba6dd4a89f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143073c0-6d2c-45c8-8795-6681c15a4ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.45.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84f32c4-0a60-4e03-810d-fec20c36fd78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.46.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56b33b5-18fe-4c25-9756-d5ad4bc1e48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.46.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8119ad-4dd1-4848-9dcc-4fb2c04c3195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.150.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8f0585-dc3c-43ed-b2d7-f1e18ab06025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.151.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea424d8-416a-4b21-8fa7-22c2fe133793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.165.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27324ef-084b-4ab3-83fd-4fd0f91316f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63464f18-6982-4666-bc33-ad35c889f867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79cc39b7-f8a3-4bc1-ad4a-6e4ec450189a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.185.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14c53a9-8c5a-4fb1-98c3-2fe932f02c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698a9b73-96ad-473d-b4ed-3ec835d53cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20608cd7-3170-4466-ad93-d2869418039a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.32.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d8b8b5-7838-4fc2-ac16-f77bee0bfa42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.49.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1fe695-fa3a-4093-a418-27480dc0c742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.49.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc6a36c-7cdc-4e39-8035-092f4be03357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.119.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee56e961-d89a-46cb-9b9d-fe2ddaa1599a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e12b6f8-7515-4d9d-bdb3-ca8c36b15314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8087e9e-7a0d-4afd-92c9-e616ad62e09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842ad297-34ae-4a08-848f-45acd1399565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747ccde6-e32d-4040-9643-0700b4f3defd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.162.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4e6910-875a-47b1-b130-af067cc63b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.167.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca292d21-346e-49f4-a1a4-e261a319bf93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.58.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abadc3d8-c5a0-421e-aaa0-b2903cbf8f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.137.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61f55d3-7fa7-4ef8-bb88-6d566c90ac60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.152.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73cf6ea-e24d-47ee-80fb-7ee454e7f911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.153.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7fb533f-1512-4fd8-88a1-9132341ae2e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.164.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fee1bea-5acd-4d5b-9c80-4945eae81044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.165.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9684d942-6864-41cc-ad80-c361b9c16301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974b6528-8f0b-4b73-ae3d-c0dc1fb7dbde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c19ae7f-68a5-46d9-8d7c-b8b644f80d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.109.232.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e77dd0a-df8c-4637-839d-74c55e6b67bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.120.197.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e9235b-6a5d-42b6-a510-68867d29a14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.24.70.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9360eb79-50d5-4a9f-a2f4-0e84512d34e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.33.72.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a7d7a5-792e-4b46-b26f-d8fac38f75a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.49.181.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1e496e-a837-416a-89bd-027ace3b1524", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.95.220.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a23054-36cc-45ae-83dd-d56fdb4a9139", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.103.214.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a375e21-d37b-4bcd-a081-edeafd57f607", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.132.11.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8cf59f-dc95-4b43-a69d-da28c5913f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.132.110.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d594e940-6c73-4f40-b9d9-1c7f8924fbe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.140.123.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfb7700-3a76-4bae-82e1-f9ceeecc912a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.184.50.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0fc39c-088a-4572-93ea-895fed9bd369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.20.104.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c52fda-dfc5-401a-8c00-ef65f4b08bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.208.190.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acb79f9-3165-4028-9075-327a59de5ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d037a69-2be8-433b-ab4c-b14764697bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745ec914-10bd-48c6-a5f1-3bd77a44cc3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ddb820-74cf-47b3-b777-022166b6d803", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.145.0.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f94a342-1503-4ef3-a4cc-5e3c6eb32cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.165.15.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2384898a-8a05-40a2-aeb5-8c304e6ad590", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.22.132.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4381e8c6-a96d-4016-a1aa-a90c395755c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.4.115.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7162d32-4d97-4ab0-8bad-055f90dfadce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.71.141.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68dc044-c5a2-4c55-8e0f-27bbacfedd11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.72.235.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80bfb8f-8fc5-4ce4-9ced-40034ece8d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.93.133.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a53a73-abde-4a0c-933e-6a02d4645f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.110.82.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50d0e35-7926-49fa-803e-158b53734d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.116.129.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610566c9-08f5-403d-b86d-c7ce55deddfc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.128.20.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a189994-1b83-4da1-8a6e-2c96b01a2acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.25.223.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab17df8b-4d6a-4ece-858d-168392cc149c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.32.69.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1f93a4-f03c-40e8-bb5b-1f8f9f673d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f13e152-acac-460d-b11f-f9793fa90e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.83.11.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb24613-07f8-4d8d-bd9e-5afb32bea807", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.91.72.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c4282a-7270-46cf-9bfb-d200486f5c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.93.173.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad7a5d6-5c1c-499e-a03b-20c0d8e09606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.10.160.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2890bf-29fc-4ce7-b261-395c81be4d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.25.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85d7e83-ca83-4c85-9323-6229ad6f7a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.29.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d494a23-5c1b-44f6-ad36-68fbe7746855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523dbf16-fe2d-4016-b6be-74ed12310586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4569b50b-370a-4f04-b3a6-377e5f09aadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9780c5b8-71f0-4eda-a3a8-d16b7d0b0cea", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.185.127.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31aeabb5-0d3f-4dc4-bf5b-f2082f19c214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.186.137.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42b335b-011b-405c-96b7-cc43c4ed4bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9282d63-c6e7-4efc-8187-35af130e5c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ae8e6d-c04c-4611-8fb2-76d08ad3ed1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ef33eb-9d92-4580-97a7-98abe1d1bfbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45092bd0-eb16-4e8a-a62c-fdccc3e4b364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6514a0a6-05d2-4bc6-9b7f-34924f153b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2a1341-4791-4f3b-b0d5-75a69d5b1be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b5cbac-b925-4ef7-bc18-f4dd8d83b938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5853dd9e-b15c-44a7-be83-d2a738ad3b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02c1988-cd65-43ac-b503-136c7021139f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16ebc34-3f94-44cf-a858-b43ac2aad793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb283d2-be5f-4990-806e-aeb199228996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad23014-6e1d-4fee-a2cb-9cf89bafaaa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a41fd1-28ae-45be-9539-7eab00fed918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7981bc-41c0-4a66-9051-e4f7a4c4a6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd48e01-a44b-424d-a7a3-9b39c8ae29ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd391249-62ce-4594-bbad-a8211d910270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7664b79-81bd-4551-9a65-21274532628d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb639e6-aa5a-432a-8980-1d3c4be6bfcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b2b456-df40-49b7-b61e-a0d9950796bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4297159-0b79-4892-b1d8-72099518165c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec767da-ce4b-459e-9a5d-e5e87619c936", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99725923-1d7c-4958-94e4-f2a6da9f2a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f94733-16a4-4fb3-889b-53d9daebed34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8b048f-42cf-4416-985e-488e2af19038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe47b66-1dad-44d1-97e7-a3147da08e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781ae891-b588-4f12-84db-a4e2636e674e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b495cc0-af8b-4677-92e5-4eda08671e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3424b5-64ac-4701-af9f-2cac8bfe4e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c82cb7-0943-489e-8e11-ab9e8abbe088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9d07e5-db33-4baa-a784-79548b72e0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ea23e2-4a4c-43b7-8cee-e5833ea8af41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6596f746-520d-4822-9f48-73ee99848c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5d3221-ea1f-402d-af14-ec5ae6c3f49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7561d9-a1a4-4f43-a3f9-6a6733a1ff27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb588b57-d309-45c8-9840-15c16f58dbb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860dfc23-c787-402e-b7ed-4c44d275edb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a28d577-8373-4133-9ff4-80d00f1439e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aaf83ee-8588-4c1d-9f08-7877ccedd145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e7405f-eb8d-419e-ab35-fd7fbee85d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f22d969-1256-4036-b6f2-160e988c2e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e80acd-8e62-4695-b6fe-c8e90a1a5992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff26ef66-5647-4308-abb9-614cceb7b961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8018b9fb-6abd-49a2-a217-16c9ffd2590e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23d790f-d311-4a88-9651-5014a1b3a620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfa50a5-d94a-4fce-ac58-8529017c237e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb89299-31a0-40d6-a57d-ba3739fe28d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0465eee8-0b70-4339-b3c5-19c084a5a1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22cb31c6-a651-426d-9dc4-41e8921b2944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad97034-68bd-49de-806c-59ea85e43f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b481d728-86b1-4359-8e78-83da57e86f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987a86db-09e7-411e-954d-e6d6d7744e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6419f012-19fe-46f8-911f-6a01b620567b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--162f1b66-aed2-41f1-8e3f-db44f45655a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9d3bef-d0b4-4633-a2af-7ce58b9af664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64c5d96-9cc0-4268-be20-294410b07928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161bf751-8749-49c8-9af2-47a66ca02a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1205c842-5d3c-44b3-a8e7-e81a76f503d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bcf5169-2a45-4002-977c-28f063a121d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8040afe-00cd-40a4-9d32-70fa3063861a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a0b332-99ef-4501-a7e5-d55753f0ac4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e86bf4e-b812-4d35-bd4f-51ac527bcf05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d6c75d-4b01-4b1d-95ee-415171b48ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0382f27d-32af-4257-b51f-75f04892cbfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37056875-1491-4dce-bce1-232960e6d5f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75571a0-9070-4aaf-9139-246efd514ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de63126-a4e1-4c59-845c-3fce0c75e621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da276ce5-339f-4d36-b843-d730319b7796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36fd7b72-3bcd-416f-8509-46270d17a866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e670d4-1802-4a84-a8f0-d8e3f4e6a090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaca2824-e414-45c1-9752-d98c23bc72eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd0aac1-62e3-4114-875b-8cea8dab589d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9f83f6-9bc9-47f4-b84d-62fca48716e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af4030f-4b0d-47da-9ad5-fe92d1fe93c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b93c2e-6323-43d4-8756-1d498878cca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd32997a-ae5a-41f0-8dd4-057968e1a3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbd3c94-d853-414f-beb1-dd126ec20800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b152db-0c38-400d-88c0-fc98fa4a0957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e79c559-d374-4d40-b984-bd98406a41b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da48261-3502-47d1-8658-206ce34570e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95418597-a4b4-4dbe-81b6-9ebe09642f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05bef73-53f6-4712-bc48-a81e27d912da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c805787a-f059-4ce1-9f18-0f95a30de5d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bfcd17-3bfd-4cb0-8469-fc04fb642f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2531a7c5-9279-4b27-90c8-4748c1588543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c462c56f-1250-4b66-a266-176706483b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce205c5c-44c3-4b3d-81fb-560a35b0a05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4b9131-0703-4a43-bc11-7c42ef968e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36367c4-ad01-4777-ab24-ef3eee12610f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6438fd-c768-4fb5-b7fe-831ea265b9c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5dae34f-8b38-403f-977b-c73c752f8137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09bd2fcb-a913-43ea-a1e2-6ee5d80257aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982d690d-628c-4d8b-9267-5e2bf96a3d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e7ee56-c132-4378-8fdc-efd64b5d139f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ead43a8-8056-4ba7-8a16-93ecdeb70f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245d4036-2bad-4712-a15e-bc8e4b6222ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c680a6-40bb-4448-92e7-f2ff955dcb3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e44739-f334-4551-bc73-f16158c1b3bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4923d04c-486b-4a8d-a49a-22978e847440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2dae323-d30a-4b94-8f59-1d677bf1b0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93df074-d11e-41b6-b31c-4c419b67cf0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47cd56f6-4983-4cbc-871f-b5f3480581ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802e296d-fd28-4411-92de-d672107ed0fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c06f7b-2a78-48a5-8e25-6755c078cee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b15d26-2585-4db4-b510-ee6b4774cc56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee7eab2-365f-4f8a-8224-31b89f082645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9124ca52-4292-4577-a5cd-241f6b0f6012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054b95b6-b6fb-45b6-9e7f-adc0e5d4de39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4a513b-5b5c-46dc-9e9d-368fdfa486fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16a9ae7-6f5b-4623-9caa-05035fb99c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e21d44-4c11-4779-a40d-c93ab8b0fd97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d1cfbe-edaf-40f5-bbab-89e422179048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef160e83-97c3-4675-9478-5bbea53fe4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc5c529-e2c9-4178-913c-8fd3d8680b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1f8884-9928-4cd8-9e95-22a85bfe7075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b002ca-9524-49ec-a8e8-ac0c4531fa11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221afc62-ff72-453a-a5ab-828841470483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037793fc-e76e-4cc7-95e5-e882b6460432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1744ac-f6b4-4fd9-b1b2-3b0219bdb5d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48dfcd27-2e0a-49b8-99d1-cbf104c388fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0209762c-4bea-4484-83ac-507d04fb7288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed5c8c5-1a3e-4c93-b3b8-9ef7a7f0ddb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf2939e-2752-4e20-9e03-611c73a45360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622e1e62-97e6-4d65-b34b-23c7d729e661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396c35f9-62ef-4ae7-8639-a0ccfaec0e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a5513f-f5e4-4859-9bf2-04fede07d629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe37a1a-2028-45cc-81d4-ada7291983ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd548c2f-279c-4676-8256-2a750da01914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87204714-c452-4594-aad3-2cd68f27916c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07a4143-0bf7-494b-be23-24ee74a24aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95af94d4-9c6b-4a34-84a5-640c6390753e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d430b1de-0743-47bc-a087-56c51c038c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9616032d-31e8-4009-ab7b-ed46cd4a016c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1689c792-a6b7-4343-a97b-5744b56e66ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ebfd6d-7051-4329-81bd-8ba96531775f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4584a1a3-d38b-49db-a3b8-2eb1867af143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3de69c-a9f4-4385-8800-e4536111780a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f33a5ab-e88f-4ab6-9b6d-c778342ea80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9be62b-29b6-466a-a70b-ec65321b87f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765f9119-55ac-4c67-8adc-4fcecc05e676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036e7499-07ab-4937-ae1d-e46365dfc601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e32ef6-dbe6-4a05-804a-b0435162bcdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f06147-6583-4b2a-b97a-9c72861c6b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a961de-8176-469f-a9b2-0b63ceb12485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84a7172-2815-479e-b5c2-09c875c1d95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e04b09-1f58-4434-b865-30fe536c2df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd465709-6913-4c76-b92e-86d2184118fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d132598c-0bd6-407c-a6c8-e0a32922693a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17cda5a8-e5d9-4c5b-ab5e-e97c616042ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76d6297-9f43-4bf0-a592-b4b244043678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc2041c-9531-46fd-bc57-18bcc517a3ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3243a171-1868-457d-9424-a07532a11074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490397ff-f210-47fc-912d-4615ede76e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd6fed4-1a1c-4df2-801a-a55018e13b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09694901-e3a8-42fc-a91a-f4da3c22b19d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b17558-70eb-4a1c-ba0f-7ab400309013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e924bad-e9ca-47f8-b8d7-bfe32ff567e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cec85c-27fd-4533-beae-9af2b19a21e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04071ff-3a4a-4749-9125-6a137bb5ff67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.120.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7835382-b83a-42c6-bef1-8429a30fc556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.137.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef70b8e-4ce3-4e42-b74a-2f6a89a11263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.177.1']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586bacd0-5b11-4235-bf63-68e7c0f79f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.194.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29ce536-239b-4c83-b97b-66f6b14c4ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.195.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe433c4-9567-4178-8a55-57e95523f97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.197.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dee8f66-b831-4d99-9daf-ff46cbf3f657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.202.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7405176f-6527-4e19-8dce-4a117442ea6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.229.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b4eea5-4e82-4549-b0f7-bd6d122e9323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.234.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e909490d-ee8f-4cfe-b59f-dc8af78dc777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.234.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd582a02-f9c1-44a3-9e37-4b359113a155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.235.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7695da48-b8fa-4c0c-a773-4c8cc9ba0369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.236.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87752c79-bc25-4a3e-8d27-8bdf13331a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.236.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fcdcd4a-c019-4506-ba05-bd3cfec9f4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.34.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef0ef54-ef5f-4be7-bc8c-6107eaceeb05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.5.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02e47ee-62ff-40b7-9642-e88ae6b5583a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.57.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9633669e-48a2-47e1-b812-5296dfe67175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.212.244.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2d2d7f-b926-4d7a-bdc8-67fabf828b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cd06ba-c6e5-47fe-8d0e-14dcae615fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330d0d3f-2e5d-4100-b11b-7069335202a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.223.228.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627a10e3-8ef0-469b-acaf-9252bfe4a3a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.232.31.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af2797d-e0b5-4210-9818-f7bc89036447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.11.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233b87a6-a4d4-43a5-b710-f174c90930b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.15.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91411351-723d-425b-a80a-08fad3320444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.148.11.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0037b28-9020-4f01-b33b-a3054760b15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.174.40.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d87d1e7-c7d9-4edf-83d5-45b9bc9d295e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.0.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee70bf4-e420-47fe-8a6c-2f15755afd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.37.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f99fa8-969b-404e-94bf-cb492ca6a809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.75.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37b0e90-4eb0-4848-9e1f-0968362682df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.204.228.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d71f1e-87f3-44ff-ad88-f42ca526a884", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.241.172.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911541e0-3951-4754-9143-ee011ed5fc17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.244.242.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e8625f-5d05-49e5-a3f6-ce0e4b1a9fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.56.229.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd230c6b-b921-4897-abab-ca39144abb48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.58.174.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b548a9f-4b50-41b5-8878-7098a7b1556b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011e018b-77cc-4e54-b2a3-09a3fe25655a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0526e244-492a-4da0-9342-4d3ed5d98cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bf6a3b-22bd-49ca-acb5-755ab3dca33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e555cf0-1e2e-4f91-8afc-0027121cffa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a672455-94ef-4c5a-82f5-da388567b575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fc971a-73cd-48dc-a5d8-22e1565bf664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9382760c-af0b-4adb-90e4-24ab36e499e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752aaba0-e579-4a48-bad8-e3c75a4cec4e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.109.242.255']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1361e6d6-3d8a-44a8-bc03-ab6fce67d8fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.84.100.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff3388a-ce43-441d-8f25-093d7d87aa0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f79bf0-1269-49d7-9c37-9fa71d4f2ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3be1cc8-cd27-4b81-b219-80f94860321f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f32c482-70eb-4746-9b48-de99bfb1fe4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2b7dde-bb6e-4410-a819-ef69ffa51d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.126.107.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01d1b4d-9129-4e62-9d89-236413bb4c8f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.127.112.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2410ec15-5cf2-493f-a846-1fb3035bd617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57573d9-c3be-4f2c-80f3-2a1131e60e64", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.52.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc8026a-50d2-4b82-be11-6bdebe84855b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.101.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908bc05b-e139-4577-a397-5dd72f2c9180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.133.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50202bdb-ce1d-4223-b8b1-17a6d2c36752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.157.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad86730-096e-4894-84d6-622c1255d043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.198.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6cd222-fefc-4c39-89c6-c9fcc58e5a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.237.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e74f54-abaf-4ca3-8093-e9751dcf34fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.243.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d1a599-4327-4dcc-9e7c-1d9b32af9c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.248.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c57a73-bee7-476a-9a88-d0960cb365c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2b0a3b-f162-4cec-9d09-8f7479b590c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e93749-1e9f-4001-a004-1b7f8287c9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340b96ec-c7a9-4ddd-a5fc-fe58239de9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.186.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6ab197-69e4-4ae3-bab6-a524ca8da1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.186.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44da0947-ed82-494f-a6a1-78919a866c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.190.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98c4e25-92a4-4802-ae9f-cc15e9030165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.191.89.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276e100d-3678-46c9-8003-1add438320d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.206.8.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e215c51-61eb-46b9-a85d-c17c9f2c2a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.210.155.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce1c251-234c-4ce5-8621-228603039e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.48.159.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757ec58b-991d-4a77-9d33-5e34c18af361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde676b7-366b-4cce-81ab-24c9dfd3c14f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.25.241.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faed7d3e-6808-4b84-8472-a7dae1bcdcc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ad432c-b100-46e2-b34d-370f65d3a2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.75.65.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb81706-8cb4-4a82-bcd0-d36595da49e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.100.184.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4872b4c0-0315-4431-81b5-fbfbaa163139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.111.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51de206c-3ac4-4cbd-b98c-42feff6b951d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.127.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a779315c-a51a-4796-b067-06c3707f9479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.88.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702aada8-1abd-48e5-afc4-701017afe491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.216.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72349aa9-481d-45e5-b150-4c924ea8f2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1092fd-7dc9-4ad5-b89e-572c23f5094c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867e6703-b1d3-46e2-a60f-798ed415a1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.227.244.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bec4399-2568-44de-b416-d07b46bca8b4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.227.88.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0074a8e3-ad46-4c6f-99c8-11479d4be3a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.247.156.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdcee71d-a911-4e82-92fb-f13d645090a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.46.56.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ba67d6-efc2-4dc4-a98f-419bb3e7f57a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.47.65.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50930e8e-ae9c-41f8-a2a6-8210ec7cf050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.64.199.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36cfd0e-1c1e-42ec-ab0b-b94d1ed0477e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da519257-cd6c-4ca4-bd0b-5bc10ea36fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc22a50b-8ad4-4dce-acbc-a6b00fdd6411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fb4b7b-cdb2-45b2-b170-0897568dfe77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad22da25-2e79-4233-a66f-abf15381763e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b351a4f6-72eb-4e07-ab29-26804b40a1fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fdd1ece-f218-4602-b9f7-6fa2427e30fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052d3f64-64fa-4c59-9e50-8d8602f83489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5372e859-38f5-43c5-8b08-c2f0f3624347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b68b1f-340d-4d8d-950a-f745953a9e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd8f5a7-979f-4a2c-a846-8c5da6a4f429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7367782-d1a3-4049-b6a9-5e7af18ea690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c63532d-2fe1-498e-9b25-53cca843dff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be5fa47-bdf2-47b2-85d2-b6770f4ced9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16356919-bd3b-4299-a31d-ebb9e1a18315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c9d96e-4bf1-4466-a24f-cc0dee81e9b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a502e5d-47bd-4560-9a35-5a126b159608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e6afb9-d0ed-41d4-813e-cd6a8f4e835e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef8ec2d-9711-432f-a963-f7a74556d642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712e5b9c-efbf-473e-aea9-c7eb2591bd37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8867f19b-b567-47a5-8c48-209447345d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef951f4-03b5-415c-8e55-8fb66f972321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.176.67.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e24f26-fdb2-4337-a644-8bdbef351208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e942873-a160-4c12-83cc-9382adddc573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.199.35.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584b7a7c-ffc8-4ca6-ba3f-d2b79c27c969", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.201.252.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe089ad-5cf6-4725-8be8-0eedfc9bfdb1", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2b85c6-ea29-471d-af4c-681de2c0cfb2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9b05a9-41b4-4e0c-8620-eafc9a583e31", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff31679-73f6-4733-aa46-ae3495dbeb0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612a2a85-fd5a-4b61-ba5a-a4478b5a92c0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.21.41.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f22e83-8cb6-465c-b2d6-0d7cf64a98c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.48.245.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b4207a-22e8-4e1a-ae9a-bee5e5bda1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.236.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0ebce3-6d22-4607-ab7e-62299e97fbba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.239.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6fbc94-c661-4d94-a9a4-dbcdc9494bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60da494-f6fd-4ff9-a498-8fc45d21b59c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac75f1b-64a0-4aee-bd67-e10fe844a8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ed69a5-dbca-4778-b21e-7d1f99476bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b53250-db16-4305-9116-abe2e33bd413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.181.39.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1754117-9f41-45ef-91a5-348e7f0a528a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35037fe1-5fa1-4395-a93b-c38d9572de15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8086de-d000-46df-8cea-bbc0c6cfad20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f948eeff-a553-4ddb-8739-49aab386112d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc9f2f7-df5a-4ab7-a557-7f3c323f045c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3614054-0f15-4e73-81c5-3b4f0700cb97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b2166e-ae9e-47ac-befc-2a68366484be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5460c4-ff12-4579-8e57-0e652ae2b903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2740cb-65e6-497a-8864-31beaa100f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16945427-b0ee-4d65-be12-fe465f8b5d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7929af07-50d1-400a-a22b-fbdc55758d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11967679-aff1-4c49-b401-6a907a5e69ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a222b254-9498-49ad-9313-9f5bf84dac0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8affc208-e4d9-4a1f-b02d-b6c84dda21e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028b21ce-e14e-4d78-ad87-523862d1f49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94546b60-4fca-458b-ab21-3c2c699d86e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca5b865-1c5b-4ecc-b4e7-aa04ecf541cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6b9257-b86b-4443-88ea-a946b19d2ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a9e8de-636e-4b4d-a3ee-b74d88280f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f804120-64ee-4f6f-b468-928e908e5d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e29cbdb-26ea-4c62-9c66-4a41b32c0a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5c74c4-c747-4921-b514-21aaa5100e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a013a1-a425-4f99-95ab-06cb621bb282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85be2125-0030-4b6d-b011-27245007b24e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c895bef0-c096-454b-881b-59e3e5cee99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c33617-a64e-4779-8a21-d05a1fce0aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2684b90e-e7e2-4a26-8f29-093fa658f618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac5d5a4-7d50-4ee9-8721-b47b6392f3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d2f9dc-21e8-4565-8cd2-3faff83084e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f9797c-1c55-463d-af22-785bb89af0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5466b8-de97-4c47-9795-cda0c09d7bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1aedd81-bcf7-4424-a0ae-f8d690378731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd05c2e-eec3-4b02-806d-6c6aa838c447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23cedcf-a797-46ab-80f9-5669b231353e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.238.91.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3fb0c9-a3d4-4613-899e-afe14d16d5f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4d77dd-baff-4e00-821c-de3543415ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da567391-eaf0-420f-967a-61b5881aed3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5228957-43c3-49e7-8701-9c468ede51ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7bce5f-708d-44ec-aa30-b154f58f19d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299d8810-1b5e-4888-87fd-a19d3d2a9a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95b7708-3e5f-4733-8e69-0c274989de8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816a9bbd-1e47-4c13-b13a-638dcc7c9403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b1721b-dfa2-41a7-a642-47221b3ddd5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9862f6-708f-42ec-90a8-fcb77d73de0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3931c9e-6bca-4fab-a441-334cd7cb296e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19302c27-ab22-4606-9ca3-84473d736210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469114b4-e3bd-4cd4-afdf-979b1008f5a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3331cc-205d-4a9c-a185-00b3c0cf2128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b03ca4-074e-4991-9188-6aa8b00b5d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44160a64-c711-4cc9-86cb-ebcd01b4e0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457fdbeb-8702-4257-8206-d645ad08ed77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f7ded3-83ed-4748-914d-b5a96930cb4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053c283c-1c02-4df4-96ef-f06c12f27687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ae8de8-7234-4708-b3c2-bcb1105e42fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d24df7d-9a19-44a5-a7bc-3b915d3530a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45379e00-8340-496c-9645-f196caeb10e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48e625a-ed24-4cd8-b86c-0e21c919567f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5fa9b2-c5a0-43f0-a187-30ce957df2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9e7f95-9869-4955-9bec-104bd0980dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdac0ad-df6f-44b8-a0c1-d3ada164517e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6d6bb8-2bf7-4f90-9357-abf7c291ee62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a11b5e6-7003-44a7-baa2-90d979f6738e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f6535f-1aa6-4e52-99a3-73142dd0de9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3c2855-6843-4a60-9d9d-6f00767557c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590f14a3-ceee-47e6-900e-c13dd4343e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cacccb4-0f0a-46d8-ad8e-838e268d402e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7bad0f9-604b-475a-88fd-9a195735ac19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6bf9a08-a52d-434c-846d-dff700893124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e264fa8-d73b-472b-bc2c-593f3a8918bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9d6768-0e76-42a7-abbb-36858ce97bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04948021-4207-4d6b-a440-07a1a7b67866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472c07d9-3e54-4a96-86ea-6e1ecf87422b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc45ce8-a7c9-4bad-9857-010aa1741572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3973d7b8-eb33-4abb-9128-65adc0ae21d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbeec0b-a3b3-4a7b-96f2-597772bd2eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657beaf6-8e8a-4987-ab85-28e61be35067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144e63a5-7897-4e38-85ea-571d4c3eeafc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.162.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d352dc2-0ce1-44aa-832e-07bfc080c94a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e401b8-f59f-4f8e-9784-c0713943185e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646de930-b1a7-4ea1-818c-9c0b7ede27b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.0']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392b8e46-4495-4a99-85c2-023c1e3abff4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9b4c25-aa76-4175-87e1-61720a6b02b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.119.129.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee6a449-74a4-4dc7-b9eb-26e7d2232d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d5f202-0d57-4d77-82b0-a41c12f0c99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d633a419-5be9-421e-9e18-35086bf50f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f24b5ff-e54b-459a-a060-7255645fca7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857eb6fe-6d13-4852-b85e-bf2c25bad9f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78374c6f-97a2-4ea8-b836-c6695e017e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b4cd7f-8da3-4e35-9b10-e38d74340b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4aa424-a0d7-4446-904d-019c6e134698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d2d675-9f8d-4bd0-a342-ecb31d99423f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea3774a-5f8a-4292-9680-54c526c86d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d262a2dd-2788-4a77-a4fb-7a94b38d0a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a889d79-ee9f-4f7c-9204-1aab5dfe3791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4816ff8-3b9c-4388-ae9a-7883cccbf968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c7fac1-c981-416f-82a8-38e2cd19ef55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5dac577-6796-43ca-a1fd-168cba168167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e371c6-22a8-4681-8f13-8a82ba3dd07b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92f407c-d93a-45b7-9225-05a1f9216d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832191c7-aaf6-4ddc-804c-7577e478e610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979efc8f-d5a7-4fae-a596-b76a1422bd8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f78eab7-9050-42d6-af46-b66d1664c760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bb41e1-9fab-4e0c-a216-b80b989229c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b12b2b0-1373-4c0e-b8e3-6a6f337c3cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce4e672-c520-4b10-b5e3-51039b47c6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.15.164.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bfd549-79c5-4435-a51b-05fa1de0acff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.144.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e588c8c7-2754-4bfd-a6ac-7cf89ff4773b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.173.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ec2f2d-c7c5-434e-808d-f6ffd04f747d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.196.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f0ced9-717c-4331-8eb5-bb1e32d16bb2", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.197.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487fdc9d-5774-40b4-b66f-d15d91722334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.208.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a2d6ed-cb21-4f51-a863-7a35c0983563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.208.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8fb458-ce50-4a8c-96b7-3c14221a7f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.156.65.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0533e2f0-ff4a-49a4-baa3-dad2bf434ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.164.36.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6911cf71-d451-49bc-8874-644b12ecf4c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.110.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b974c7f-cd30-40e5-8a64-c64b72908305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.59.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9446f9a0-3089-4fd8-9504-ff649d3e1b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.84.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8057883c-40d2-41c9-a5c2-7f47ed4fd2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.217.248.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5e6f56-b673-47c8-a032-b1b9632ff1b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.218.139.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751fb269-161a-497b-a574-efb18c22f60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.219.81.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f965e5-516a-4188-ad41-df47c7db7cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6539db3-afa4-4d70-8d32-423ed11fc7c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b54979-2032-47c4-ac0c-049f3bd955d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.64.102.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be3a499-d5b2-41f7-a888-e15e6949eee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.66.22.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc3c3ec-97a3-4566-80b7-c3fd5212de70", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.157.205.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabbf4d7-4809-4201-8743-b70eba63b0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.161.28.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b62a888-02e8-4657-8720-3050eeb295d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.185.241.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d6b0bb-e9ad-4bf4-ac1a-5551f7b386d6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.201.252.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4198b1a6-28e1-42f5-b503-9461bd9aa054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.4.148.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9bf6cc-8cc1-4fb3-a710-f38ae57c9864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.50.165.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c69b2a-9afd-417d-89a0-d609e127acb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.59.201.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2b7d50-c710-4b04-a98e-adc0ebf1c032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.64.60.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d480a51c-f338-419e-afb2-580465dccfe1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.71.38.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61027e6-727e-4416-967a-38ed9b7b2bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.75.92.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672e95a5-02b3-42b6-af95-e0e5f176d951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.90.93.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9b328a-5229-4dd5-908a-1ebd25d37f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.94.34.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfbc072c-bdd8-4e25-b2f6-3a211f93aaf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.147.17.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ce22e7-2c8f-4b3c-b2cc-669eeecde791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.77.62.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52e2e95-1056-4e1a-ad9a-528c813eb039", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.107.204.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33d829a-f426-4d81-914b-942042297bd7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.127.148.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00367cb-4b8d-4dea-a8a2-5d7555f10878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.130.28.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e0956b-2470-437a-9e5b-ff45e4908730", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.132.121.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40cc541a-d166-4595-a328-201d387507c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.132.49.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24fbd39f-ddcc-4bfe-81b3-b708a44a4479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.135.118.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--000318de-6b0d-412a-a6c1-0e1a0396d968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.158.232.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c729642e-fcf3-459c-972b-61350ccf0d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.158.232.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187426ef-dd62-446d-ab16-78a3aa34faac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.232.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26eb3fc8-97f6-4a59-9ff2-6dd33cc3f194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.233.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413fc203-ec6d-4384-bd48-535f3b401d35", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746dabca-21b2-42f7-b718-45a3ff75e009", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6588825-76a9-48c1-a117-4ac7cd16fbe8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0249ca90-2cf3-4ce3-a1b0-db96427aac98", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a7a2b6-1ea6-488b-aedf-d949165dec74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2541e7-069e-43d2-bd11-be41bc3b2acb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6b43c7-0d76-42e4-b56f-d2195db63a0f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5930b6-707d-4564-8742-b90ef0207795", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2552a270-3577-4ff5-aa6e-6b037be30a6f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.51.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b13b31-c3f6-44ae-92e0-ccfde87a20d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.189.155.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0646d08d-387d-43d9-aa01-4004ea9ef148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3dd1bc-093e-43d5-9acb-b18e5a976757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.248.173.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2231df14-279b-4bcb-a6f9-62121969e9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.10.187.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74de58e-1e97-47c5-8791-11b45c2ab7d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.131.139.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e557307-9383-4995-a2cf-1ebbdaf04274", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.132.21.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b5875b-c2c0-4f67-b2f6-230bb93fd537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.149.79.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb694b4-316a-4f23-9194-bbedf49580db", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.202.25.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea7f3f9-12c3-4364-b0e9-a0a503e4b8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.226.232.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926092d3-a40b-4b15-98a1-8a21ce225332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.226.232.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a0aabeb-ab15-4a83-9ef7-dab230f74c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.233.53.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ddb4e55-c8f4-4daa-b803-956285dbe29c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.127.16.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02e8813-2b42-481f-8c61-ea66fb863b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.127.170.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97410bfd-8694-442d-9bef-e299630e5234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.13.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c290f6-9e95-4c2f-925e-a8318ea9b011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.140.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb64aa26-60ec-4771-b365-ff2e4586396c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.246.40.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e644324-b326-43c5-b9f0-1e9bd74a1318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.94.125.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967b8186-cc6b-44a7-a80e-a71eecdda99b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.94.32.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21289b15-a740-464e-8139-262e400e5c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.125.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3259d323-936b-4df8-8340-e3cae07c1d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.38.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193f9f81-7e09-429d-8743-af6914e781b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.42.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b550e1-585b-4b99-9426-e5ce4bb06ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.73.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23690779-fabb-46de-8291-b2c0cde37b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.130.154.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7929187d-8fc0-4101-9f7e-a8832d95eb84", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.155.149.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49d0a2d-b582-4ef2-bebb-cd75ab605db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.22.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb682fd-abd8-48e3-aa06-cc361e3dbf13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.85.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efca0127-9341-4a25-9110-3e1386a9b4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.178.194.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eded95fb-4530-498f-a2f6-7c941b49710f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.27.18.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3dba6e5-117a-457f-bf4e-88d1782c3acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.68.7.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de071f8b-c89c-4639-9ae3-390984ae1156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.73.36.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad540fd-8763-4397-acb6-8e0c33e9a912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.73.51.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5dd1484-b363-44a7-8b8c-f66e404bb48c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.102.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f71f56-7faa-4db2-86a8-ba750359e128", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.251.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d28a7c8-6e73-438f-8a2c-22bbccc88483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.95.165.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be5213d-4a00-48ce-a8b3-647558446d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.192.237.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bc2dc2-3448-456f-adab-a3f53757542f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.226.66.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105ecf88-2264-4418-930a-a912f10b74db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.230.80.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79035c4-a126-48fb-8444-645650424049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.188.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673053cb-e917-40c9-9956-c77c5e47a819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc09349f-bcc1-49f8-9535-c3d8bbfc8f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2cedfe-31b0-4e62-beb5-3e94afd7cbe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.8.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb42cea-a859-495a-b93f-13be242095b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.9.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ce832c-aec7-4919-add0-a834b44eceb3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.254.178.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b633480-1d77-4d14-a2e6-13bb199c98bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.27.13.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c34a1a-2228-41af-ac70-fb5a9a0689a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.20.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecdef998-7eac-49b2-852b-7c7fbde90c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa34c96e-44eb-4de2-968e-d9d016e04604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83581101-8702-4757-bffa-c7613306b50d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.115.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ae6953-6a26-477f-a694-e8e4013746f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.252.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ab8ff2-e9f0-4fb8-b72b-edee4cda94f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.137.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8817b9e8-b146-44f5-9fa8-73c174ff0f61", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.186.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df88e353-6c7a-4deb-a50d-8ac6c540d836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.217.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c4a3bd-995a-41fd-9f74-49d539307f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.96.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82090574-b0ea-4933-ac28-ebb4766bf93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.113.61.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17d4ecc-5bc0-45ee-9f46-8c2c1876c889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.121.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e56b29-f1f1-425f-a98e-e663037fa5c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.122.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05469133-a9f5-474d-b073-0cafd9021985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e72947-f8ee-4d0b-a4e2-b568f0e2da50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.102.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f3d67ff-e901-46cd-9008-4f00764653d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.87.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63fc86e5-f7fb-44d7-b382-0dc855750f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.91.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c31c2f-9d77-448a-8085-d4e5801dd319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.246.176.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03644f36-af23-48bb-9c1a-76d840c1ee34", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2602:fb54:1400::4a']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e171fd47-bd46-4f51-941d-705c422517ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.16.218.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b13a20-8ade-4f9f-9efb-2887a69960df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.16.238.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f42a0e-5ae3-46d6-87db-522744595a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.16.238.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b753f6aa-0908-4297-9ca1-dec53a9bb461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.16.238.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5c8978-671b-4d30-89b5-4c5c90f2ebbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.41.247.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad134cdb-ef60-41c1-9717-622ca4f4e7a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.8.127.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464e0e64-ac6c-45b8-8e97-f53e16f0da2f", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a06:98c0:360b:37be:d197:98f2:2f92:e087']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376efba1-264d-4645-95ad-451b5a954f49", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a06:98c0:360b:4998:ae0e:5b16:a3cb:e9a3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13af3a4b-07d2-4a06-8372-b0dfb66ca3d7", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a06:98c0:3624:9a68:e1ee:5a88:97a5:a166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7c65b6-1ef3-4264-8840-2f81c933ea32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b021a1f-2aa2-4c6d-a104-d891d175fff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.134.95.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b79b1b-93a4-4c2c-a5e9-6547c87ef02e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.136.22.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2adafc7c-f4e4-46af-ac3b-5c1a45183d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.137.147.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13d0e50-0645-47c8-be7a-8ee340a61729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.14.84.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01198879-1aeb-4e70-a9da-a77ba8f6884a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4035d26-1a26-457c-abb9-a2d2ec9f092d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.97.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97233d06-d86b-4a40-9059-b5f0356bd548", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.144.242.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4781b826-fb75-4045-aa27-183fd594ab24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.145.41.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b295d9-d367-4325-855e-c5498bf90d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.148.182.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b349b1-fa3c-4b5b-80c6-62caeb454fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.15.143.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d657b9-e858-49a3-a1a3-20119f9560a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.15.181.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d8a538-8e12-4449-acc6-0fa3d72242e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.16.24.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78dca3d-af89-4d37-883f-31905dc83048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.21.163.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4460d675-b008-448e-b79b-c1f03225fade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.213.226.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2be77c9-0015-4490-b225-52029e702735", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.22.236.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051cda51-7d0d-4356-b88b-09a9fdfea474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.255.154.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0955020d-cc6a-439a-a699-aa8200df2301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc35cf6b-99c3-4bfd-9b45-e6f3c86e6a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.76.72.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e013d375-8493-40e9-bae6-aad6f186bd66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.77.221.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4e3288-0ae6-48f3-9b8f-0fa9c86b94ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.80.206.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22715bac-2393-4ac0-a54e-2f889a397fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.201.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c4cfd2-5b54-461c-89d0-7fb42ec21597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.35.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b780cc7c-0c5e-4ae8-95f2-74c747d864ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.129.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434cf7af-8c72-4ed1-a4c9-c88c44ca0633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d18ac4-979d-4ba6-b533-417ed7a2b5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.84.43.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8874e266-edd8-4394-9e9f-bb49358d8f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.112.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509a8464-200a-4702-ba0a-83d9ba716da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.87.196.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41aea6a1-ebd6-480c-960a-50297fb48daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.87.215.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e861f3af-c9b3-459d-9e15-47fd5f27075e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.130.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd25ce62-4fb0-4309-b5b5-44e8d8d6ff5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.144.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9767fdae-73e6-446b-9dba-7ccb18d4216f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.219.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6aa879-bbc0-4dfe-a0f4-896dd124d4d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.220.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b5975f-3664-44d1-9f4b-fc79f093c559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.128.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9552009a-18a7-49d5-8ae3-f593ab4bfe19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.62.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f49f5ec-e831-453c-b309-34ca2b9233f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.89.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d66b12-92e5-438b-b2c6-43a9a6597d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.90.220.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2ac65f-9526-4b89-bfd4-c20510f6f244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.90.36.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c675ade3-d2a6-4e00-a66a-027d84c29af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.93.176.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c881ca4-9114-4b04-8ca7-af11e0dc2024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.13.213.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e09e9e-3ba0-4bc7-812f-d824f29a8c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.132.90.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c29b988-31eb-4c84-b946-7b7c8303f8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbbfec28-eea4-47e7-9ecf-db6be05ed6fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff81d36-a881-4734-ba19-6c9cb0df91ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8140b0f4-c62a-4fe7-9577-3a7fc4d34f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc76fc4-70ec-41d3-b279-ef7f4c4716bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f399dcec-eb47-46a9-a892-8999a83525c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769e8735-05a9-4c81-ab35-bfcbc2171bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22e4694-0551-4594-b2ac-d8cdc5bcecb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f636b5-9b85-440a-aa3a-761959f98df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b358585d-336d-4e10-bd5d-57608f5e97b4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5179a92a-9206-4285-93f6-e1a091614b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38730611-a030-4f48-ac1f-e43faf0bdad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f68178a-acbc-4215-a6ca-88aedf931302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed5d9a1-7d3c-471c-8f49-6c218e56a5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa0369b-3b93-434b-86a4-be71526cbdac", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a35ae9b-b172-4f06-9a2d-1a80f1831e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef345787-b8de-4931-80f1-be708af3ee26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276fd433-913a-401e-834e-b6df69f8bd7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e47523e-4b0c-43d2-91e7-97d1207c748a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee859649-736a-4117-8a0c-e065d7e7fcf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa093e48-ce32-47ac-ab71-9100b8485137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0343bbf1-dfe1-4007-900d-ae88a5a74020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc78355-2431-4d28-909d-cd06490a76ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0e7d4d-e14a-47df-8d78-a07647475596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a47485b-d653-41ae-819b-4d24462e6ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148aa97c-50da-461d-9de6-102e7b7f933a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89f224c-a5f5-4985-9393-be0990572476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b46c245-dde5-460b-9336-fd81e0e66a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ba8f9f-53f1-4393-b83d-488d26ae6ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b9c951-1f8f-405d-b1c5-7fb947407e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8f90c3-ffac-4781-bed1-6defb1a33fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.148.99.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d2ab28-474d-4996-bb43-3d1ff6347c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.171.153.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba925cd-0646-46c5-9b14-542787a87ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.220.99.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3db5bcb-205f-41a0-a60a-533bc4ed9eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.176.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4cfa89-4068-4f8c-bd1f-3c4d1666ed5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de9c3d7-82c1-454f-a94d-cd7172553f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867abe8a-1195-40a3-a3a8-5f6a23870371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b997f9a-01d4-4859-bfed-8c631dc5be6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab89029-ac9c-4ae4-8004-baffc21dbf97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96548fe4-c825-4585-86a8-7cfe946b5363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3d5187-6a6f-4ca8-8412-cc620f09785a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a911b9b-53d9-4416-877c-be0aa68c68bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0079c7-34fb-4f5b-b870-06c0c0f8f81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.216.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af82b979-ca2c-4ebe-9f2a-7dc97dcdb55b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.38.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d571fb82-a875-430c-9226-1c8b75d24867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.97.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab98143-d933-455e-a504-c7e6e2c8f9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.97.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142a20e8-c78a-4748-aff7-bf594f11fa40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.144.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d6b908-cd5b-447f-a793-0576b33d36b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.118.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2628459a-7540-4fe3-b3de-d07fec6c2f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.160.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a5d9ce-4a3a-4c69-9da7-5f4f0e81007f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.160.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c47f94-8012-4530-95eb-c997e4df4bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.89.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa522dc7-394d-46db-b893-6ff0fffffafb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.77.156.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532ab084-2967-443e-a471-028bc8dc2060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.196.233.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67a54ef-64f1-4424-a11a-60e738d23100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.199.184.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff4aea8-0de4-44b3-904a-409d346be1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.230.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0272819a-75ea-4342-b575-c27122dc74c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.116.123.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa24b6fa-807b-4221-9c83-f0bb25490961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.126.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb203031-a3f2-4d3b-8087-1f2dd13a6c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.243.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721b20f7-3c01-47fc-95ed-701c3a539f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.125.146.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80a0422-f52a-41be-8870-8d46602f78d4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.128.77.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7744e28c-6ab9-4238-924e-b8b606ee3ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.157.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2bf66d-543e-4558-9036-a51c22722b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.177.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457982e1-9ea3-42cc-859d-c6d695e0d367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.131.46.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96c0950-c174-4191-917a-7d91974201a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.136.212.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be098e2d-6205-49f9-a763-0976dd276964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.122.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6bc73d0-af42-43c1-8315-2ec26166d185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.17.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2919b0e-74c2-40cf-b78d-45f67406748e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.46.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca843f4c-823b-4f3a-84e7-4e383536153b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.68.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15bb7b3-4235-46d5-bb17-2d0dc1b64f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.174.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ef0f04-6939-4cb3-9072-df76fb023c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.175.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f80afe-fb01-4f89-beb5-c9978d9dd9b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.24.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b54afa-ddd3-4465-9825-d4e279a80d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.97.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da2c94c3-cf97-4f3c-9bc1-7988d6795d56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.141.253.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378a3ac7-4dc9-4663-ad27-c5c5cb323c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.151.251.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8554dd4-1aa5-48ed-8ec3-c1ebbeeaa5fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.153.188.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b762410-357c-4a9a-aec9-9b14c1ce00eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.101.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42c1e25-4389-4d6c-a6ed-c2a012574670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.149.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88e589c-b575-4896-b527-dff5fe2f6c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.179.1']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4df83b-8acd-4f9a-9404-7c5df7175f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.18.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143bc4e1-7654-49aa-bc40-66792077c883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.198.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712b90da-20f7-4bab-98ab-c661a4fc28d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.212.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a106a26f-418d-4d52-8cc2-295ee857498b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.237.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d3f157-e66f-437f-acb5-dd628714b0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.41.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd88e23-e780-4e83-a77d-27d0652411c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.158.26.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8db50c-d919-485b-bbf2-4a051fd3cd91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.159.159.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77897eee-52c9-4dc1-ab47-bcc301fd64a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.16.16.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272d184f-4f2f-42d1-98de-c27ca7fe2662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.174.193.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc4a1be-a65a-4430-8aba-47dd56e74181", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.176.188.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7c0056-cfb2-4966-99fa-4fa5f930f255", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.178.185.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11045e1-b234-4e1a-b536-10cd3ef4c384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.181.148.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2ab754-69a8-4ad6-91d6-03b86c8057df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.181.160.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f330e8dc-be16-4321-93e5-51b05b9758e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.186.94.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e5e963-6bcb-4602-b05d-858d23a88cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.193.119.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3663b2b-baf2-40df-b305-b8a8553c473a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4995df3d-9b00-4685-b554-810802aeb0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.201.69.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc11ef3-1986-4abd-aa94-b060e9474ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.207.87.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397695b3-7406-4e7c-a89c-4a9460649656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.128.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d933a2-da69-4868-b15c-1a45c78f4969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.129.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c93ec15-fda2-4262-935a-1f178595ace3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.194.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df176c8-66fd-4d73-9a48-9a734d50073c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.215.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03cc444a-0e9d-49df-a4e2-c99222db3a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.250.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256b5f70-712c-49ae-b1c4-8df046c92612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.227.15.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c828afa-4f55-4140-be29-8fa37952a497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.227.58.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b82928c-f037-4b7f-8ab2-560f870e16e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cca14bb-8730-4534-b08f-e30640fe5a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.255.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c2b343-9a97-46b7-b3d9-0aade928d88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.230.205.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee749334-dcf8-4a3b-a48f-7e4fae15fe22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.230.221.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f4ff36-afba-4371-bcfd-fe37f4be3ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.235.129.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec60cdd2-ec21-40e6-a321-1807652c4906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.238.125.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11bdb0f-5b11-4ffc-af97-9774c8ec0a91", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.32.232.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff97443-25d3-4e9b-8c5e-3f8c9f69a040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.147.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52fe05c-78f7-4ac3-9ae8-38b5d1b66ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.178.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9274a5a1-3037-4069-955a-f5343d141eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.179.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18856ee2-2440-4bf8-b753-8b8223e36eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.164.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7efa43-f342-41da-9655-4a8b98615ce0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.175.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb5d61b-7aa0-4a64-917a-4f86a43e05b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.180.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b82445-0a33-4d6f-ba3b-10808cce0d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.187.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3677eb4b-fb1f-4c92-ba94-2dc17cecdccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.201.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced12740-ec57-4742-b5bc-2eb82df3c863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.204.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c5224b5-f13c-4a57-8652-d5182ebeaedd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.211.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ff3227-5a7a-40fa-b851-42b0c5b2ef69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.217.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172e5291-21f6-429d-a255-7675534d63b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.245.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f3c89d-ef32-4f64-a395-e4922e77178c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.52.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12044409-1cc1-4ef5-98d2-ee9419583eb1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.69.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f324a1f-1cec-4319-a8f8-419a562d3a20", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.93.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3779370a-9455-4687-87b2-cc100c9064b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.136.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88117d5b-b355-496f-a530-9a07d379016a", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.137.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d548af-995b-4273-a583-7d1701173a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.158.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4456ab-fffb-4cc8-adc2-a6d5499fcc08", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.172.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8b9312-f430-4131-9dcd-d6224c2c8303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.176.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f60afba-d3e9-441a-b58d-eafb4742ab02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.22.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764c463a-a53f-4de5-ba09-1d9312926da6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.222.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f02ca4-fb00-421c-91ee-b697dab98ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.234.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3dd820b-e03e-480f-b33c-ad5293985d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.110.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2ef210-5eff-4463-8abd-b409df86541b", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.139.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6b0378-13c3-4dcb-8ac6-0446d1edfc8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.15.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4dc388-3233-40f4-88c4-43a053e392fa", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.207.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b82769-e84d-46e8-8f0f-6c5e7540131f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.211.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46b121f-7a23-4f34-ba3a-6d3f792fc87e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.211.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2380f39-fe76-42ed-96d4-b0404d4d6338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.250.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6d778f-92ca-4327-8091-10ff3d04fe80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.36.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383b6177-ad7d-4a96-bfd7-5a2e95d07b53", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.41.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac267e8a-f4db-4a42-b215-4b056b5665cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.52.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed560e69-f0d0-43c6-90a8-a32070e835dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.63.19.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb580d0f-4227-4f1a-bf8e-fd9b9bbee8c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.64.105.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74838706-ad9a-47a0-9f86-897dd3ae395b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.172.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedd0b2d-5920-4e0d-9e77-a6282287dc89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.179.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6387b177-19ed-4e0a-9a3e-7cd8599825eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.7.237.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a5bb22-6202-44fe-811a-140b5fb735bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.73.120.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4316daa-f352-41f4-b1a6-dd20eae8ffb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.109.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4edfd36e-fd0e-49d9-ac90-92c7a0357c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.164.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11190a0-5d88-4f19-9f0d-77899db4a327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.20.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57e04dd-f7ba-401c-8b02-eedf54ac3753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.238.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ca9fc0-caf1-469e-89c7-5b635e28214f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.251.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29815b71-d6f5-4b8f-ad6c-d64f016b2620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.56.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30dcba22-8f24-4da5-bb42-62a358a27365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.91.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80664704-bf47-4475-bf9e-d5ffe2bb8616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.173.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f1f172-6a04-4fdc-a19a-60984b2b97e0", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.2.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8477c3-ee86-4ce6-a8e7-91194a219ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.86.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a612da-3398-45b4-8ba2-e6939543224e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.158.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed2da79-7d87-4144-ba3d-ae1ab585054a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.162.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6c285e-c9bf-4fa3-b686-27eab774d9f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.179.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce980948-3647-4c62-96e9-935d478665b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.189.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099ba3c7-931a-49f8-a311-aa4a5cd81062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.195.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9a4786-1204-46bd-8a9f-6da0c375002c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.254.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29482cae-1ed4-4e17-b8a4-db173945c211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.120.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58302834-21b2-46cb-a335-04349154a7d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.151.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c080baef-0bbf-48f9-9e0c-e7146d9f66ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.183.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0747d5dc-8af2-4494-9ee7-a285517c8621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.249.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb910375-4633-493d-affd-1bfe0e2e7dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.25.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c756d441-490d-4e2c-ae4a-d1d4fa7b975d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.28.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08a3f8b-de62-4294-82e8-7ff391a08e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.3.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9069d3-29b0-45f8-a3d9-1dfbd3489dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.39.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af30c05f-8d4e-4851-bfd9-935b96f051a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.87.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c67ac81-bbf8-42df-a0d3-4e2a478ebff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.89.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b45de5-8bf9-47b8-936e-0638619c9bea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.84.133.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abc59f8-5405-4910-b56c-0d149a466223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.85.162.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daae7bd5-8915-4aad-9945-14119385d8f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.86.212.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f97bf0-c9b1-4cb4-8364-d88e9e15b678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.86.46.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2565d666-791e-4460-b747-70ebe600656e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.0.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe1787e-8a9d-4fe3-8971-6436de29991b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.10.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e1a3d8-3a5b-4bca-ab3e-f96626f958e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.98.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47339b17-08ab-43d9-bca9-71e324ab5c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.93.220.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dfa27e4-a650-4c9d-94c9-923eaaeec03e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.191.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f5b4dc-58f2-46e9-99af-fcc27667ea85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.249.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6413ab90-3569-4909-9a31-20111e36b9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.98.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4170980-c738-4735-a54b-ca0f01ee496c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.167.108.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcdf3723-fc95-47c3-a223-0fdadbf7eb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99016927-22c1-430a-8fe9-f72315d7f500", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.171.41.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b67de94-81bd-4484-83f9-755ea430730f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.174.106.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b036f6-5c7b-4b0b-9905-abb9c598b673", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.188.112.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ec658a-552d-426a-a436-a94983ced435", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.188.251.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa48e76-65be-4fc7-933a-f4e64a0e845a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.194.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6689b3-0870-4c25-8934-0300df54636a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.208.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f001f8d8-cdcb-49aa-a39c-79a20571881f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.190.207.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b7f0d0-4e9f-4b87-92f8-6abdefbf0eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.122.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759f23a3-1bb7-4c8b-9bcb-d59bc3d39c82", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.127.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d151a4-46ff-4a3c-b2e7-dbd69fc3296f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.17.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ac663a-6dbf-43f8-a666-e7ba23b44107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.172.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e067cd28-6227-41e5-84b4-b85301af8403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.250.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e4ec17-5c28-476b-899d-c46c09adfe4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.66.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b413cd-6e1d-41f2-85e8-975cb1384ac3", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.81.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1f0bb9-2b15-44a3-a25f-43061a186264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.83.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c60e8b7-e293-4fdf-b73d-ae47456951de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.200.201.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d07510-92f7-44f9-9553-5ba0ec924f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a912411e-7020-43b5-9215-2734a01959f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682bc3b0-1ee0-4ce2-a885-9e87bd41d2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2230866-5d3a-4d06-97ad-9a59c90e25e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f207048c-22d2-4375-b59b-35bc2a53f3d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec72cc25-7472-4f1e-b92d-19ac6cb92a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371f55e5-b1de-45c0-934f-edf9380e316d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805f143e-93ac-4cd1-830f-1959b2c278bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536f37d3-e8ec-4308-a324-8bc67b663ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51adcf03-0e97-4132-9581-1de67b9bc779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3b2a63-acbd-4932-a121-c10e0733a059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7025a2f6-22b1-47a3-ab09-bb2588c2fff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d331d79-048e-4fe4-989e-591e267e823f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e43ddc-e6eb-4835-80c2-9729a41e632c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea91b95b-90b2-46fb-93dc-e54aad8bef54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4377de04-ccbe-4463-9711-e56d22bffa60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d738b7-3d97-4436-8361-8d8b5ae3b18d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3573c6-2311-453f-b2b4-63978e67abb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9ce1e9-484c-495b-ad51-78031d3d9df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d623c6f3-c87a-4fa8-9a0b-1c4755bb9f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d538e251-5775-43fa-80ed-c982d9a29b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0128e1-57f3-413b-b7a8-f21c4e7f8ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef06ee2-3cc7-4b4a-a166-35d2e28831ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66996d7-38e6-458e-ac9e-9841f3a89912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9738bb6a-41d0-444c-bc42-379601638a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3447f603-63c4-464a-9e01-ecc55584b196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9967c80-8e2a-4d78-ba78-2e4e0854ac4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9628e649-174d-4d28-b738-1da069581f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2581145-c998-4939-87ed-8d02afebffc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5346dd-1142-4a43-95b4-17f65c228ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8beeae81-3aa6-406b-a24c-077e4065b9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e8830d-5f6b-48bd-bcf4-e617de9bf05c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16598f1-1243-4920-b68a-52f40754cee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c69f3f8-b291-4a9a-996d-76584d27166b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1511022-7fdf-47a1-95ad-1ed78ffdd7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa91a93b-7b65-4198-9226-84704dc320e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17500214-10cc-4d8f-8924-f27d6f61bb33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0961b2dd-1948-4692-8a4c-133dd15662a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b2869e-7798-4d96-bb39-993bc5443186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a864a2ed-1abc-4dff-95d3-20b3639e50aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f285dd-921f-4f8a-a352-4eedc4fcb78e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ee1eb8-236f-43d5-bdff-d3c6eca2c342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f1ad23-9536-4a5a-a6c4-15563b929f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6931a7f-01a6-4465-af29-c69d91b2f340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7dafd2-f4f0-4008-a32e-f601707a4ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c627483-1b85-43ea-8de8-5903c1ecd137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246efb05-b88d-43e3-b4a2-709e480776d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7755db-6ec0-40df-9c14-989f5e53a8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117a8f55-3e2b-457e-84ae-c6cdd66127b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35b8d05-cb35-4acc-b53e-cbc1549f401b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea01f3a-61b6-4e6a-a352-a09bcc8fac62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35da44eb-600f-47f1-87ab-0344627d63f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2b862c-f0f9-4483-a344-fc57590d8dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3442b1-9bf5-4f63-8071-45adbf1dcd4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e5b47d-3325-4afa-af37-4b58c95c43b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02c7dab-d395-4ade-9ff0-3dd0c4bf45a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e505a8d-81b0-4b2f-ba46-12966138f408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32865566-1057-4f8c-a692-ae273c8b8f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ab9382-e4e3-4c99-a8d4-4203f21b4506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b568ab58-d119-421a-8419-9b002d9e5d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77209b5b-d389-47e1-b3f8-f99f2a467b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a907da26-07ce-4edb-92b4-8652a57712ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db91afcf-b451-4a66-8d32-eb1ecaab302e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f37636-afbc-4ff8-9363-c9850fe05ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1ac8d7-89d9-4cd2-9208-1bb095eb1e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b42e5d-bea5-4043-9bdb-ff092fb29446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9052bf50-86be-4ab1-94bf-5df45bb8271a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb5424d-6668-457c-a379-0c3b5937f463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f499d63-f963-4ae8-99f6-1c79555f05ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484f58a6-d6b9-43ff-b2be-6c692d43618a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75fc6d58-b45d-4e58-a33e-e214e6935d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf4b5c5-118b-4b6c-80dd-4b69ce740333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5429c4-0a80-478d-a3a1-002e8bc155a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c38fcb5-1010-4838-a55d-9aed4a9dfe7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612e0be0-5480-4203-adc0-9d5e6258f7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc471cf-1208-470f-8581-b06073dd325e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89ad90a-34d9-4861-bbff-77ab4d8efe69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2073df6-cf97-4254-83fe-49232d79368a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dacc0d5-fe8d-4264-8af1-28809a8b91c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736d998a-dd0d-4b68-b319-f4c8e5ad110b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5e5a4a-f331-4133-8ce0-725a2b0a915e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341e9c57-b483-4408-8106-9b47a930cc17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72cb3bb-0e88-461c-9061-f07e90024dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87f58e8-43ad-4f48-801f-7610e1ef26d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284bb170-9c4f-4bc9-be2c-c291534d7a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2f2f65-b23b-48fa-b5c4-7be39aa97ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b695869-8818-4e27-8523-395059d9a736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f0c045-a4d0-4fe0-af9c-d56905569083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f36ea6-8d99-401d-95a5-2fe39edf1871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53d7819-56ff-4cb5-983b-feb4406ce8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853927fe-2b9c-4e9f-989c-66cde1d50e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150e01a0-7867-4055-80ed-3b5a24ab7642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2be924f-9a89-4b10-8ea7-d75c98d0dd56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5417c04f-d390-41ad-b8ad-f59b13f435ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e225e565-8705-4e94-9180-e103385fe78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7cde169-1d47-423a-a23a-f36200bbb8c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308c6e54-48bb-4a49-9f51-e671c3391c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece64c6a-6288-4cb7-a0d7-f3d6477a9429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d5a9b2-d92d-46c6-9164-05b73a3e3c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9831fb03-444e-48b8-860f-d351993a560a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f115d684-eb53-434f-a4e8-1a664d7d6a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6266351e-53b9-410f-bc64-98a02e146c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af6f4a9-cde0-4fa0-9735-c9c436ddf730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad942c6-1825-4ec1-b5a8-3923b433768a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02a5026-7a1e-4297-a12f-ae7db98a9ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08662eb5-ce62-407e-aff7-1be7920231b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed7e1ce8-eadb-4262-8e58-500d87c24906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86153b6-3396-4d2b-8468-01c6ada3fa31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31226a0-2cb1-445e-a44c-18d65f6fef07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362021da-71be-4497-b98c-8254696dcb60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679596a3-d1c4-4fa9-af2b-aaf5854509a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529049ec-3c33-4ada-95a5-7cbcafd24653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e5ccd3-dac0-4782-90fd-edfa81b07b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8176b77-6607-4580-9a66-98435b00b8f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01dda7aa-6003-4360-b0c5-ddecb542e51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd73edb9-4523-4c54-b3ad-70076cfa60d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800d27d4-dfd2-44eb-ae75-14ec0396b20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814b25a6-dc44-4d8b-b064-7fd92e48784f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0642d29-5b50-4759-83df-9332a41da91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7526c4c-50cf-4215-b6b2-6a1fff522b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbe6700-fbd3-4703-bf3e-ebb77c7d1a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237e0472-1d0a-4ea1-b431-35718629ceec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce97a9f-7f76-44e4-ba1b-38f8f1286813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.102.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbc057f-d047-4702-8f27-1ab5d1c52c0e", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.114.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9dff65-55c8-4fba-a30e-e5ebd61f8e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.194.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19763999-b523-4f5d-b5bb-7027f4186191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.65.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e3bc06-2bc1-4544-82ff-d5b278646e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.86.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890cb734-c7d5-4161-9875-02b5b0d74ba0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.210.61.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c64480-13f8-4daa-9ac9-56c9e384957d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.172.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b10997-561f-44e5-8600-c7f483067739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.189.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5563ac-6b00-474f-a9b9-c36a398ec19f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.254.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ad3f02-689d-4cbf-adc7-abfed1b052fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.222.130.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6dc4fb-dd60-4e4a-80d5-c167c3806085", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.228.64.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4368b753-8a1e-44d4-bfbb-71498a8280b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.168.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b879c5a-418c-4815-ac8e-75c05f46aed3", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.19.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521ab79d-b26a-48ed-a0fd-40bed515a158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.32.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0dff85-1f0e-4bc4-8244-f51536266a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.57.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7ce8e3-dac7-4f65-b420-fd068224f256", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.66.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e0c0a1-0661-4629-9b4d-dfc132c02afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.235.127.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4608051-5d44-47ae-863f-bb41698210f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.115.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12629305-5e3b-42a9-b080-8847ccb8f312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.174.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a42b89-1b20-4fd5-ab3b-1efa624f35e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.43.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d572f4d2-8225-4978-afba-9e0b4c966de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.62.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe2ebf0-6992-4213-a961-310f8ec0e953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.67.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18fcb588-1424-4680-a075-dc93d6556427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.166.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3d3e01-3f1c-4431-83b4-349bcda6d7c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.170.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128edd3d-3743-4869-8e7f-75bc36d2db21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.180.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b4da3d-679f-4254-b231-79f9aa01728b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.233.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817485a4-de25-4e0b-bc7c-b020b1be317e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.235.197.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2725bab3-5352-4a82-aa0d-2132c5afc7c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.25.18.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0ec12a-997b-48ce-8d79-9c9a5c6c94d2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.25.32.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4f9333-ebe1-4f49-a0cb-c7e2c3c4341a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.86.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d775cdf-f1ef-4473-ab8e-17a9c8b35aaa", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.62.141.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e177d95c-37fa-47d5-a269-c88ee721fd8f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.64.190.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938ad5d7-8cfa-454c-b9b9-bf7a20202fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.64.68.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5501aed-ec90-4fb8-a968-759a5c025f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.7.129.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4077c4b9-3e2a-4a80-a7f8-a2ed296f5ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.88.16.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29cc48ba-0e18-4acc-a9a1-b32079d266bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.89.252.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec18f5ef-c680-44f3-8229-337a27dcbb60", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.93.144.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7f09f9-5068-4d19-91dd-e97005529e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c1053e-9945-49a6-8dd5-05e6c89dee13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf432828-88da-48cf-8e40-726b56c6c7d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c3efe0-0b08-466a-9e93-e1d804761098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5087b4-a850-410b-85c4-68fda5d1e4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c431c1a5-8141-4edc-9b07-b3f255f1df8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abfb79e-7e10-49d4-8dec-b283a38299aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbcacdbb-722e-4c41-aff3-55ca16a0371d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc1353c-23b1-409c-b53d-9063ef6ae9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96516f3-8950-4e5c-9317-7ba0a8a71ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2234961-e189-40ea-b6b7-ca1a4dbc6701", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.120.213.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938f3752-8e8d-4372-9bcb-2ae44f8ee954", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.139.53.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4202465-b20f-4e34-b0e8-eb9529dc3af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.19.200.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562b8225-6248-4dac-be1c-c1bb2fabde20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.233.85.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7529a33f-554a-4b15-8222-888115ce421a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.248.221.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84c7ad8-89fc-4d52-9678-48fc5527d03b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.27.244.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef70862-4a81-4485-8073-be03f5d2abc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.27.6.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d5b305-6531-40fb-8e0a-24d971f3b1ac", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.32.22.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89837c8f-af77-4c78-8def-7a9b85d81e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.48.253.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811f0c3e-f47f-4259-997d-bffa2c6484e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.53.31.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e825cef-5ccf-4ad4-adce-8fffb888ec7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.59.229.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac929d6c-ce18-480a-bed5-8b3b72e5a747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.60.254.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e17382-d501-4c09-a907-76546d9df2ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.137.233.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642fe970-a601-449f-8fb1-b8162bf2d512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.156.235.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14887b6-4415-4d27-a8a6-375da8a9ac30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.19.156.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85948a98-2ba9-4833-9d9a-ce869e8df69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.25.42.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c316e35f-064d-449a-975a-5278b5033bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.253.163.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791e2920-98f9-401b-a8df-25c472cd6931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.52.136.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af0cf74-02a3-49cb-9382-a620e16e341a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.55.130.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b713b56-f95b-4559-a089-cc1b3d6147c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.183.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb1d680-b513-44b8-96e8-81ca1273c59f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.212.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec208ed-8f51-4523-a85d-e14d20172282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.93.206.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dcd1bbc-1647-4fa6-809a-2a680ae6d1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.96.178.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00520f6f-9a76-4274-9a68-4ef357a02567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.96.178.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce552bb-f877-4681-8a38-d5b24002ed0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.100.77.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f131523b-cbd9-4cb6-8b3f-ca66f19dd675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.100.85.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80177d81-cd3e-4f99-8e2d-bef1a6eca9ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.100.85.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64828d2a-b41b-487d-91f4-b81bb675ddbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.100.86.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c75048-523a-4b32-a459-d64c2aaa9e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.104.63.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f77dfc-ba84-4c4f-bac8-b246af35d77d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.104.64.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f36c1b-de65-4d88-be4e-e0ee92e31922", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.105.84.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fd752b-8a74-49ea-8a59-5e12ab7b408e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.107.55.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a1936e-a690-4455-b32f-75e2d8d5ccb0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.172.104.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c0895f-2f42-4c4c-bda5-e8eab6c8bc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.77.28.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41a7eeb-f0a4-4355-94ab-95d4ee299768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.78.139.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865b6755-1481-498a-a491-cf56d5a089e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.78.140.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b47f890-630d-4b69-a2bf-c94b7d8ce538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.178.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9bc9ce5-b366-46fb-8bee-320a987ea0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.99.212.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4956ce-d687-4de9-82f6-cae3afee6a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.190.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f28609a-228f-4623-a9a1-1f7bff71d799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.178.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fde058c-87df-4323-8ae9-caf2e7c035a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.180.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9268bd-e8fe-4511-9633-c491b628ab68", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.247.141.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc0b300-0a17-401f-980f-4ea5af4e6f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.24.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891cfe54-5264-4932-9f29-a6d43b2daf70", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.29.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994c58e2-7f55-440d-9545-34ddc5ae77be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.32.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c285744-91ca-4669-8cf7-f0d9863c91e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.40.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276dc0a0-d980-4b40-8206-33710920f0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.41.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517e8775-3e73-4fe6-9df5-be53dee124d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.46.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14c6a27-1519-4566-984f-88cb54014028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.116.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732089fd-4002-44f2-a0d4-060615ea75c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.120.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b22481-78dd-40f8-93dc-9c8d5775bf55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.127.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eecfe3cb-7411-4081-ac32-15006a185697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.168.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58db821-af03-43fa-abf7-84b5277b5289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.168.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1aca39-cf2a-4c25-a95e-62aed08748d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bde2059-b8ac-42d5-9d29-48e1be02cabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ad375a-6595-429c-a1b3-7e7ae1e4e799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8deade-cb9b-4650-a76e-d6c287458601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829d38f5-08f0-4ed0-99d9-7e5915091245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d40f6ec-2129-4b71-9c97-b0b76c8d8117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82c7d79-0488-43ad-a502-3a650e8b65c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb8b3a9-5f2a-4591-8514-7083733560a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0268bc37-c0bf-4d64-a09e-ed7231c0c5a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c829905f-f635-4b5d-8d5a-d743b9b31fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57630cd-bd9a-41c7-89ce-1db678098726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e472c7f-68bb-4f82-bda6-771f2b8debd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1963784-95fa-4a8f-89f6-7189c584b5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830333f8-1bd2-48d7-9095-7e0475ee4251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5bda32b-3c3d-4c6f-b46d-3b391add958e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3b1c45-e0ad-46bf-953d-db1b0dc47dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d38c553-ea64-4141-8234-d4ad2aa4f992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309e7f53-890d-4765-977b-89bc5a95ef2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2ceca0-5b99-47aa-a192-521b24ae096f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d6fd54-831a-465e-8446-0bd0733e3cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745aabf8-ef91-43b9-ac20-df48abaf01aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a525a642-64ad-4364-b6aa-90e39db1e284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a744d89e-20de-4d6e-925d-70b183ed4cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead2c337-364f-4d06-9ff5-34823a4ef778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9dcbc76-7f89-4076-ab8e-56ccafc290cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa786f76-b246-4cb7-bda4-519669e0448d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed868f4-db52-48a0-9c1b-a566f36a1502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.183.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b49dc94-41ad-4250-b6cc-b8980df146c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.184.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8463811d-50a6-4366-b948-c2d26903a6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35837fbc-6885-4d5e-9a98-06907c2d9312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01bc905f-737c-49e5-a050-173ace6b30bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ece788-0e8b-47d6-9aa5-df4648b4a923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.80.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d6ccbe-19a2-4b8a-979b-ffae72ea7d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.81.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--234b7686-b393-4204-a3e8-d121f90306d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.138.162.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52742520-7fdd-4dcc-a007-7cdc0d320d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.233.2.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b33525-0645-40c7-9340-8e28c8c6d44a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfa6e97-a7f2-4755-99c3-f8d3e959b950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.177.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e13033-60b3-4056-8c7e-198cabfd7f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.212.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d39889e-a8b5-442e-be21-872b62952eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9124f88-635b-42c1-a32c-c10ae8a6a9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35651ef-defd-44f3-96a0-801dadacaf9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.125.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--114522f9-9805-4a05-96d9-569fb587693b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.139.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0865b486-3f24-4fbf-a358-f8cebfc4cc0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.99.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ccf5a1-f051-4be9-841a-e38bd6d0b334", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaaf27b7-3f1a-4f0b-b01a-b3f48679c176", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ad480d-b34e-432a-9611-72c83cb9eba5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c887ac80-a22a-4e55-bf26-96c53ab51746", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5529dc-e571-4a30-8ce9-0025727055ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932ba3fd-7e81-4957-8685-da86c7b06004", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4647a1-cd9a-40cc-a667-ded41c912d68", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57996cba-8e04-4648-a39d-977f02eaf143", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f03720-ed35-4cce-a84a-e504cc9691a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8def097f-2c19-4819-9cab-8350075f4611", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f16086-811f-43cf-877a-1946c7c99092", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398bc024-c1c9-45a6-be3c-54234bb14f69", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3522596a-11c9-49fb-ad00-8d651aa77ee7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5afb9e-e18e-46b2-80ba-4348b0f4c6a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891aafad-a137-4d7f-9516-697ef727df55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.204.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a511cf7-0799-488c-a4f5-49db40797730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.234.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74332664-5e86-47e3-9b0d-f1c421fd2aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.235.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3c99ae-8de9-4fed-8419-dee267239457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.111.213.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7c29bd-3eca-4455-bf2f-aa4ec475b5cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.128.160.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--914d3f58-8ef3-4a7a-b00c-af139dceccdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.184.37.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e021b2de-a454-4a3b-afbf-c42d09c9d959", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.250.3.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cc35ae-0821-4453-9e14-e73b0fd130f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.10.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31df1bce-ae2a-47be-aae6-82d324cb7b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.11.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd26ba0d-6b4e-4bdc-883c-a7b0a82440e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.116.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2bac7d3-3a0b-4c1f-bdf1-e0ae8f74ebb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.142.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea666f82-9c93-4d5f-bcb7-f9196ce57f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.186.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d384e16e-32f7-4332-98e7-fbaa442472b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.197.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233f06de-ebcf-42eb-9e9e-1b6e1f5daa1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.221.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdbacd3-db55-4ed2-8d54-b1e530d79213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.235.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9439cfef-60cd-47eb-9b7d-6ffd563bb4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.27.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31778701-c19b-4af6-a628-c641cba99ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.50.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b124490e-0908-40b5-9879-dee46368258f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.56.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bac8290-0822-48ac-b1ea-b9415781cb0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.64.173.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c3af14-e576-43fe-86f7-0c47d7914edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.65.68.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8271d247-e670-4fa8-85ab-2426e6fb9398", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.65.74.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97410260-22f1-4725-a29a-c47e156bccf7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.75.114.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd26e59-d0f4-4533-a87b-741134236246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.115.81.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c61180-f68b-4940-9f16-8baf54ae6d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.121.161.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e872e36e-2d5d-4207-9a74-c1911f2e5485", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.194.226.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bdf81b-9a01-443a-b24a-0a01f864d1d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.108.44.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019fa320-2bbc-48fe-8b54-4f3c177588bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.73.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ee8b58-490c-4f32-9f2f-80668f4c2b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.129.33.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f319cfd6-9896-4ef4-952f-3bd1ccde15b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.141.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da419e15-04b6-4404-a552-b18c1ac72d53", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.26.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef98b6ce-bf13-405e-a483-3ca6e6e6c390", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.14.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f3a36d-42b6-46ac-8856-8aa58b4ce8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.42.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8233f1-7435-43fa-a02b-6e4b22be867b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.11.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1155564-ae63-46cb-ab48-3a7b68019701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.41.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f453e8-0a42-40f9-8a05-bcbf6bec1733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.51.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ab9e60-53e3-428a-8b4b-79be99c35c66", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.57.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce49908-7683-487a-9813-9760911dcf50", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.133.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e079679d-2082-436a-afe5-891877e6dfe5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.186.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e5e830-9f55-4db3-8a69-1242599ef4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.199.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9fecbd7-eb49-408c-8532-c53ecebe9fa9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.140.37.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeee5e6a-dc62-4e10-9b97-8154d92c5d36", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.135.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2172ba4e-f04f-4401-8720-730fd45ec80b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.71.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b672c899-e8de-498b-82a3-89298774fa9e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.228.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc7d0d3-fe19-460a-8c95-ba3708912828", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.22.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605c98a9-b510-487e-8f62-88721ca663a0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.62.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebd6315-30b7-4507-9aaa-9a25f6287729", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.98.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad807d41-0d2b-4f1d-a475-b48fe2e270b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.128.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad76e7e1-6477-4b78-9b98-3bd7d044d130", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.148.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78019860-d1a5-442e-870d-5ab514688ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.113.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec5587b-6afd-4b19-aecf-182ddce95a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.232.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f89fad-2f7f-4eb6-9240-28583075301a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.190.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16eda203-316d-473e-bc36-4db6c420fd3a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.195.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd42c6b4-95da-4394-909e-e3ff316c0293", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.6.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ec7ea1-03ca-4dc8-ba1d-df010d1536d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478ab90b-ce29-453d-b748-cb765ca13e26", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9012d8f8-41cd-4eb8-aa06-54b681262135", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e750d3e-a3d2-4444-bb9f-510ba9e8572e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e35fec-ecdc-4407-9916-a9c20ee1533d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14acc622-4c5d-43f1-aae1-26c62873da9e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e37d1d3-e899-4812-9af6-fbec105a1026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.224.126.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce0ada4-d1af-47a1-916d-398282a06785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a0ec59-cbf4-44bd-bbbf-9f8bb6445367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902b40e1-d1ef-4cf7-8064-252fa8557e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ac1e83-9684-49eb-97d2-24009a165dc2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.12.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d555f3-7042-4787-8684-d8ca3ca10a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af10dc1-10da-4d03-85dd-f69b12ac837c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7612f8-33f3-4bff-956a-00eea1c9687e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1665a7-08e9-4db3-a398-d8f6de1f22e2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.185.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0469b6b6-efd7-413d-b9c6-bce893cc3e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.181.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5bb379-8736-4668-b3c7-51e6c34961f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.153.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25e1f9d-1110-49f6-a93c-a2962e967467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.175.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bd4eb1-6fe8-4389-a16d-02178653b999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.203.154.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba03a30f-efa1-4e99-a86e-968d615d7c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.204.5.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93cf922d-17ff-4db3-a9c1-4fe4640b08f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.211.167.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ea3591-cb0f-46e1-92ad-cf6f683e716c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.212.18.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91eba7f5-029e-4851-bd18-0ef4481de851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.212.21.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76e7eca-6fd3-413e-a3f7-fdc6ee6725ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.215.219.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbe522c-5be3-4018-87d5-acb83a72bec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.227.45.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7415d55f-bc66-4d54-a6b3-96bdb8fe1231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.247.181.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b3a658-7dcf-491a-9c94-34ab2d19ba64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.10.175.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41273951-7800-416b-ba38-f1fb36819016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.11.16.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c37515-0b85-4061-811c-5d771ab467d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.11.172.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19d4798-0a85-4f3a-856f-6f469029a558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.11.57.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e409c7-25c8-4751-921b-139be1d097e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.149.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8671e3-4812-4b9b-975d-c6d02164725d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.118.146.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98660bb-e7e2-4cd6-b33e-1c140e3e572c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.130.127.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19053440-e3fb-4f95-8413-36bd23adb86f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.179.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7e2059-2065-412a-8d6d-7a9469916ae9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.193.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b68cc6-b547-4093-bfbb-b47832143167", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.195.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75686cbd-6b87-479a-9222-191fa89e7ed8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.195.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a420aa0c-e79e-416d-aad0-30953f21d005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.46.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a235eadc-281a-44c6-bb8f-fb4e9f42db19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.46.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45274b10-1a82-4319-af46-5183381b5ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.140.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8f2d79-bfb5-4db6-ac33-44f38fb4b253", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.9.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7fb6729-0edd-409f-8b56-b0f62c5642af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a71bf9a-8a5f-4a79-85a9-2a4973fe070e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1973bb6-6cbe-4d14-bcde-9a7425f61446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c646aaf2-8e1d-41c3-9667-51d862efadc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb6c0aa-765f-465f-9d44-8b70d1b08c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392c2976-c118-4997-b5cc-e35a589e8b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.56.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818f6d02-adc8-48c9-89ee-5a982c486025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901a4aa8-ac53-47bd-bff3-e8915e335388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc6bde0-a565-479b-b418-84e47dc5e465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d17127a-bdb3-4112-abc5-7d928efd2684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809d17e2-fbcc-48fd-92b6-3f78e5390f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3659a175-fd23-4fb9-a47a-de09e18f97a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5310ddd9-39e4-488d-a2cb-c5649a6d559e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c28a29f-c24c-47d1-b738-cceb60592d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58b44c6-4805-4a6b-84ae-12d205dcf98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913273b4-41bc-41a4-a2f5-4f150c7c127b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1341c1b2-719b-420c-871f-5d98581dde86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956da66f-4d43-44e5-8ec9-27cb98b31f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8c3021-ca05-4e43-9f7d-62a9194ae032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd9657d-7a27-41ce-8e2b-612234522209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcaf68a4-127a-4882-ad3a-8d4f633e7cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0203216a-f259-4d16-94b2-3401345469de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5754119-c384-4463-af75-1e38dffaadfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.203.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7478e5ea-3df6-418e-bb3d-dea783baa2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6011d119-e4aa-4d10-9382-787da70bd093", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c955aa6-504b-4bd6-bfc5-215bf5ca873d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35eb34fc-4aee-4d2d-ab36-f6118ee1fcb7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7a9005-c595-47b1-8f07-0f88279a4012", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5848ff6-ad09-444c-96d5-a11ab1a4cfd4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640ddffe-78e6-4696-8a77-ef4f9dce81cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f58997-6845-4684-93b4-2dd0174fd091", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2000bf-f2e3-4d0a-8762-531634fe3269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8fbd6c-60ca-4764-8cbc-eadd5ad4141d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218a4518-2be7-4a69-a33d-eeceda258b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.146.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b87ca6-f731-4997-8eb8-e87f13f13d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3a8f91-1d7f-4f08-b119-86d13649b3a7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec4e7bd-982e-46aa-a2ee-5fbe605cc3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc81318-cc30-4dfc-8dc4-b5294d02c9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d979cd8b-9c07-445f-8a84-9a3b7f083293", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4addbff-dd1c-4fa2-acac-8baf59361770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a4999b-84b2-4ee2-a014-edb0992b9319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.244.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76dfeda-6c81-436f-a846-a4c76a131e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158e3605-2dba-492c-a19e-c8d8d67eb135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b15c73c-a8ca-42e9-a64b-82800310e086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35dd6928-ea6c-41a6-991e-507e33949397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9da1d5-e1d1-4bdf-9661-94fb0f7cace3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19b1daf-3910-49be-94e6-41214fd95024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb9dc5e-2d93-49a9-b0b3-13f365297de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6135e1d7-842d-4f4e-9e49-5ae2fbbf01c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d7dadc-2a6d-4d5b-976a-822b67b76ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62cb96c-0f36-4c4b-aa9b-6053d5614b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e3b7d4-56a9-4259-aff2-bfd54587785f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c89ab1-4475-4fea-8be1-ce894157caae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1038d12-d456-4de6-a71a-1fbf2cd355bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b159f32-5cbc-40d8-bd8d-ef872324d65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6f9f33-37b1-4bed-9dbf-384d7d6b553b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69515658-18dd-4f2c-9ea7-a27a2fcf2f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7987b2-be7a-4634-9892-bc276aa320a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50234d3-df53-4cbb-9490-e76c42086e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222d8a7d-8fd1-496a-bfa5-a09f39c83daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8447dc73-44ce-426a-b6a0-7a7b5dded5f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58daa1e3-b018-4787-855a-fbb9e1e10966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.171.132.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01dd860-eddc-4d9f-9e42-584c7b6e0ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.179.134.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18163398-33ad-4c0b-b529-dca6dafa00ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.186.18.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9046d5e-344c-412f-b2eb-1e5508846c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.63.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a37c55-def5-42b0-8955-0ddc884a3e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf11e30-4683-4b11-9a56-9b73eff90b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c01a588-b749-4c57-846d-a22a43542ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5a8f08-478f-4366-965e-e59a58ba8d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5db327b-37c8-42f1-a88f-b25e428b851d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf44ec27-b134-4527-ad86-661d6c9be707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268b3586-fd68-4983-9f44-b226f625eb2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ef257c-6ebf-48d5-96e5-8fea920cc633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.196.215.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f786a348-cba7-4c1e-9878-bb8a4b2ce67d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0e08bf-84fe-4a96-823e-cfe9b7b38ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df77a425-c792-4363-9a46-08a62e841e79", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3968f361-d4aa-463f-85da-a0546959e391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990e8704-543f-454e-b521-2a3304a0ab39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88852537-082a-4b89-bee6-c612079e0a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e473c7-0d89-417b-b477-471070410075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f04d80-fbf4-4287-86ad-a3cd5763d581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879764ea-c233-4782-b7c6-79e7d44274bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4731c83a-bd4e-4907-b760-778b8e542f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a9b546-018d-4472-a7fb-c8d93e9c1e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc37ad1-76f6-4286-80e7-0f4899168843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c629ed-8579-48ca-98ce-a5aaf926cf4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6551938a-f449-419e-a5ff-4b59227fea7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e3a71c-cf77-434a-bcf7-79c243428682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0fa9a9-ee40-455e-8afc-056e51d442f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24720df-aaf0-4a24-b951-5547cb6769ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddd206f-f732-4ac9-869c-b7216cf32566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72bd7115-5d0b-4fcf-ac8d-58382d4229e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab86cd97-05a7-48fa-8dbc-04862f93310e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a7308f-44ad-4d97-b109-d6b5e3376f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.245.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50ec30d-b3a3-47d0-89e4-8b3892d577df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9c2fb9-6c55-46a0-9889-b1becf166525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d181a3-6772-410b-80d1-30c52e45589e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.252.188.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a97841-615c-4c9b-a0dc-10adfb4392eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2527aca5-e8d1-46f0-aa10-63cf7afb03ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e987787-7f3c-45ff-8aef-dfdc652f4bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a48484bb-49fa-498c-b498-5c23210a9437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c3caa5-917e-494e-86f8-cd31815e18ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c767056-c295-4a1c-b329-cac2d17fe60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03168998-26e3-4b36-9024-47c1c25586f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.113.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a1a5dd-612a-4f17-98fa-a19db15a6f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33c4af4-7d73-4885-8b57-6f547ed4dcf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d80ebbe-5b2e-4fd5-a034-680c2dcd6321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bb32cd-bacb-4e35-a36b-33c1cb6b142a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.26.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1b874d-4446-4e53-a481-97b0d7cb1767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b232a662-461e-45b4-a5f4-6cf10fdc04c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8431c3-d633-42fa-80c6-c2508da76aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3697e178-733a-4722-b80f-3b2ea90d6b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce74fa9f-9b07-4954-8ceb-a0f4bc7e1583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.7.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19b5c42-1735-425d-8951-08db1291ba68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.73.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e0db22-4ec3-4f85-ae06-1dc969016afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.73.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d1fc69-eafb-4975-bacc-1e10ea8059e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.73.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ae72f5-0114-4ceb-bc6e-89cb849da39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8bab1e9-db8c-4683-9359-262fe86eb777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.80.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7a23b9-2998-4d27-a2b4-94340ec30ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42283b9-a4d7-4037-b9e8-6ff7297c7208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508b9e8d-fc60-42f1-8afd-f33779bd5c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.85.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b941516-4a91-4b47-802f-fba8443838c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.87.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab33768-6f31-4fbe-8eae-30f1934f7d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131d8294-ecbd-4779-803c-23b59fb4798e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07a058c-e089-40e5-bede-8abddcf8f008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd970e25-4ab2-48d4-bf69-46b8ef169bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5375be85-cf98-49a8-9563-e27c5c28c5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56bd8d18-b776-4db4-b866-f1341d18271f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.96.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f91c3d0-2d6d-4394-ba10-adff74dd80e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3114e470-4afc-41e6-a329-1a5d44e0fc81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2abafa-38f5-41a5-a13a-75f4a4ecb781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16fdac4b-4277-4ff5-871c-a78fdc4ca092", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.137.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d069c4f-7a6a-4cda-9acd-511881ec3a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.45.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1509c02a-e819-443b-9aba-075b74e224b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0a5f15-be9b-43e1-8c60-ad037667b9d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db61da6c-b539-405a-9bb3-29edca9e339b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f50bd6-0453-4796-a039-a73ef7eb071c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1deaf6c1-5efb-45ff-8ec2-b99129481051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022b5e34-8136-4a05-a45b-640b02aab23f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183c828f-c77d-4181-a84c-bb5b2543bbd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63a6fc2-e43b-48cc-9240-5406fb08603e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82935d15-0c96-4a6b-8272-ca5d0b3ba8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecddaa7-6648-40d7-abcd-c9d25a0ecbd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f391906-1be7-455c-8445-bbd1e1444206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685a300c-6653-4996-97c0-7d8d8cfa5f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65891eec-933e-4c03-809f-f0bc99b991dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.5.102.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97260ea4-085c-4f96-8116-b4a92f51fa58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.50.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992f8815-8877-4824-8e9e-62c5b5a9b6e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.100.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e7f0f4-612a-44f2-8b78-59c2179aa002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.109.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7c081f-62ba-49df-a408-8c1b65e882cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed7b75f-3b19-4ae9-bd13-fb48f06c9f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8472f745-42b3-4cae-bd81-6bdf58547143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.69.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50633ff-2f7c-4650-9601-3f54eb5b4b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.79.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5e131b-d8c9-44a0-90d2-df7fb8e15a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.82.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd79c6fa-8cf9-457c-8e40-27aa5b9524f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734ea6bb-45b9-4c09-bbd6-102add29ebff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3c17be-599d-4413-ac48-2aa904206826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d96124d-4e33-45d3-a6a0-23c08114bd86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4fd03c2-90f3-4118-936c-ef5f776cb809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88659d9a-d2e6-4319-a58e-3a24369a5d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.58.52.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff777463-7f8f-43a3-9605-9378c2b964dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.133.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5de7bd6-776e-4c55-88c2-094ff554096f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.133.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9cf2182-98fa-4174-a841-c7ec929462ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.63.4.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0b4d97-1b05-4340-8565-8e51431f5b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.66.156.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275fe84d-5157-4659-84e8-da77826df974", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.70.108.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97341c9-5bd9-4218-a688-1ac631df7f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.76.175.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221abb3e-d814-483d-a409-c20de76c9872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155c9365-b93c-4c42-9aac-0715edf6aa3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013e89e6-4dde-4b50-bdcc-68e75512d54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c93325-1b7a-4f8d-b090-8cd0556c54bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1e6e56-e871-4a62-aac0-1b05451e939b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25679f5-ffb9-4210-9e31-3bdabf02b5ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af3c8a87-dccd-4da0-988b-f2c02ef015ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab8f8eb-e4ef-49b2-99cf-6e13dd041c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e50f652-1e7a-429b-9e29-b6b371fe288f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639858c9-1b70-4a08-9343-27658a61ba77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9ea82c-2663-4e25-8ea6-69abdf15d2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e9b6bd-3524-42e3-aa25-2bf7afeff30f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.131.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ed97fd-e57e-4fae-a280-c45b9c562b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b71352-f945-4643-a77b-b27df02cb9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.138.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a007834-0eb3-4e41-9e39-542d62b46d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23401040-74f8-4695-b0bd-b89066a676aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebfd7b2-5f15-40d0-896f-d57a12cf7151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066f031e-6208-48db-b0cc-0539f49a9cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a28ce93-51b8-484d-b14a-1ce99d974a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfd5bdb-0e00-4029-9039-3e442094191d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2a58a2-61b2-48b7-976a-e991a174a854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86b1cea-5382-4e8a-ba7c-71dd18223eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.149.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f683b1be-9596-4067-b5e9-72917d940620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5bae5f7-434e-48e1-b081-25236adcdb00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7cf9244-a134-4fc7-bd63-45c8bdcd82d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e3f025-7109-4451-934c-119551465af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.168.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da1c665-9296-487f-9d57-61500c8d94be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1652f932-c68e-4261-be85-fa05ad5eca8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc4593f-89c9-4874-b51b-89d85dcf4496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e860b7-46ce-44e0-afb2-0e56b02e1100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de67fc7-9351-41bd-85e3-d1b88b6370aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af155374-ae23-4b78-88f2-e5d00d278cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2147440a-89cd-4059-98cb-6a56555ce0a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ad98d0-35b0-4785-87ab-e033d155ab2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5dfb7c9-daa7-45c1-9312-1a9bb4f79495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a9144f-cd33-45d8-a786-fb74e5d8aab2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea4eb2c-31d0-4687-aa5f-2ab4cca083bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36597a19-8dbb-4e7d-8f4e-f37c3f6eb62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb632901-e618-4a80-8473-c40ed74aba31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb9ec46-ef76-4d84-b52a-2896f3b7cdba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff2297d-bbd8-4019-ac4b-108866edde8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b109629-6294-4c80-8cdd-cd54de3d892e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01886092-c85d-4f16-87ee-779a544da2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52798cc8-a3ca-43c9-951e-2a72388e06c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f273f662-ff93-4349-9e59-565eddaf0c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b466c2-ebce-4cb1-adce-e536a3d6e2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb1d61a-bcaf-43f1-8b40-bb9f4e17073a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51bd864c-41d2-46d6-8c92-29e015c59a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce45eec7-bb57-4191-9497-63e0f710c811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88fed94-b2c3-4ce6-a9a6-032e317b84fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f3b0396-6483-4922-bf60-5ccfec354156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1cb59c5-d742-42c6-98b6-e3fa193e7833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74656141-6c7e-421d-b179-e366b5d89b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b74340-f447-4986-9dae-433817c126a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047b5bc2-893d-479f-a7ad-91ca7979ee64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af61d63-dae8-481a-850b-e8c565a5069c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.2.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a929a58c-024c-4d28-84a8-6c119c52cb4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8483cbc-4699-4786-853d-1fffa9521ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afee6b8-85a2-47c9-bde1-0c156a023c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1468b3f6-fe50-499f-8072-7f96876b48bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39fb92ae-8ab1-4659-a374-6626ebdc688c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b018495c-fdaa-4774-b00b-378d8fafbaf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e5d724-a36d-446f-8094-2a2a7c4043d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.211.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36540dfe-2476-4343-a6d6-9e177ca1bbd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.214.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a62e26e-2fbe-4ed5-adcf-2896c469b62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c49299f-4f02-4866-8b5a-eb8015b5a364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.5.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d140e6-e166-4223-b5fb-e159250d7127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.8.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ba06f5-1301-4d6e-b405-938236aa698a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a418a8f6-b2b5-41ad-85f9-26dcdf7766c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3cc6224-7ebf-4e14-b3d8-e059b71c5e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152b667c-0057-4c15-aee2-fc702d923e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a788fc4-1109-4f12-a3ba-1d48a58df8db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fde7ac2-99c4-4c34-b126-3678e58c5d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a48e0101-c83e-43d9-b555-5646a8fc850c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac3f5a8-1963-4eca-9f4f-16dffb1d0f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13404c80-924b-4a00-82f2-53ffc8bbf0a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d3198f-9016-421b-bcc8-6c6dd6c53cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c748b5d0-6e44-4ca5-ab0d-dd6edc08e009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b46858-b9be-4ada-b927-6df271e711b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0343040-e9d0-491a-b04d-1f5b32e6cc11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5669ade-7f3e-4d08-817f-42f490b27c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92f839d-1dd6-4405-ad12-7b409a2dad98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e95a71-b9cf-4633-9778-c31813f3f365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a2931a-4d7f-4f4a-a1a7-653a5a354797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d35594-c006-467c-b3d9-b67c40bad5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568c127a-328b-4109-adf4-7f76287bd466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c480085a-0c08-4ce4-9351-04b7fc9625cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b980575-b95d-4bf6-9cd2-bd2267b110c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464e8103-33fa-4489-87ab-8297b25e3755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae82d370-3796-4aba-9854-3aa671ee9e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182d0c43-f17e-404d-898f-837528961c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c420ab91-2ad8-4df1-89e8-8a44a67a2828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf896c6-967b-4342-8f33-cab26f410106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3741e92a-7daf-41b1-bc3e-02f57dca920f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9eee386-6eac-4ee1-beff-f217f3b9a734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10553ab-d031-4dbc-bf98-a45d881d9750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f21d32-a248-4ae9-8326-7c72045fe487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e30f5d2-74d2-407b-822b-2e79f09df915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35bc7703-2ad6-40f3-b68a-97b4bd4af78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8251913-630d-49fe-ac20-b51007c03776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1fbdab2-dc05-462c-bc20-2cfbded54e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934dd54e-e6bd-42f3-894e-cd55d712ab0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a917772-0a56-446a-a585-ae7b82f94ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a609998b-9186-4bc0-b1b2-e3f03a9e0e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4494c5fe-1472-4004-8ec9-68e0460ce3ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0872b0d-cc38-4045-b5e1-1d4ea6ada617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1679ed14-6348-4827-a9a7-66ff681a0087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fddfff8-b33a-40d5-8b55-2fbf8f440b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e34e0e-1b4d-4491-80d6-90655e42b62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35db42b-5572-4a26-8843-6ed1199e5a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2353c21-cb96-4757-bc09-bb0f255280f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eaac8ed-84bc-437f-bdbe-3d2736cab136", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc81519-8e46-4fe3-b719-b6efb3602b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.84.107.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c46bc70-3590-467e-ba6c-cf050d85af8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.153.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d19ee23-41a5-4528-9496-2c3dd1d3ecdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.88.138.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f02dee-7b3b-4e6b-b20f-3761d0995e06", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.89.60.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b56192-08de-43ca-bf9c-545c4bb2ad2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.23.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8d026c-7a1f-40cd-93f6-aede0c95b443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.23.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613ffa7b-69a3-4fe7-88e8-451951d288b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98775895-04e4-4dbc-8e90-4e09f6c09512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcb8242-65e4-4deb-bccc-602b6e9eec9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.1.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c621b8c9-6a17-4b50-99fc-b71ba4938794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.94.31.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d527532-57d4-4e92-ae7e-7c931ccb6845", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.95.233.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a912278b-07d7-40a6-94d1-7db6992724a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.115.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b383099c-4900-4d08-bec9-a9dcc05663c0", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.146.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bad3da-5fb3-4dc5-91c9-f7392af06a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.161.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8767ce04-f862-44da-8abb-98ef4c15e61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.173.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b54145-9923-4b1e-878b-41d5b830ee20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.232.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655dcf0a-c959-4bec-9c1d-57dc50dcde5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.249.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ed07a7-ee44-4968-b7ed-636e803546e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3090711c-2c17-4c54-bf1b-e6bca86597b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.116.140.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732f2ec4-3a35-4c0d-b323-28504000a71f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fe438e-baad-4cb0-8d67-752643b47604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02d7490-dba2-48a6-833c-dd98eac9909f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a2e949-4dfa-4435-8e6c-76eff6f814b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d41f98-246b-4567-be97-82b8534d1452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.163.144.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47fc1f0-6103-4de2-93d8-3c7a7eee69e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.67.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1796babe-5dfb-486b-bda6-332e46af3e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.225.183.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f02a9b-8834-45bb-8cfa-1e40d23f2f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.236.65.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4b8a07-e67e-48f2-82d8-e544038f183c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.236.65.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebd6f4c-04ae-44d5-bedc-7e0128818b67", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.249.99.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8abe5f-f1b1-40a3-80c6-1c9717abbf58", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.62.193.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63cc69e-f2cc-4494-b294-700f6f31f8c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.62.239.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55347a29-1ad4-4d86-8675-572d9125d6f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.103.204.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7acb751-7548-40c6-8f6b-fdb5ba7e49aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.104.0.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8428ca82-bc50-42f1-9da2-4a1803f9a5fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.105.123.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a138bc-f3e9-4cad-80f1-c8636899c0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.110.79.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059ff533-429d-43d5-9e80-54284f17cb98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.115.231.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b539cd-08a5-4fcb-81a6-74ac3c75a236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.121.138.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc6fa62-63f0-488d-b1ef-66f29a8575a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d35761-f834-4a20-9d6c-b8f38c536c3a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b03319-d513-4d7f-a101-1b1ea98b3d62", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c87663b-100e-405b-8e6f-8890020e1dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.130.108.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04137bc0-5cbe-42d5-93cd-c8108997b797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.198.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9790ebc9-e9de-4f07-93ab-f421c4acd952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.198.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c544bf2b-b8fa-4abd-ac64-371b08076ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.242.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a460d1-4f9c-4263-9873-45036be897be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.244.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6985c445-3297-424b-9ee3-b0a92455af78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.100.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c481cf93-beb1-41ad-8384-beeda1e76d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.112.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c459b7-722b-4fa9-8e5d-d89375c67020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.169.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75256369-83c8-468b-9ece-105a6f7f11a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.20.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e208b2-a661-4c67-bc47-9c1f245febb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.201.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8244b8-59c5-48d5-8086-a9aad6d4e330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.239.247.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ead787-ddce-4b6c-bafc-b34fc3a26ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.241.126.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876bf266-2762-48a3-a81a-212ca862c45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.242.212.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ae5bcf-3c83-441a-8125-d99b8a7c7857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.10.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3344eba6-5a8d-4260-a3fc-60faaa97e515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.10.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eface312-d20a-452f-a3cf-d13f8cb406ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.109.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a5079c-c581-4a8f-b3aa-32b6d6ded487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.116.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d305bb5a-64c1-4122-b7f0-b4a1e0515db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5dd19ae-2d3c-4692-a9bc-1eb9effd408d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcedb215-454b-450d-90bc-ce256783f6d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d10105c-9791-4d3e-bb52-ec30be1a3046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f0e8d5-2496-4bfb-a58d-b603ea021ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.130.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64550a64-9c18-49dc-8b73-ee87f16df388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.132.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f97448b-a2cb-4b37-b606-4842ef5a4819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.133.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249de80e-42c8-4711-9f77-19cf587ce49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.134.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26aa07df-ac0c-4dd9-a962-f738193d92f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a523fbb3-1e20-4942-92f4-d0bc9977bcdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2718d1f3-b20d-4658-92cc-0129bc599f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737407e5-09b7-4ba4-b950-65cf2391fe30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71207eb-d9bb-43a8-9da9-0e14562a2286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0f9698-fd34-499a-8779-1cf96edac12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd163e73-0eee-4ad1-b835-481345a9fb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4e4225-b7cf-4cf4-a132-3837e7a44c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ee31aa-c6a9-4b39-9ba0-1ce803b0ad78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbea4efd-0d69-4e20-8ad2-afad99bdb05b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8b35d6-0c00-48e8-b6e9-ba36f2e5ab84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39bc4e36-3484-4e20-992a-be8456b44fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd57dba-169b-4fb3-a205-f95a03a9c5ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc130bd-06d3-4a48-8fc4-61412accba87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910b3a79-cd30-4f17-b26b-cc602aa1a33e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82316f7c-3f06-47ff-9495-1331c682f59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d12cfec-86ac-4afe-b154-dafb736b3129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e093d7cf-64a1-4ae3-87f4-4860959c4543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef372e4-5557-41ec-a16c-b902a98244ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7462794-c8b7-46a1-be4b-75b392c01c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.0']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a82a04d-b016-433a-81f4-0c3983de8841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa82435-ed3b-4297-a7e3-e84fa50cafc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f405901e-155f-460c-9187-9f1003e22aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4729bbd5-5dee-4474-975b-ff705455efa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a452f499-848b-44bc-9ba9-c38ba4b69275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6084620f-9235-48cc-9e78-68e5bca1c79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4ede8e-f583-48e7-b806-8102deb0b013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dabd02c-e4ec-4e2a-9df6-ccc0fa5927f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0775d762-19a0-4f75-bb9a-fde0bbaaefa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c00c4c-7655-403c-a92a-3218a93a2a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc43f7d-7bea-4ad5-9448-8302850cdc97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.176.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784517c4-1a97-4bc2-a4e7-6a7931293f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.176.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe2d4b1-fd42-4af6-abb7-c7bbeee7019b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.30.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e2ed11-d76d-4554-9537-61eae8d3dca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.54.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ffb95a-73cb-45b3-96bb-29e80a4d56c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.56.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad34b9e-5139-430a-80c5-616cb4106b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.82.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b37c882-4606-4d85-87b2-90f496ca13c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.112.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a43829-666e-4195-afad-f4fb5374d01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.117.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4357def-7a7c-478c-8d4f-7c6be2ccd7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.118.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50fa89f3-94d8-4711-a6de-4e4e99718902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.118.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80512cd2-0c48-488e-be62-823ea129bfb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.122.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba51171-e02c-40f4-ae1d-cd1ada818f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c231ee3-70ee-42a0-9351-221e93157644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.127.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc426d82-2840-4399-a613-25f0225943cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.128.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe45e09-4eb9-4cc2-906c-1c1357118fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.129.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857ae3c2-4908-4770-a174-512de123b32e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.130.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29a448a-9ef1-458c-9e3e-0ed590b83159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.131.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba792dd-7365-4490-afb4-a3be4ae97590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.134.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db36da43-2e68-4fea-867c-6dbe77049da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.134.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9fd659c-f685-4476-bc39-726f5fa0b9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.135.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e159f3-1f55-4eb9-96c5-c68c72ad19b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02e8282-43cc-42a2-875d-3cd6f92e5ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ea01a0-a8d5-468c-a039-fe3a7797b7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2fd392-a5be-42b6-a26e-1e38c550924b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.14.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b140e8ed-9d43-48de-9595-86cc21d44fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.142.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12110398-a4fa-4f62-8c45-119978f37a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.146.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05cec2c-05d1-466d-927e-7dde98219b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.146.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2176f5df-61d8-40aa-8aa0-e579726b8eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d9f651f-6fa1-45b4-a31f-bfd35d244c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.151.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d628d783-0d72-415c-97b4-039515a76c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.151.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163f3865-5df5-4869-aa40-f43397c087ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.159.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b121c151-7ff0-42e5-a767-9cce7cb51f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.159.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bea03bc-8d17-4591-a61e-4825a727150e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b7678f-2e13-49a6-841a-b801f90f513b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a261d614-fe7d-497e-bd9a-080afdf7ff61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.162.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2748812d-8e4f-4a7a-aed3-8aabae94825f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.163.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f4ee47-ee1d-4465-9b53-b404324cc577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e592d4-622f-4d54-9f3e-749f5c9d3ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.175.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31817867-c235-46e3-98da-1101fbfbe078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.175.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1b279b-9f98-463d-9a2a-b297d261d609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.176.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7eefdf6-6912-4c6b-a9e2-92fe13bcaca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85cbc84-4e53-4ad3-b3b9-2c381b983bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c665f7-ea72-46a2-83e4-e9dbe27b6c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.179.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c553ca98-dd0b-4137-a979-2088aa320e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.184.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e7b25b-32b3-4d4c-b04c-7e0cc4e6b01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.188.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1edca3da-433f-4c19-8e12-9845cb202511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.190.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f27128c-37df-4fe8-8dc7-3f028172c68f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.192.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5534e48c-3222-4322-9f50-78887983d629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.194.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee524ef-7293-4598-8b35-1bce3bde0693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.37.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aaa8ef2-ce7e-422f-8e8b-28979b1b7e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.37.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5319ab67-f448-48b7-a4f7-20431b1a269a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.38.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e675cc53-ea3a-40ef-bd8f-d0d8152f7f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.38.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9905bf2f-8bdf-47ae-acc7-ae66f7b59b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.45.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09279b33-f37b-49e5-a7d5-3c9b6956a1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.46.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55e5f98-b128-43a5-9b0f-d8ca5e500257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.47.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aea1073-5c44-4972-944d-e9ccc114ca88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.49.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ef0e67-322f-423d-8026-73f91aa0bf4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.51.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de54e28-38ac-48cd-8a45-c5b91e600f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.52.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c391d9-19c3-4864-8b68-36fc99d5d0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.53.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eba82e0-9711-4887-83bf-19b85f9b7626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.57.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3c99b8-0940-4fd7-b270-dc1cbf24c343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.58.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4b6b92-1627-4d93-8f7c-b86512d32e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.82.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78d2d6d-8005-4fd1-a4ae-fc3d8023a38d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.84.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf84d1b7-46b5-4fc8-b8aa-e2744a19e0f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.85.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3485fa11-5804-4ba3-8073-52768bb7deb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.87.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e762479e-96e6-40c2-b5a2-0a47d4f64280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.87.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32bc9477-16d0-4267-9233-d41373d214c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.88.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad22894-3bea-4fd0-a39a-43db4be4b5ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.90.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b15b4ac-2bcd-4649-81bf-81eb008c7811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.92.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b72969a-fb74-4950-be36-dcb1291e3b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc5a481-88be-4ef3-bad1-fc5444e40079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf0d490-f460-4584-9f42-26296810f3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e16caa-9fe6-48d7-9ce8-a29ea4ee33e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5efcdb-7e21-4c02-9757-d8134bcfc180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c5501c-6efa-4d4a-aba0-2991ec62722a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.0.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef372114-deda-45cb-9dba-fdf681028fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.101.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c0346c-ddee-40ad-9449-e2dc31ca0574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a322b8c-338a-4f9d-84a6-aa41eca7aa01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab4f01d-b3e5-4c17-a8de-2e871c15bfc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446f09dd-868a-4960-87a8-19c49a0bdf48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.108.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18107b5d-9a23-484a-a6c6-4eca5dc04531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.109.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51111cd5-43d6-428c-baa9-d92e402d03fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4852125-a2d9-475a-a479-107035e61562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aaa1bb6-85ee-4ee1-91bd-9c0fb05c0248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.118.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256ef313-0bf8-42cd-a225-55814ff8f75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.118.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7975c3d6-d0f6-41aa-a6c6-9238bc483f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91addf64-a775-4815-b5e7-26240e275067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4054832f-4672-4301-b125-801d079d2ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7fad35-8517-479b-978a-25100f857d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee9e0b0-040c-4ec1-9b3c-b74a4b2084e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.13.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e027f5-7bc6-44a6-98e8-4e28a7ebf709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.13.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19279ebd-570a-4ed3-9e67-61b63cb49d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.140.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54bc5fa5-6d2b-49bb-a37a-aa7c0aeff9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.140.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a45bb0-955e-4215-8b06-9f05f41de34d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27fa401e-d55c-424e-8150-8cf30597c8df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e183e2-6546-4545-8967-14e30d1e6094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.142.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b1ccb2-2a9c-435b-a5eb-ef981d24662c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.142.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c00ac3-c11c-4438-8cb9-a5fa6d426df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.143.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9efa92b4-0db0-4bf5-a8a9-cd70f0c2e1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.162.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34de73ed-00ff-430c-ace7-decb92f5a09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.163.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe120ec-0711-4bec-a83c-152342996de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.165.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a17735-48d2-4f47-9e05-ede7f46689ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.165.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3f8ac6-fab1-423f-bf5d-59ccf4be3ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.166.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd99501-085a-4de7-8d78-8ca4995db13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.167.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5843087-a072-4112-8be1-a360071b6c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.167.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51503c15-2c44-4652-b1d8-f0af0e0c4233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.169.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e800f1-ca7f-4d61-bc3f-898fbed7ca41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.170.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04b0c6a-60e1-424d-b8b4-ef5d91c6299a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.172.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f041aea5-a7d5-44ff-b8cc-30b4249ebc37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.173.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807dbb05-de0d-4ff4-81f2-a1325f39854a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.174.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56052816-3bf4-4526-b104-37cf30a89f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.176.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd67c7fd-ca35-40e1-a650-e9794444bf3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.179.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00a7a62-fbc1-4823-82e6-85efa572f586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.179.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668d3c71-4b12-439c-a3b5-ec7585e3c4c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.180.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50427401-3776-4305-bd40-20d021f1dbe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.182.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f80efe-b81c-4f15-b1cf-8ef5c92518c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.182.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fcbe70-2b77-434f-8326-ca77d36f49b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.184.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b7f67f-3e54-486f-8183-2a357b9ef4b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.184.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922139d4-1483-4c5b-8ddc-c6d81cbb151b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d408be0-4171-4d0b-ae91-18b4bf99b131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a76f4b0-8f13-4c39-a2fb-c348660c780c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.191.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cf5595-bccc-4754-a50b-7891f0499721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.24.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2efb05ed-ffb5-4e07-b626-df255897c65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.242.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053aa65a-90cf-40f1-a681-d5f794487c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.243.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575709a3-8e52-4025-8d35-441181c90f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.247.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8aad8b-4091-4c6a-9393-45ef42e55300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.25.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c7e24b-2f7e-4006-aa5c-6b9de50e7342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.250.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f206563-25da-4f8f-b4c5-86048e84dab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.250.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5309c6f-f480-42bc-a5f8-4f38eec76a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.251.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06aa0fa0-5458-4190-bee6-7db402ea6e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3565124-bddc-4baf-bb00-9473d667dc8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.253.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280620f6-f86f-4ba8-9312-fa34e49adde5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.254.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6170fb9-e6b8-434c-8819-49d3da5e1822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.254.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ffa7e0-ad02-4817-85af-ff52927992f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.26.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99646e6c-998c-42b8-ba41-793434d600b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.27.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a77808-a3b2-4cc4-89f0-e55d655aa9ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.3.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f738b1-2d89-492b-8611-3d1d60361c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46725a5d-199a-481f-b505-b2fd215e2ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.255']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3def1b-9a28-40bb-b468-5269a0822727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.32.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0be8b0-97aa-4e13-9ad2-3b0ddcf8233b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.33.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e96b43-8fdb-4c82-9226-424a47dce439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.35.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd806c8a-d5c1-432d-8114-7b3e307ca79b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.38.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3311e1-9a69-4690-a5ff-f5931ec0c778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.49.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258ec623-dae9-448e-b1fe-01e0b895308c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.50.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1cd49e3-b7c4-455c-899e-ae88e5db1add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.51.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d895e2-b702-4258-b820-be4c2154c408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.52.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac46074-39d9-4802-b3b1-158e39f3050d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.53.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba7cf25-f1cb-4b87-b121-e2be9561e547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.55.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0334b479-20a7-46e3-80ef-07cc3ba65e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.56.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72639ac-7ee6-419f-9aae-dc479af74049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.57.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef4d858-cdc2-495b-9851-6a03e692f02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.57.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b500ff3-7de5-43c2-80b6-2e2664a44f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.63.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb7961a-32b6-4ad3-9d27-588fa03520b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.64.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493fd9c8-9841-4e43-9820-af5fdc5c96a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.64.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3b4f69-a769-4ef8-a67a-1623e9977d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.64.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a16f0b-0765-47ec-b87d-7427f100d6fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.66.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4111d0c-e0b3-44b8-9bee-4291bce99736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.68.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe32d066-cfa4-491f-aba4-20bc218fc2cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a11fca5-1dad-4e9d-b631-72d677aa6a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.76.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645af4ad-603a-4707-a210-7afcb9cd3830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.77.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a53812-cb5c-4595-9646-8d8721de40eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c958083e-d8f8-43bd-9bd1-888e79b3eb5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.79.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90491846-9e8d-4c79-af91-90bd68077104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1539ba39-a973-4128-8b40-56e66eeff04f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.83.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76700be6-e154-446a-96f5-d41dc3ff1c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.84.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496f25e3-0c7b-4adf-9d32-9916895ef197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.84.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfd3ac2-4c02-4e38-be20-2866746ea266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.84.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b4244f-ace6-42aa-bf2a-405f75d54014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.86.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e656f5-b92c-43d8-8f8e-ff2306176024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.86.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0262f929-99e7-4e14-b119-2390d7e03f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.87.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30acc7bd-ab67-4d13-84b2-164436b8ec67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.88.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd71407b-a712-4962-a8b5-ca5aa700a12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.90.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52103136-5a01-4bcf-b709-fe4772048e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e29091b-7ba3-42d7-adbc-0ed1c7f68fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d773c0f-51f6-4dd6-9cea-5a71ff57ce76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09389c3-d54a-42ab-b33c-9166d3a77f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6feb2b6-eb41-4b22-9f20-40af66ad6281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953468ac-1bec-43ed-bc97-76c3d8f3ba5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20aa0f89-a51b-43d9-bdfa-810b9db232c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b85679-03ee-4083-8f95-560c0b53e8e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--debaf878-4dd5-47bf-aea6-4c90557f201c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa012ff-2629-4ac9-b8a4-6ba3af3f877c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.98.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011fb3a3-52ef-45c5-8283-254eaa9274f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.98.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b80167-0325-4767-b530-efe71a02683b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.99.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c44c732-18b9-4195-8efb-4a68c100d3b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.154.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a14ea1c-5fb6-44a3-b042-09a87fa00132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.218.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205e1904-14f0-444d-8276-3119b1a91edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.5.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f3edba-6ca0-4441-8d6c-aaa0d9f45a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.122.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa55739-7554-462c-9767-f0ab23be284a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.122.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1dad0d-a79f-428a-b557-56ea77d994db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.128.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e4d355-7cb6-4256-a1dc-9331174e3acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.130.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa9320c-5973-467c-8726-768a0dbcf2ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.143.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e09ea01-4dfd-4dd0-8384-cb24933e654c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2353b8ce-b71f-49ed-8a90-de506dd520e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.146.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa373aa-6493-495e-a1b7-505bf4183254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.148.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa83246-15d7-4591-af89-e8c371309bd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.149.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac05a899-af0e-4358-ac5a-a191f4bf7ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.15.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b167aeb4-efbe-40de-bc66-13efaf640db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.153.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a28d29-fe26-42cb-81c5-07b77d56a7f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ac400f-aa06-497b-8d0c-57126f72414c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.159.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59bea61-5c05-4302-8a36-b48d5fee4724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.159.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ecb9af-f08d-4835-99d8-ca66d30890d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.170.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548f0bf1-5222-4fd0-b9bb-26b8bacea1c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.171.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70304c5-9e6c-4a4f-a2d9-45b3a2ea5304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.172.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320b9175-88aa-4592-9137-9e55e3a679ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.173.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36ea5bb-0152-4041-a8fc-3e2fbb4f9fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.173.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc912f72-f4d4-43ff-a442-2dd110d07913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.177.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b0b418-5642-4df4-bbe5-6a4b29c5664a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.183.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0886d96-6d24-4e5f-9918-9c8abc16dc73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.184.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca6c3a3-dd4b-4de9-84ee-ca7b59d6ae8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.193.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3086f6-4fad-4f9c-ac86-af6c8a54485a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.195.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881a47c7-4f61-4123-99e0-1ffd7b621627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.197.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48215618-838b-4a6c-a3d0-309d04e16eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.20.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3304bb8-fb3b-4b98-9f1a-6ac31812f38a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.200.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ccd2aaf-ccdd-49f9-9df9-fb1e2cfc4e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.201.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5497d7ea-e727-4e12-a905-7145ec909d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.202.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4fceef3-c015-491b-b5f7-2743e9895460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.206.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9053d9-a566-41d7-9f2a-2136db39c2ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.215.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4435d74e-95cf-495b-a461-5d30072d4d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.231.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c30413-99ee-41d2-a19d-eed02936d336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.233.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70205420-095d-424a-9887-56e2c38a6e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.238.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1666e9-04e7-4d37-ad48-cfac521afc94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.239.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d52460a-a232-4910-a1c1-d944b75da160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.240.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500422d7-29d7-475f-bd32-b0e1bcc747c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.241.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e112daed-333f-4df1-9f02-042c84bcf031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.242.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db779e8d-474d-47cf-9f26-22d8716b3a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.244.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd5e390-ba14-487d-b4bc-8e3fd2a6c1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.244.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53fb263-0662-4405-94f1-971cd94247c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.245.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9929c4-1469-4c30-851e-05902f6e27bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.250.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd23063c-6cf3-426b-89cd-a9885348b52d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.253.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6db0951-7d2f-4a84-91c1-9f7ef81daa4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.254.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef15486-2433-46ea-9175-3bed793b9e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.28.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4c8c77-eca3-4d7c-985c-ecc1be7ebdf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.32.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464b0ba8-0332-4b53-86fc-abd93041f2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.36.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fe8980-4816-40d9-bc61-ee71171d0dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.37.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af428df-59ce-4984-818c-dbcd617c6bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.39.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73fa8270-24fd-47c8-83ac-324ccd2ebd47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.41.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4ef3e7-7a2a-465e-8c5d-4c73dddd1bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.44.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db9692f-5a7d-4816-94ef-7be95f3c3683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.50.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35923011-91c1-4b97-8f93-8a3202b232a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.53.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14dfb66a-4f36-43e7-ad09-bfbed670f307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.64.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6893d08-437a-4185-bf66-3b6422d67d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.66.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e4abb4-f94d-4b8c-af34-2ef913d410e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.72.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e50a2c-6479-4437-8d18-53e398e416b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.74.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad76c6bc-2d9f-4bcc-be65-533215d72310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8192ac8-8b04-4e2e-bd67-027386ce225e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca6d7d8-8dcf-4179-8af2-2782c4da7932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.86.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b799ce22-4de0-46e4-a576-6f679099626f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.19.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7df735-70a7-4554-81d1-dd74e801c9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.33.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b611333f-ecc6-4f93-a78d-33c2da820b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.51.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f284976f-fbd9-4a99-8b0c-ce85d4c4ee05", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.76.186.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84aff2dd-b146-4dbb-9576-42ba3ac1124e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.182.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce03ffa-7c18-4d9e-ab8b-392bc8c55fed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.210.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f28c790-b359-46bf-818b-a472367aa048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.212.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d8ee46-7c3c-4dfd-8b9f-fb81ca374590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aec2ab3-85ec-4b0e-9ce1-020587e43dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.217.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db3f59f-61b7-474e-9664-d04b321e7f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.217.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1734e3-9121-4a46-8c25-f8c14571df1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.217.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41ec1e9-ded0-42ed-988d-2a2969aea854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.218.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa933438-6be9-461d-8850-c5ad4cd26338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.219.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ab4ed2-944b-47b2-a85e-d915940fd82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.219.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ff81d8-49ef-436e-8796-fda839f0fa54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.219.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3db06c0-27c7-4e02-ad8a-2bc8bf89cbaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.220.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48de1dc6-807c-4f6b-aa24-862e7bcbb8b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.221.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35625f9-0efd-46d1-94eb-2f65d74a60b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.221.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7628e2-3776-498e-acb0-87329910f5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.222.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a64d89b-0be5-4610-963e-6bb940595efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.223.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c9934f-b325-4e72-98f9-7ba19ae7a575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.225.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6c7d3f-ccc3-4e0b-a4c1-f620e9ad1e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274756cb-a00c-4632-9f16-44bbe263b2f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c4237b-7d0f-4156-a9c5-c490a5ca38ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb683d4-6dc4-4e52-8572-baaeb87fd10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e49190-45a0-46a9-8090-f2c832c44a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4480015d-0887-4e16-963a-de2a932d5756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.234.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0e57c3-8a98-47dd-b895-675a05832f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.234.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a900190-aeec-413d-9e5e-53522a333d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.235.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0a9c4d-88c7-48a0-9036-0d961e626915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.237.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c380393d-ee3c-4ac0-b611-ba2eeec64db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.238.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ca1644-380c-41f9-8c6e-2c6cdbb99cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.238.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4706d746-61c5-499b-8de0-ae96686f2426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.79.20.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d978ce4b-c9cc-4394-9ac2-b5327ba39e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.82.80.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a73ce3e-ede5-4838-86cd-c05e9693f039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1a8ecf-3fc7-41ed-a60b-651c572484dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0b7be9-d6f7-4c6f-9aeb-9694c08ebef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385ff994-8162-4918-a02a-0c6297021b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01291172-2452-4450-bed4-c94fa8ab8e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f75b9f7-eb24-481d-8cb8-a0b2e13dfa19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9365938-781f-4969-9c31-e01ca661ba9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8649c5e6-f38e-4b85-a642-0dbb1379f139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01fab40-3ebc-43ed-af86-b7a5e663de62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cabf09d8-1df5-41a7-b39d-d46644a9d75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f673b815-b26f-4076-b930-8d5854000afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b15910-25f8-4726-9a72-c00d63804956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac35d18d-dda0-4c09-a8ad-5287592c7c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8e05ce-d36b-4b9e-8ec2-71ee169ee5b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eaefa7f-ad37-42ac-bd37-2beb4498bd71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.255']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c56d40-daa0-478e-bb64-9a9156e3a298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.104.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91745011-9b5b-4b66-95cd-eb272a5da23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a6a883-83f8-4eef-a7ce-03c338689c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12b99cd-c63c-4713-ad21-cdffa67d7645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aabe12a-c61a-4f02-8fdf-e4f95154d074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.107.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc67816a-719c-4950-83b4-c26a6ab037fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d7a024-7d8c-4997-b5da-0e84be669fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de54f87-bb7d-4c34-ab33-5c81ecde59c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e6c09e-17b9-430c-bec8-6477c08d2e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72199147-222d-4c15-a6df-f0fbcc3b8be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f387eb7a-cf68-4b7e-9b4f-5a3ccab7ac8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3680114-d2f9-4299-9540-a10f22051280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.112.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f31360-313b-48c2-942f-7bfe0815cd4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.112.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23f6dac-0042-420e-a40f-f0696bb9ec54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.113.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5311f4-7a22-4fa4-9203-8fb0055a4615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.114.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66a13be-8ed7-4e2a-a49f-608b366e9c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f9b2e9-175f-4857-b936-76e17b3db064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f6efe9-11c0-487b-8421-c0fe50c959da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1187c7e2-8e8f-4f70-ad5d-0e21cc7e9b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.0']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dfcb7e2-ec24-4cbf-b69d-b1b50c418c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ccadc7-794a-4c0d-98ed-6ace41a95ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48669ff0-0298-4377-8403-03c4908c2401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15a372d-255d-4fa4-9bf5-45b20340e42b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e20248-2ea9-46d0-82aa-24519e6fbeb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.255']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ab654d-8ae2-43dd-8414-2e6cbd72236f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.135.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2fb3f4-d4e0-466d-b539-5de08f310658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.135.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf11452-4541-4bae-b5c4-d603977ae509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12f8d9b-d18a-485a-8b4b-68fc45083529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6035a0d-e234-4260-91ef-eae38ec3394f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2bf9966-2535-4513-9fb8-491cd0eaad7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff8228a-546c-49c1-8ecf-ff3fa866062f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e7d85e-f23d-483b-a7de-bbc85262a059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14bb71b-2969-4663-a0fa-0d5cce892711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c344b75e-0c62-49ff-93c5-e935b2d18f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cce8dcf-8877-4cfb-84e9-e0e2dba7d0cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3ab72c-2fe7-4e49-a055-ac335d241c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0d3893-6921-4a73-8e14-b2ad78623a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8b5115-128a-4180-9775-b3802b431965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14369cac-c8b9-44af-aeec-a40d808299da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8d6a6a-e4d3-4925-b7b4-bb0c501f6a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13156165-a894-4b82-85dc-298c11657363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66bf0f7c-3093-491a-876a-5af0672edca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c69fe58-7e3e-446f-aa40-eedbf56e5927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a324aaa1-8964-4cf2-b9ef-df01d05197cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9544c4f-837c-4fb2-a788-61af4fbc71bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cddd47b6-8e20-4361-86f7-230e2ef2d65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c443d78c-d209-4a7c-84ac-c62ed84bab0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b20b164-ee9f-4f66-a436-02ac2f23a5ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6735332-310d-4b26-8e04-11208762b237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c342f7e-e8f9-44be-a529-f276e213144c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4373c9ea-7166-427c-ab78-8efed62a4d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c2786c-3c89-43a5-b19a-c445c67014f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d79432-3303-434b-897b-45e93ed5ed13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1e0641-990b-4d3f-9bc8-9966f76f149b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8840c2e1-2f31-4b54-875b-818bb25103f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.177.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a60b89-d28d-4aad-8965-4e8324646c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.184.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9248189-54e8-4093-ac30-7ea2ec764259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.184.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d277191-ad4c-4108-aa7c-77f40a575cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.186.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e101f1-6dcb-4453-b016-6e9a02fac77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.191.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7bef8f-bd8f-4406-9ea9-771c6e57c566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.192.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d091be1-2bff-4e63-8e74-5b22afeab8aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.192.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7339e3dc-73ab-49bc-8c2d-fbcdc0cf21f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.194.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1845d43f-123b-4fff-bedb-26d7f85de6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.195.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0acfae2e-a03f-46fd-94e7-fd21deaf811c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.198.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d7d819-7e04-4a1e-8eb5-7b9dc9c0a52e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.199.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0484ba-598d-4e7c-8879-07d6be338435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.200.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539f3ee3-4c4c-4cee-8ad3-89c24d5d12ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e0418f-4dd1-47be-8b40-bdf274f9b6fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40238347-d52e-444f-a618-1e7de02b5cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83ca953-2df6-410d-9730-8309c5881f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7533381b-751f-4f71-8983-21c57fe5674e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec29170-b3dd-4464-9dbb-2346adf2cfbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2bacaa-0cbe-47e5-8f9f-052b76401bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faec0f87-20d0-46fc-9038-196c3e05b1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae10388-8560-494b-96b5-9630f1367c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74683029-634d-4584-a569-59a021ddc6b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.225.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912332c5-e4c5-4870-8085-7552ef1abd39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.7.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfab0ae-755f-4aa6-9dbb-07072194efd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.43.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e2ed7f-ba7d-473a-a899-7eff3288dcf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.8.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d79023-b180-4a99-a588-5168ba6f8a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.86.187.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbb4256-0227-422d-b3ae-6bcdb909ecc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.86.189.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d809fa9-800a-4ade-b270-c12de63f497a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.104.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d68629-9668-4f05-b847-730d8c1997b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.2.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02ac537-1119-4c73-a95f-341bcc148628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.29.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f20987f-7223-4058-8cb7-45566ad222d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.35.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f9de25-1912-4eec-82bc-b5805ab91cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.58.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9baf8d2-c382-48b0-b190-92e9e1190f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.59.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e740b8f7-8087-4aa0-840b-6ab5c2870190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.84.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ceac03-7442-40dc-b842-4709017d215f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.84.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85ae944-2080-4ede-b394-f4e6d48d38b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.84.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5765f117-8631-467b-98ab-893c35e778ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.94.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67470ad-430d-4524-8242-84c82162b05d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.193.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d88c43-5702-441a-bd4b-c1b80298afa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.193.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a709a6-43f1-46ee-8aa6-60232b0080b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.195.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057a47bf-3ee0-489b-a362-9ac28ee93df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.209.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8a915c-c418-46d9-ad06-61274d65486c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.230.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90aaf96-8441-4de2-b024-629744fdf10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.240.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0a8506-94ad-43a9-93ab-8029f070baa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.242.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52379d0a-f6a6-4bf3-b6ff-f572bd172079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.243.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52b378e-a591-42d7-9206-427385478619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.251.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e419b6fb-c5a3-4f97-bce1-4cb6273c64c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.65.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a85dce-3b87-4533-b848-f05ce851bd8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.75.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9158fe1f-b04b-437c-871d-b0a95396456f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.77.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fa79e2-e2d2-4e55-82f4-6263899efe52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.92.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255f6413-b2dc-4087-9132-a25afeaa8285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba705242-a802-43b9-b13b-c295c66e0ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14b1106-3615-4b40-bad5-519cc251b9ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.166.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19037d12-35db-4bc9-9d78-a31e2dfd7c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.194.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5435ed1-d8fb-43c1-a06a-5707009ad522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.209.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c770d96b-4f5e-44db-a14f-f6d414b68a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.97.159.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--effcea37-1e29-4759-bf15-0e9bb18b846d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88caf1cd-24d4-4c91-8c8a-4da7598bd254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99979d67-c38f-4edb-8a0e-88a4a71f0637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4cdb538-21d4-44c1-97ee-0c0a78d2eff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.218.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983bc2fe-0f2c-4c86-844f-513b586670b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.244.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f675d65-04fe-4de5-a7f6-de41dc1d51d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.233.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d053ad29-506f-4a44-a8ac-9410f61956a6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.142.74.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f243f3b-ea9b-498f-bd2e-0afd259153c5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.213.180.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90364fb8-3808-4e24-bbab-6660d311486b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.231.148.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f07f365-9555-49e2-b409-81dc1efb37eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.249.205.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eabe00c1-4ab3-4120-8594-861ca728b3a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.43.168.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056ea459-488f-4877-a4f9-84b01468ca61", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.229.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d409b795-530b-4539-a7f9-8875f787863f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.252.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61a56b0-9ab8-4266-8539-3efba1a924ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.101.64.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb295154-21fd-4383-a189-64dc9ff31206", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.129.182.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae3a4ba-7b6d-4598-aa43-a437180fdc4c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.129.216.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6df72b4-4761-48d0-916b-e8ae91e83d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.167.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e421e7-849a-4976-9bdf-a39f88441557", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.173.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b48d885-1978-4a0e-98c1-c1c57a01bd59", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.71.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8003527-5999-493a-b4f9-574e0c843e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.169.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d5cd1da-7dd9-4096-812a-ab8d77c8da13", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.186.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19366ba1-43fb-42ca-905e-428fe1cfa50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.220.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ba897a-b78f-4d82-aab4-826d32e49be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0766a0fa-e51c-4a52-b8b6-1280b6bc9b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1627a7-082c-43dd-a334-35c0ab753aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d65c1af-80a2-420c-ae55-0f554005b90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b10f69b-f067-4533-9e82-e54ac187260c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddceee4c-25be-4776-b4c0-14bb821a236c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.130.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51af834a-b5fb-4d96-8192-5d06ee6f7a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.176.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d4a463-5800-4828-a6b4-7d5a4d674669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.74.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330fa39a-955a-409c-ab9e-ca403b6ccd49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7c85b6-b38e-4379-8a28-d87207c4ec20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49eaf9d5-efca-4d71-a9ef-a6e514acc652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e3af1b-56a0-4a19-9218-fde6c82b54d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7797e25-76ad-4469-95bc-2f1c815afba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cccc4dca-dfef-4d80-82db-1e9c74944137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d87d89-68d7-4203-9cd7-ef7102ab1acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354663bf-763c-475c-8b7b-fbb37d4f04ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6864114-6d07-45cc-85aa-6ff70fd3f393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f9f6dc-fe96-4622-bf19-8be6c8a9eb95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62a27fa-9564-4d6f-abd5-e1de2d8822b9", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5e326a-7f9b-424e-b464-32091107d632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a61e132-b3f1-40a0-a33c-c5ef8df353c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f245e57a-51e5-4d82-b71e-178b56859347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45342bd5-4e9d-4085-8c7b-028133aadc04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3449912d-4522-4a5c-848f-bb754a98255e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49bd0cfc-53c2-4151-b8f0-ed06c0eb332b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b2a7c7-2b0a-4d72-872a-21427007d127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06b7049-1eae-4617-aa49-5d60fe86edd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af51ff49-e3b5-4b3f-94f8-cd59e405e2f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117ed914-ed67-46ae-ad77-962dc3ec833d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19b9505-a971-4014-987e-1c41f1a8c144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--050dce9a-3d01-40d4-82f1-de0446c23eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e11c8fc-8f1b-4dc1-a6e0-6c596e2035af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95b5c74-615a-4146-9aa8-ddd0ad7bb408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb35393-e95a-43a3-9dcc-d5456b20a75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e060c768-bec7-49d0-8b2e-d1ce145955ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.231.70.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8368fcef-05c9-4dc3-a48e-44661890a196", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.232.137.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a4ffde-8534-4927-935f-052cfc247d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.238.60.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74047100-bfde-4791-ba1d-4b44b05f9300", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.39.49.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4fa881-b1cc-48ed-ab1e-b8617ff8e73d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d62bfff-83c3-4d08-bf04-753c3916b764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2d6151-dfc5-4d03-a08b-552765ac76e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e617246c-4381-47bc-afd0-f4a20dcdde70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00f7531-d2d5-474b-bf85-7ed22b8e1d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052c8c27-0ff0-4a24-8fda-24851d8f49c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c262794-43db-4b1e-86be-da82063b8832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4ea51c-fd94-498d-affe-3d80fec08fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74b1559-1def-44f4-960f-bba09297108c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b4df9e-8273-40c6-b019-08b029f61e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81959491-e772-401b-9553-125609b8969a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8f6368-f801-43a2-b5cd-0275f112b1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c12341-91a2-4a8a-b453-0b97ed8f8175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c82d687-50ca-4a13-aa3d-812f9b57748d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1e313c-8c72-4cd8-9018-bbbfe934f38a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd33ddad-daaf-4530-ba8a-631fc23e0477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70ada49-add0-41d0-8fdc-add255422dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940b0d35-d564-4393-b59e-872900879322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f78280-3ea8-42ab-9307-7a13a331ce06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c118d4a3-850d-4e94-a1c8-9df04991f1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a70c45-d126-4680-a67b-83abd2b525ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a434fac7-cdc9-423c-bd09-2d753e30f3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8a2b24-77b0-45cf-82cf-fda61861dabe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722b0fac-6edb-48fb-93cd-c3ac43979bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4d57d9-dc81-4012-9e6b-1bab3f3ae73b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11ee5a8-81f0-4353-ae7e-e70785009b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221597a1-8ecc-4147-98c3-a1d10dd71384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4c824b-010e-422e-8e60-cd8d778c057f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c3dfe1-e621-405b-ab67-2f442279803a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9291d7-a46e-46bc-a623-d50aaed4956c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa7dbba-a701-481c-b4cd-e52d2abd57e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.20.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283287f8-d73b-45aa-baa5-ac86dc3398a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.26.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099c5d33-151a-4b5f-b14e-6f2fa8f0656a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.46.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45474957-d97a-412f-b397-d945e5633851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.48.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b19ba6-a242-4f40-8b96-cd1779fac191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.48.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e345310-5e8b-4a4f-be1a-af4cce399133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.49.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e1729d-c9f8-4bf5-859f-87819c96138a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.49.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af6dff6-63dc-4e15-bbe0-06e475919908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.57.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d064cd-46a0-4d2e-a595-af7803b00407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.57.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19e6988-c21d-4d8d-96ab-15907a507cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.60.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b5a6ce-0f4a-4edc-bb13-16d88ac49059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.60.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26ee3e0-4d8e-40b3-8e36-49fc563a6ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.60.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7791f2-9073-4d83-9f02-2e70851986cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.60.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9658cec-6b07-46b8-8ac5-6800e25e6e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.63.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5826663-e8de-4b6f-8d69-dc02cf378735", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.72.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f1e604-055c-4314-ae46-6bdcfe72ee2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.17.99.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb6f89a-349b-473c-a2a7-e19e28c68f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.197.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a7975f-3917-4ff5-bbf7-438a1abd76fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.62.135.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afcd590e-4db8-4dc1-b767-015cc0680dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.127.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289fd41f-330b-43af-939e-42fb83710374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.233.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558ecf36-2bed-406b-9140-efdeea40e8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.84.211.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145949a9-efbd-4327-a6b8-b5c30cc2a31a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd6ea2d-825a-4ce6-9318-d7f812a8c552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34770ab-fd3b-4cc3-817d-70c8f1752357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cb42ab-056d-417a-995e-f9fc734209e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.128.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8326e1-0962-4a08-bd30-f688d210d009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.198.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56c3d38-46d7-49dc-894c-469936e95560", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.178.198.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a7abb0-9743-4d57-a691-dadb46c5eabe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.250.105.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240294ab-a68e-49de-927e-9c3923730469", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.255.66.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa54ba3f-c673-45f7-927b-e5656b97792e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.165.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed57ccf-21b3-48e7-a319-c049a054abe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.39.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e57fc1-e05d-480d-9a62-8cfe20cccc27", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.107.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab890ddd-dc79-4d7a-b397-238e0fa84930", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.141.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee55ab6-512b-4f15-9eb3-277f045b4628", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.236.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1374726-dcdf-4929-b14b-4a19c645c36b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.53.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28924071-0b41-4502-ab16-b01f571dec38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.77.236.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4535666d-df78-4486-8305-63bb5d395d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.67.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c40da1-d438-437e-a604-6acdebe7574c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.99.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012b5e0c-a504-4caa-8b32-258e9b1e3f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.107.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b6d7a1-d36f-4060-9e80-6bbdb77b7fd0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.91.177.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db5611e-de03-4e09-a1c8-12339a141a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.21.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1539ac27-cdeb-41ce-9883-223957cf94f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.90.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9a6276-0b8b-4a90-8109-89a2cb8ff4ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.15.255.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1849bede-8050-4388-ba72-da5f2c839976", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.15.61.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10bdc7bc-e3e3-4ccd-aed8-a2e8c2844c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.15.75.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da0009f-aab2-48ad-8bea-d5c7bc3498fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f75a723-d80e-4ac3-827f-8bdac6c41715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.82.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008fe29a-3e11-4cd0-8f6f-c23fef4f3630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.88.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c478f76-5b6e-47a7-b886-6d6fd0d81227", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6964e5d-6a28-4f33-848d-0b5c7eb1f9d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a98847-47a9-4ce3-8420-2d91f9e72d76", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c309965-9d80-48e2-ba0e-701e638b6777", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b866bc4c-fe94-4410-8dce-dbc591f79ad9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afd6a94-5b40-44b0-9a81-73a870fb7678", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc3f1e8-e509-4c36-b812-c26bb9d30278", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9335393-5f99-4180-922f-ff6f3188f00e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a4cbe1-e898-4470-8326-b350994fc192", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83253190-c2f6-4da8-8837-adcfaea53d0e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9555a99-280c-44fb-af02-df612dcf5c25", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ac489d-526d-452b-84ea-46edd91d92b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2826a6e2-84cf-467e-bc0b-b1628b9d0714", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a78e5df-6718-466e-9ae6-a39d4c1ed50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.18.127.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fcb0c22-90a0-4a51-8b55-3ae30648e8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.136.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e567c281-bd6d-4b47-bfdb-e054fb8460c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3acc7039-3843-4f66-95c2-0bcfe2e9d081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f6e94f-1983-4568-8b54-d904f24a9e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.145.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553f874f-f15c-47fa-a133-324d431357e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.157.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da26293a-f747-4edb-bfe1-9bb221b4743b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.171.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c91473-d7a0-4223-be5e-7b7e3a9ac4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.182.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5682e100-9258-41d0-9d38-60eea607bac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.182.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8039fc-05de-415f-996b-afa65991e6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.185.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc86b58b-7029-4f92-bde3-9245beb7a74f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.227.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de439f9-5713-4058-8492-b98d90ec706d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47da3ad1-a160-42ca-884f-5eaf7a2bd1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eca8714-d08b-4590-b99d-c9ce0fb7332a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.204.132.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0b9c64-15b5-414e-8a53-5080d55eebc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.21.227.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61873952-1f63-4f7e-85f3-652df1e90238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.224.242.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f547af-c92e-48d5-9b66-9028705d749a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.23.235.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe01af6b-58a9-48d4-9470-23d36aad0858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.43.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e45888-4a4f-4639-ad79-fe3fef9c0e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.249.221.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92e5f60-a724-4f61-b818-84b87ca5bf91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.71.253.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a8d30f-cb94-4dad-b2c1-f02a0bd99927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.87.193.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7631b2-1157-4e89-9ac8-1f7913c497c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.90.83.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--570e01e8-34b6-4d2b-8b47-5a4a974f8f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.101.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4c4a0f-a7c0-41ab-8a86-183996a75d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.88.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc49442c-df4c-4074-873e-7d716332503d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.145.62.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195c6e3f-7f96-4b0d-8468-73abfd433537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.147.177.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069c8e2a-3ce2-4b1c-9c46-9451431a6453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.147.54.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f56a07-c6eb-4bfc-b1e7-fdad4693b70f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.157.40.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c228d521-a9f1-4a43-b005-19dae6ba68c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.158.28.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3740afe-9725-4736-a596-ac2c497e3fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.160.203.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f591264-a259-4c7d-aeec-87fa80bcb848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.162.56.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d85467c-1b34-4119-b723-adaa1f9e35a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.164.180.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cad69b-a2bd-481e-91c7-9a6fe46492a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.166.199.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ccbfb4f-e4a9-4bf9-90db-71e2af2eb610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.172.172.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76acb22f-1e8f-4f9f-bac8-c7d1b14edab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.174.189.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e509d785-55ae-45db-8efd-ed6242408d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.174.244.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8684ba-8d25-4ae2-96e4-526ae4d3399f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.196.134.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f63fbf6-6805-4b4e-bc54-239dc4689ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.197.188.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a61e23-61d0-4e72-a1c0-5397b221bdbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.204.65.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e10134-6a64-4e05-bf98-ec14ce4802d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.221.171.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e583ed54-9576-4ac3-a866-47052b85ffa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.221.74.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5597ce-3231-4b0c-a391-149a43ffd49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.226.19.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af0ec6b-9639-4b13-8e30-e1a7c101bef2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.229.240.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f5cf32-0319-4f66-8fe9-4ddf9940fa61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.242.57.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4f509a-d844-4ae4-ab2b-1d18af0f66a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.243.5.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5734386e-c1a5-487d-a24d-d00b7d27f40c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.38.52.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963da76c-789b-48b0-b955-15bde7907c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.84.2.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad9cf0a-2103-4836-a84e-fc5a3de60106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.88.169.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73f48c6-7061-40b5-ac14-6e5788057899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.91.130.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff8fdf4-b966-41b5-8d3e-2df260458dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.92.193.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66b4039-5366-4786-83af-d9a86d8db628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.92.199.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae9c455-c771-4a74-8373-24309a447887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.105.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a166847b-98cb-4b23-9522-847000f72f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.97.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c901432-6632-48c7-9252-194fde6db08c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.99.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2aaa1e-0e1d-4582-8677-86ecdacf7592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.152.34.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a3c51b-d2bd-4ebc-a5f5-0dcfd94d1e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.154.241.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89df3bfc-f520-41dc-9eb0-35d4b6b36b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.106.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f601f9-37f4-4d6f-8fea-4cb8df59d881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.21.19.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c17e989-7c5f-4303-9f2f-eb24d9e8b60a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb8af8c-f8a1-46ab-8925-6d50981a3a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69b8bf8-712f-43bf-b518-2036537e06a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.221.146.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc99af9-78de-4110-8db3-7f4f47600966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.245.27.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcb007f-f2cc-40fc-89c3-497408ab3297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.47.44.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b78eb0c-f561-414b-9a7d-90616bb33995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.56.8.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e112c05f-e48a-47a4-a011-c0481dbcf8c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.57.107.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030b3de6-d7e3-4419-9a8a-95809b0f76bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.8.140.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e7072f-61f0-4353-8a87-8caa656aea8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.120.64.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f79143-2048-4fb7-8fb6-0245a3098d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.125.213.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3557e3c9-5c95-4093-9a0a-671a9ba358d6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.173.123.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3869f6-67ce-4874-8c15-b162d8bb9fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.26.132.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2dbf22b-5c38-4393-b5f9-2b4eec7e284c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.100.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0552af8b-8a36-426d-ab1d-5e4b8ed9c1d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.10.64.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d0b6e4-9e07-4b47-9313-78016a1572b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.12.218.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c10756e-ad8c-42af-b006-92c7d9cf496b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.13.7.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9dc2fd1-ec1b-43c8-81d0-95b9d341d875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.220.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8449629-a855-4593-9f8e-93b3cf8b73ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.163.235.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23fa75b-b216-4c69-9317-fbe04fb5f998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.165.124.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c153e0bf-ed4f-405e-8391-7eef4c9c98bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.166.82.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2edd3b-ae13-4a38-9af6-5d29f29acca8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.177.101.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a30955-128f-410b-bd14-5e7a0d4322d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.188.249.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ec984a-2bb5-403a-a403-041f51004302", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.188.42.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49db11ab-1405-46a1-ab5b-06e50df61d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81038c0d-09d5-4ee3-b377-13d0616d1894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.137.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20b4931-5144-44ca-ae41-a2b70c6ff053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.208.178.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5caca89b-4808-4fc4-ad8e-45590b449311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.213.11.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6783e6c0-75db-490c-93ce-3a03953d2e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.146.235.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d5c60f-e0c4-45b2-aaf9-51691eef8d4f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.155.2.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85913f35-cb65-4659-8ed5-c52841a876c2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.184.13.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b25826c-3ea2-451f-a2c3-b11187c054b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.223.8.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9c0774-e2d2-4967-825b-2051073d5aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.243.105.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d270c6a-215d-4d58-8119-e65f19ba9185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.247.230.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3168f4b-a952-4a91-9f53-d01664da6477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.56.193.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9b952c-c77f-4af0-acc3-48bf879895da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.62.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2229bcf0-d920-42ce-afe9-15323c155830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.63.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c1e098-9bf9-4566-9b55-9e507d3ed802", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.141.63.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f9e0a7-54b0-413d-ac6f-a792b051fd6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.164.177.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119bd66f-56ef-48c5-8854-90e1ceef5141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.164.177.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab7a0c7-00d9-49e1-b0a9-f8173ef5f1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.164.177.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93b030e-a95b-4c12-a635-cd9a54b47936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.169.135.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45ad312-5ba4-4266-9d28-3bc52f494342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.142.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220fd688-6d6c-456e-9b4e-3d385506263d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.147.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f6d67f-a585-406c-97fc-73bd9b6f2960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.169.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8721b3c-68c5-4fa5-83aa-f12a846b7391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.85.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30ba9f1-bbb3-4dac-8b4f-0bf0f5240e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.189.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d2434b-c1a7-44f4-8883-8d49dce521ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.199.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ab2fec-05bc-4367-ba15-5a377699e712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.207.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723e52e8-0a56-4681-99b8-ccbe12a00ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.209.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9948b3f2-6b8c-4f18-a452-fd0df1d62b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.38.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2541da97-da25-44e5-a571-74925bbc11ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.212.70.49']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f85d86c-6f78-4c46-985b-5286320c5207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.220.122.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a357365-3698-41cd-944a-5a8e81d7bdf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.228.126.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec7375f-d806-4675-8c5c-66bf368a0475", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.84.183.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c438ddd-a201-4885-9934-80aded5a70c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.84.183.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79106f8d-1fbb-4237-b392-9d755d4c0f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '63.70.5.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3edb5c23-2336-436a-99ab-742880b2018f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.176.221.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c57e809-a4ee-47aa-b1be-e4895a2434ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.177.117.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378c7ba8-493d-4dc4-816c-28c9ef26a987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.203.178.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8eeafc-56f2-4f93-b991-77c8c6e05343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.224.17.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa6fca0-1823-4d76-aa7c-df27ae51b55c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.15.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcce1318-7f76-4fce-99e2-77861fa14d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.36.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b926803a-e75a-46cb-8d0b-fa8bde9c5e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.4.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a293a0e-0bc3-4002-ae9e-ef26661123de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.79.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c01636-d6ca-4401-be6a-7049aa4747f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.87.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f5f387-9444-4f3c-b827-34b39d15148f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.18.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b926f028-ade2-484f-be11-b1e99ee03c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.21.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ead7cf-e10a-4762-abae-f52dcd880bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.24.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47114ecd-d963-43a9-8537-f6a87d17ab22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.29.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b82dd1b-c270-4330-8d5c-e76ae83840b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.53.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a278d53-3c86-46f5-8069-ecb88fb3bae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.59.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdcfa2a8-5b59-4b8e-ba0a-e1522dc33666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.7.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91630c4-f517-47c8-b6be-6785e827632d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.82.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cccc0af2-7624-43f5-b41c-0aa1df572568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.97.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a1858a-2b5f-4821-a9a3-56455159db1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.140.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3da5068-9e35-46b9-9c1c-2649a0f4ddbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.236.169.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a939b0f-17c7-4396-abf0-466bbdda59ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.31.53.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d1c95e-a423-4050-b452-65cd1a388403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41dfb4db-9ef1-4d41-af12-4a0acae879dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36325850-a405-4401-afba-28d11eaf931d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ba4638-8f86-4a5e-9fdd-22bd2e1320e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f803a174-ca45-457c-b25f-b590f200b413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ea2d87-3eca-4a37-b187-80e8f2c76d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831e0841-35c3-4c1e-9378-5d926a32a097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5daaabf0-7de0-4d25-91a8-fc9f3dd57bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620d4ef0-7a9b-46b1-b6ee-a8e889be3525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f06fc8-70bb-4070-8808-a782402363dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a736d14-827c-4c93-b8e5-41fb37df2e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65094759-43b9-49a8-b0c4-c13191d4f92d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e51b7f9-dd13-4fc2-a270-24c68b44f8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a35e8b-cb59-4730-9dbc-76a1b87a895d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ad5cd8-da5a-4066-9f6a-1db186ddacac", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4106d047-ca66-453e-bdb9-3dbab9b2e981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db37a609-e430-41f5-95a8-bb1b4f96fff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8dd3603-17d2-4635-9c2d-ac1ad8af581e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3972732-bebe-478a-89a0-af49582538fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb27241-7f4c-4982-87e5-6034e51c1cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cc58b6-3f5b-428f-8fbb-3f2dff46eb41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e63d0d-a807-4514-bf3d-fb0b60119b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85546e19-7c17-4d03-84ba-3be723060698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cac040c-b970-45a1-9b4c-f7a5b43be0a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb24cb6d-694c-446a-a4c4-715b2af158b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a72b2a8-6ce0-4e05-ac10-5b285d9eb8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c911a12-f549-4ae7-b831-d82f2fda9b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3221ff62-9b1a-4e48-9c6e-5cd69e68eba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3bd4a6-d9f8-4e9e-bbdf-7135d1201250", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21cc8c1-57b8-49ce-bfc0-3d9b113517bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb653359-971d-4b6c-8c80-c4a482ce789d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838111f8-1fd5-4bb5-a08d-7a2617003ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989641cb-e5e2-43b2-b284-edbea74270d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2165b7f-a686-45d2-a892-578affb3c853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c5bd43-6788-4e64-bbf8-ef8bffcc81c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e2f953-1545-4bab-b8c5-e0ba2982dbf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b37fd00-0557-4b32-b739-524b83db8d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b9330d-0f14-4f77-a573-bd2b402dd650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858ba388-2f17-4d46-a0f6-9e858527fd9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abfb75c-340d-4830-ba65-10e4ae62de22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15df1efb-d893-4ac3-9580-a36316eb644f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120d056f-3611-4ea6-959c-2296c28babc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c156576d-3655-4695-ab61-0409a060777c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54958cb-a07a-4411-93d1-006964c7aa3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0464f4fb-004e-46ef-8a30-a93d359db38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbbac4d-3aeb-47dd-97dc-3de4c8efc676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a157f2-79c0-47a1-84ed-ec999bd5c970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d8c7d8-0691-4a13-8f4d-e7c1e14eaf09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e7d196-e3a9-49e2-8da5-0a84b8cd8a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad025a45-c2f5-469e-a71e-64eeef432bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad786708-a85d-411f-a4dd-a78b149eda59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c22599-4756-4aca-b2ac-6c348f7aacfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b215e027-3d30-4519-ae56-09e932d4fbe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1501939-8995-4029-a9f4-37a138785e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a304df-bdca-464a-b8d8-78af92caed31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e846b7de-e61a-49fe-a3ba-84efeb071ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9203a3a-38e1-4fe7-9f91-5451d0b6c232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d106a6d-bb2c-442a-ada7-37ff2799b3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a38d23-ebaa-4a6b-b8a9-47412637b73c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abcff41-c553-4d2a-ba86-baa3a855cce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab5100e-2fb0-43b7-b0c1-f47df64708b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88bb69f-74f9-456a-8b78-d0bbe12da515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03a8359-5524-403a-9c98-908b553945f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43c642c-034a-4b4f-b5e7-8b6800d7478e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6b399e-6e03-4f4b-ad6c-d5911c32097a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d41474b-e24c-46a6-a456-6ae34b1b7a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b86923-9c51-4d3e-a19e-a2177533babb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f6905e-1ff9-49b3-93d3-d826b34c0a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d215f06a-d0d2-4ef0-a24d-0e2931816851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fae272-6cf4-4a62-aa15-56d8104f876e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e41da9-db5d-4570-8db9-e8fa3a3bbe60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13f4bd8-6eb5-4c26-8db0-19c064a2903f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b900bfd-1ab6-4c07-ae7f-5ff688020dfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6063b2e-0135-47f5-adb2-70039835a65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090828eb-678e-4ca5-98bd-72f56e17ec6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2809a9d-87cc-4ccf-9ac9-9bd690f3b8fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa207ca5-8644-45d8-a117-d11144eae41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f12b84-15d6-4399-8027-77fc05320376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202b2129-9932-4b6f-84b8-2d6ced641273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270a216c-e0e5-40b4-aaec-7e34e7b18e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2530277-26af-4334-8886-881e3d2b8c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e99fa3-536d-4149-a58d-01eb09096e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed15fca-cfdb-4293-80f8-7b2294dd5274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c70731a-8860-45ef-a907-4e275bc4a282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875bf889-f859-43d3-8454-6b169b24fafc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477ca6d9-74b9-4aa2-acb1-fd74a48897e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37498331-8054-4cc8-8766-bb7fb47fcaa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f85e2e3-e002-4278-a1d7-503035b1aa12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37577189-33ce-47b2-9da0-b789f65cfaa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2352ae-1dfd-4ecc-9524-44f268e73b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33fe2ee1-fae5-4eab-b672-4958f4f349e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--124d46ac-9e8e-4c09-8434-0af473c8077b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e220bb3-e554-442e-bccc-b3997e755605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fa2229-22d8-4c73-8a66-69f23346f7d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b302602f-d3d1-481b-8633-7ba0514ed084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a468b6c-00d7-484b-afac-9b31319090ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4488a0-d215-474b-8bc8-6c117ac5483a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e930e3f-30be-4be6-ab97-d5d40e64a6e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce11a46-e056-46b8-8789-31e0fa3c8557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a6acda-2101-4845-b478-204323fc58e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f869f13-e77d-4bb6-89a1-334c93df68a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a84a1d2-a804-49a0-b58e-3d286db49806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9facf5e3-7b5a-4514-9a3a-8b82bee4c00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdcf1d77-0c28-4f54-ad08-1bb2c8bf1cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec89f2e-15ba-4747-9958-181d3527f6e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--addce4f0-c9c2-491a-b130-04cb7e7ddabd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c975e557-c47b-4136-aaf8-ccd9dbe085b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8524c82b-7c0e-4fe9-bb62-5ab9dac3dd47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116448f5-df07-4bbb-a7d6-1e72a04b148e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b921a7c-44d8-40b2-a400-e83f48ef580a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b39fac-7302-4393-a2d8-17bb931b39cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33f7527-7b7f-474d-902b-3cb3ca69d146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f56db36-a3ce-44e0-a839-df816c01ac13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8ec4f3-5b89-4dd1-8d6d-1bb985a79223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16aaa50-99e5-4d62-a5e5-aa44985c0f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65869f89-fb8e-4b03-a5b3-47424c78302d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e5b4a4-2661-43a0-bad7-721a9063293b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce8e85e-2e2e-4d23-85c9-914cfa5268ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b7c384-85df-48e4-9839-7c327908c19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f273bd5-2489-4264-8323-5a8d6188a342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14909e01-609b-415f-9355-0213e27deb58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00db304d-d670-4681-b7d1-5c7fc098848a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e8101f-ba42-46ca-914d-ae6e078614bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5d59c8-fbb7-4b54-b307-b4394ca46890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf5950c-9e6a-478c-b3ea-3d301440fa12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715df614-65be-4cd3-826e-9ee8064a845a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a34561e-d239-4c84-992e-849dc1618510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ba9fb1-f035-42e7-984b-4ba908bdb198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e130b7-7fde-44cb-979c-53c6e2028cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a12d366-bb8d-4678-bff3-68dc3910c125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a379153b-2cbb-41de-9848-4a3b94b7169c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb58b38-35b5-4940-a4d4-892ffac43518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6289df08-d9d3-45ec-aaf3-0cc671ba8464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4e8a5b-c177-4c1a-b7c0-5454ca46b261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94b779d-0393-425f-9205-4f901c6f87a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ec48ce-a813-4d7a-9759-9fc505f7116b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e4bead-b1b6-4301-9830-cdf935b966b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146f4d0e-d97f-40cc-be0c-c9da1ed1be64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f80960-dec6-4d3b-a7a2-8797e597f143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e2bb8f-76b5-4b48-8184-10cdfca9e592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83b5fef-e94f-4719-973c-7138992e5fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c43b681-ceba-46b6-ae4d-1d7ad8171eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad4915c-fa60-4210-92b8-f023b2fdc60a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb3561a-5a42-4844-a1a8-07d6a496f664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e964f74-b9b1-4089-850a-f0d73f6d62c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a93f7a5-9c12-43bb-81b8-af35a1c23d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ada0cef-f905-43ed-adc3-47227b56982b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4322e20a-a3f7-48fc-b5b4-ffe3c9cb62d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27ac8a4-4b12-4aee-bf3f-eb92d539e69e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d28b8ce-42f4-4532-9c76-ce9baecb9ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed08bdf-f36f-4920-b52d-c6e70fe8cf01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6e9248-e4c2-4ede-ba1c-062073dc109f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1178a345-282b-4461-84b6-f7160679c657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d09120-f90c-438e-b5fc-e49ca62e7212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27fcc966-ebc5-44b5-b328-28b5be9a15a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526a717d-1fba-4d1f-8bce-def642bed4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25123fa8-27be-4e42-b0cd-6e38f9dabf9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3139c4d6-0f7d-41ea-a19b-594ff951332f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f66adc9-cbbd-47c2-a237-26325645e586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248ce932-4037-4449-8c33-f17001bf7689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02176fd5-693b-417d-b0e0-8ed2745d48d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7315c8-62bd-4e5e-944c-786c30f0f997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a469ae41-791a-485a-9eb2-6c764cf455c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af93976-f14e-48c3-bdfd-500314693e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6f9e86-dbf3-40ee-84c4-ecfa8feded05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59a2851-431d-4c4a-9a2a-744bc28626ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ece154-a293-4825-9704-b92faa862df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180b2d26-b184-450e-832f-170c1e5c401a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6502041e-e1ea-4a76-9d44-986b53b54b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9409b451-35c1-429a-ad46-aada4f49bfe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eabd5b7-8146-4bea-956c-6efc00ffae88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cffdb1-1706-4fb4-bb1d-4233f54c3337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d757b9fa-0560-42c9-a5a0-ae6e07fb9aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e087d227-c2f7-476f-8fd1-a01bd21c72e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e76352-0ea7-4241-ae7a-a35c0a8712a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ed33f5-6000-4981-bd66-90e9e222e310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8295f44e-425f-4dee-a944-2e6bade99dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1938365-0dcd-4d8e-ade5-3b6554c57d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faec401d-d483-4de3-a413-1b5626968701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd980cd4-6389-4c06-a3f1-30b4cfd7cabf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb4cb98-2bc5-4194-ad76-fb3bf16429f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091e9388-111b-4e14-9d78-c0dd9463d89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28934923-e1c0-432f-af6e-279c74ade3e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2a219c-3bf7-4e1e-bcea-17a771fb2be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5f0dff-b989-4320-befd-0c95516c671e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb18d41e-01d4-44d1-811a-ec2a388e1d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc9717b-c4e7-4e2d-a27c-f2a4211672c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282f70a3-27a1-498b-b315-b68b5102febc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8467ccb7-d9da-4b29-9468-94f6e4c05a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e81490-11a9-4455-a09b-f84f0755e320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492875b5-fa89-43b3-9464-e96d07e82a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185e9662-235e-4df1-9753-ac5a6308350c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c561c61-1181-46fb-b6b6-f30cdce91544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae248b49-669f-4eb5-b5d8-c8ef9656511a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf3e0af-d9ed-49b4-b86a-32994d249037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a642f7-fb59-4dd2-be34-2b69863b920f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f3a7e1-14db-40dc-a260-d67e2303fadd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69c8aec-332e-420f-8ee5-8f0adf63cc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a27ffc-2edc-41fd-adcd-316c806b0808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1807abd8-ecc0-4bc2-a0ac-ede28101898f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1c0a4b-e48c-4d3a-b076-f8f2bdbb9308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02ed7bd-b3b7-4e52-be85-bd6fa2209d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35bb0964-29ce-4889-9877-d3c929121a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549965e7-0771-4324-ac1c-45894efabb15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2c8408-adde-4dde-93f8-e80660cf397c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7dda439-3691-44b5-915d-29b33cf800d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4e33dc-5971-4cf0-abfe-143391db05a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16822451-0ec6-49c0-9584-e5fb7cfb49e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b5901d-d62d-4d74-96fb-2f5db16646c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa3a0a1-8857-4f1f-a212-388dbf471daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8177bc4b-6958-42ca-af07-574b09065a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ee9a2a-1e2b-4b57-bc2e-21aa9195c30d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76065572-7478-456f-919e-a842647cadb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402fbabe-67c6-439f-9525-69d0bbefc07a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255c3c4d-45ac-4ad4-868c-41f0eafc1fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc3a77d-c247-49df-876a-cf139dc4c201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad52cbd-37b8-490c-823d-ea511f3a4f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7407eb53-594e-40ed-a83a-ac17eebdcba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f54a05-2b5c-4fae-b357-a81a091ce4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb9723a-2ebd-4d5f-ac45-b12fa2aaf775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ffe2e7e-35e7-4237-b738-a76316383958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a09b3eb-ffa0-4048-99a7-dc6e200ebc92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ab923e-eb31-463e-af0f-8f1cf8e6a966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458dd8ea-982a-4338-9d5d-ad234c2dab5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275f0596-836d-41cd-b038-ddf6183cbaae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a739547-18d1-4835-a76f-ddef96f0120c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2244bfaf-a34b-415d-a8dd-4ed401fbf460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4091e933-44fa-4783-ade9-9b85dce297b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b59144c-fca1-4343-a4c5-c52377789868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--411f436d-9069-4ca4-8543-21c97da40718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d84681d-81ff-4c89-a957-a60773f1ed7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d641aacb-6e30-496d-8923-693701d10092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924ba6b2-f2bf-4a82-add3-9f8795e49ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6022d81-6f29-4a7a-9053-b81c5a1e0f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27573ce-5be7-42a5-b57b-fcb5ea80e94d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eca9a99-6a27-4022-ad15-c706b0701588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1419974-37b0-47a7-9169-4c7d46a75a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d62c35-0410-41df-ba74-f848f988eb90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da21d7c7-a304-432a-a760-4a889da14484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93aa01a1-8064-4328-b090-56e36243afe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80be80e-787d-40f0-b9c4-8b96249d6772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe8fb6a-82c4-46e6-a5db-78a0e0e5f123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2d0aa0-fe39-4413-8bb0-d48a634d2dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f963ee-091a-4112-a5ca-701a63a7e960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2963783f-0cf2-44dc-b9e2-0008fb0d2780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bfb7e1-48bc-4d45-8feb-b38b48a501fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa18619-f029-4eca-9d3f-bbdd07485fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b8871a-c1ac-415c-b890-2a349cdc024d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f7da19-2b5f-408c-b90a-d6317ce3ef94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3bfa43e-5e3a-4996-9f8e-dd7ddc474658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c34e622-62ad-4ab1-87e3-31c7abc7a999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e23391-510a-4e97-9d92-32739f5d757d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c4575a-7ae5-42fb-836b-6abcd13d65bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eadb596e-c48c-4b1e-b0a3-754ff3e2c691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74225ae8-52bd-4644-aa45-165e7ea693ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9443b630-27e4-488e-aeb2-dcc3b3cd4ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1b18d0-b08a-4310-89af-a95b83b0d1c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493171cf-5918-4c80-a083-29ec3bb24be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1e4e0b-f81c-4b44-bbb7-913341035f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2d3fda-ca1b-4eb2-b89b-0ba449d84879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa746d75-6134-4f4c-bfae-83dc6e469f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb13720a-69f8-462c-8279-f7d51a1e32db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d48927-b107-494d-a56a-0cc9ac443413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2878ccd4-65d4-4269-9b22-90069c0aacfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce356947-de53-48d9-8709-c68423954c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd48a61-d09b-43cb-8ffd-4464cb4b3d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03999ae6-10e2-495d-bc12-e10aab818052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c505803-8c06-4785-81e8-b3044a27883a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aab19ce-c987-4679-b764-f5f23f15d7d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f902f6-7b74-4a5e-a281-591aada82636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d553e709-305b-46c2-8259-3e9cafb74544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ad8f89-9a4c-4e64-8538-b8a1691a80b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d971e833-4460-4a7d-ab8f-99d27e0700f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d19567-1083-4ccf-a8dd-4f88dac12efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657d4586-fbb9-423a-835d-c7c18b258021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6eab376-b413-481b-9007-010fa3b6dc19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbbee34-7596-478a-bc90-9ced53128fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa772aa-19fa-4937-ad74-63f8600ecf74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339ef55f-03b9-46f8-8820-22e211ac028a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60740556-e331-4101-b0b4-0805d9c42fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812226e7-0d7b-48b9-82e1-85531ce67495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad069ff-725a-4b5a-a65c-3ed446abab8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4483ec-441c-4307-84ee-2692ec9a6b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48fbff56-c3ad-4354-b836-6ad44866e3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5901fa5-08df-4441-8cd6-c1d8a1f1f9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973fdbeb-db2d-4bb2-b30d-4bcff268fafa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2beb7ae0-f825-4bca-88f9-ce28d8e11dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0afea4-2401-4609-8291-0dd49560723f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c00544e-608a-4e85-9790-ea205f1d167f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41b7a8a-e390-4ea7-b05f-21e622d7c6c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52dc829-f295-41ad-a742-99383caf1d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed9079b-2728-477f-ae88-502a54a4ebc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a56281-964a-4670-ab0b-8b9940d492f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf902892-e330-47ca-b1d3-a45231e57c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b6a89f-6f1c-47e6-aa2a-bbb3bca948ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4107e2a5-0764-43d0-9680-20cffdaf4d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e377685-0db7-4578-a108-e1aa32dd92f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338234e2-5cff-4255-8b07-a25de7707961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b425a48-902c-45a9-90e3-6ba09d46bddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be43c14-3e9d-4fcc-b9ff-76f11c463823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b46c9b2-e6ae-4261-a8a9-7479e5b36d1b", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd25e1a8-d9d4-4f7f-ad86-3a96cf499971", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b97420-a70b-44fc-8171-7b81ec06b0f4", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a66d4f-0207-40a0-ba17-6d2eaef6ba3b", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28db8cf1-a6dc-4fb3-bf03-2fc1ba6a65f5", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ca86b7-4c9e-4713-8ffa-c7903fdc5d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934f5bce-508b-439e-9085-7372b7ee08de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109d6cd8-1614-488f-896f-37970e657d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2544ad8-5abb-48df-8b29-9bc6ba860607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0dfddd1-7c6f-429b-b8df-39b29cbf0c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70dc6c2d-5100-4c7c-88fe-134e045babf1", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1680ae78-cd4e-474a-b84a-507244fbeb71", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80065a52-5852-4f66-8051-8a3735cdde23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b79ade-ae00-4734-b159-0dac6793a5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52125d6e-558e-4124-82d1-99c0bf07bdb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec1a565-4416-461e-b341-7a69f6f4b541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b572d250-b1cc-440f-b4d5-d5dc8b020b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8dd796-8df9-4448-907c-b4f13ab34680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.109.227.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749c0f1c-737c-4f78-a743-2bed056507e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.109.55.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3987ad-c552-459a-b564-6b06947b48ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2ac9c4-ad75-41cf-96b7-e6a889232c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838144b0-2771-478e-8ea9-ad00d01f2dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc429988-75cd-449a-be23-bd23c63d09cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a369fdd-3885-44f1-9d0e-398a234ac591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58425282-eb3a-40a8-b3fe-caf56df5d47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ab66b8-37a3-4889-94d6-4cd5448e59c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d33bd73-949c-4d5f-914e-dcde7cafaea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3feb6354-d611-4051-b319-3ed9d27a3a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92985771-1081-4baf-b40a-f46549f6745e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1b486e-3dd6-44ed-84ad-79f3430cebb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9082bc3-2e62-4890-bdbf-edbbe79799c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256df950-73b0-4d2b-839b-1534fe0f9c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eddcc365-edc0-4f5a-a2a5-0bd26e9e8e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51cf87b7-0143-42d9-a1b1-b6cdcb513ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8199b63f-5f19-4f7f-b87d-ceb96d4374f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948b91f0-da8a-4cf4-8f40-d33dbe75d71a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7f04d5-1650-43fa-a123-f3ce494c905c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889395d5-7eba-4f49-b485-8625e04d52cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294e5213-a910-4483-99b6-d8c7169f2c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e596c9-4b4e-45e9-9aed-eb975778326e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbac2120-5032-44ec-b35c-9073ccf703e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9ebfb0-8d87-4a1f-9cb8-0b707ac43f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed2634a-688c-47ce-a12b-8ba66e95f74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cfafd1-6956-48ce-9fa9-8e6d4459e551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9d2aa3-51f5-4561-b9d0-ef9a21a2e8de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971bc82c-1ee7-481e-a8c3-0e4fd2edd6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c034a457-6879-4836-bb4e-f2321e6eb372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8ca732-411f-4341-91be-6113e14e6933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072024b5-5802-4b11-81f9-e2c08a121827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583903f0-7f19-4da6-add0-b27b1ee0abfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c9f52e-f1af-499c-bcbe-ad9ff720b3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51595dd4-6d99-455c-b022-7726a6fb803e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1463e7-8c15-4950-baa0-c0d6afaf657e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428eeeed-15c2-4a9a-ae3a-4ed25c53cff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b51372f-7691-4962-bd56-962d60a972ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d00444e-1abe-44f4-88e9-c5a1cb9fffe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26a9ddc-da43-4d53-a96a-036f66fdfdf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d988de-21a5-4624-a68c-d7e1b5539950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15c5fac-89c2-4b94-bc43-caff3d2628d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84322922-d49b-403e-be14-d87860a96f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0cb7b6e-7edc-4d1c-9ab1-1bc5f3cfc606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c95a624-3acc-47e3-b271-db6f87f9ef04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f9fdd4-96cb-4614-b45a-6303a411bdb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421a1658-7a87-4cb1-a3ca-6e48d1f57f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da07b06f-d749-459c-b2a9-0ffee4aab4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a9040d-6ae0-4d9a-9b78-65a6d372119e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a0bda4-b337-4ba7-bf0e-297928726305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c2c19d-d640-4297-b2fe-0f1c02db0d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ec8628-7d28-424c-91d2-7f8d1ecc9ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0853b4-d0b9-4d2e-8460-362e446ebb1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80eaab5e-ca96-4221-94ed-ba0408e9cfa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e988b93-9415-4b8f-be3b-fb20ce320cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640e49bc-ebc5-4267-93df-357cb5592f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5304d4e5-c086-4c7c-a6e3-07552e1fb8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d943663-7b9e-4f51-9169-f3e26469d55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bacddbe7-b7ed-4e3e-84aa-e0be20ee98a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9a053e-be98-475c-93ab-11429472fa64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ac3650-09b7-4473-97af-c220323c3702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8361e9b8-78b8-4f57-9530-e62e14828228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6615e8b6-fdb4-4cf7-a014-901289283e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e83b07-ac7a-4a24-a299-6aecad20bef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b4cd7a-43fc-4ccc-a0d6-9a370cfa6798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803f8d79-a130-4ea6-b39d-86e3c349fe96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c865ee8d-a32d-4558-a2d7-255187960df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88883e7a-a7ab-4c0c-82b0-fe97ea5c9ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7391c9af-c790-4ee9-8d73-40eade066914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60adeb9b-ab2d-4f8d-9d85-ed382fa944f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66984087-6c42-4192-8fc9-288631dc6466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033e7e48-dcf7-4545-ab20-08140b69dc54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43543f74-62f3-4114-85ff-ac8553bac868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487be152-4822-40dd-95eb-263a3a2cee44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b349f2e-da3e-4ca0-8277-d05239c0492e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0612bc-8257-4115-a849-f478f8bed13c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60bce068-e126-4516-84b1-1ca96de4de67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15be2e8d-3c76-437f-abe2-f7155bdaa4e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7ee3ce-e520-47ae-826b-19588ddf0828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c41bd7-293e-4634-a13a-9862d0ebc9ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1888c54b-9f08-4a1d-bbeb-29118357b1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a9a5ff-4817-4a53-8f3c-ee046dff8766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d5b61c-5499-4330-a270-506c69853368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14cfe2c8-b428-4d63-a8e6-250c63661c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f254ddf-dee8-429e-bccd-3704712df503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763722c1-870a-4e8b-8b35-2663721677be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169de5c2-6965-4857-a34d-5d7c675e9987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9164d2-54a6-4411-aadc-cfc273f5248a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d20de08-28c3-4b02-aaf0-152635ae0511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e03cb29-3a2d-47c1-bffe-259cfbbe13b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9bc4ee-e1ee-4756-828f-b90a3b12b9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb512481-3266-4297-8fa6-dbf29f2d1dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b89f8e8c-7796-49eb-b901-42cc2833544f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1290ff28-e0e6-42ae-b826-248dfafe5af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b01eaf-a1f8-4d02-b47b-513f9ce0180d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50613c1b-b039-46d9-a48c-363cfbd0e8b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53895b2-2383-4621-a80d-0e757d82a88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1896e0-4a5b-4aaa-82d1-c2e4e0edb0e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a7250a-c9f9-49af-828f-ebe579124626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dadcab43-3a22-4726-a426-36063a464eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f774eb5d-0809-4603-8487-0f48aecceca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61da7051-35c6-431f-bc17-c8ce4811fdaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b824b01-f67b-4ed7-8e85-965827d5667e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa766c0-c085-4fac-9e9a-c84b9cc681bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400db1d3-63c8-42ac-b384-293ff0af6f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83dcf562-c8f4-4b90-bc50-5481c1c9121b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ab850f-5ce6-495e-897c-8a314efbbd4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f333c32e-2986-479a-af58-811e72b6b7aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b54c066-5b37-4f03-91fd-6345f97f8da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e300ca-1546-476f-a93b-f7c71a29cfc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12280be-a4da-4042-bf14-7c10dc2ad737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87fe0240-2ba6-4483-a98b-8d8c78b5ea97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4541c297-e256-4477-a9f9-3088a494d6d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bda60f5-2d22-4c99-b23a-ce1c1caf76ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8fb11ea-54d0-455e-86ba-04adefa1882d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155c29e6-514b-4799-9d87-c1027e5c10d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f002e14-fc88-4690-a18f-9b816192f2e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb1d36b-099a-4fff-8a04-f082d6cb922c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cddce2d3-ca79-48bd-96d5-2a4337287507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2218e34-ccaf-469a-8762-a7cf3734407e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a361b7-ed23-4168-8e8a-c7e6bf2f51eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1771138e-0cf1-473b-a6a0-259307a99702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c57ccbd-7b97-4c04-968a-d3f18ffc0f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499c3683-b2f9-4688-a752-913b383fb26f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1181905e-1b55-460b-b277-257192cb9f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2fb845-0749-454f-a335-ebd0da1c084d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f523f8-727a-48b2-98ea-b11893c1b8cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ffbd65-a954-4705-8189-902dc0ced6f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0859e390-bd97-498e-9319-93d5d8f1fab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d9d433-64c1-45c4-95a6-1ac07e1c1f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee6c153-21ff-4094-bb42-63fa1e1f4ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14475b76-aead-421a-a033-115466686085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3404363-f923-4f72-b4a5-625e2aea2dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58d5244-296b-4940-a11a-64560b6a6b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3af49b-1244-4db8-9acc-cecce2920acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537ec9e5-d93b-429e-b641-4f4003e15fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3671064d-12e9-47f3-9636-6f57faaedb53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3911268b-df02-4757-a44e-635a02681124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77aea6dc-a5be-4739-a981-b721a2e14894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede1f3bd-1e1e-437b-bb02-60e267beccd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd05346b-a8be-4858-b4ce-f5d170f94e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf76ee65-6111-4e4b-91c2-d94c64f07e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f21f2fa5-8f4b-4c11-8e9e-498c6813b860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9ca78b-f227-4a92-9006-e6cbcb8e1a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8f52b1-e472-411c-b250-29a4dcf8abcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbed677-bf39-4d44-8dda-5e52c15aa648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2517ef9c-31a4-4a16-a2c0-568b93df26ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1bd288-8028-4a13-8625-52c627a3ebf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4495a7-4454-4abc-b945-99004e2e2050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62c0842-3b9a-4ae9-98a8-9e8e74b98fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ce5c44-0ea9-4539-9658-c35143ed92af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316c52f1-e55a-4b9e-8075-256afecae983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d30768-992b-46b0-baa7-824a8aa1ffe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b14a129-cf54-4b8b-a956-118418d9b7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d42cdb9-8e0c-48f0-9159-a8575eacead8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7acb05f4-f753-4ffe-bde8-25692281bc4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d153f9d7-7e91-4790-8104-0934de77ff4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033db4f1-075a-467c-9fc7-a124900030c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87de4909-c7d0-40af-b2eb-75a29d5a8b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2073579e-8f5a-4fa6-8455-57a77f6efee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1e4325-5d59-4aa6-8134-da0f20e83ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7e918a-ae5c-48cd-8b13-95cf7b0f74f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9cc4f7-086b-48dc-85a9-e2d74e8b2da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20910ae1-85ec-4002-a901-c28b9ce020f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c072ce0-2efc-416a-a01a-28849c03af12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c39af48-3b8b-4ee0-b4b9-e38e5f653776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22610239-7876-4f18-b597-afd797edc7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fc58a6-902f-47b0-9809-edd600d850a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4ff0ea-0c77-494a-b92f-f428dab8fbde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca2fec8-dd05-4c83-8335-5dbd59ccf785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e895cc-0876-4e95-9a4c-b25d91a060e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252ecff6-76d5-4d25-918f-4e32b14e074b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61e23d0-18c6-4717-950b-ae3b60d04636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950b9679-e74d-47d3-b584-a58a51ad8bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef9e929-d74f-47ef-b334-9b580f73a1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5fa589-feb0-4798-98e0-e5ea4104d10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cfecbe-2b95-47f1-8d5c-6b3d58eaca93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e042b62-f0a7-487c-8a60-9b928e0683bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b96fb3f-18cb-4bad-9138-5009c5631a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e30f00-0434-4b33-9a36-90f5df27c514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca46a08-122d-41e7-858a-d867b38fb76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef9be10-98b9-4032-81be-6ee61a7bf1b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d1a489-84d4-481e-a620-4c6828a4a7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f159dfa0-afc3-4e6d-afb5-2528c3ab1d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b367474-d052-40f5-8a7b-0cac7f3484b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351168b8-535b-474e-aae7-87c251beccb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec46dca-abf9-4584-b2fc-c86ed885c4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4174982-2c3c-45d4-b432-e5a2a0af9abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3927d981-b504-4628-9357-08cce8d88b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc0cafe-882f-4a2a-a82e-3ea05c918f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8df342-9b59-4a47-82cb-c2c88fa8a35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad26dcb-06cb-4ac1-b08f-7acc80a7d7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f47def63-4844-4c86-80c4-60aefc19c6cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f31fd2-fb35-4e2f-a3eb-6ead4150e77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55379a37-e68d-4b6c-a34e-07c377a177d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988fdff1-07fe-47aa-b528-b460aa89db8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e665a7-5320-496e-9258-3dbafbcd6366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3a7f08-375a-49cf-a4b8-f8294b1d630a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e4f9ce-8c81-46ad-89b2-8cb87425b72c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20769725-b054-45a6-93f2-a6ffafde7191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.11.124.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbad9b55-8369-4062-9b6c-489221d7d1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e775ef6f-9ab9-4bb2-bb6d-5a838cff4db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a68bf9-2003-4910-9c64-76fc8b3f584d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2ae0a5-b3fb-40f6-9639-bc29aab732d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15587427-b56f-4491-a324-d6699bfffb6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4303ecb0-07d7-4240-948f-f76e4192a505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6dd49f-f076-4115-bce7-98c3e3c635e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005a162e-d7f4-4467-ada4-9637511aa49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2be7109-f730-410b-b5b0-61a5abd067ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9eb6e4-999f-4df2-ac55-95b2d27b705f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f99e075-f640-427d-a412-f419c191065f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd779da5-cf7e-4e9e-a855-c88856f817ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975a18b8-0b72-4567-bfc5-591d029b3800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10c7b0e-da36-4f93-b15e-7383bc7599c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dae3fdd-fa39-4a17-b18a-cf83b7bee01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d30ec9-0cf6-4e92-b167-9d30fbdf64f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e7ad31-7aa6-4b57-957e-e0443676c798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd3ddf0-8dfd-4785-ae18-bde247999836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4ba01f-3395-46ef-891e-cca054e0801d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682551d5-c88d-43e0-b09f-43bffff131cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b43e39c-c47e-4798-b18f-ad1e918d8e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97747140-4ee5-4b2a-a674-e9e6ef3920d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5335148f-5f02-46e9-a698-ef2936eba042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d707bc-ee2e-476b-87e8-d542a65f0108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e24f45-464d-4af4-a165-256e39a81aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7fc058-7433-4293-b66b-edbd6ab4e1bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf2ad15-ec7f-44da-b962-1fb8d7058bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a95edbf-e64c-434e-9ec6-15c9dfe61332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df921db-4028-46b6-a900-445622f01ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820e1dc7-3e80-42bb-a82f-adfaffe458c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c20d5c-5ce8-473b-9732-54045271fa01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5c8293-9ff7-4a9b-8b40-7bb39529bc06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7aef23-6c33-40e2-994c-32fd709f6922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503917c0-b1be-430b-855c-e9ae80ebb36b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493b3690-c063-4468-b359-abe14410160f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04080d45-518c-4962-98b4-28f96e90073a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759c3884-1798-4f1c-a1d6-a43f02e05f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e09fca-2f17-4700-b5f6-f23d519562b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672acb10-24cd-4382-ac9a-832be5005522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec666a21-ee19-4fe7-a303-a0745cd9e1b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23bfd8b0-d882-47d6-bc62-c4184c7b5a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3349c703-1e2a-4c2a-a0df-95d71e7553b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8b6837-8276-4218-9a5b-058528c3e897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce5d598-f30e-4aca-97dc-2afc5a573b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b2bfc5-e918-43f5-bbe8-7252da3473ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ade4014-09cf-4a65-99ca-627c29163b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ad1500-d607-476a-a9e1-57f453b93848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2a3769-4048-4444-9b46-da82f91f50b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2886fe1-4907-431a-90da-1d6495a6be40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228ef724-7ab5-43e4-a68a-dd47be678b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025345e8-4f85-4075-965d-b8eb85d45ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a705522-b26c-4c9a-852c-daf035ac3bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24c0814-eb51-47d9-961b-4ea909d1f77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1b9fdb-7ca5-4529-9324-c324f51f4036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf76312f-41ea-4f36-8e58-566af3f67a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd94c806-a9e9-4543-8673-4b68802564d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb5ff22-7200-4779-a4bb-1816046aef6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84137847-b74f-4bd6-be7a-b1f51c00b1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b6aef6-e6a6-40b7-a734-81674bc1db79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19b4438-f855-48ab-8dc6-5a773c757e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908b4767-e22f-4138-b908-6488833bd76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8754f038-58e4-46f1-98d1-8112abe5b21e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a00a05-b9aa-4e65-9b40-0468ea6463ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbecfa16-b20b-4223-8908-5009ddc900e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99950b6-8557-4bfa-ac87-5d57b37ab989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2d32a5-6c9f-4c25-8659-bebe4bafc425", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e34fa67-f494-4967-963b-d3e162fe2eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a8c78d-304d-4c32-a43a-662b34bdce3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a80e77e-1d79-4ff8-ade7-df297a162dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf61675-a3fa-42a0-b45c-216af52501bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e313a3-e436-4d51-86d3-227bf4c8bfc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9787154-f9e3-4d77-8e63-ce3b8b35a1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a0e4db-c0cd-4f72-83e4-bdd98f1a6f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b1338c-1b67-43a2-8c60-513dd2f140bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e7bdf9-e58b-45aa-a3ea-e17d5e7958f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b61d278-d09a-4095-856b-27b6a7c16783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263b07bc-dcdf-4c1c-a86b-d4f4aaf84ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeecb358-e023-458e-b85b-5f2d5a49973d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451b1b5e-1f95-48c6-a87c-b01b762a5a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97824a40-4966-45f7-b8e4-51d2b9acdeb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed81acb-265e-464c-911e-5446d4220ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e61e403-88e5-4cfc-9a08-e3888d0717d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbb32f8-e62e-4c05-b495-3fbde1510131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d903f00-faa2-4710-9f1b-04e30b878ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96b0238-2304-4d00-8e8a-9e8d60492cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab3c781-87db-4c0d-acec-45a44a578004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8518e0-0e64-4e56-866d-477ca294d1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0618144c-09a9-49ee-a5fb-374b06292e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238bf92e-4a09-4f13-adec-17acbd7c5157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ae2d6d-d61d-4de7-9f2e-81cc89491e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42f7589-2821-48b2-9970-a6d114b8ced2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265c88a9-3008-4175-9a82-6dd5869604be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490b97ec-b58f-458e-877b-faa318ce812f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57cf177-f6e5-425d-8eab-526219af2a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a1704e-01eb-443b-bcba-15cd1e65231f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0123f50-6274-4fab-9d95-f2b4f22fb9df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2adb22d-f596-4ee2-b3d6-f451a6bbfb81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f12758-45fa-47bf-8592-c2af85bc6c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ecdf566-af02-4b5f-90b5-91e6906ee68d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b50c834-e383-4d0b-825f-ab1eb1efd4ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc915a5-2706-47fb-b3e9-6746fce90623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb32270-0460-4f46-9d42-26f005234028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e154d45-1540-439b-8c60-cef153bb9b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea774ce9-1644-4a47-b166-c5d6ed846c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c348db47-c3ab-44c3-83c3-f754a0e3deae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef25dfeb-e0fc-45b4-b9a0-cfce1d27ce0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfd7729-53de-44c8-ad04-73cbb714767e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f4ec57d-7da0-4364-acc0-614e570c8355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9def9cad-6fec-4d27-83e1-6165e5a9455e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db7a3c2-ebe6-4721-90c5-18ccf1a41bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f84437e-9cb8-49fa-b0fe-9b348f1cbca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f29e1b-1930-43d5-9c21-ee8a53205821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c47152c-0f39-4287-9c56-e8b8486e47c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a35536d-bef4-4f4c-8726-706f3b6d550e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1c8d9d-5a38-453e-b04d-f0c9dcc8361c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920ba4a2-da8e-47f6-acae-098fd5cddcbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7137f8d-31db-4e0c-a9f2-e742098f14d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a023885-ae14-4b99-8758-aae92b56448d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8477b3f9-8b62-44a1-8f67-b566f7a8083f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70cc857-a83c-4e4e-bc49-667c78a4cfe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29fb7cbb-e1d3-415b-a3f0-62224d2c8ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3c2a6b-082a-414e-9bd5-8f2ca11ca73f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d9cfb9-8c12-4b32-9e11-5052769b6b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9faf139c-0dcd-4964-a390-83bb177a42f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11e70f6-89dd-4a1c-aeea-0b8537e7e696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b063cbd-9377-4c3d-8109-3687ae293acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d3d2c7-5217-4527-99f4-0e5562e24b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a086ac1-6973-41dd-b759-624e376ff4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60967976-e0b6-4015-84c3-1550a9513110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a61ab75-2d38-41d8-9ece-ba1d5ccd0b39", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc43233-d526-48f4-be92-c552c80c15bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d13dd1c-d1b2-43b6-8644-99e7e21aedf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30a2b56-ae47-42a5-bd1f-855d68712f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28fbc88-497a-4617-b7e8-46c072ddc296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94878d37-5a84-4214-b961-de1ac4749750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8463b5-c8f1-4e28-8261-252d91e9fee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5c7141-f101-4445-b55d-f8e17574f98e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce335a9f-d146-4bc1-bb4b-d4096c49fe81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46e8f14-17b8-4beb-9c27-7d27ff9b5e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588b18d7-7839-4d8c-b1cf-8152afefaf35", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a51fdd-9163-4624-bd7e-716f96de34f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb5d8d7-412d-4ca8-8b13-1e9a609381a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f62873-9148-4de9-8019-9b14127440d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c3c475-6087-4505-9d21-862354524c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa0645f1-cc96-4d45-8d02-f9ba29be8ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f50881-284c-4c5f-b973-884819e70790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f34cc84-e171-4695-97e4-baeb04908303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdd28c9-e446-4dca-a30a-53136a3ca87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0676c7ee-43f9-4ba5-9747-4775deadaf96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66bb8614-d197-4623-969b-1db99791016d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9d69b9-0ff4-4033-9f9e-d884c36b6565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0ef1a1-afb9-48df-8290-cd6486792a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5834d973-0169-4898-a9ae-209a11633249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713f56b5-76a9-4c20-a5f0-a8257d6760ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e601c34f-84f9-4c39-8175-b9bdd44e10bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b595c5-c2b6-4498-8d15-efa3a8d4baf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80be6fdf-ab25-461e-bba6-92b43dd1e2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cce4568-95e3-4468-8b5b-cd55aebfff71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a452be-0d5c-4321-b0d7-b3c103c41065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ecb7a86-c28c-4259-8200-c8e8d5e108bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab23aad-0d03-449e-81da-f40ae9ecdbc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff67018c-80c4-4e85-bb81-ad9fa912fb31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1bf133-bf43-4e4c-8947-06f225c81c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68cb30c-9e48-4b3e-b961-01d9a7493616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de061ca0-9c0a-4958-99aa-d2db60e61785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc83b454-9485-43b5-94b5-dbdac42b6aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51966c10-78ae-466f-9f4c-9f8dfabac559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ce3d7e-b4de-4f6c-ac77-86fe913cf135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c6f77c-8a6b-4663-b44b-95141c86fd9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244cc7c6-1e3d-42fb-bfb6-d6ef6b8a2a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f28005d-3cc7-4bb6-99a4-c662d2421c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6b3565-e9d7-485c-ad4d-85a20e895481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1b6e86-f2ef-43d2-bf8f-f8089c781028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70852d04-fad5-4672-82f2-1d6e87359fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ac8062-c8d8-4644-9dd6-d4366b90cbb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6729a69-fdac-4e35-a0f9-715a6dc5f9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bceff54b-ed1a-45ed-8ddd-4202352b16f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cede85d0-01a2-4e67-8544-b30b4d8018d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed62f27e-d94e-4d9f-9b96-9ae6e717f376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35712173-bcef-4c3b-add8-9c8028265ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a297d745-a189-40e3-b7cd-90903fd5239f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c592a3d-144d-45bc-aa1c-b1bb8124cf8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcdac82a-bc4a-4485-a653-cd4ae1426c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690f239e-4d88-4775-b568-d9cff2751c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708ad22e-b074-4bf8-9795-23b087b744dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca76918e-7b4a-4cd8-91a7-0daf0c849bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f566627-a510-401c-be13-c341a1734298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd2d245-0ce0-4c44-b404-3af3dfa04882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995ce1df-6142-4c5a-829c-679a0c0b20de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113a9111-891e-4716-9abc-99ffc9592cee", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f93e8b-0e85-4e6d-9c47-c66e5b90fd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33abdcde-cf32-42a4-9efe-5f8c058b8444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa62333-c00e-457d-8928-d026cb39a854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf97b69-b5a4-4a73-83e4-20b24089212b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf620031-4796-447b-ab09-7ec5bd95f8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.112']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e837188-159d-492b-89f7-b9ff37c515f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71449ba7-adf0-4e94-8f90-31920fe5a108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f181803f-de1f-4645-833e-8606579af5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b2265b-4116-4344-a2ee-7b99b74dbaa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7cd8e6-2c25-4121-bd75-d4b7d1894f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5642959-113b-4475-a69d-243fac1d8570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bfc55d-2cbc-4bd0-9f52-6e08cee55bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82d41a2-1c30-4f70-82dc-9981468629cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d44f2e-5923-4c90-b436-0ef44b1369b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712be909-1dc4-4380-b606-bf1eb7e672a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8934fa7c-58a6-41f2-9948-915c22ae4474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ec2c4a-6dba-4ecb-8100-143ad7f58d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10be5422-500a-40f4-8376-4ab60554441b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4355996-82a7-4089-97da-98cd7b62a36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916b5442-9ad8-4494-8802-6253cb7dc649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa3c3fa-157e-4a9d-8769-8b4369b9a0a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556b0467-38e3-446a-9049-eb9d9e09ac74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64812e3-6b6a-4f74-b5ec-33becb6d83c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b07c814-ce95-4807-b3a3-dbbc9c617b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9c7ed9-7787-4b6c-afc1-289316184854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c1a970-52e2-45e5-8b67-f2368baaa138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758a9a4f-1c2d-412e-830f-fa1c907cceff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58903f34-72c6-4e68-899a-ef3e5d2ff31d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f96001-15b8-4003-b4b8-2c223e6358ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e231fe-22ef-493e-9f64-175060bcb3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7686bf0b-7b24-49c3-83ff-d3e1e5cdcab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d2a77d-5832-46e8-843b-470af4f1c5fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd4db4b-c1ca-41ae-82bc-8b965b09551f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f55bdd6-b1e2-41ef-afc3-47402b70e816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5948bf51-dbc0-4e5e-98c3-7d5bb6897317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a0795d-33d1-4a46-aba3-f65c6e668bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b554762-0537-4d2e-8ed5-d2a4c2d23354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6531ab15-0e48-4310-8b5d-794af238d079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e77458-55a8-4506-8d21-999101ca67f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531fd3be-69d2-430f-9a36-6c6e1554ac7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b7666d-0903-4ead-b13a-189266dc8045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60de02cf-eaf7-4ef4-bc50-847c8c163ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e53ce0-d6ca-4d69-aaa4-1e5c4aa220eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38c08d5-cd05-45ad-ad79-9819c40e2130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45b3f34-7a66-4011-8202-3df16a2592ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c20bc9-6188-47a1-82d9-f34b2c1400c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fe1aa9-1d1c-47da-b5b3-a14d6aeec8c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27e5bdb-ef7e-4516-a445-437a50ab329a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd1abe7-d6b6-470f-a72d-67deb1eb639c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.55']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c96d3d3-0641-4bd6-9f3a-74b890620516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e200e43b-33a6-4ff9-bbf3-e79f83ab8c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8be6865-55eb-4760-948c-ca7fd0b70de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb8c111-c08c-4cc4-97d2-97520b426483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.63']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fe4f9b-b6a4-4f52-9d4e-414610a00884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772c6861-0c6a-4cfe-99bf-74557a47366e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd576be8-b08e-4f46-b719-b9e531c34916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf0a39c-89e8-4b99-ae7b-a455652a5710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5748f2-d7c1-449a-92ac-ce4768605c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46edb73-18b0-41e1-ab3c-8eabde09378a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be761e23-893e-4658-bdd8-86f3edd1b531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d4902a-3947-4122-b30b-693f43b77a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0ea08d-64a2-4fed-a664-72fa6cf5a274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0aa8a68-a377-4c0a-ab22-1e69a4b3ba74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f4630a-6b76-4283-af62-e7119d0ab0c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2417570-a5f9-4f13-ba20-9561af0d75ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6292c189-a137-4d02-a7dd-9234190e6e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ded202-47bc-4c98-8be3-1979d85a0c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8791a07a-ae69-4f6f-9363-f58d2da2ba9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67170ae8-24d0-47b6-9a61-e8d293bbe0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563860f8-fdea-4576-af93-389e419556c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b063f1f5-6bd9-4a44-b9bf-0287994383a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad01283d-f44b-4622-9078-236d22e01e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be9377f-722b-459f-a297-06ff534ea33e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13520518-3cc5-4913-8779-1f90cf2f1925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2ad851-99df-40d3-af81-a294bf368a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80108951-d399-43eb-a63d-ff65037bc0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79561ad6-3e45-4dbd-b874-ec5ffd6bbf93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4161b5ef-fe30-4267-9c67-a91b866f5c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d743e1f3-acb3-4ff3-bfeb-775ef898551d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a965f2-6c4b-40b7-afd0-19006c0ec6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260e4b8e-2304-4d10-96a8-fcb402b8d8cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8f74cf-e0b8-4bd8-8abe-4deeeb60183f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408d9364-71ea-4e0f-90d7-9c8d70633a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac0604a-b985-4c2d-85b4-226aba50d18a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb7d787-a98d-44c2-95dd-554257ec2af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60961034-116e-4919-a412-8ad5bb59e58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2397c30b-2420-4a0a-b2c7-d37be9e33480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4532ddd-1c10-4d26-80cc-a127353be676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9b73ac-0099-44db-bbf5-49337054e213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19c3ffa-1f09-4a86-9a40-55e354e682ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbc8a7d-9794-469e-ba65-531205ca0e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64feb66f-0c7e-43bc-b178-5bf093fc0087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333d9b6c-430e-440c-bfa7-0ed88c6a571f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87c5304-1d40-4b5d-bb94-55c204b4f78a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dcff7d3-62e7-48fc-bacc-3ea0107b1610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed5bdbc-d723-4aa1-8aa7-089a6792047b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850cff8e-3c2e-48f4-895c-ed3a7c30fb98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf69c9c-56f9-47f5-9f72-573e88c48d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.150.198.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb29a372-179b-49b0-8bd0-4df2f5ede65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471c77ac-9f34-40d5-87ba-5c28774e0b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820faa96-cc46-4ce7-bc68-1570b447e77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.10.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85157643-c351-4c0f-86a7-d6adf158cdd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.34.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463afc57-32aa-4a61-a01e-86e7d523feed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.34.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd90b2a-1aff-4c22-994c-7955e58845b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.35.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec3a5ea5-2559-40c0-b9a7-d190b2b78234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b74118-1a2a-40a1-9ea8-443c158c193e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d499ded3-382d-4678-9213-86f44ff0247f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b96daf-f479-46e6-892b-ed186feeb15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf8234c-b3c8-4a74-b757-e4f866bf105f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cdec20c-38f5-4518-8edb-95e0a658ad88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c90c959-7221-4a60-aa2b-fe5835af6fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d974b7c2-3c3b-43a3-98f5-02fcd5fc60c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64dd62ad-402d-4299-a917-84fb904fbe66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fe459d-f877-4207-b6d7-6a9b375c9dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e9982e-dde0-4c8e-87d6-ecfdb1205b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f702d8e8-c019-4e59-b818-7690789ced63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a52728-1bc5-4558-a08c-44232992ae48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f732164d-5a16-43a5-829e-7f2eb1379cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867a1b87-4b8a-440d-a3f2-87c361bb3a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.39.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa42c18-c402-4728-8d81-8ee44be31612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75338d15-ac70-4756-b494-20dafd264c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.43.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb0a6d1-cbe8-45f5-b9b4-9b5a67a7a3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.45.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502a2010-02e9-4744-8b48-a3d956826b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.45.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27f7130-99c8-458e-915c-c035e2ac7069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eedc324b-b417-48f4-953f-efc3f926c3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca6bff6-6b4e-4b6f-91d3-03b1f5c7906b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0a8555-a86a-4497-a8f4-8894c35c2cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.62.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8097de-fd66-4a29-9184-825e55066a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.235.104.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbf9e22-bd62-45da-9009-2dc65891ca75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986bdd64-4bca-4f83-b50a-b851829856f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7edf76-3c54-4af9-97bc-786a416f9143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2aee81-aef0-4789-9709-21209cd3ecc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bafffec-f079-46ea-bd29-7d1990f8d9e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f48e0c4-64a5-4b36-9078-000c952b527b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36f0163-4e70-4e15-b1e2-99789c7a476c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.69.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4564449c-ec77-409a-a341-f356fffca23b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.69.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5c2434-1764-49fb-9b7a-5a349d18ce85", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.150.1.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b841f9a6-eb28-4c4a-bc5a-905987083e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.129.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a8876d-cd37-4aaa-8ecf-9da1ebb2b14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.171.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60af2f5f-f6d8-4ef1-91dc-f0d5c3ddf87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.172.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c0f1a8-b427-48f5-858c-3c589ce6fa3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.185.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60cb8da4-ef1c-4628-b81a-bff8da030e5a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.189.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20300b6-267c-4b27-b2f5-5513363c9333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.83.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f04305-c05e-4431-ac5f-3765b203911b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.85.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6f5b56-fb7d-4f7b-9fb5-25f1f1d19a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.85.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fda4234-98d5-421f-90d6-6b40ac4d360c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.87.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11d654a-6165-44e1-af30-a3d3e6f9aa3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.92.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2e4dee-ce49-41b0-a9b6-c06bf4fca75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.94.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57256ec-7664-4b65-980f-ef210f876a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.95.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a751353d-118d-47b5-bcf8-1a61db3802c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.213.127.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf525fa3-f0c0-46ed-92ee-07c9d107756b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.213.127.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762f2e95-6a40-4e09-8332-626102546029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.217.228.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df6812b-27ee-4ad2-96c4-ad11a79d08c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.241.132.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e49cdfa-04be-40bd-9c0e-27c29a5b16c5", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.82.141.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947ab35b-a9c5-46a3-91d7-07b71b4c40dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.132.45.240']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a0c768-194d-465e-a6d3-0073a71d482f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.168.211.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e967d23-5baf-408b-8001-86fe1ae41371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.103.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf40af5-afdf-4f23-ac2e-da545fc9592c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.105.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3037dd93-b3ed-4fd0-92da-904af8e02113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.109.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48762c17-53f6-460c-8193-7c9e9cc17aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.123.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98c1e0b-68ad-42f5-b8bc-8e2a5ea7e452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.127.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d79956c-6b73-47e1-8432-3ee5091bfac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.128.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd619422-eb65-42c5-8923-9613c4b3ee1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.141.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02e4510-7b8c-462d-88f2-d29298d24b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.141.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eadbc235-0e42-4323-9c1c-dff6584ee48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.169.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ffa1bc-0460-4e0d-bc1b-68eb6a482d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.17.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af696cdc-db04-4af4-bcc7-5bfeb4c5df9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.19.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9428c1dd-a507-4783-ab2f-a15a200fd076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.193.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a984029-b255-4e86-b98b-61434484b6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.193.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4313bc6-c75a-4a06-89b2-7c3f57ac123d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.200.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfe0083-ed54-498b-8e64-c184872e6ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3d4bea-14e2-4e1d-b038-69674a487b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.234.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee93bd4-2e27-44cc-9577-9c6823fd75d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.27.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c880615-55ca-455b-83da-b725308e97d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9d391d-ad8d-406a-8cf1-14b9808af51f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b6e03e-e243-4a35-90bf-0c9c8657b342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.175.33.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce6503e-8243-48eb-8ca1-3da67679e652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.175.92.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6cb85e5-cdc2-4ea5-9389-676b4a957ab6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.7.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d81e1e-40ef-4bd3-862c-2086ecd52cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.55.55.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9190863-bf60-4bc7-9d40-cc6a16d6bbe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.63.64.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af3c1aa3-864e-4700-98a9-31d5e0450b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.73.187.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f86df05-2bb9-472d-b006-0d22178960fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.87.221.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd6bd77-ae44-4844-aa44-b8f8ba2d1d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.93.252.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6ddc2b-d4a0-4d02-aaec-f07e8b90e7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.131.42.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795a71ea-5a19-4c84-aec9-64bf2b06f625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.178.110.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6e2b6b-a369-4b66-b56f-56f066acdab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bcb07a-b712-4d23-b216-4a8498b3e22c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99eeba7-77d7-49a0-bc1f-b49813564ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be159408-2a81-4394-81d2-bcc2f363bbe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb83e31-0fb0-4962-b874-1669f63e7b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead633a1-dd33-4b63-b092-c1432b89bedc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2677274f-9305-440a-abe5-8114bdf1fa80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9fed5bc-f62d-453c-9af3-7a907149b489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5fbfdc-105b-4f45-9886-c9d62a4483a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4722c01-983f-4460-a311-98542ba64f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9dd9b8e-7b57-4a92-a6bb-7949dbf159bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.165.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789cbde1-4ffb-46a7-b310-0b71fcc8203f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b71820-833a-4f88-b931-3abaac19b943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d182bec5-2f29-4651-aa66-75a1b7de84fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582bf543-8245-454a-ab82-a3f44b272427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6122cd2-3cee-49da-a732-ce5056525742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6745cd7f-4624-4292-9807-f965c315403d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a00d8ab-8c7c-4ecc-a6fe-a5853a77b5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbce90f1-7b8b-4808-9de5-ab3cc1e66146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923be000-7c56-4a00-842b-297300a00f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.178.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f336648b-d635-42b6-9dd7-69556bb96172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.186.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c50d728-43d2-4bbc-bbb5-32dfe7bafd8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.224.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca82548-fc56-40dc-b8b7-9b587c32c50e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.39.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97fa9cf9-efe4-493a-9311-e9d8e129dbca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.44.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--704a57d0-9125-471f-bbfb-6f63d4de3cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.51.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b437ab-3c34-4aa8-a73a-6a5e56cd3520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.203.148.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befe3e35-bffe-4e34-970b-f99d99e35094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.19.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b132aa94-c687-4a74-be66-f60b1aab9833", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.26.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d892df-e7fb-4f2b-9916-af88338c4ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.26.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631a7ead-39cf-4440-be7e-0a7e9c449e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.178.13.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c38c94-da87-4a36-95bc-9833f9bcff5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.193.48.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05116750-247c-48f8-9b32-912fe826094b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.240.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b352dc7-7a53-4970-8798-0d52a41bbf93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d518c38f-0fdf-48ae-ac63-47fe9ace5649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e983ff22-8c21-4a88-9b65-052a60e9fef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.107.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d8522c-62f6-4b90-ac75-9b68755b92db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.121.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d4e726-24a3-4759-b964-aded39b7df84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.121.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b025ea93-6811-44d9-8241-f73191b3d6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.162.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2409cdb-8b73-4781-8224-07f991c57d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.164.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0364edd-1a64-43ec-b595-7e23679e547e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.185.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18751653-f3bc-4654-8067-dd4cc74bd725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.185.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b271e8de-70f6-470c-bc11-e94c67b6183b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.188.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae3bee8-e260-4993-aea0-91e571716102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.203.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2ab124-4813-4cb0-913d-1fdbb6e91164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5128de55-0192-41ed-bae4-b7166de1b95d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9cbdf9f-092b-453d-a017-b9bf6934ffab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54530a5c-0779-42f0-be94-e1e1d5dfa6e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d435ceb-cd05-4eca-a536-31ba025edb2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.129.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc32ea44-717c-4282-8984-5be52a9cb8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f21b5177-ae4c-43e0-9f65-5d9cb02824db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.184.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120dbeb5-629c-4631-8c2c-427b54970475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5baed2ab-cd41-4af4-a0d8-0efcb3654fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.105.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9a3fd3-43ed-4e6d-9e81-e86949959923", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.175.172']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816dc659-9517-4d85-b991-4998ec67001c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.241.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b2d550-c946-47e9-9233-43a9312c82cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf53617-606b-4232-b822-19f744674521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16b36a6-6953-4198-ab77-ee1e442d097c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a35e13-6b8d-4e85-a2f9-bde6c54ccbb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.18']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9111116d-66e5-49c8-a590-4c40f7c959f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57947c68-b7e8-47a9-ac6e-e718895c5acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94494c15-3f6f-4640-923a-e597967af438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3487573-7c91-42c2-9e33-884e388f7520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c732d7-033f-4a35-ab9b-2df950686454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a371c75f-1b4a-4e64-9f2d-af72afc08be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d76c9e0-5b4b-4ad0-b4c5-c764a53c8c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae8f329-8129-4d28-87c6-4abeced419a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0e4982-85a8-43e2-a8d0-23ed0c89369e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.41']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4831c89-a289-48ae-aa1f-e8b4f7f60d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde2d4d1-aa59-4196-921b-1589908ca466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d71ce9f-ce06-48c6-b745-cd8bece5754a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2ddd13-8c2e-424c-941b-e558d62b0afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c5e616-5ebc-4c5d-af94-933abdf5204c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c2f6d0-18fd-4f48-9113-43263e16af70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.48']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3aa7860-d075-4ed3-a2fb-dc8b660d2ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9272f1-9ce0-4e74-9967-af2a3ebea8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ad68dc-c168-4b77-be20-833844fdd6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3be6239-4818-47c6-8ac2-f4d3455d140f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793a3545-02b0-4a23-a159-428e636323bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b57235-71de-4c7d-a1e3-4f8998dc3286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa5b59b-7a63-4d3f-a2a5-fd605f63ede3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90433ffa-2f4b-46a0-84d7-371707e96357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.91.120.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed58a3d-ffa2-475a-a2e6-bc016504af09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.119.129.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876e6f91-9514-4fa6-81e2-feec0d07b7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.119.142.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80811dff-251f-436f-85fd-12e41d22bf5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.137.82.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fda8a1-dede-4413-b468-43862151377d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.187.110.192']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b08ee85-30fd-4371-ae2b-eedb17ebbb3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.228.102.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a808b8f3-c360-4c26-8110-361b74db8aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.101.72.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12548c7-7582-402a-9221-ef833e6bc718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.124.35.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98fb4e83-607c-4a1c-b312-f6bacb9d765f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.222.35.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e863a81-4031-465c-851a-e8e1cfd14e5c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.237.232.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986af649-cf77-47ef-b035-9a65adc9456d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.74.204.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738b919b-3d25-4765-bb36-feff8e88beab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d276f8ba-6766-42eb-b6e1-a3df20b60a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d8a521-8a1c-40cc-9bfb-d1e32184ca48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a813bc2c-a51f-4dcd-a8dc-e41546daaf67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7564d4d2-58fb-4d6f-b0d9-69bad8e312ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664397c1-3469-4b39-af46-2dbe160b2c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c87be1-4b11-422e-a676-d54ca5e4b6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9afaf662-ea84-4a30-af48-16e763984a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.51.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1428daa-2382-4dd0-80ef-598556cdea8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.118.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0c93ea-b235-4428-972b-153abee44509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.66.1']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abec83c-3e49-495b-934c-65afab6688aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954994c5-90fd-4542-b701-88d165be1b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6011d49-40ea-449d-aa02-2d92a35417d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a6140e-dd99-4a28-b09d-42ca9d0e001a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.94.47.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69601f6-8cd4-43ac-b738-71402ffef47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108ebba5-2c1a-4a71-8fab-fb8b12402e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be19efa-b0ca-4715-a64d-94907681f224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3437c6-3a47-4bdb-af43-59d5c9572214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ff80d2-14b0-4e44-8614-5c15e1f6d8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ddbd210-d180-4ac6-a106-eb93ba2848de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82430ec-d205-4744-819a-c201f408bb11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ba2e13-c2e4-434a-87b4-5523c0cdfc7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b45e8f-0e96-4bab-ac70-947d0baea0bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d208d1-e40e-4865-8369-0b88a3a6d45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f094b2d-62ce-4d2d-a087-59356b848368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9b4087-061f-4ccf-b2bf-9b8e0c06f4d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889cc3e2-058e-4b49-9959-0cca92b99b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f71691-b5e7-4925-8fa5-961e6f33b9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba92f2c-3e34-46c1-b1dd-0717bb461173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7035974-4b3b-4211-8049-31b3b5ffe990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f80975-5d1c-4a2d-a172-6c10110c04fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6390f6-45e7-4257-9a44-9b92f26db842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2350bf9-da70-4fac-98fa-fc535271ef53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7c965e-45e8-4578-901f-dcd5ca2b546b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f0a4e9-062f-4589-9336-4e53805b317b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d81d522-af82-4f6d-82c3-0ff4dc8204d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.40']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06e13bf-c148-4a7b-bf42-22f1277c923d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2f98e1-edad-4637-8315-bbefbf8b2440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.173.199.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c7fab2-7139-4a49-bed1-4aa38743597f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.120.30.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364e6ead-7884-4ae7-bde1-e84b14771b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fef41bf-6e81-4b40-965f-be9e657ad1d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb52aba9-7839-458e-af93-6811f7e9ea9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d620fec-22a5-433e-a634-7646feeaadf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9a8c50-f799-4538-bd94-8f9cbad89d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0baf0b50-c799-46ea-bb9d-cafc3721d052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2021-26855. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c07d729c-50fe-49e4-a920-7a7fc393d1d4", "relationship_type": "indicates", "source_ref": "indicator--0baf0b50-c799-46ea-bb9d-cafc3721d052", "target_ref": "vulnerability--6c92b5ec-7e5b-47de-9d19-0913f30787a6", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec312d6b-cb13-4a1a-8f2e-63cb3e7e3f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71435360-70c3-4764-a6c7-90c29968c74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b218f61-6b69-4c71-89c1-f08e9a7ad1d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.102']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538287cc-7a90-4267-9b9f-8f046944c059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96513cd2-2b64-4073-9e9b-014f7896d724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647d7969-8715-4a7e-a033-062c644bfd39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00cd3d22-82d7-4faa-aba4-86229f60d17f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9609a4-5b1e-40ff-b542-9e8432b812f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb986a2-2159-4cad-b435-16e77ac3b4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c69411-ed83-4918-8139-beeafb32ba18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f0be19-9133-455d-aed2-54e1332f18fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063e10be-097a-48a7-b2d0-622c8625d0f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cacc0cf5-b130-4766-b919-ffe1368ff5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7c49c2-ed05-49bb-afc7-989e3228eb3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78f96c1-7de4-487f-935c-e4e981ea154c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5839a9-92a7-4493-8b94-9cfa8f7253f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b42158f-65bc-43b1-bd89-14b1c2fcb442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b59687-c46f-4e86-a648-6c876e5b7c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f02ff1-dbee-4001-bc82-5f36278272b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3e2ed2-41c2-4e98-9761-fe7167a9f8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.127.181.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674e1cfb-9535-4ff8-bb80-43d559eb5fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.76.58.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af52834-0ad9-480f-8e4e-3585c83331f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.136.36.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4033d6ea-153d-4421-b96b-1c6e00f213f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.186.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be623236-8a23-43ff-8182-dfe34298cf93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.81.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ccdc0b-2155-402b-9639-8a03aae1af39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.152.103.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce028a8-af47-4ac6-a8d8-32675e32621e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.152.209.0']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0daf1c83-1c1c-437f-9eb1-58ccfc5f915d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.155.44.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f89e4f3-91e2-4b68-abaa-9ba6b4813bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.208.30.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9a58a4-73d0-4b69-9d81-deeb03e047a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.208.9.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7e3c26-87ae-4753-a820-220be731543c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.100.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d05d44b-7629-4d4e-8c55-0efff74e5009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76408934-2a2e-41fe-8246-dcf1bf2f69cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81607a25-5dce-4938-86a0-c58240637c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.102.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e99506-4632-480b-878e-0be4c88d390e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.107.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a7be0d-adf8-47df-b454-93303075c944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.108.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c40d8bc-ea50-4163-b893-6f8e7a41f33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.111.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94abf3d-911b-4c87-b578-52c0c4bfa3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.112.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4737fade-7650-4703-ab10-1c910b83270c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.197.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce95e250-b657-4b15-adad-98659443c6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.200.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042acc56-637c-45c8-9d4b-4cbe1e966eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.201.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886c1701-8346-4c5d-8af7-9126c0d9fe75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.208.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f070ce04-db17-4481-b3a3-12ba1633d38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.208.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3dc3824-7173-4f1c-b853-36f1a0b910d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.231.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790e189f-9b82-450e-a3da-4b93f6c5da28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.236.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57d2296-993b-4c73-9fb6-69545b3b2ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.237.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426c6635-263c-4db3-b636-84630f234f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.238.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc72fd9-0f25-4c70-bb74-9ed1d46aa2b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.70.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c170ab-6812-4a99-a762-420671e9af66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.82.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8994ad53-cb40-40b4-9c82-cc4ae918bc65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.88.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495d4f2b-d6a5-4b55-a3e5-6078ee82725e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.89.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5cbd23a-f851-4e3f-a5b6-bb649ad16805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.90.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba43a0d-5fca-4200-89e5-0a06582ffbd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.96.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15177d10-1e4d-4718-b4ee-8b090775f066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ed309e-f70c-49af-86c6-a7165b7827e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efcbdab-fa0e-49ca-af64-b5e4ec1dd91c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb55875-fea6-4474-a129-100c6dcca7c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.138.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40b8cf8-da0f-4761-ac98-c3563d7ca0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.142.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9657a9c-fd5d-4129-a3f4-c8f8fa6e229e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.145.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b649dc2-6a34-48b6-a33e-2766cd8bd481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.149.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02f92d8-14ef-40e0-ab92-048c0daf40cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.149.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7eb9bd3-371f-40ce-b2f6-6cab2562e0eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.157.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33cc57cc-0306-40cb-968d-c0565542ad0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.159.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28046f3-375a-44cb-9ef1-e0383c41f007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.162.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28be41e-ee07-4b93-affd-37b2f0f17e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.162.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08055f4b-909d-4cb6-9b6a-0d170cf5fc62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.165.58']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e91d1f-3acd-4528-b34b-c8b8ff01d5de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.169.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038237d4-041e-44a1-9e57-5703fb09dd7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.17.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025bfd6b-ff76-4a8c-85b4-9bcf8414ad34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.172.246']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8200317-af66-4030-b4e5-d8c72a878b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.173.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30b5a0c-e7ef-468b-9a1b-4fe4c48644e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.19.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270e9197-0f12-4895-8ba4-ad9dbe8e2dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.2.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4608f9e4-03e1-4553-83f8-e2689f942287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.26.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c15ee1-d0a4-4f51-aab4-6bae202232b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.30.254']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6dc193-f676-476a-90b1-fb1a0847586c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.30.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632e63be-2baf-4c59-b91e-7de8d7d327fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.31.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a01acc-a385-4af8-b2b9-777cabdb1820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.33.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28034e98-739c-4e43-a17a-7f5aa30b2f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.33.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5085a440-d58b-4464-8dff-f261151ec01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.33.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc885c89-ff4b-49fe-8c56-ab63f7c87b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.35.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c4dd38-5679-460a-bc9b-17c2aaa64bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.36.238']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac740ad8-ce63-42fa-b1dd-b453d7acf334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.37.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745a3500-ddab-4712-b600-e8238c73e69e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b95b8e-03f1-49d6-a930-bfe86bb3a69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9ea3c6-8356-42d0-af1e-31e96541fa5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.41.180']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a942b591-5f9a-47ee-97ad-72e0f69b0ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.41.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175fbbfa-b7fb-48fa-9e5b-dce9eadb3361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02df8556-1308-4f87-beb7-5c9f4f705a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.43.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef323cbc-2999-4ccf-a582-124a565aeeff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07495090-eb51-48c1-a772-7cb304a83b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8ccf49-d144-41dc-886b-8c2b910ae8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.1']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e005df7-dd58-40db-8767-40f7a685301d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214941b7-f382-4071-b22f-936230762f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c55fb3-e5de-4840-9f16-38fa4774fbc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04283f1c-85a0-40ee-b1b5-78f7abb69eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138ee504-da49-49ff-b960-c699cbec5497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1049e631-ca45-4d75-9aaa-b9b925dabc7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.7.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412e7658-0081-42fa-9888-5dc224dac1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.8.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0baf2395-13ef-4921-b043-16f8b3eabdf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3157b26-2329-4ad7-bdf6-3c79dc220aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc03ec3-cc77-4469-986b-20d5ca7ccce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.1.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8cfaa7-01cc-4522-b3b3-89d3d2cc076e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.1.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38fa5fa-36e0-41b6-8839-c18e10763a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d80bc2-312d-42c5-be8b-cbd11c6e41ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee97f30-e3ca-41b2-b885-191b31cc8042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00ce50d-b89e-443e-a4cc-654689621aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19322588-1cc0-414f-a0d9-c70758560622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33f1cf4-99e5-4d4c-aa25-974c0c4c0f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef597fb9-909e-4465-af38-768061a63a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ea4d46-a38c-4306-b8f6-123959c01b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9210c6-472a-45f7-8012-434f2619c1ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa0d3b4-f5bc-4082-a24d-ff6d94365638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d586dbe1-63d7-4faa-b549-3e0ab8798c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b58507-c509-4165-824c-9671ce23ab80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e075d70f-2555-4785-a4c4-e3de6f7933cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdb2cd7-460f-4c9d-844e-cdc1ea50d21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca90af72-8e4d-49ee-acc6-9800198ed5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90da00cd-ef49-4665-acaa-98bca1366f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4457b93a-0742-478e-bde0-01e9a1598e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.2']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6925cd79-263b-488d-bf52-b8f216dc5904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37dbc516-a4c1-48d1-afe4-c0b3c4e328dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8b8abf-468f-479c-a8f8-4627fbd926d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df764ce-cb75-4cc7-83f3-399beb53c7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59fb7a64-6127-4fcc-a0dc-c521891aaf76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0cf063-c2de-4510-bcb3-aa58df7a27cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b0ff61-3b38-4b30-b49a-c2c8a49c12e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.62']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a18b77-881c-489c-81b4-c2d58bce4d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.84']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fa0ff4-579b-4a99-9d1f-6721987dae1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9e5cf3-4db7-4554-aaf4-440cadb33c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7eb9276-8c06-4e68-b45c-0e2cb3a6416c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9865b602-61b7-4f76-b868-cb10fa938ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45b9a39-643b-4b8d-a8f2-d4acf5af716f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91b0c4a-6583-42ac-9c69-5176b0581e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5db27f6-7560-471e-891a-897af7431346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf8ace1-fddc-4ea7-8b4c-049237fdcf20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e88eb8-b5fd-4831-8fe7-4c03dc792358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5629ba3-6702-4291-8bfb-e28d15cfe6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22fb0a3-49d7-446e-858f-b3f5e22989ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17dee434-98a8-4b59-9209-f6cf6d3f1961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c863d8ce-725f-4963-b002-b4550b864632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a014e8-8bfc-4acf-848b-d206839da3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.60']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d999d6-1667-4855-8e44-f86509f27288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c6742b-ca8e-4b4f-91d8-3a0443d9f413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67536448-08e9-4b2b-a587-51d1cf0ec273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1941c3b4-a8a3-4ca6-96b7-2e4078520722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0c5b59-81e0-4189-aa0a-1194d8647cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f863b9fd-724d-4aa7-847c-8a3cbf48fef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fcce25b-27b4-4af6-8016-342f50656d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8faa8824-89d7-46b7-b132-bfccc0fcd937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81dd4df-3650-4c11-b9ac-737129680eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2836dd0b-979d-4dee-abb5-2b8ae382011a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27de3bd-3594-45e4-b52b-5905a9e4c130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9917244-87b2-4207-8c12-d9246d841360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d362489a-e6e9-4b80-bb36-33434bf95dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea238278-3085-4fc5-8933-b56f6a99008b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717b7202-d396-4f69-a06f-8185952398e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122b230d-7c0a-473b-8b64-3db46b0bd112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4c2884-2d40-479a-b678-e3ae77a1b444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86f3850-4dde-4b72-a7a6-53e4262e9551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30314b4-b488-4743-a091-ae442b685796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9806cc-77f5-4878-8df6-ba474626c400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70127b7f-5c4b-4719-bc1f-9f85c8e7947e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b443a44d-4f6f-43b0-bd7f-a3450d9b6228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13458061-f543-41c7-b4e0-8c6abf240208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b26ca0-78bc-44de-abfa-e0732503be2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d8396a-799f-435c-8112-b7fcbd343a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa795df4-332c-4706-a3e5-aa22e538db0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d701c0a6-2c2e-45ff-aac6-b6832fe1001c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133cca3a-8592-4cc7-b43b-9b7be2debd14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeff7150-1120-4931-b718-b98e69652781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50bbc0e8-410a-496b-a37c-e0235faa9102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958a16be-b7c1-4145-96dc-dd8954fe19ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66bc3dc-935d-44d7-a0e3-aee6beb33f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdd02bd-76ad-4edc-9ece-5d01f2bac8a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ffdb22-e950-4ce2-a4ee-610b5a459bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6f0b9a-4f60-4e1e-ae88-18cfa0689166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0dc3bd-2d22-4a42-96a8-e9da1fdcefb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68452009-f114-4478-ba28-f22f1e762688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d1fbe1-9d9b-4699-ab65-eb4bf1ec5ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.80.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2082e1-8d13-4530-8478-3148a84ffebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.87.103']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2210c5-9055-4705-af2e-25cb2a3989c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99bd8e7b-0d85-49b8-9ee0-2a0e7800c27a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.91.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb39a627-b36c-46b4-8ff3-6b27e5c93af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.217.201.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f74c5196-4489-47bb-b237-1ac62bad2f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.125.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a715aa4-45cb-4229-a740-6fd989c46dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.142.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a7db85-4c3b-4c1c-9881-9735a68c612d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.164.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70d7623-2c25-476a-9e3d-388e0c88054d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.222.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9249c8cf-4d52-498e-87f8-2b12547b11ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.136.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66b797d-71ac-4550-8ff7-876c4aa0366d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.141.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fefb4716-2faa-4946-beb2-999de3a7bc1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.128.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54e66b6-ac98-41a0-9bed-d5f4aec507e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.135.53']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb30b53-b879-42bd-b7b4-922aa282432b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.248.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf3a20f-ae70-4e5f-8aaa-d7085bbd6437", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.231.210.161']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e641fd-78dc-4c0e-89a6-891234376c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.188.223.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313ba506-c9f1-4c23-82b7-b14a7fb60f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.72.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994d2e8c-b521-42de-a670-03ae2e0a1b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce1b773-731c-459f-9a29-182e53a5c4dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5874937a-65b0-4179-a5bd-2b1f64f7a945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.84.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa0e1cf-0689-4674-b37f-9647c1f41658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.85.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11648d5-ad70-4a7f-8aad-160de716979b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.68.13.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45475658-1f39-49db-a7f4-7abdf3d8015b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.70.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953ba70f-6744-4b3e-839c-0ba366ecaad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.70.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38398e9-aa5d-4c03-9319-3bd891d985b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7263d5f1-048c-4df3-a01a-e72544d35385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe706bd6-a0b3-48f4-8c0b-5ef0cf972248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.85.84.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cc7540-e0ed-4e21-916e-66c1445becbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9faf668b-1c6b-481e-96b0-040f22a0b62a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec83c69-ca13-460f-a211-fef8bb6ac4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfbc877-3f44-4275-8f84-3fcacdb1a7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e11fe1-1e5a-4d37-a163-69ab63bc9532", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31a8d02-5145-4da7-befc-3ac463e0aeb4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.168']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4be460-e78e-4b17-9d1a-2820f0d9f226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0da9c1-ae83-43bf-9ff7-7129bb0cdb50", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0479446c-44d6-43fc-a7cf-5a6e77110aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d46ed3-b93e-422b-84bf-178f8d70b7ac", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.184']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c8446b-a6fb-42e7-9f26-d659be536b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2dbf6aa-b78d-4c2b-b1f6-804493ed940a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a8f825-526f-41d2-b2c4-bc1b16816173", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939fe54d-f9f3-4a7a-a771-08e7407cec44", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.116']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc79fed-4a34-4348-b098-508fdb5c8704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04afc878-b37a-42d7-8270-40a4413ee0c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4bbb6ba-5168-4ae8-8845-4deb122e4074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495c49d7-ae90-4e83-9358-6170ccd7903f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.16.177.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b793ae-c948-4142-8ea7-e8770134a975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.182.180.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed23f01-72cf-4094-ad9a-9c8f0d0633c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a9d0ca-6516-42fc-a073-8971b52edbcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ac79db-87e8-4c25-a556-331f6539f75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f75dec3-1f79-425c-ac74-a22c06b366b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5fc59a-a63b-4f1c-a940-404f4c0c240b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493e9f01-381b-405e-a475-85ecc40f1a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae179fa-d0ac-4ab0-bff8-7bf590a347c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.120']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ecf187-68c6-4618-83ce-7e99e13c8243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a829723-a962-457f-a2fc-af58f18b7712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed169b9b-4da7-413a-94dd-301f59b7ae32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb7130a-8a9d-4609-ac2f-fead082b46a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.126']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1de7bd9-c97d-4b27-9c73-b3cc974d850d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776d288e-d17b-4c82-9e19-7cbce2235974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36bc4a4-d05d-4ba7-8cbe-e5a4466f86d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.68']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb68527-ca89-4172-94f7-d3b1101ee50f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b8bc36-33bb-4d05-8adb-6fbf06f10850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c8fafe-50ef-4d96-a21b-a4a6caa71ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf18f3be-83cc-4ab0-a77a-4be699f2e229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6355c0e-6e7a-451d-8a31-eeebc3f37599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.76']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0781cba2-1139-48be-b0aa-9b8d3d45db8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8911415e-6f1e-47f0-9eba-ebf25ede2be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8811084a-a02c-46f2-a657-b9812b8c7d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8236e3b1-6791-4194-aed4-c483eb90042c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.82']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10277c6-35c7-4829-a6da-aee9e269f39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a14ebd0-3d9c-4a1c-891b-2619c3408131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd50c32-7d81-4d94-b5a5-c66b4f948f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0411e0f0-b1f0-4118-87ca-8bb0f0a953cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e636ecd-226c-4df4-8c40-f075c2efe392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d61b375-2a8c-4241-8a82-e68f057b139a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.92']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68653480-a2c3-47f5-a413-7fcffef3ca68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.94']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7de009-cae0-42b7-a354-31349851ed3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f0532f-b386-4a3c-8464-fd36de4a4b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7697f4aa-d22a-4e42-b277-3affeae9b646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17143f5e-a6a6-4d69-baab-86c8cfade02c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3272db24-630f-4303-a2b2-e032b6681554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4cd5f9-9190-406a-9f0a-163d5dbebe71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075ccf25-75f2-49c5-90d2-3093d9e23223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2069ab-d218-4d5b-ba06-47600959119f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b464b4c-d3bb-41a7-9e11-3bda248d0674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33ff897-577d-4d66-ab62-64948cbeb740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfe016c-bf71-479e-ad90-a39d3a10ffe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbb72cf-cc76-43b8-b59c-efeef30be0e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.222']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c78401b-15d3-4681-9605-c25aca3b0839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.224']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cff151f-b522-4e95-956c-1b6b1cd50794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9646898a-ae3b-4af5-97f7-82a9f66a9183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4af722-2458-4323-b116-217a5176d8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9b4427-d664-4014-bec6-0db36e39e61e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1e5d10-2e83-42f5-b872-645d55295927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7c0cd1-df77-46fc-a9b7-b30eb3be7cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d22955-e0ce-4d37-9188-720988c1e729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d77f016-72ca-4063-8d1b-d2701a950f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8823f0-a881-42a0-9c80-acd5622a7872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51258e2d-e556-45dc-948d-032f4a94a645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9905bea-3826-4eb0-97f8-c12a21f1fa19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.237.237.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e86e7d4-5fd1-4676-a67c-858d6343cf35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.27.243.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249f5cc8-2932-48b2-a78b-90d285a4b349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.68.179.56']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77fcb9a0-9761-4d47-8710-a6640d321406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.70.194.80']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da7a3b0-682f-4a27-8f30-5bd0f2d18f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.114.229.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dab208f-b376-4959-81df-37b25f1d27d5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.115.16.110']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34adb5e4-a798-4a8d-ad2f-d8e27c369adb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.156.116.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088b5b49-331e-4b63-8e0e-78c91753b7e6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.156.88.97']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb6e7ce-75ce-464b-afb8-c1ca48b49662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.202.141.164']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2382047f-155b-44ed-af98-0a5e8c3d13d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.64.246.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6f6748-71c0-4909-9b6d-d97737cf152a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.110.93.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb63a1a-9969-4efb-9b3b-16335eb15ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.213.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc7214f-9e51-42d0-a8cf-c3dbd93df3a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.147.243.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cdba857-eeaa-4474-b0c6-a1456cb04308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.105.228']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a886f754-625b-47c9-9f27-d35ce0545392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.106.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d7ab5b-5cdf-4025-aecd-c36e7853532c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.217.209.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b00fffc-2213-4bdd-81b1-5985b0f3ba60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.229.8.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0c9fe3-57c3-4c51-8cfb-55cc5a841931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.239.158.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3823064b-5c1c-4a00-8172-7db37c9f10f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.0.60.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c520bed0-523a-490f-8e07-a7edb62089ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.233.195.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0057c652-31eb-4fac-933a-28089ec5235c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.233.195.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c145596-9302-437a-8ac8-e8db061908f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.233.195.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0193ce-8cb9-47b2-81b6-01b5021abcfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.233.216.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885e9724-ca5d-4abc-b686-c8d341b81d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.233.216.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51307d4-9afe-473d-b529-004a683184f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.164.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f19c22-c409-4007-86ad-80bc4275cf0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.189.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf651b7-1f49-450f-a142-08b24302c69a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.37.194.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f463cb-53ab-49d5-8ea0-a7d020704fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.52.99.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb61cf8-8a3b-41f3-9aa8-3845af1b9b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.3.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfec3d6e-00d3-4777-878a-0f17b230794b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.8.158.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a7350e-f0e2-4cc7-8e30-568011663735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6f4453-3031-4768-ab03-f73958b9adc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.128']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58033815-6e07-434e-815b-0def8b76ca37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.30']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbb8702-8422-4c76-bb8c-be05c6a26fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e30caa4-12d4-497b-a1c1-e8fe28bc3b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.121.120.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71cc68ca-19d2-4063-9330-e0b621f5dd2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.15.109.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f85e0a-8651-4078-b210-b28af8408f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.198.11.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85df63b7-3b75-4f66-9c2e-250acb6be836", "name": "Malicious Host", "description": "Observed: WEB activity. CVEs: CVE-2021-31207. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31207", "external_id": "CVE-2021-31207"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70548a5b-0029-49a7-9a74-6297266d7c11", "relationship_type": "indicates", "source_ref": "indicator--85df63b7-3b75-4f66-9c2e-250acb6be836", "target_ref": "vulnerability--71b293bd-ce50-4291-ad84-3b9a0c60be19", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd122e7e-60e9-4890-b7ed-153bcff0a48e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256d42e7-150e-4b2c-b0ef-970b025b6737", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45041dbc-7168-4f16-ac35-5b5462e4dd4b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ea5ffd-7924-4406-9925-c3602d939ce5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff70654e-92e4-4c2e-b0e1-29319a2af2bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5711f0-e7fc-4f83-84c4-0c2c41c8d3b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de370c2-75ce-47e9-8ea4-f74042f5adef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6a9428-abc9-4d15-bdc1-2efa6b674dab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a78b09c-b1aa-4f3f-9742-b9e581fe948b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd00e96-72cb-4317-8942-28485d1b0d35", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11afd81f-d64b-4ed6-8cbf-7a595dfad3ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca851ecd-409d-4576-ab89-0f79536339f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbf154f-dcbb-425a-ab92-b291c0b11450", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee5002a-03d7-4a54-a27d-bc5159a13885", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22482af0-6f3c-4b86-acd5-d22d6eb9fa1e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f9dec5-84af-4297-95a3-71fb25f6596d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91b04a1-4016-4cb8-af90-3473c6d93f36", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c5ffa6-09e3-40cc-97e1-8b44b6bb7790", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081d34e7-52c2-4b27-9bde-1ce77bb57b87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b30dcf5-8cf6-4240-9925-d5161a309729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fcafd52-c4ea-4f6b-b65c-e96e6c9c78e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e895c6f-3848-47ae-8045-9e834564cdcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8314d7e9-682b-4e7e-99a6-868b956e68fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eaa96cf-7fef-4925-9ed4-19637c284602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54c8f06-09c0-43b3-a96f-647843984a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcc86e4-7d71-4aef-8825-484ef345acdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f76576f-c5cd-49ca-bc47-68502113a3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fb2a69-3e3b-43a3-8edc-34422fccfad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db3127e-d48b-4122-8cda-85a3c260b74f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.239.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f96d67b-2582-4b82-a05c-8109fcb61f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.65.70.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d97342a-3a83-4809-9a96-d5c1ff79a3dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.90.246.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f352bf3-bdae-456c-b00c-2180f30b202a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.102.2.210']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6567bf-8b9c-427f-ba88-ecb27ce98991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.176.100']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d06528-1b95-4c7b-95e7-710547fc86c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9a4395-bdba-4ef0-b469-3a12cde40723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f1e8a4-a59d-425e-854a-0343b43f01d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.25.234']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2828de-30d5-42a1-9f20-136a60e52591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d94e465-b032-4729-b435-924f35a72c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e0df0e-cf56-47b7-928f-d0056875f899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ea350d-7e24-4342-8319-4a30a6705dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04eacd11-54fd-4948-940f-e795bf33efd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8090e1-bba5-4d9a-bdb5-2d5f4d3b7c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.98.66.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff91865-c2a5-4ca4-bbb8-f81238539cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.126.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0397986-2fd2-40a9-83a1-9fc0c005736d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.69.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2fe9ae-4175-4c4c-afc0-dce89f3c2355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.79.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac7af66-4a9b-4ab2-ac1f-00a754d1ada1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc88e5c-aaee-4fe1-8ecf-1372921cfb55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.215.10.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169717e9-0eba-404e-ac92-2c000e4cc24b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.246.54.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fede5ba-b1c4-4623-a0d3-7ab84a5f8e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177a6622-9860-4c5c-9db7-b44c1037b013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170e3b54-7f8f-4d95-8d8a-5343d93ecc07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee4319b-9a7d-4ac7-975a-cf17e3ba816c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36db4c90-0a67-4f19-8403-704cc2c79f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.79.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4b9a5a-d845-4fdf-a279-93d3a6a7544c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95dde740-5584-4ca1-995e-4f22484946cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.24.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332ebdff-85ec-473a-826e-a9a86d97d16a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9aa5ab-4b10-493c-a3b2-b1eac763909b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e7a87f-785e-4e46-9224-e6fd064dd361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.124']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bdd5e8-dc92-44c4-a4ed-3673110994e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eecf214a-9fac-425e-a863-3cb4e56419e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.26.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89181ac-10af-4aa3-a136-33dff3abda28", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.216.110.104']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe774bb-b999-4663-be88-22cd0f452d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.189.24']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50c3b94-0702-4652-a270-cd5ca099ea1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.26.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b723205-7128-42fc-a3d8-021601c02e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.85.174.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc267e0-35c9-4e95-bedd-436cc8e55754", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.134.210.182']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0c943a-3081-44fb-bb34-47d80d6f612f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.145.166.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c157be47-cb1d-4dc6-a592-fd5396cf8f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.145.167.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8fbb7cb-1b85-4bdd-8a28-7c0de5fbad69", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.163.151.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696cffa4-6472-49ce-80f3-1051247ee1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698c4127-3e5a-44d6-a9b2-bf1c9530c745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4debb4e5-0334-465a-88c8-02b7d9a8e850", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.159.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b48add-1a9c-40d8-b729-bb510859179d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f79f43-8bfd-4568-9d41-16ddacc1e952", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd437e8-7f7e-4efc-ac56-815e6e7e99be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf228c74-14ed-4e3f-a74a-29bc71b0dccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e76f3c0-46ca-4900-87c7-1125246349b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ca0958-6410-4b14-af6e-1c7bde6f6704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77891302-f023-45b8-b93e-c01aabb5c167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9adaf6ed-f220-40a7-aad6-aa30195f5838", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d5be54-72f0-47ac-af80-7763d477f9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102a04e7-2276-4324-ae88-08ab92215a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c878d3b4-0fd9-491e-9486-e40c764cc0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eff1ccf-d477-49a9-826f-dcfd59af9bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.160']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f866dfc-05dd-4819-a6c1-cf107f112efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878cc8fd-e22d-480b-a871-a75caa750ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54c2853-6a19-455a-9ee3-8cde34a36343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.167']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b99303-40dd-4bec-9c13-eab6f5635bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69653409-d0a5-4a44-936e-8a6d08ac24e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79cf1f5-1c85-49db-b4aa-33ca085f671f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541b2760-4533-4c80-ac62-ae0550ff2b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e81908-7d53-47cb-a0a6-ddd6e56990fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9979aa5-1b4e-43cb-b65c-30e6d6a0613c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22cee29b-2ec0-43aa-9ebd-4386af873147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.188']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb68d63-6d14-4aa0-95bf-e0e616745f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.223.69.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb6041c-22c0-43e5-9f80-376e26f1771a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.23.107.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d84bbd-0127-41d7-93dc-3549ede215e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.200']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e85d7ac-f830-453c-9560-db6883a228a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6213d67f-2f9c-478c-b8c2-58838fd9dd51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83714cc1-824c-4cd0-9282-6c6a11baea1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f886b195-1976-475f-acb3-f4c01c18b969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.251.0.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e276fe-cc06-4d1c-b0a4-a3b119523552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.130']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aeedc8d-31d9-4527-ab82-63fe2b4eb279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.132']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bed020-3b4d-43e7-b2ce-06ba9e3d1585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6477fcc-d2ae-4046-b60d-b28e282392ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5a86ee-dd3b-47fc-9883-45b1349e5ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c887956-1f16-48b5-9d09-ac731ae5b7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bdbb7b-590d-43e4-b65f-7c72b324eb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90c47f6-87f8-4d5d-81fa-1dd3eb8852ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67020bf7-0095-4b50-b402-bff3631ffaeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d126ee4f-aaa5-45e6-9bef-0ea48e8fe0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a1b993-3890-4adb-9ca6-1c76038a799a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df361ee-bb62-4293-9d70-6730282fc369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7daaf9-9489-4286-a589-c49e7d5c1bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900d5158-d919-4789-b4a3-895a9a4b1ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672215ae-84be-4206-9f04-29d8d92d0249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ab9e0f-066b-427c-ab6a-ff0168afdf86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f75bc1-0ffe-4f31-a904-18e1980d9f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60eea323-5a6b-43a6-8c5b-735bc9bb1f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0ad1d2-00f8-498b-97c6-89efbeb9ca69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898ebdcd-7827-4d91-aa17-d1abc764a072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8ed998-1617-4d43-a176-fc9c2fa494f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.38.96.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8da107-3f0b-4110-a6f1-ac552a4919cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.80.195.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f537eddd-4a16-4771-8b72-4b7e059f078f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--171971ea-a62a-45a3-852d-b3aee30afd3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.151.171.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d088cea5-2ad4-4350-bd4f-8172759f3126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.151.171.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c58683e-80a4-4c62-9e05-8f5159a71ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.215.137.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2454f05-e19d-4cf7-8e84-04e327c389c8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.107.151.199']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e57265-5a86-42d8-8c41-c733636a45ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.116.158.156']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6cd3dcd-7bea-47e9-879b-c714a4ae5560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.95.47']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085649f7-caae-40db-8418-3778472c4a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a3709b-df01-4f90-a6a1-34c2ba02a442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f66ecd-bab1-4559-92c4-3c8572ad9c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af4b180-ed09-4310-b4f9-a5eedbadaa62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3177d903-8e78-4e8c-b57a-4cac4b8cac8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7cba83-2bab-4909-bf6f-0df5120cd854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b87eeef-356c-42a8-9fdd-34e7c316ec0e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.193.232.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6a9116-20ff-4fa5-bef5-df9a17fe35fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.101']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b31968-b2d9-4d7f-8bcd-7bb9c9964427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c76edc-e411-4517-b825-d0cbbc712755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.108']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e19b669-f05d-4196-808a-713e004e21d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120ff9bc-4ebb-46b7-978d-d265347d4b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf53012-77ba-4b01-9de2-6db483ecbdd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44b6831-59de-4605-85ae-1ba8c333347d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ee753b-0bdf-4541-800f-e1dca98dab3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567bf46a-50c1-4cc5-b096-9f24f6be1dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66651f51-b530-4358-90bb-8c7594f91d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4890e02-c890-4f41-be1f-bf80603c216a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c561db37-7fb4-415f-9aab-bccf60162081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08ab04d-b95d-490b-a3ce-e2314e0acdb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.177']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e205e6a6-7f1e-4e6f-aa17-84bc1402aad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.179']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098f9f85-2887-4000-9525-d6107a580a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744bc1c5-e0c0-4ba5-b53c-9a64d8be5993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.183']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b642cdce-a0d1-4d63-a3fa-b30775bd39f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9764843-079b-4e3f-b83e-596e35db74e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc92fe1e-89a8-42db-a4cf-57e2fb8da384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e53df99-6c25-4b37-aaa8-8c494d4751b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95236a74-639d-44cf-8f70-c7ba482d6fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ce444a-8718-488e-ae55-4b24b0c67790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386adf44-5b33-40d7-926d-ef47c75af4dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c9ade1c-ae06-4e2d-bee8-755f2a868ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef277d4-d366-4054-ba61-3782ff2b9571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bb8724-528c-499e-8351-ee8a9b789bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed666402-424e-439a-83b5-5a1d49dace63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf584c0-a20b-44e7-b4f2-3a75f55287a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62177a37-fbe1-4b76-bf75-f24ac6247bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6bce7c-ea28-47e5-b263-d49c58608a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7179d4-963b-4521-adf3-3cec4ccefa28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90925e10-ccb2-4ae4-9409-ca12575c7b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0eb237-ca02-46eb-8dba-2754f52e7cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fdb33d-a135-4cf8-b52c-03258e4ab935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e95db5-4fe5-4efb-8127-d602102c77a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc57b45-221e-4730-953f-c07564af1605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61631528-bcd7-45c3-9ac1-a7d1de435cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b19cbf-7ac7-4ec7-8703-d589208a19b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a00ba8-2f0e-4efb-b15b-5f866ccfeabf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b28afcf-49df-4bdb-9f08-b5431ba4f5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814eb194-392a-4ccd-9692-574715534685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607ea6f9-761c-44a1-9b6b-61c9be6412cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.204.77.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2323a429-a432-4498-bb7c-63387ba3b240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.205.197.52']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f18622-3723-4e0c-a9d2-a9cf58996ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.215.85.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35fe0e8a-0de8-4e2c-8866-08523b8b3568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.217.249.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f840480-8792-4709-a87b-2f97b9a617e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.217.249.28']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7b082f-5809-4d90-93f0-22ca77a349d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.217.249.35']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a954d6-c339-4f0d-a963-195a78f9c9ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.217.249.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f390fdae-0cf6-4e94-a3ec-727a4a278d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.217.249.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecfc132-0292-4418-befa-42a864dbd97d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.217.249.57']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe313cd3-8708-4c8f-a730-2d05dffdac01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.217.249.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0bb5ca7-df1f-4d5d-942a-bdb1884bfdfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.218.49.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee891ba-b70f-47ab-8917-7979adcc4b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.223.69.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e767942f-69b9-4c14-861a-d25abcda7f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43213ab-e900-43ae-b168-832d6cf19d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.32']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8fa655-6302-4f31-9e83-c8568cec8138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.226.43.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9b79c4-6931-41e9-8cbe-25f90b310ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.228.147.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f49e004-e64b-4fa6-bab3-227320edd6f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.1']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602b5fd7-fe9e-495e-824c-012bcb73d170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3885f597-37fa-4637-94bb-c187b98b63a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7694b7a-e7b2-4289-9f30-bd067ee3fb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebbf78f-1fd9-4b03-b0dd-e8b9487509da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af1fbc3-9b1e-4a50-a6c0-6a1d581815ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafc2fb7-e936-44b3-8852-5983f752d56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676445df-b317-4147-b35f-b361f3bc8807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6faba76-088a-4d0a-8b68-b02398b96e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bad80ad-dc25-42f1-8247-c6bddb3fe060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce099471-2efb-40b1-9b41-2bb0814fba12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b289af98-c7f5-4ab2-8c64-5b212f6b0f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f74278-2d4d-41b9-84c6-32c3d7e5add1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794d1e66-7c65-4b36-b7f5-50a816f007bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265255a5-20d1-4838-b8c0-80b439f2281f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac09599-2697-4a32-9205-8e3c258e0fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c1ecc5-9b4a-4ee5-97f0-f0578e8f2a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b3fc16-e459-4856-adb2-338e0fe4cf18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1804adee-565c-4b4d-b21d-6c1399b85203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b7296f-e4ab-4a6d-b52a-7e897e9b76ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.163']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bb09ce-3632-4bf8-898b-f0d91bdd58dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.17']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689b974f-465d-4ad4-ac41-6fdbccf21abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099ec780-8ca8-4cb3-a24b-44bb592e0f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d953393-87bb-4db2-84a5-5a22e9578d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2069b95-50c2-4cb7-b1a0-56f0156410d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f5d6fb-6820-4483-9af6-1e5cdf6d2b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97411cd-9361-4999-a95c-b2c3e3575830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.186']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a839dbf0-6374-4996-b3b3-a3f4d54706eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0530d84a-acda-46ca-b270-c6c567439fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33780da5-e593-42ed-b901-b9a10ba84d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.19']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4ddf49-9bf5-410a-9ed0-b805c876cc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c06d36-efd5-4eaf-a3c8-0ea85d086dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.195']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a74234-f1bc-4649-9409-36ae56d33caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.202']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063c4cd6-d056-4523-9d3c-ae34dd4e6e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbde8fb5-8573-4107-b2d1-4707dd917d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644d2ee4-da73-4b73-934c-74cd1577e30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.21']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c92422-36cd-4562-8c88-e7a300217e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23f5f84-0963-49ad-96f6-56378f0c6b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473407d4-c0fb-43dc-a998-d1135dd86fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a899be95-8fac-49e4-8f16-b9632e95fa46", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44221e9-3579-4b28-9f0c-1d0cf326e8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518b36aa-0d3d-41a2-b66b-ebcd35e1d061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.226']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4de0252-8390-44ae-aac4-88c05f4e4239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3fddab-c6a2-49e3-8ea5-d3ab6f5d6c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c547c4d-d54b-4227-ab15-afc25258bf4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ef8d85-2022-4c7c-8fff-a189914c1077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ddc2aed-6c89-45fe-9584-3f1048577dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07dbf21b-012a-4290-84e7-a1cc27dfbf44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acfbb3b2-ba56-4b60-a87c-244c160a2a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.242']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02da0e9b-862c-45bd-915f-825d1ed9f65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82da9b1-1d0b-44ef-9923-7dea50a60b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f051fa-1cd6-4449-8da8-6c0fc1678110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.25']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af61d022-38c1-4098-93f6-9a1fdf16aed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371dbdf8-69ab-4eba-9eb1-5450de4d0ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8722a071-857b-49c2-9e11-9ab61aa97ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3f2fc3-a174-4e29-9f59-ba3f96a0a6c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e11512-e68d-42a4-b1e5-18d90fa510ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db346b6-64eb-48d3-a829-41bce7c77c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb98eeb-7b0b-4681-a6c4-63e4857cdfd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.31']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47633cae-7cef-47ef-938f-49e66dfb158f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a519e4-6707-41fa-b4c6-c6108379c9c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9074a975-76a4-4c5b-9ddf-27e29711c0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab82aa7-1a0c-4ce9-a0bc-9ea28931760d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855e0c52-a6e8-42fe-b738-22d4eb2412ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e118ca1-f084-4bfd-9378-bc5db237d467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8428b8d0-2949-4285-9bfd-553fd08f1c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170d609d-8afd-4244-97ee-e002c3c63768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45904c97-a769-4abd-bddc-5e4233bd0ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092a2c25-5240-4bfe-9e39-a16ef0b8b0eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299bcac2-5c42-461b-9388-55fb8f0c5d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcef69d7-40c9-449f-8444-c8ed77bb133a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7dcbca3-3136-4540-bc58-130e7bbc6e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.99']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb030ae-1680-4111-81b4-a216c5084e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea65feb6-d435-4b18-a151-89583465842d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355fe0db-4878-4788-829b-23832a8baad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad7c9a5-f476-4638-8692-34438f1ecbd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e88fad-2ed4-493d-b8d9-eb477aad21c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eead6b3c-780f-449b-b73c-a96431afc77d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e605b49-1095-4bf0-9a93-fa307b1a36b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b638392e-9127-4e06-8f1b-55b77edc7f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d21349-a679-409f-9b7e-c41f999e342e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db906d8-4c43-447d-a94f-cff36109c436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821391b1-6829-4500-988a-531b7630e5d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5152a77-bfec-4aab-81fd-489aaac30fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f17b234-7622-460c-b810-bcbca9a1f8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a1b3e4-002b-452b-ad5e-4ab9bad27bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b72524-79dd-4d54-8838-2f08c47c3082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcdec514-89a1-4ed0-b4a6-d8a7a9030cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.137']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beccece3-b6fd-4a7f-933b-950b0950eaed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.138']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629460e3-8e53-4d92-9f97-5f6d841942f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.139']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c435e588-22b7-496b-93eb-45b88e8d13f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.140']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454b8e30-933e-48b9-bc6d-1e50813ad17f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.141']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ae63f4-e7e1-44a5-9663-e0bf61f82d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.143']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0e2a92-2149-43da-b9e5-0e1d78553dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc1aee5-49f8-480b-8262-17db1761734a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e7befa-3410-41ed-b5cd-c7b7e1da030b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec991cfd-67e2-4b7e-a5ec-2f4762eb1d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7695251a-d646-4c02-9470-e93fe1302dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae3964a-5f39-4b6e-9e1e-ce54f1c2f662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ae3119-cff9-4c40-91e9-db8919a10969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4feec0-1db1-460b-86ce-dbb597a0bd67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25d6741-55cd-42c4-80b4-c2a45e424e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d41565a-f388-4616-b6dd-d4f6c4156060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24e57b9-b58e-4f5a-9ffe-dc2fdc5ff9af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53406da7-b08c-495c-865f-7d31797789da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5dbcaa-5c1d-4bad-9abc-92652197b8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245f45b1-c5fa-46c0-9cf4-ec35fb0d4464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de86aab-34b5-4db9-894e-fb69845fdee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.181']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bfb1c63-d389-4b94-95a6-6013edd3341a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.187']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2fe0f6-37f5-45f1-aaf9-f38b6ebde75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb0a0bc-1ff4-4977-b832-1a071d1140f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1daecbb9-e854-4851-86cf-867a84526460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e12fb14-154f-4453-a468-df14fa1ede2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb7a9fd-4ad3-41af-9f42-0713b8829ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9083364c-c670-4223-851c-cb40ad884dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de357c78-4481-4068-b03d-65b72a870165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7baa202a-3fd9-4a4b-98ed-c8dc933b8c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649b45fc-34ba-43ed-bcfb-d1b558bb0db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.212']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987d6cc2-33e4-4675-a46e-ea61b8ca2add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfdffc6-5385-4943-9a53-845e9887eb67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06ec1ba-32c5-4ebc-865a-b53aa2154151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6dd7ac-66d9-4dd9-b652-252cf12b4e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.221']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b40f082-3dbf-4caa-8893-32f555ca809d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aabe356-30ac-4a52-885d-5f5a1405e243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a313ceab-b741-445c-ae10-6795be34abbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06333d1-6579-469b-be10-c503c17d207a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dacfe7c0-b5ed-4344-8e12-425fc9a7e1ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71b9dd2-7b20-4c9d-8f5d-48372afd4544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1141795e-b2e1-483a-a50f-a54a3c40b6ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d20545-8d0b-406d-bb8a-d90b901a6e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c8e202-28f5-40da-b36b-e361624dd81e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.241']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dddc0130-a6e1-4406-839f-04e975574f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.243']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0392d1b7-1d77-4773-b1ca-ff3b82f3e2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a4d563-b982-4cdd-81f1-217857a80cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.247']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a83e52-40e4-4079-a0bc-02332d54d78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d31016-65c0-4ac1-b435-b78f78616cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36d7281-e67e-40b3-89c6-eebb5456986a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c2c4bd-0fa8-498b-99a0-c431149cb38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de49dcc2-f52d-440b-b751-41ccf0f30898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.27']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c9026c-c80c-49d0-b12a-de6fe6ff5787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad23e84-a5c1-4522-ac51-fa023abeeaef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5458d345-5cf0-4a64-adc4-4d7bea0dcc1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10e216b-28aa-491a-8344-99526a98a779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca952c37-0ab5-429c-94c0-c4f16fef1383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.51']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d938ec3-1117-4656-b9ce-058c8ead48ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.59']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad599921-f6e9-4038-a729-1013cfbc33d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.64']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa03f613-937e-43fd-93c1-5bd0a9e928d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e43952-47ea-4b06-a5cf-e08e66d82f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d19354f-9b9e-4fa3-98b8-c11f75a4a83c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0add07ca-c911-4a75-85c9-83429d0a3ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fdad48-c710-4d30-9852-99712143a3dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.70']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474779b9-0220-4ac2-8cd4-df2ae5229ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5740fc39-e340-41b2-bda9-a9828617d929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07ab495-5370-48af-bd6a-255bacdeefb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1116cc-b9fd-4e59-98ea-f580f6a1f57d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe20142-b88b-45ab-b395-f1236b821025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c44994-879b-464f-bd48-df5153fda8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433f04c4-980f-44c0-8c57-1daa2390d2e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac4aa6f-b2b2-4529-b29d-1f5169814f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52514ec8-4bd1-4f77-8e7c-1b0c06e07a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511fd99b-bcb0-473a-b929-1c2dfb7151b4", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.88']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac4fa91-744a-43f5-9d5b-f42bc6348758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38091164-f844-47a9-9cf6-130879b19072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.90.122.43']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efff1952-1678-4db5-90b0-c2d1ca4a26ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.87']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878c925c-5b81-414b-913b-efdb1065e1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.158']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80bef7eb-8ade-43c1-9b71-f2c33684b84d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.248']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7c98e6-ce4e-4437-a02f-3fa3a4349f4e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.86']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44cd63a-37c3-435e-8644-20d191bb267c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.145']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ceedee-ffac-41e3-9b14-08cca3d2762f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.236']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8de0c2a-65c1-45e8-b1f9-867d4032cc99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6e9c2b-af79-432b-9c01-563fa9dfe2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.96']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4dadff-18da-489e-84e2-330b2f5e7e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.57.209']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5538d4-3211-45d2-8532-617e92f5ec77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.105.119']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b489003-4fbc-4aaf-a6d9-7d80633cf74f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.222.22.61']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac98a031-81c0-4a87-b585-7e48c6c15710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d5cf1d-a31f-4f7c-8088-c72b286eb982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.98.84.127']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a96914-86bd-4fbd-b151-79f142570ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.72.166']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc71358-8149-4d96-a709-9b25348b7c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.208.26']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45583645-8fdf-4a49-b6e8-dba1e7a54067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72d5d0a-bec9-4242-8cf2-92a7a477dc2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d042ee97-8d22-4ee5-9303-120a9db4539b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.55.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b04f53c-850e-4395-bde1-75868cf26bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.136.186.217']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd079cf-c59f-43fc-9745-54df692d492e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.110.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b0c82f-b487-4417-861a-7d08e0438ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.183.231.50']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d537e723-637f-4a75-bd53-bd9659c1d3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.1']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db79cb6c-d309-4592-8ff8-0a86070ffd12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444c4f12-4027-484b-91ef-dc4812570562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.105']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4014b57e-5d1a-4e7c-b044-2448d532353c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.109']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8482e8da-a88b-44e4-ac7f-cc8f768b307e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.13']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e17dfe4-0523-4aa8-baee-0d4d55bfc5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.131']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629a60b3-58f0-409b-b068-0691672d904a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.14']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd01248-c5d4-4314-81be-21817fbb5d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6998a605-54b6-4667-a72e-fcb61ddbfa69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.253']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d957085c-ddf0-40cc-abe5-64d7939c9129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.3']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ade394-8ccd-4434-8564-37dc08d1b1ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928f66a7-d437-416d-9655-b62e5575cd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.36']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2df9d45-3d43-4826-b682-46e607fc80c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.4']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ea7234-d237-400b-a0bb-9ecaa2b7b5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.6']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365a5541-4448-4ede-8054-47990bf470e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.8']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495fb6fa-efed-4f62-9e8b-f5a1a7df4299", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.232.188.98']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4bc7285-507a-45d7-a02b-7956506cc6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.243.12.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4424ed67-8739-41ca-81b6-51d89a2fd776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.243.14.201']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd061d5-9b66-4158-932d-ed84bc6d886a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.249.230.136']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963123a5-9b39-460b-9a7c-fc0adbe4d31d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.250.61.10']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea6a293-9ae9-4f52-9a7f-bd539dca17d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.252']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6160e1ae-a7d6-4b9b-a6d5-bae25f9ec0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cdc09ef-81dd-4493-acca-428c5d41d864", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.88.44']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e0b611-470a-4bc5-a494-d6f22cd4c514", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.88.45']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785d56e8-e1a5-42ea-8a8e-61dfb1d50173", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.7.184.216']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ab6988-958f-44be-8e57-60bddf07352f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.72.102.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610b3b26-9da1-48a9-a6b9-736c3492433f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.72.104.142']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1855710-0612-4f88-9f35-30ce946a5629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.130.170.146']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48272ebf-f278-437c-a224-2673b8bf5a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.155.151.16']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7521b3ce-d96c-4238-9453-4ea06be938a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.156.198.230']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafacbe9-9c4a-4843-a938-bb5dbb1b2c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.157']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3325aba4-11cd-4f76-907b-65dd12ee8f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.54.37']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76177c5b-0a41-4c9e-a01e-4536b571f80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f8d752-f3a9-4ab3-9628-43be22e3d7dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.38.187.151']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781947d7-a1af-421a-a1d1-c047175d65e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.84.1.54']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e093c475-d8c6-4819-a996-7527c62a30ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.238.22']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--748b0b5d-43ac-4a1b-bbd7-14151bcd12ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.97.67.190']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281d2daf-661d-4d79-b4ba-dd2857ed3c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.101.29']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f2221e-da25-4874-9ace-71711247f6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.101.34']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466a0206-3078-4072-93bb-ce494a3f04b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.101.66']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e781f592-1002-4c25-9fbf-9d85a017169c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.102.165']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705d3d35-65a9-44c8-8e08-113294df0238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.106.72']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2515042-ba34-45d0-a5b4-951c8bcf541e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.106.90']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66123c30-8797-4f59-a354-7c8e3c4a40d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb9ed3e-fa36-4d6f-9bec-0373a3610143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.149']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a324fc22-f717-4d5d-893f-4f06af50a257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.176']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131bd3d2-3c47-4d3d-b94c-4e237ff65bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.232']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6cc10a5-b12d-4b45-8a66-05ffd9f96465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.233']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c62e3e8-c8b4-4f3a-8ee7-3a60fd626883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.245']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c590bc3-52da-437b-9eba-970e9eae353a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.98.20']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5537b07-8700-45fa-92a3-3b1a2c5611d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.172.218']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9d927d-721e-43cb-bf04-10ecc5943fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.180.162']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fa0066-128a-43d4-9bf6-f9b00600a50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.131.148']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e6c834-b9a2-4064-9f47-7a04b4d29ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.131.152']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3531186-fe1d-4ab7-a5d5-6b9da5e46f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c309946-11e0-4c92-b4d1-6e23865f2d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.136.193']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd9b710-9d9a-4687-a097-078ab30e5ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e138a9-3cbf-48de-b570-668cff826fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.142.23']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddad5c41-50c6-4bbe-a653-4230e9c27d20", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.74.92.144']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7070341-9ba4-499c-9ced-b6fe1fcbc9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.109.173.244']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f827d45-6364-4ac1-9ba6-6e84382b3427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.142.247.113']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e04cb14-aa00-4935-a773-4aca02c29f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.142.247.115']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cffba6-0f3b-451d-8063-aa5de9e71f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.142.247.39']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f978bd27-a2a6-48db-be07-015d7babb26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.159.36.134']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee4d972-3267-4865-ae05-3656f46a7400", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.160.106.154']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb45da4-3bd7-41a4-a3e1-7500c4bc9b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.80.74.129']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209b4bbb-ad87-453b-801f-4cefa2a7c49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.81.154.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ba8df8-d81a-43b5-8a5d-77f21ad97440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.84.169.122']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5bd8a34-d25e-4cb7-a720-ecb815567ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.89.204.118']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3c8346-f91e-4c96-8696-712844a6c7d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.90.43.197']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b103c7-ee7b-41c6-b765-f2e20988ac38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.97.179.174']", "pattern_type": "stix", "valid_from": "2026-06-08T00:00:00.000Z", "valid_until": "2026-07-08T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-08-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7bdc96-e6a3-4b00-85cf-57fb18ea31ad", "sighting_of_ref": "indicator--bd85ef98-9da5-4809-9272-a03407567829", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2eebb6-d68a-4dee-bb8a-1007ccee6e25", "sighting_of_ref": "indicator--c9a577e2-c045-4e8f-9ea7-8c41a7725fda", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f4f672-b26a-487a-91c4-a0d8dc7a4cfb", "sighting_of_ref": "indicator--4a6dab9c-39b2-4f03-a39c-4e397d67a7cf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eaf4f3a-7821-4b47-bfbf-8db703cd1596", "sighting_of_ref": "indicator--4734acd6-7165-4d73-aee5-cb49c3416c7c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74669ffc-9da2-4a57-aa05-59c5133c9439", "sighting_of_ref": "indicator--fe2f6a5b-8ead-4632-a68b-9357923bd0d5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dee6a9f-698d-4d21-9ff2-76edc77496c9", "sighting_of_ref": "indicator--7fc8cc43-44c4-41cb-9b8b-a9d9dbd3b0b2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf7c3fd-93e9-4422-a5bf-fefd1da53196", "sighting_of_ref": "indicator--4f1446af-6861-405b-978c-110578c6be94", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461f8f64-396a-41c4-8de3-a6e7a2fd2c9d", "sighting_of_ref": "indicator--2a1a8b9f-ea38-4eac-8c2f-95cd8f73367a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895c39db-7dda-4b2c-8e10-cfb20882dede", "sighting_of_ref": "indicator--b26c5d76-810a-40ef-b374-38b7556ec9ff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3773568-f742-48d9-bbef-4ed7895176d0", "sighting_of_ref": "indicator--73d9d811-d806-4d62-bfba-eac330574747", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a768f4e-b29e-4536-b5a6-3c423f88f298", "sighting_of_ref": "indicator--666f3bfd-b0eb-4760-98ba-56aa9cb3019a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ec67a3-85f7-4693-aeb7-118321d9a601", "sighting_of_ref": "indicator--666f3bfd-b0eb-4760-98ba-56aa9cb3019a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e3763d-c201-4aca-b8c2-1345215ec118", "sighting_of_ref": "indicator--666f3bfd-b0eb-4760-98ba-56aa9cb3019a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c089cf-6978-4f03-86fe-59c508497cc2", "sighting_of_ref": "indicator--b787141a-68b5-48ba-ad9d-21059510c6cf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162d7b8e-ad7f-4265-be41-00a5d50b6c1a", "sighting_of_ref": "indicator--b787141a-68b5-48ba-ad9d-21059510c6cf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90833ba-911b-4a9f-bd34-8a86de18504a", "sighting_of_ref": "indicator--b787141a-68b5-48ba-ad9d-21059510c6cf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6874ac5c-f9af-458e-97b5-1f1c8e2a61f5", "sighting_of_ref": "indicator--9e489cf7-e719-4daa-8863-2b80eb4e33a2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1ba549-8a2a-4f70-95c8-f01a4e065e94", "sighting_of_ref": "indicator--9e489cf7-e719-4daa-8863-2b80eb4e33a2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f4e766-fa70-44dd-b72c-5d328c2c98bb", "sighting_of_ref": "indicator--bad5403b-1cb6-42cc-89b7-1d8b8bf007d8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844d07d2-6c4e-4225-91c2-b63a8b74de70", "sighting_of_ref": "indicator--a69ae31e-1ffd-48e8-b572-0b1820c7b12a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ccfd46-ac04-4eba-ab52-d1375401ae70", "sighting_of_ref": "indicator--0d2e719e-0ee5-4c7c-b1e4-527a7934b565", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65707943-6bc5-49f0-a69d-2883a9892d12", "sighting_of_ref": "indicator--6c16bca2-e07e-4c23-86b0-6e415eed25b7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74a6279-94db-434e-aa6e-57c7426b058a", "sighting_of_ref": "indicator--879d8893-4928-42d7-8e06-cf72e36930cc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f3c047-9c7c-423b-a131-800844f8bf55", "sighting_of_ref": "indicator--d1f03e11-94a4-4ce9-802c-7753abdc8f63", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28996562-0796-45e5-828c-4eb67c982db7", "sighting_of_ref": "indicator--98c285ed-5442-42fe-89f8-ce0310af6410", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5057b635-0407-4e22-b8e4-d1259cf30a05", "sighting_of_ref": "indicator--238c52bd-d035-4cca-9f30-d26370a6590e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47c0a07-7bd3-43e2-851e-524f22da00f0", "sighting_of_ref": "indicator--238c52bd-d035-4cca-9f30-d26370a6590e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698bba26-f6ab-4c1f-aec1-3e1d560bbbfa", "sighting_of_ref": "indicator--11018862-2390-4f79-849a-182e2d69d1d9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddb1eef-c895-4542-939d-94df1168b743", "sighting_of_ref": "indicator--ffa9b66f-deb6-417e-a560-080298833638", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f7f679-990c-434d-8779-ac5a02041ae7", "sighting_of_ref": "indicator--ffa9b66f-deb6-417e-a560-080298833638", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63367ea-aaee-49c6-ab96-19ad33ee2e18", "sighting_of_ref": "indicator--0ea76da6-5a90-40e7-b7bd-3ddcd9ee848c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478c3127-5d42-40a2-a1f2-c8b939cd5ffe", "sighting_of_ref": "indicator--0ea76da6-5a90-40e7-b7bd-3ddcd9ee848c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e6759d-1f4a-4edb-be89-ec037a19fb49", "sighting_of_ref": "indicator--93229c32-dc63-4d93-b978-c156d7ee76cd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5b0aaf-9f64-4579-a165-e1f65ab3c2b4", "sighting_of_ref": "indicator--b3217cf1-71ca-474b-bb2e-7a5841baec37", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbcb26ce-64bb-4d25-a0db-d0870943c08f", "sighting_of_ref": "indicator--01f1ab9e-4a4d-4da3-b11c-1a175740fa41", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ed8d69-6445-4be3-bed9-153587e78419", "sighting_of_ref": "indicator--7cbcaf8a-eca5-438b-b5a5-bb18d41ea440", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d253f9c6-2f10-4487-90ae-387e7d14dbb6", "sighting_of_ref": "indicator--7cbcaf8a-eca5-438b-b5a5-bb18d41ea440", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1b4986-1229-4b56-9261-57b5bb6cb287", "sighting_of_ref": "indicator--bdd6b610-8b7b-4b01-8ef1-dd99ccaa671d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53424718-b567-4003-859c-4f563568f048", "sighting_of_ref": "indicator--b105aa4a-4f3b-4d54-babe-87a312297c6e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfe1b1c-27c4-42bb-9b88-e941d549403b", "sighting_of_ref": "indicator--b105aa4a-4f3b-4d54-babe-87a312297c6e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9647425-147f-4693-b58a-1d84b0ac7e06", "sighting_of_ref": "indicator--a510c7f1-1c56-471d-866a-9128b9b5837f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40edac70-f8bc-474a-aec9-bbc2a52827ba", "sighting_of_ref": "indicator--796439e5-7527-486d-af25-96e63daf6311", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccf97f9-be0a-4012-bfda-6c8b6a0a4ea6", "sighting_of_ref": "indicator--eea19b0e-76dd-4a65-81dc-a7d47acd89ba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c5f51c-e9c1-40f9-90c9-68bd449bc3ec", "sighting_of_ref": "indicator--65b2700b-4d2a-4bea-bfe5-17405ddfcc8f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7a09ed-7282-4122-bda2-6836a2771951", "sighting_of_ref": "indicator--a14c2076-a728-4075-8e70-774b5c96d84b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52eaa371-0de1-4a66-bcf4-b85861f8b95e", "sighting_of_ref": "indicator--d6c797cc-2344-4f0c-a75d-0aefcbd22045", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c39e3bf-ad19-4b89-a3eb-32d353119f49", "sighting_of_ref": "indicator--3649cb57-b87e-4ca4-a8dd-a2e699375d20", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3c7fbf-4d9e-497c-ad37-456c44c77010", "sighting_of_ref": "indicator--c60609f2-a974-4d44-ab12-513d8166a994", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36f84e6-4671-4beb-8156-44fbe52e93bf", "sighting_of_ref": "indicator--c60609f2-a974-4d44-ab12-513d8166a994", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828dbf36-9fba-4f68-afc7-87e7d82d300a", "sighting_of_ref": "indicator--27254fde-310a-4672-a3bf-5a7c4d4f05fa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e79f220-193c-4c44-9c69-2e3540a75697", "sighting_of_ref": "indicator--5956b788-62bb-4713-ae43-d77ef4faade6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45fed1d-1f2d-495d-be6d-9f25284fd217", "sighting_of_ref": "indicator--f00d4111-cf82-45a4-9456-3a5ca4e675c7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e7bf0a-b74b-4098-a69e-cd41a3d1381b", "sighting_of_ref": "indicator--cd6ec2be-1eaa-420a-8353-2c277175154e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569ab8f7-023c-4eae-a570-3fc19b78df53", "sighting_of_ref": "indicator--adcc1dc5-19d7-48eb-897a-6af33dea4870", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a5a4ab-9677-41e9-a89d-b6ad6e085585", "sighting_of_ref": "indicator--ed68b880-5ae2-4f78-b1d9-3fb20af0796d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef069466-1676-455b-a489-4826ea3310be", "sighting_of_ref": "indicator--e9e6a4a7-6f13-4f88-b9eb-599c5689f25b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8500fc24-693e-4942-ad81-cd248603b66f", "sighting_of_ref": "indicator--8361087e-c3ed-487a-b28c-c27b7a7216d3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c16533-6e9c-4abd-bd7a-ccff444ef93f", "sighting_of_ref": "indicator--7e3ae45b-96fc-4b8d-8962-4b19a48f7afd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2987371-c55c-408c-b0ba-3d7b8fe187d5", "sighting_of_ref": "indicator--4a93a747-9adb-465c-82b7-738da215d18c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f039267b-bb6d-4918-aba1-6481afc85691", "sighting_of_ref": "indicator--f031d925-9f4a-46dd-b5f2-3394d8b5ea71", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020c5dbf-1b89-4b4a-9327-6c3c1d094523", "sighting_of_ref": "indicator--cf49d309-bc34-4ce0-9510-9c7919079433", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a247837-f7fd-4d94-bdc1-cd4561bf4dc4", "sighting_of_ref": "indicator--56624a51-3a0b-48da-a05a-36cce3aaf01d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9156c3c7-6e61-4932-a75a-b76eb31d72fd", "sighting_of_ref": "indicator--56624a51-3a0b-48da-a05a-36cce3aaf01d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b21051e-6fcf-4a6c-bbdd-b4a5bfdcf3ab", "sighting_of_ref": "indicator--de9f1cfa-4ac6-4569-8569-06b5c3e72f6d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c39fba8-fb87-4279-bc32-35dcc3952980", "sighting_of_ref": "indicator--9f6658d6-3d81-4651-a541-bd86a3ecb106", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608a166b-80fb-4699-aef6-249f2b78e7b7", "sighting_of_ref": "indicator--f549cc80-7d0a-4d4b-91f0-75b7811ce47d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df663884-f9fe-457f-b14a-cec728d25e1c", "sighting_of_ref": "indicator--8f32fcba-04a0-4730-9956-b6107578961c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8184d4f8-a2d0-41c5-9415-e3ecc2c8f485", "sighting_of_ref": "indicator--ff1c5544-77bb-4895-8b3f-4f141f109de4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523ce9b3-5260-499d-9e66-3771e4293732", "sighting_of_ref": "indicator--ff1c5544-77bb-4895-8b3f-4f141f109de4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4453ab-f483-4f20-aee9-de17c4caf590", "sighting_of_ref": "indicator--ff1c5544-77bb-4895-8b3f-4f141f109de4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e66f1d-815a-42d5-827b-e2efd75c32e5", "sighting_of_ref": "indicator--2178e0ee-50c7-4819-a823-a6f67c1e9f16", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24f573e-da75-4832-a874-326c1efa7d42", "sighting_of_ref": "indicator--2178e0ee-50c7-4819-a823-a6f67c1e9f16", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c92f70-e334-4c9a-8c25-309e28e61485", "sighting_of_ref": "indicator--2178e0ee-50c7-4819-a823-a6f67c1e9f16", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c468d3-8ca5-4c82-a1f4-79bbbbdcab4d", "sighting_of_ref": "indicator--5ebd9376-427b-48bf-94a0-e0faeb2ea91d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e821141-6cb4-4c12-8336-6c0862654380", "sighting_of_ref": "indicator--5ebd9376-427b-48bf-94a0-e0faeb2ea91d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677142a7-ec4f-46b1-a3ec-a8edcf187b49", "sighting_of_ref": "indicator--5ebd9376-427b-48bf-94a0-e0faeb2ea91d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68576b3c-8ace-4446-9005-8429335092b7", "sighting_of_ref": "indicator--657e243b-00d6-45bb-9629-6a9220d82a7c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675c365f-3f88-4756-9cca-c7bba28923b6", "sighting_of_ref": "indicator--3e6c7e42-e600-408b-8350-e38a3ffe7818", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9d57a6-68f5-4e40-a739-4f65cf8524af", "sighting_of_ref": "indicator--a22d82ce-91a1-40e0-975b-8ffea6d6c30d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12c4d0b-6d9d-4287-bac7-d630481e6bc7", "sighting_of_ref": "indicator--7deac7a0-de5d-4b5d-8f97-e2eef941e0d8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f106f34b-a44c-4fb2-b800-2dcb866d5144", "sighting_of_ref": "indicator--afacc34e-96dd-46d8-b05e-6c95b69e4871", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a66ec1-48af-4449-a3fb-be91d7d258fa", "sighting_of_ref": "indicator--03e87589-fc9a-4aad-81b5-050ea7a227fb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840c883f-6e53-4fdf-a7fb-52a123d302ee", "sighting_of_ref": "indicator--f568751c-fe75-46f9-8239-bc5bcd8d3ab2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2033ce7-da06-464e-9bc1-45bf220ce05d", "sighting_of_ref": "indicator--9ee07071-eb47-47e5-9dcb-359b619ae6d9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e282606-eaca-480e-a32b-79e47906c253", "sighting_of_ref": "indicator--6240b45e-029c-4939-899d-0fa250584080", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e565c0-7b1a-477a-b58b-9ee7b40513f3", "sighting_of_ref": "indicator--6bb3dc5d-ecc8-4e2b-9ab9-779428df8e7b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2a5c7a-c3ee-4824-888c-66bc469f344e", "sighting_of_ref": "indicator--ef791f67-f7bf-4bdb-85be-3c70788472de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1b3280-0df7-468f-8511-ce1fe42726d8", "sighting_of_ref": "indicator--b1a47774-3ff2-4ae8-8a19-13b7c31e08b0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdab0558-cc28-4fcf-8f0e-5492da4605aa", "sighting_of_ref": "indicator--b1a47774-3ff2-4ae8-8a19-13b7c31e08b0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7f626c-362f-433e-b418-5172686dad13", "sighting_of_ref": "indicator--b1a47774-3ff2-4ae8-8a19-13b7c31e08b0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fe1df1-1dcb-4139-8823-4eade4575edd", "sighting_of_ref": "indicator--ead03d0b-fcf7-4ed6-8365-4d8551c902df", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53ba175-d8f2-4d94-9a8e-6212343bd06f", "sighting_of_ref": "indicator--39b3646f-d4dc-444b-a5d1-e7a2eb9127fe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b662093d-0e75-4e46-946a-b97934303bdb", "sighting_of_ref": "indicator--39b3646f-d4dc-444b-a5d1-e7a2eb9127fe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec93a91-ef46-4183-8500-ace7e5a7b140", "sighting_of_ref": "indicator--39b3646f-d4dc-444b-a5d1-e7a2eb9127fe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869ec5d6-99a0-4dba-8103-d9f4a48f67e2", "sighting_of_ref": "indicator--742ae97b-ae3d-4276-a758-47d8ca792336", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a80d91-7b37-4282-bdf3-328808962dbd", "sighting_of_ref": "indicator--742ae97b-ae3d-4276-a758-47d8ca792336", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f4da5c-3439-4cab-8465-061c39a03b63", "sighting_of_ref": "indicator--9fb5bad9-1067-4394-b209-d735f4074905", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27c9392-c7d0-4cca-89ac-c93d6e51d988", "sighting_of_ref": "indicator--1106911c-a082-4915-b055-fe9cac25682d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4e8c1c-0bcc-43fa-bc91-7de17b8bfb46", "sighting_of_ref": "indicator--1106911c-a082-4915-b055-fe9cac25682d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72be4080-128b-446e-9ff7-c397d54cbc26", "sighting_of_ref": "indicator--1106911c-a082-4915-b055-fe9cac25682d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34a9358-1bb0-4bdc-9d28-962c301ae486", "sighting_of_ref": "indicator--1a434a7d-5159-41c0-a573-107c335a344e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46495e3-1063-4f43-bfdc-3c0f6554ecb8", "sighting_of_ref": "indicator--282a46c9-15b4-4aab-952c-f6c3cff34a53", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f93813d-fdf1-4751-a6dc-505c030d6f5f", "sighting_of_ref": "indicator--282a46c9-15b4-4aab-952c-f6c3cff34a53", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48eaa63-af24-4f9f-a098-6c3627072a6f", "sighting_of_ref": "indicator--249d3b53-4ee0-4e9d-8d4f-46730bef490a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebfbd5d-dd03-4c75-9a20-16db68e63777", "sighting_of_ref": "indicator--91d8ada2-a47a-4622-80cd-e43eeee37d70", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68faed87-516c-4504-9931-e19bed4fb4d2", "sighting_of_ref": "indicator--6032870e-992c-4e31-84d8-0a09ab0d1ad8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5701d9e1-bb26-426f-90d4-1628a1e55518", "sighting_of_ref": "indicator--6032870e-992c-4e31-84d8-0a09ab0d1ad8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfaeb6a-6e7f-4225-8cd6-39af7a9ebc9c", "sighting_of_ref": "indicator--42a6d0c8-bf17-457a-bfc5-53400debba7a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae10511-2ffb-4907-9ee0-0d8bc4bdecd8", "sighting_of_ref": "indicator--42a6d0c8-bf17-457a-bfc5-53400debba7a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5543db3-bb13-4964-a34d-6b5b097f6b0f", "sighting_of_ref": "indicator--b76bfbbc-43d9-4285-9af8-0604736748d6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87547298-5a95-4d7b-81c9-bbb07e37e821", "sighting_of_ref": "indicator--b76bfbbc-43d9-4285-9af8-0604736748d6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1e16d5-e3d4-41b5-8251-46db8b60b227", "sighting_of_ref": "indicator--b76bfbbc-43d9-4285-9af8-0604736748d6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc55437d-c058-4f75-a9d0-9b7a39e3dbb0", "sighting_of_ref": "indicator--a72833cd-fe34-4a94-a6d9-abd4c0ede750", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b2ab43-64e2-4144-a09f-713904415e38", "sighting_of_ref": "indicator--463d15f1-b2fb-4037-9759-a1425087d4c2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68263cbf-7609-43d8-82f0-3126f9145a10", "sighting_of_ref": "indicator--463d15f1-b2fb-4037-9759-a1425087d4c2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094c5a49-989d-4d27-99fa-21bd3e68f56f", "sighting_of_ref": "indicator--463d15f1-b2fb-4037-9759-a1425087d4c2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8c7f41-c9e5-439d-afca-8fe2a4b52393", "sighting_of_ref": "indicator--a5ad1987-c214-4993-9fe1-faee3dc2528d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26397e48-89b6-4f2a-9dab-fd8b1fd03a2f", "sighting_of_ref": "indicator--20fe0590-a821-4e28-a8cd-770cea38af72", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a567091e-70a2-480b-9eeb-b29424d34f1a", "sighting_of_ref": "indicator--47b63956-b698-4021-a4f3-8474fc6d2ec5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8c778f-c187-4975-8fad-307b57034231", "sighting_of_ref": "indicator--47b63956-b698-4021-a4f3-8474fc6d2ec5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbf0e7b-d2df-488e-85a2-9b58493d0576", "sighting_of_ref": "indicator--36f9af73-1526-44b7-930b-a6da3dff8597", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f473ecd-d752-49e4-b449-93a32b712ea1", "sighting_of_ref": "indicator--32acc9f7-1677-460c-ab63-f4fb46c91598", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa4fac7-ffb8-40d4-8e47-88d6de796b81", "sighting_of_ref": "indicator--32acc9f7-1677-460c-ab63-f4fb46c91598", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366d3920-dadd-483c-90e8-6862f0badcca", "sighting_of_ref": "indicator--79f6131c-99df-4cf4-a1ab-a5fc132a04b4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b84f70-8f18-4278-b3eb-af91928aef87", "sighting_of_ref": "indicator--1eec245f-bb50-451d-9f16-9488d85377b6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22968d64-83cd-498c-b23a-eb4a6e3d189f", "sighting_of_ref": "indicator--864074e0-a832-40b2-bbc1-578cc4d38470", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bc858f-ec7c-478b-8dc1-73883fd0befb", "sighting_of_ref": "indicator--ce70311f-fa62-4490-86dc-1d214a5243a8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deebec3d-0f0f-4ce5-93d1-f5fd01c6c228", "sighting_of_ref": "indicator--ce70311f-fa62-4490-86dc-1d214a5243a8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9965a4ee-4b47-48b8-a246-e855621d0919", "sighting_of_ref": "indicator--68435ada-e5f0-4866-818b-420709e5ad67", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b9f2c6-d4bd-4ec8-be75-d1596ca13565", "sighting_of_ref": "indicator--68435ada-e5f0-4866-818b-420709e5ad67", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4592bc9f-be1f-474d-8469-a2cfb304500b", "sighting_of_ref": "indicator--68435ada-e5f0-4866-818b-420709e5ad67", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd711fac-a820-4203-9e1c-28b66e139952", "sighting_of_ref": "indicator--1d7024d9-0c9e-40c3-8adb-40e59b6dd6d0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5194b333-b727-423a-83cb-6f834cdcf32e", "sighting_of_ref": "indicator--109dc21e-6c84-4206-b554-db76af950f39", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1053639-51df-4f7d-9bce-ca14294e1b72", "sighting_of_ref": "indicator--109dc21e-6c84-4206-b554-db76af950f39", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beffd2fe-3d07-404b-83c1-10574c21c3ff", "sighting_of_ref": "indicator--b2efd097-f6c9-4242-811a-ca6f6a6c1db3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a943aaaf-04a2-49bc-acd2-31a3730ecf2b", "sighting_of_ref": "indicator--b2efd097-f6c9-4242-811a-ca6f6a6c1db3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c7c3c0-64c6-4cbe-b9df-10c23290e0c5", "sighting_of_ref": "indicator--05e697ec-407c-43a9-859b-d80f60c44068", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a560c64a-e702-416c-924f-30cea5f10bda", "sighting_of_ref": "indicator--354a2b9c-8f8e-44f0-a5bd-1bff694c1083", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08df73d9-ebc3-49fd-a4ce-7685564dc707", "sighting_of_ref": "indicator--5acbef8a-bdcb-4b93-adb9-f5e234593a1d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00b5cfd-8990-41d0-9920-a089026f46e0", "sighting_of_ref": "indicator--5cbfe80c-886b-4d61-ab10-56178d8ffe89", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48045c12-e503-4c86-918e-fe4efd3fa798", "sighting_of_ref": "indicator--1b587d32-7009-4251-a8d2-8becfe22c1ef", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778ed147-84b8-441b-ad6d-0787a030ff51", "sighting_of_ref": "indicator--906c4f60-a656-42b6-8dde-bed7c12377db", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fee477-89a4-4b88-9b51-3d12b8ab2136", "sighting_of_ref": "indicator--c7d7f4f2-f2d3-4c55-8863-932a6c13b362", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46e761e-98d4-4b52-9ef6-74add112f469", "sighting_of_ref": "indicator--85b6a703-df25-481b-a3e6-9be2f0ab8cde", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03630a5a-0ab4-4d61-8f51-f7e41c3518e0", "sighting_of_ref": "indicator--756c36eb-c20d-4528-8acd-6ffa965b31c3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ddf391c-5605-4034-9b5f-59269b32532f", "sighting_of_ref": "indicator--b1443aad-013f-45f0-b1cf-fd208d99fad1", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5ccfaa-6470-47b9-8256-7bc7721f7ade", "sighting_of_ref": "indicator--8c5b4cd6-0289-475c-b047-5fa3d5a830cc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4042d9fe-2aa2-408a-b7ce-d4ac45bc2e7a", "sighting_of_ref": "indicator--6add61d8-3263-4a3e-9424-a1f0ede0c562", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3618d9d3-af92-4add-bd22-a3af1e84f573", "sighting_of_ref": "indicator--84f4da98-d53f-4abe-85b8-ea8a185a474c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa07aa32-2a2e-4d77-bd2d-99563ccdd8d7", "sighting_of_ref": "indicator--d9e19283-0b30-4684-97f5-49e2a35ffbb4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2b8f20-f701-407b-b133-4f233bfa5072", "sighting_of_ref": "indicator--1acb5983-49e2-40f4-96f1-ed0a084c5f17", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36cd054-e8ed-41b1-a24b-816be83eb236", "sighting_of_ref": "indicator--1acb5983-49e2-40f4-96f1-ed0a084c5f17", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc923459-d477-41e7-85af-cfb26ffa60f8", "sighting_of_ref": "indicator--1acb5983-49e2-40f4-96f1-ed0a084c5f17", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b660dea-27bc-40e2-b5e8-d16efc44cec6", "sighting_of_ref": "indicator--e75b0289-93a1-47b8-905e-9a5335f72e49", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1daa0f3f-e27f-4598-8203-bfeecd049e4f", "sighting_of_ref": "indicator--e75b0289-93a1-47b8-905e-9a5335f72e49", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1cb5393-e049-4fe7-86f5-e7527ec69a0d", "sighting_of_ref": "indicator--b0ff0568-f329-4766-b7d1-25909bf864c5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b74cee-f215-4c53-934f-e694588f0491", "sighting_of_ref": "indicator--b0ff0568-f329-4766-b7d1-25909bf864c5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d393a88a-825f-4393-8a4b-e7fcfc05eea8", "sighting_of_ref": "indicator--bd98387a-3bd9-4560-bc48-ed093591652c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f813bc9e-6116-42d9-a94e-c921e8c65666", "sighting_of_ref": "indicator--167f681b-aca8-4597-94d1-8cf29b382998", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450d7af0-b8de-41cc-87fd-f723b51290f7", "sighting_of_ref": "indicator--167f681b-aca8-4597-94d1-8cf29b382998", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4420814-035c-4350-84e6-0d023fb20984", "sighting_of_ref": "indicator--775cd132-a224-4873-aa77-93b23d0275f8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c2c069-86cd-419c-8375-4b7304c48c90", "sighting_of_ref": "indicator--775cd132-a224-4873-aa77-93b23d0275f8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168c7250-c95f-46eb-97aa-8238612322f9", "sighting_of_ref": "indicator--775cd132-a224-4873-aa77-93b23d0275f8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f3568d-01fa-4e8b-88ff-1d383bc1c950", "sighting_of_ref": "indicator--5828aa28-4c75-41ff-8586-67ebc26c3531", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067aab48-5221-4794-8340-6a5c4685b7dc", "sighting_of_ref": "indicator--5828aa28-4c75-41ff-8586-67ebc26c3531", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0cb870-afa6-453e-a772-08c5360363ea", "sighting_of_ref": "indicator--f52f5022-3edf-4cbf-b8a9-5aea610199c0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd3d345-aaa4-4d9c-894b-8455db53f647", "sighting_of_ref": "indicator--f52f5022-3edf-4cbf-b8a9-5aea610199c0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4de2146-ba83-4a72-8247-53730243d0de", "sighting_of_ref": "indicator--f52f5022-3edf-4cbf-b8a9-5aea610199c0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2f444b-dc98-42d3-8e7c-5726599bf6a3", "sighting_of_ref": "indicator--7b137faf-2cde-410a-baac-88c704235584", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05c933d-f147-4860-b15b-73fb63a4d18d", "sighting_of_ref": "indicator--8e8cebd9-1a6a-4b26-97e3-c7e5de2aea4a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66be27c-ec6f-4ad8-b2c5-ab005fa8d8ae", "sighting_of_ref": "indicator--140f29c3-6df8-4203-a1ba-0df052892793", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1651e6b-9e6d-464a-b6d7-6b2f1ea9aca2", "sighting_of_ref": "indicator--140f29c3-6df8-4203-a1ba-0df052892793", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736996ef-91a4-4c29-b7b3-d51f18b85396", "sighting_of_ref": "indicator--140f29c3-6df8-4203-a1ba-0df052892793", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9472d8a-7b13-484a-b5e1-415c79eb3bed", "sighting_of_ref": "indicator--5783b220-9831-4734-880a-8ee72be313a5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb4c0be-d4c9-4a97-a8e5-f52d18cf3947", "sighting_of_ref": "indicator--5783b220-9831-4734-880a-8ee72be313a5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0dae9c-2097-4704-9cab-0b1b7259280e", "sighting_of_ref": "indicator--5783b220-9831-4734-880a-8ee72be313a5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6716fa-a473-4307-8589-bf9ef3f67f89", "sighting_of_ref": "indicator--d6509803-381f-4f34-9404-ee2b283e7dbf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e323d9-c029-4c4c-88a3-e993bbd8935b", "sighting_of_ref": "indicator--3a53d011-4f2f-4173-b9c5-cbf648e1af1e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f1586c-a41e-4f9c-ba07-f07474d9db87", "sighting_of_ref": "indicator--fb8a2516-27bf-4f9d-aac6-4282107aa375", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944ec13e-c2d2-47be-873c-ca2616a5628b", "sighting_of_ref": "indicator--fb8a2516-27bf-4f9d-aac6-4282107aa375", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99252682-59cb-483b-9d8c-2d44844961e0", "sighting_of_ref": "indicator--e326001e-8063-442a-9f5c-b674609683ff", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48aaf043-d336-4a11-8565-02278facad06", "sighting_of_ref": "indicator--d94da358-a92f-41c7-a719-47d9e7d1e101", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9003a3ff-06b4-4465-a636-9114a31de398", "sighting_of_ref": "indicator--4ccd0ae8-b3f2-48bd-9e11-492bfdb0cf0d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8038410-7dec-4953-a175-823dbf19c9c9", "sighting_of_ref": "indicator--25d300d1-7873-44cb-a307-204ab0e91f6f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb45de2-5588-44f3-859b-c74327204c8a", "sighting_of_ref": "indicator--25d300d1-7873-44cb-a307-204ab0e91f6f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3bf70c-b568-4a7d-9e74-331b578dbac7", "sighting_of_ref": "indicator--ac67a671-edc2-432e-a9a6-5298267b65f9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843f9f5e-5791-4ab1-884c-1c27c3b4f553", "sighting_of_ref": "indicator--ac67a671-edc2-432e-a9a6-5298267b65f9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9369d71f-0a62-4cef-b187-ff0722d4ae33", "sighting_of_ref": "indicator--ac67a671-edc2-432e-a9a6-5298267b65f9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd86167-53c9-45ab-9ff3-aac1c9a7f99e", "sighting_of_ref": "indicator--73d3ca5a-7672-4aac-bd5b-66811563c22c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5394c0-d1b8-45db-8ce1-30c81bc29ccf", "sighting_of_ref": "indicator--bb839d50-8f1d-4c22-b502-dfdb25b54924", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75421b9e-d830-42fb-b2ea-46a1063ae045", "sighting_of_ref": "indicator--bb839d50-8f1d-4c22-b502-dfdb25b54924", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b974eef7-6fe9-40d0-b569-c494f7f99e72", "sighting_of_ref": "indicator--bb0ab61d-850c-40f1-9776-fdc1e46dcf8a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f797ef-c702-4fc8-aaab-411962b98091", "sighting_of_ref": "indicator--bb0ab61d-850c-40f1-9776-fdc1e46dcf8a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8433677f-dbbe-4ee9-86b9-11c5590a2f6e", "sighting_of_ref": "indicator--56ec4021-7464-4b91-8510-af4347bb38fb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e68e66-ca80-4d2a-bf9a-dadb4daaa122", "sighting_of_ref": "indicator--56ec4021-7464-4b91-8510-af4347bb38fb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56f71a0-32df-4971-a6dc-b7e672191c9d", "sighting_of_ref": "indicator--b69f5463-2e4b-4c5d-8f48-00917b85940d", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de65ec2-c77a-47ba-b41b-ef1ef866c87b", "sighting_of_ref": "indicator--d24c34ff-93df-40dd-8a66-4970f628711f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9dd7e4-1fae-4611-adfb-0d23dda33bc2", "sighting_of_ref": "indicator--47320a66-deb3-4206-9e9f-80ad84a51210", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26064a83-5337-464e-b7b2-a0308fc9e860", "sighting_of_ref": "indicator--982e940e-210b-4232-a096-dbacb0b0ca70", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f17667-3579-4334-8d95-cd77ff533b1a", "sighting_of_ref": "indicator--982e940e-210b-4232-a096-dbacb0b0ca70", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3934685-dcd0-42db-8a7d-302619dfa4ed", "sighting_of_ref": "indicator--e269dea9-3a93-4992-b6e6-92b75b515782", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976c0c60-5cc9-413b-b16b-3d46f2e4836e", "sighting_of_ref": "indicator--e269dea9-3a93-4992-b6e6-92b75b515782", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5687abac-ad90-4fab-bec0-45e3883d0cb7", "sighting_of_ref": "indicator--e269dea9-3a93-4992-b6e6-92b75b515782", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefd34a7-960c-4f50-a5d6-a320e8ba0a84", "sighting_of_ref": "indicator--f555d403-e8ec-40a5-9a60-22aedb3db5d3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0833d3b6-e32c-4c17-a118-84b368b9d8d4", "sighting_of_ref": "indicator--f555d403-e8ec-40a5-9a60-22aedb3db5d3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b01767e-d89d-4847-8ace-9ca21e256e01", "sighting_of_ref": "indicator--7364c867-66a1-47f7-ad65-3c028cfdf84c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d987c4-b781-4f8b-8feb-a6574b5c5188", "sighting_of_ref": "indicator--58ecec7d-604d-40bb-8740-0a57ce17c1c1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7334865c-4940-490b-b4e2-97b1f7ed1189", "sighting_of_ref": "indicator--58ecec7d-604d-40bb-8740-0a57ce17c1c1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94916693-958a-483d-82c2-3d04dda7a56b", "sighting_of_ref": "indicator--ee635068-001c-4f10-9d49-6774ec9d6799", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5464a2-10c0-41b7-acef-16e94744575b", "sighting_of_ref": "indicator--ee635068-001c-4f10-9d49-6774ec9d6799", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8976b7de-8e37-4ce2-b805-158c616b5bed", "sighting_of_ref": "indicator--ee635068-001c-4f10-9d49-6774ec9d6799", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4e69c9-95ce-43b8-890b-c18cdc52c702", "sighting_of_ref": "indicator--19d6e4a5-cb57-4b64-9bae-370258874f76", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f73dfb-c638-4947-8d5b-40f911a09816", "sighting_of_ref": "indicator--19d6e4a5-cb57-4b64-9bae-370258874f76", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31dc13f9-c24b-4752-87cb-ffa2b761ffa6", "sighting_of_ref": "indicator--6e6b22ce-1f72-4178-8644-8e2a2bf3c25e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4c1e5a-44be-45a4-82db-ae33eaffccca", "sighting_of_ref": "indicator--6e6b22ce-1f72-4178-8644-8e2a2bf3c25e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da95e8e-d00f-4fed-bcc8-6dac84cf65ad", "sighting_of_ref": "indicator--2b4be0ff-84f3-4d64-9e28-e7e7487d87b1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f181a4f-630b-4588-8ed8-b08decd4b8a8", "sighting_of_ref": "indicator--2b4be0ff-84f3-4d64-9e28-e7e7487d87b1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196c6642-1f78-4229-af60-618c4ef31a12", "sighting_of_ref": "indicator--99374364-fc50-44f8-9e3d-79746d21793d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d633d474-5569-4fd1-89e7-e4d7a3471f72", "sighting_of_ref": "indicator--1b650aca-4243-457f-ad58-87675724cb82", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d7a240-0a2a-470d-b7e4-b789a650527b", "sighting_of_ref": "indicator--e1ca7653-5ac1-425f-9a70-0cb3800a6ed0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e067de8-95f2-439c-8a31-76e8038ac190", "sighting_of_ref": "indicator--8fb1b8e9-1cc1-46b9-abb5-fc1e85190e93", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0de19e-2b2d-4472-92a9-9a229fee2b81", "sighting_of_ref": "indicator--620f7783-8e84-4438-91c3-f42fee97e445", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa1c93c-bdff-4f0a-b2ce-1f097d6aef0a", "sighting_of_ref": "indicator--a80e2615-960e-49bc-825f-75f7425d24e3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e1f7d9-eb98-45e6-93e7-66b0dbba14f1", "sighting_of_ref": "indicator--a80e2615-960e-49bc-825f-75f7425d24e3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4428fcd5-42df-4ac4-9e5f-5ddd1a27b380", "sighting_of_ref": "indicator--a80e2615-960e-49bc-825f-75f7425d24e3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07701f2f-2c85-4910-9330-2a77240d6325", "sighting_of_ref": "indicator--a80e2615-960e-49bc-825f-75f7425d24e3", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25b81c0-b028-40e3-86cd-07667768d51f", "sighting_of_ref": "indicator--6a16fdd2-e106-465a-8cdc-be07ce9fa5d9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d153677-6d31-41b3-94d7-1f769a1916d7", "sighting_of_ref": "indicator--f9eb58b9-b224-4d0f-82c1-b431f9f52e5b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba85597-793c-412b-b0a5-80a0c9b12d38", "sighting_of_ref": "indicator--6ba6d3e7-e159-4aea-80f4-10feb713126a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf14aab0-8d14-4546-a397-2ee2a03697cb", "sighting_of_ref": "indicator--5213f383-ab06-4962-a52f-e85b55667110", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2ecf8b-57d0-4f9f-a21b-a6a9bf55c2c9", "sighting_of_ref": "indicator--400970b0-0a99-43d4-88af-a7d9bf3c4838", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a89129-7ef5-4992-a909-0501d227ca4f", "sighting_of_ref": "indicator--c59ea888-a294-42c8-8ef0-6d8121b0a06d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56ce8de-30e1-4e2e-ace1-725bdd76f3ff", "sighting_of_ref": "indicator--c59ea888-a294-42c8-8ef0-6d8121b0a06d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e57a0b7-104e-479b-98ff-85dddecf8479", "sighting_of_ref": "indicator--fa553669-6f23-44b3-81f4-f977403aa2f9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6532db-9628-4f98-924a-96ae931591e6", "sighting_of_ref": "indicator--329cfe06-33a3-4d1d-9348-3b6bd9b999b2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c499b2-d35f-4446-ad2f-3d90819e3b27", "sighting_of_ref": "indicator--f3ce4e2c-ea80-4085-87ed-790b5bac65b5", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a11c8cb-b42f-465b-b12f-10d4b8f9171d", "sighting_of_ref": "indicator--1f8cb739-5321-4a96-8d0a-1478c113a434", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557755fc-6f70-41f6-b5fb-8b9c24096cc5", "sighting_of_ref": "indicator--f3ea25a1-1370-48a8-a6cc-6984cc12a43a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85add899-ad5a-4d06-9324-ab5112fce51c", "sighting_of_ref": "indicator--d6dcd72b-abba-4526-8e42-63ccef1f6561", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7b7a68-3622-439f-a01a-7b6bd9444b63", "sighting_of_ref": "indicator--8d76615d-feb4-4f07-9274-e31cf56c783d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55c7777-ce2c-453e-91b9-678b979a3aab", "sighting_of_ref": "indicator--c7d04f4e-fd7b-4b7f-831a-e09526c5019b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9ff85b-bc3a-481c-b351-a3275e779e90", "sighting_of_ref": "indicator--26ed0998-64ad-46d0-adc6-ab655d8711a4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4832949-dbd5-4fa3-86b2-71ce957c1022", "sighting_of_ref": "indicator--8036256e-29ed-42a2-9bec-8f3ba1feb4f2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731946df-e70a-48c6-964d-038500ae5a4f", "sighting_of_ref": "indicator--8036256e-29ed-42a2-9bec-8f3ba1feb4f2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3a6159-b991-4823-87aa-3ac84cf6db7f", "sighting_of_ref": "indicator--35d23654-cfc5-44e3-8b7e-1b92ca71f50e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1216521-0b47-40f7-9e92-049517e8f734", "sighting_of_ref": "indicator--35d23654-cfc5-44e3-8b7e-1b92ca71f50e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681313dc-f1c8-4fea-a924-1bae2821b8c0", "sighting_of_ref": "indicator--0fd2b93a-6db3-4f69-a8c1-8f951f413b4f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3276437e-8cdd-478e-a3a0-9fd1064d2cb8", "sighting_of_ref": "indicator--2f0f8d53-bce3-4281-aa5f-4f0e0b00f499", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd67cb36-6680-4505-9ecf-00a59447c7fa", "sighting_of_ref": "indicator--b6e45889-8e5c-4e9b-8763-e9991350654a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9818550-34b7-4157-8326-0ee3af517aca", "sighting_of_ref": "indicator--b6e45889-8e5c-4e9b-8763-e9991350654a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437c3087-11cd-4eba-b783-273e15fad275", "sighting_of_ref": "indicator--d01860d8-3950-4f1b-bf23-725efd597cfe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e005abd-970c-49bd-a700-f329e538f27f", "sighting_of_ref": "indicator--c84ecd68-cb63-4159-91ac-88f7b12b0208", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbe98e8-635c-4e4f-97f9-1f89c0f1f496", "sighting_of_ref": "indicator--00959f23-c371-4fd3-8d0a-a55df79866fa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8350f7d6-cb0a-4da6-95f4-71d50645a94a", "sighting_of_ref": "indicator--00959f23-c371-4fd3-8d0a-a55df79866fa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2111f4a-23dc-42fc-bc87-bb693ae77d07", "sighting_of_ref": "indicator--787ff54b-7859-4419-aa04-c79355e2edd7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a575b7c7-42fa-4b7b-82f9-26cc45fd6350", "sighting_of_ref": "indicator--b3805b3a-618b-4e27-a9ed-ca8f23fb2281", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6f5850-81be-4214-9796-8a5949a6ed52", "sighting_of_ref": "indicator--aad61814-7ee6-4268-913f-4bd504e9284b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55493874-1222-4548-8f70-9ab464e9cca2", "sighting_of_ref": "indicator--ed30b151-69cb-41e2-8bf1-20664919dc22", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe5f780-8afb-4238-b8fb-96a560c4f927", "sighting_of_ref": "indicator--ed30b151-69cb-41e2-8bf1-20664919dc22", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161ac7c3-ada9-4a0d-98ee-74af119b4ef5", "sighting_of_ref": "indicator--c40aac06-006c-44e2-aa17-0363fed45f6b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d8fafd-3ea8-452a-a783-cfc9df7b90ef", "sighting_of_ref": "indicator--8808a74b-ca9d-408f-a3f4-5deb28506d7a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151674c5-0f2b-4c0d-9c22-bc9cd2da6da4", "sighting_of_ref": "indicator--3056ece8-a498-49c2-a638-ef6b4d88a26a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b49a5ad-b0c3-4e6d-84cc-6147e110082c", "sighting_of_ref": "indicator--5a7bac35-5a6b-4fe0-a423-f58c80f5387f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42427a1b-5787-43d9-8f5d-d759ba695c6e", "sighting_of_ref": "indicator--5a7bac35-5a6b-4fe0-a423-f58c80f5387f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450a79ef-4f28-479c-84a1-4e842a697628", "sighting_of_ref": "indicator--d27f5285-9d16-4c79-930a-6f7cee1e476b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded7b0d0-4ffb-4f71-b619-8aa535ef4a3d", "sighting_of_ref": "indicator--22f02ba1-e947-40d3-90d2-ba5e2cf1aa78", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c5cd18-6533-4ac6-9798-c5c512b80c08", "sighting_of_ref": "indicator--22f02ba1-e947-40d3-90d2-ba5e2cf1aa78", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df100baa-e2e7-4f04-aafc-f855b60c64ca", "sighting_of_ref": "indicator--4ccf74ba-7edf-4db2-b4d6-645394d5787e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718cf63a-422d-44d1-afa1-df3fd99927d6", "sighting_of_ref": "indicator--9950e76b-84f4-47dd-98e2-4ae1f24c1321", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7656047f-1373-4382-a6c4-55c3931e6ada", "sighting_of_ref": "indicator--b9e400fd-3610-4268-ab26-464f3724d3e2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6a5de4-da9c-4661-9e50-7e056b49aefe", "sighting_of_ref": "indicator--b9e400fd-3610-4268-ab26-464f3724d3e2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6778bdcc-24f9-4d47-9ee9-e8b57ab5aa97", "sighting_of_ref": "indicator--393e3b42-d5b0-470a-af4c-39628575ccc9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b456155f-bb80-4aee-8f22-ee1c80e62bdf", "sighting_of_ref": "indicator--393e3b42-d5b0-470a-af4c-39628575ccc9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c7e889-3344-4bf4-b98b-2aeaff1e7e7e", "sighting_of_ref": "indicator--f9c06ee6-f264-4e3d-8d08-ab8098947717", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d819320e-d364-4628-a9a5-1f32aded0606", "sighting_of_ref": "indicator--f9c06ee6-f264-4e3d-8d08-ab8098947717", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e8f1dc-b3b1-4df1-b890-44d68b8743a8", "sighting_of_ref": "indicator--d0346bac-58dc-4d2b-ac92-2ae2dcd2f1ab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961b9ce5-3b86-48b0-8006-3549a7ea18df", "sighting_of_ref": "indicator--860358b2-50ad-4340-ae7a-8e881f71075f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838e5530-27e5-41f0-a28e-714c650bd1af", "sighting_of_ref": "indicator--272ad5dd-e6c3-4748-8dce-c0a8746634e3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7639959-a5f0-4bfb-b75a-f64ffb977dd1", "sighting_of_ref": "indicator--a512a058-a12e-4ff2-b529-2131f66e19ee", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115a5b51-8d45-4ecb-9922-a8354ed1590a", "sighting_of_ref": "indicator--bb3d9f97-9daf-493c-8026-6613f196a5cb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6318d3de-2008-46c0-9957-c615deee5160", "sighting_of_ref": "indicator--69c0084b-72b8-4b1b-b663-b94b2c816f6c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ce101b-7dc1-407f-b287-ba64bb3ccc61", "sighting_of_ref": "indicator--d722adfe-d74d-445d-b5c0-b9861900fa36", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824ebfee-e205-426d-ac31-cabff6e92ff5", "sighting_of_ref": "indicator--780042c9-d655-4745-af76-7bd7277a87eb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07eee18d-3538-4da9-9402-157bd1a4cda1", "sighting_of_ref": "indicator--bedd670a-749a-4e7b-9126-403544dbdfe1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a5913b-334c-49c6-9f21-2bc41c0e05e0", "sighting_of_ref": "indicator--bedd670a-749a-4e7b-9126-403544dbdfe1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1ba28b-53b7-4615-a0dd-04ca8eb94fd2", "sighting_of_ref": "indicator--7c24e2dd-8a0e-4a7a-ae20-d922c21ea1af", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90a8217-7016-4d7f-8d03-76a32d29c1d2", "sighting_of_ref": "indicator--81a14631-dcf9-43af-9bc7-82ab381866f4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d752729-dea5-4c2e-92a4-e81be8bbc208", "sighting_of_ref": "indicator--2629d036-e53e-4107-b5d5-0246212e9e08", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ee1269-5b12-4321-8a06-5b2bec573acd", "sighting_of_ref": "indicator--b59ac257-b1f1-459d-97d6-91b64c2bf3c0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a905e8-a36f-4635-af07-2b92d9887a02", "sighting_of_ref": "indicator--9633d6d3-63d4-45de-9e98-73ec3233d3d8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03013eb9-0ace-4b9b-90d3-1b2a1c4a4ff7", "sighting_of_ref": "indicator--9633d6d3-63d4-45de-9e98-73ec3233d3d8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1e2509-844a-4ac1-addd-f24712ed8992", "sighting_of_ref": "indicator--55d51975-8339-4ff0-b686-a0840e0935b5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefb4fcc-aea6-4bd3-80d0-f79860171e33", "sighting_of_ref": "indicator--55d51975-8339-4ff0-b686-a0840e0935b5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14efa589-e2e6-4eb1-b3f5-8806c1d11588", "sighting_of_ref": "indicator--e63193d1-a01e-4567-911d-9f2732ff45a2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da59638-224a-4c2c-8fe3-f3090739942a", "sighting_of_ref": "indicator--e63193d1-a01e-4567-911d-9f2732ff45a2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c02f21-e995-49bf-8748-6a33fa68b3de", "sighting_of_ref": "indicator--8dd2242a-aa00-4a8c-a025-e2e030bc17fb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fab1874-0893-4f32-83e9-b982a616ef62", "sighting_of_ref": "indicator--2f986e6f-bfd4-4cad-a476-593462137183", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28109f7-b393-48b5-9203-9cee8610f518", "sighting_of_ref": "indicator--4ce1c2f6-9792-401b-8e50-b6a66011c35d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa043eb-ab7a-4825-9e52-8b4a1a34cc07", "sighting_of_ref": "indicator--7df5081f-1e4e-4a38-9832-d443cd536e21", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65b9ec2-9fec-4bcb-aedf-5f027c056581", "sighting_of_ref": "indicator--55fc3b46-42fe-4cff-999b-b5e917586701", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f65141-60fd-47f4-9e8a-54d9417b658c", "sighting_of_ref": "indicator--55fc3b46-42fe-4cff-999b-b5e917586701", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258a71cc-506a-4ae5-9429-b94071b8863d", "sighting_of_ref": "indicator--55fc3b46-42fe-4cff-999b-b5e917586701", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f68a7d-69fe-405c-9a1b-a2ec91af72f2", "sighting_of_ref": "indicator--8c01bfa4-ed8e-4008-9d1b-23c733d7fe0b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77f38a9-8956-4632-8dee-84185d0971d0", "sighting_of_ref": "indicator--8c01bfa4-ed8e-4008-9d1b-23c733d7fe0b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57db2d39-0966-427d-970d-689b22648206", "sighting_of_ref": "indicator--f7e405fc-484f-4b07-bdb5-cb073be06e6f", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e01bd8-2a51-4291-b18b-b1ac92e72470", "sighting_of_ref": "indicator--9951044f-f5ba-4043-867f-bafc8733447e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eeea688-c792-4c02-9f8b-472bbd4c36a0", "sighting_of_ref": "indicator--7e6465c8-daae-406b-8f3d-3093ce067036", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9f2dad-71a4-4707-89c6-25456cee31ca", "sighting_of_ref": "indicator--830702af-6f9f-4802-bb45-d6d0df727b3e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9948abcb-9ebc-4a9b-bfa5-00d9ddae060f", "sighting_of_ref": "indicator--830702af-6f9f-4802-bb45-d6d0df727b3e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b788b1e3-6f39-470a-b422-43e0c8a66d10", "sighting_of_ref": "indicator--51f9dc6e-9c02-4d00-b873-4f8df127096e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db7e058-7079-4148-8147-80284a119273", "sighting_of_ref": "indicator--38a79582-d33d-45b2-89a4-91f3421f53cf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9dadce4-4c6f-49b4-84ed-d0d4d85a7394", "sighting_of_ref": "indicator--aa6bd2f4-c487-4535-8450-2ae9f949a355", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012f4703-80b2-4f03-96e2-142001f63469", "sighting_of_ref": "indicator--aa6bd2f4-c487-4535-8450-2ae9f949a355", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac75f89c-dff7-4025-9aac-48f6cb4376fd", "sighting_of_ref": "indicator--1079b772-1b63-47b4-baa8-c67ed0b2d571", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e1f49a-a532-410f-a8f5-7a2f82adcac3", "sighting_of_ref": "indicator--1079b772-1b63-47b4-baa8-c67ed0b2d571", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba964e34-2ebd-4d6f-877d-e310ebb72368", "sighting_of_ref": "indicator--7bf12848-65da-409b-bd45-1e71f093b0d8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb7554e-cd8f-4ebb-ab2c-ae9f48f0d97f", "sighting_of_ref": "indicator--0c760585-a577-4afb-a439-88cac8163c40", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72160750-e4da-44cb-932e-792cb0980367", "sighting_of_ref": "indicator--0c760585-a577-4afb-a439-88cac8163c40", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d786737c-d96e-4b88-93c8-1b9e97e7c8b9", "sighting_of_ref": "indicator--f6e05246-8c0e-4caa-8659-1f714c943ff7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04106c18-85e1-4f4e-9eb8-5cc48d240c6a", "sighting_of_ref": "indicator--f6e05246-8c0e-4caa-8659-1f714c943ff7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37cdfd94-c5f2-4d45-b52d-76e6709eb744", "sighting_of_ref": "indicator--4be00f27-8be0-4c14-8c44-571781411615", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25f92e5-5a08-42f2-b53f-dcac0ebffb2d", "sighting_of_ref": "indicator--4be00f27-8be0-4c14-8c44-571781411615", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b1a76a-b343-4e3e-801f-42fabbb2c92f", "sighting_of_ref": "indicator--dcf62889-cebc-4c38-9e6f-cf435c44d3d0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d2d27a-21fb-4915-b60b-302bd9d991b6", "sighting_of_ref": "indicator--cee982de-f62d-4cff-a341-d9d540b70e57", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9bb9106-12b2-4e41-af97-b48b0489b082", "sighting_of_ref": "indicator--cee982de-f62d-4cff-a341-d9d540b70e57", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48b4588-5cf0-4e10-b84e-878bb373c718", "sighting_of_ref": "indicator--a081a338-ba38-4396-8262-18213e38acf0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30790a3d-5a99-47ea-bbe6-a4700ce258a7", "sighting_of_ref": "indicator--a081a338-ba38-4396-8262-18213e38acf0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04029a74-6709-4e22-af99-ac4d189e7c59", "sighting_of_ref": "indicator--48297bd1-a50a-4461-a977-7a05d7ba04d8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6488a17d-c886-4f9f-bade-495bfa0fd3e4", "sighting_of_ref": "indicator--613a824d-96f4-4f31-9e97-19ece6ede656", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda91965-f7d7-45f0-97c3-a4d768e87a88", "sighting_of_ref": "indicator--613a824d-96f4-4f31-9e97-19ece6ede656", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6545cfa3-559b-4b20-bca7-4270b6a95a83", "sighting_of_ref": "indicator--7bdef821-8736-4b91-9185-fbc660aa972a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30833d64-7fb9-4faa-9e1f-b90f6e2495c5", "sighting_of_ref": "indicator--711900dc-44e9-4202-af48-953c96fb583c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909ed008-4f12-41df-b21a-23c2e1a2b7c3", "sighting_of_ref": "indicator--711900dc-44e9-4202-af48-953c96fb583c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12abcd60-3f23-4527-a997-71379dfe1cd0", "sighting_of_ref": "indicator--0d3ce636-74ce-49fa-8102-55bbc733237c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac2ff16-93bd-4c9a-9673-2f017eaac963", "sighting_of_ref": "indicator--0d3ce636-74ce-49fa-8102-55bbc733237c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28605600-4f93-445a-817b-225f626061e1", "sighting_of_ref": "indicator--a3a0b45a-a7ec-486c-801f-ce7a4b729249", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9c5420-519b-4e6c-85e4-74ef06844d85", "sighting_of_ref": "indicator--a3a0b45a-a7ec-486c-801f-ce7a4b729249", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4441ec1-d081-44f1-88db-2bdf77c508bc", "sighting_of_ref": "indicator--e0fdca66-da7b-4896-b541-198815182284", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21af0697-313c-436e-b14a-46a3e73338c1", "sighting_of_ref": "indicator--e0fdca66-da7b-4896-b541-198815182284", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fdfb6d5-c74e-461d-bd0a-c76eb2dc6b0f", "sighting_of_ref": "indicator--42aa714c-4d97-44de-9772-1c6783ca9558", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f120f91-4a2b-4de9-9052-1d494e3bbffe", "sighting_of_ref": "indicator--42aa714c-4d97-44de-9772-1c6783ca9558", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c41f1cf-c1bb-458d-8786-9bcf5460fa7c", "sighting_of_ref": "indicator--94ea872f-0b50-4b8a-87af-228bfd8a98b3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed03478-887c-4773-8685-e41a0a927347", "sighting_of_ref": "indicator--94ea872f-0b50-4b8a-87af-228bfd8a98b3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2aa584c-a201-4d4f-aab0-be12c7a94c91", "sighting_of_ref": "indicator--e92a9b5d-cc18-4a66-b66e-c5ddbc3b9d6c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa4ebeb-0963-4094-a75b-e4efabe61658", "sighting_of_ref": "indicator--5d2b490a-9eb4-49bb-b8bc-f1efe20394ff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4e576b-c042-49bd-b80b-8f15dd7c8f7e", "sighting_of_ref": "indicator--5d2b490a-9eb4-49bb-b8bc-f1efe20394ff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b673dbe1-b638-4a82-98b7-834c15d16f83", "sighting_of_ref": "indicator--7c979706-4361-4a0e-9b3f-d8d87ccf2bbf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f22c74-2a3d-47c8-b264-b2300d2c1b1f", "sighting_of_ref": "indicator--7c979706-4361-4a0e-9b3f-d8d87ccf2bbf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6774775f-24a3-4282-9ab9-40923337e64b", "sighting_of_ref": "indicator--79ff71c1-fed8-4ccb-9da7-b4f659b08566", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a2a68d-263c-4dc3-8f9b-20a9f73152f9", "sighting_of_ref": "indicator--79ff71c1-fed8-4ccb-9da7-b4f659b08566", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57cef39e-0546-4434-8faf-8afdb214df3b", "sighting_of_ref": "indicator--7946f7ff-f867-412f-8aff-92adb24efe45", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c356387b-c302-458a-ba5e-1f9baf613f70", "sighting_of_ref": "indicator--7946f7ff-f867-412f-8aff-92adb24efe45", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8431f6da-c56f-4d6f-94de-0c903ba3e945", "sighting_of_ref": "indicator--7946f7ff-f867-412f-8aff-92adb24efe45", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b87c11c-5338-4cd8-835d-9ad1a759aa0f", "sighting_of_ref": "indicator--d6499794-b5bd-42a5-b456-854178e3c856", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e4807f-1d88-4364-bd00-5bddc4aeaea6", "sighting_of_ref": "indicator--e449d8e6-388f-4aaf-8454-5eb8b0850d38", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0a37db-0ed7-4031-b547-50c150c4b662", "sighting_of_ref": "indicator--32a59915-ca2a-491a-9263-a9d77bd77a13", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a6f216-816d-410e-b08e-90bbedf6aadd", "sighting_of_ref": "indicator--7d281dcc-e4e4-410a-8319-225d4ea20fb1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a59adc3-2bc7-4bbb-8755-b23529288baf", "sighting_of_ref": "indicator--4904a4e1-99a8-4c16-8d4c-5acfdeb82430", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b320a4f3-e0f0-4065-bcf5-f07d9d8e7d01", "sighting_of_ref": "indicator--0e0d1b2c-a5b9-4b19-8a66-c608e03b6005", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3922d71c-5925-4fab-ab64-1e0b808f2efe", "sighting_of_ref": "indicator--53ad5e19-b1bf-4466-9f3c-502beecc4fe6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f640172-0453-4812-b418-91aa573313c7", "sighting_of_ref": "indicator--d20075f8-26a5-4a43-b295-5af4a2b6526b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc9d2ff-28b3-480d-b2fd-5c60e9fc6f7b", "sighting_of_ref": "indicator--7f075e6f-4b5b-48e3-8d55-3c671ecc210a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef5afd2-1de2-4c53-b559-699462062a52", "sighting_of_ref": "indicator--48617de2-ad8f-4006-82c7-625442f3b1ee", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d36483b-a850-4921-8877-06b5e4a860cf", "sighting_of_ref": "indicator--5d1f8851-1f81-4cb0-bd6d-05b2df3d0cf3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4818272-13db-49b4-9382-d7345dd27c5f", "sighting_of_ref": "indicator--0480e168-cd27-4d86-b675-9d02a2bbf4e5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f709d7-7320-4b7e-9586-dc86d9ea2e5a", "sighting_of_ref": "indicator--4323a1c8-fe30-427c-98e7-c72708a4d997", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfd1fd1-4110-4203-940e-518b8bf8d806", "sighting_of_ref": "indicator--fe12f0fd-e95a-4189-8567-2f54c1550460", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f373621-80a0-4ff5-bc54-3813a7193b17", "sighting_of_ref": "indicator--1ce58112-12d2-4f80-a054-aba3b5b5b12e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d80bf5f-ed1e-42f8-a5a8-c82cbdcafbc6", "sighting_of_ref": "indicator--31df063f-5247-4268-b032-87bf933b0fdf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8837be6c-749f-458f-a427-19d632057ebe", "sighting_of_ref": "indicator--a7009221-f123-4139-89f6-a51a20e365bf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91fc60b-f52f-41e2-ac15-b3b6bd5b6029", "sighting_of_ref": "indicator--62f6bb71-d505-43b9-bf3c-646333a32cbc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8caa7f-455b-46e4-a925-8ee087a95211", "sighting_of_ref": "indicator--bdd4e869-570e-4936-9bf2-eac88b3129ab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba085ac-7d06-4189-a37d-2efbb6ae393d", "sighting_of_ref": "indicator--b350e875-37ef-481d-9431-78b6f52a663a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb15fa18-b167-4c1b-9390-da01b3a4a157", "sighting_of_ref": "indicator--8b8d9ab4-c704-49f8-b3d9-8345bb7f1b6a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bed477c-8b54-4fdd-8ed8-7a028b26d844", "sighting_of_ref": "indicator--dc2c7a87-40b6-4e1b-b6a1-7fa1e5708df3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee15e259-f088-4709-963a-9e3a95f7645b", "sighting_of_ref": "indicator--d228508a-6be6-413d-bf82-5914abe91d2e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadec518-3252-4732-9d45-d87ed6143fff", "sighting_of_ref": "indicator--49731ead-3d92-4747-b3b8-d2febeeec531", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf98775-1a29-45dc-96b6-e98efab712b1", "sighting_of_ref": "indicator--ad5c5cb6-38e7-427a-91fb-aa68e5fb347b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f38d1b-f5a2-43c6-9f8d-5cccca69f2f4", "sighting_of_ref": "indicator--ad5c5cb6-38e7-427a-91fb-aa68e5fb347b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b863b67-466f-4ba5-b6ab-9be32f511a11", "sighting_of_ref": "indicator--c2ead4b1-fdea-4360-a179-5caa718d8eff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22012f1-275e-48e1-b25b-5838c0061d24", "sighting_of_ref": "indicator--60b4937a-38da-4222-854e-dd953fae7446", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668fda3a-c4ce-4050-8046-1eb21e31f3e9", "sighting_of_ref": "indicator--309fc235-b626-45f1-a4cb-174f87ec6692", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfdee88-b147-4b18-b825-fd6ebbe81c3a", "sighting_of_ref": "indicator--238c4f5e-d395-4a64-9177-663140b6d108", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c857a73c-fc1c-406f-af6d-163d2ff2c518", "sighting_of_ref": "indicator--329fa29a-6070-4a10-95c6-be328cab449e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee89ad7-5c57-4885-af69-8e769938eacb", "sighting_of_ref": "indicator--329fa29a-6070-4a10-95c6-be328cab449e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87a6629-6544-44c6-8ba0-7ec319fc85a4", "sighting_of_ref": "indicator--d72c5b05-e329-47d8-919e-21ee3922067a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff947f1-a25d-4845-9869-fdc963503239", "sighting_of_ref": "indicator--d72c5b05-e329-47d8-919e-21ee3922067a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da021fc-3443-4cbb-ab20-1cbd16626c4c", "sighting_of_ref": "indicator--df36ebf2-4f19-4055-a630-75925894b5e9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf43e52-2c14-485b-b9a1-21090c8b51ea", "sighting_of_ref": "indicator--7a2c1084-1142-4f12-8753-9327f9e28545", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c119f7b-e78e-4a81-afb5-590510e9c043", "sighting_of_ref": "indicator--7a2c1084-1142-4f12-8753-9327f9e28545", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf90caf-a8f4-4320-9be7-4b990007a575", "sighting_of_ref": "indicator--ee124904-8510-442e-b997-c90f29d18a54", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d53f8b-4d70-44e3-8b29-0997f9991304", "sighting_of_ref": "indicator--a41f17e7-fb44-4549-bf74-d3728c02e3b7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90390071-2c54-4a3e-ab24-be97af543299", "sighting_of_ref": "indicator--82bf67ef-6bb2-49f3-b922-f9084ff48a57", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84e4469-dfe8-4440-8be4-9461497b5cd9", "sighting_of_ref": "indicator--82bf67ef-6bb2-49f3-b922-f9084ff48a57", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b132f4d2-ee80-442a-8e92-230b3f947a8d", "sighting_of_ref": "indicator--9ba5c0de-eeb5-48a6-a36e-41d7ede8bdfd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc859bf-57b0-4d65-947c-7c6a1ed1284b", "sighting_of_ref": "indicator--64671deb-fabc-4e14-a4e2-a6ef0828bbf1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1afcc0-41ec-4c84-b142-db0d3069fbbf", "sighting_of_ref": "indicator--53b8f7f0-9800-48d6-912a-0ef990add7d7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b1a654-4dc7-4334-831a-43d6175c3ba3", "sighting_of_ref": "indicator--7985d366-6fb0-493a-af15-82ab27b16bd6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fced8cd-6414-4ecb-ae63-4f5495ab0d69", "sighting_of_ref": "indicator--8d8b99ce-b866-4fbc-9f9b-5cfa0af8a025", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a7fdd5-218d-48c8-8d83-39c9155fdc6e", "sighting_of_ref": "indicator--8d8b99ce-b866-4fbc-9f9b-5cfa0af8a025", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73ee30a-0590-4695-a7cc-9c88a2a14805", "sighting_of_ref": "indicator--8d8b99ce-b866-4fbc-9f9b-5cfa0af8a025", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b3b7e9-375a-4735-80bc-e289b37a728c", "sighting_of_ref": "indicator--a2d1656f-31a7-4f0c-8c2d-649960944d41", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40274c2-716d-4a86-90db-6a366fb7f4d2", "sighting_of_ref": "indicator--1b05798e-ecd1-40d9-9777-bc07effbc095", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb98799-fc7b-4b92-bdb1-fc12be258cdf", "sighting_of_ref": "indicator--1b05798e-ecd1-40d9-9777-bc07effbc095", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4afaa9-a351-4a58-944a-52abec55ffeb", "sighting_of_ref": "indicator--1b05798e-ecd1-40d9-9777-bc07effbc095", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc97ad95-a6d9-49ea-932c-2b10957733d9", "sighting_of_ref": "indicator--0bcedbf0-e509-440c-84dd-9c7c7daf0f65", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3d4121-3fb5-4d41-9749-ac8014a6add8", "sighting_of_ref": "indicator--cf862656-1ce7-407f-968e-481def349941", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a46ce9-6381-47c7-9c17-606f2183a919", "sighting_of_ref": "indicator--1df6761e-db6d-49b3-b90b-81256c2bfd79", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ea6aa8-29ad-45de-a925-05cb69fc3100", "sighting_of_ref": "indicator--5b9cb8b5-5ae4-4d14-94b7-7357cc85d074", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a067f8-a915-4e6d-a043-b58b0bae5568", "sighting_of_ref": "indicator--5b9cb8b5-5ae4-4d14-94b7-7357cc85d074", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d80d08e-1e03-4342-abe8-ab2a667b62ec", "sighting_of_ref": "indicator--92e82c4d-ca11-4efd-88da-5d5a0478376d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec278ba-02e9-4606-9ea9-b04594c73824", "sighting_of_ref": "indicator--92e82c4d-ca11-4efd-88da-5d5a0478376d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0dc6ab0-09fd-4b32-bf78-20fd3010b40d", "sighting_of_ref": "indicator--92e82c4d-ca11-4efd-88da-5d5a0478376d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7cb2677-8f25-44dd-bfd6-0fa278909609", "sighting_of_ref": "indicator--d22aa26b-87d0-4f96-b24b-5d088efbfea8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916a4d6e-8024-4c03-9cfd-0d8769f90a75", "sighting_of_ref": "indicator--d22aa26b-87d0-4f96-b24b-5d088efbfea8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e0a3bb-b87a-4f4f-8a81-2fece650ccd2", "sighting_of_ref": "indicator--4f769126-c206-4d38-b28f-ab87b2437937", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0853be8f-1715-47e2-9b89-bfd6cd7a942e", "sighting_of_ref": "indicator--0b2b20c8-6eb9-4bf9-8348-393dff7f2146", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cebf288-01c4-4627-83d4-2cdbddf204ef", "sighting_of_ref": "indicator--0b2b20c8-6eb9-4bf9-8348-393dff7f2146", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce55b104-a518-4bd9-a531-9423e0a0dc8a", "sighting_of_ref": "indicator--c2f50ca7-c1ea-43ed-9574-d95fea4de7a9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8038fe8-d95b-4d6a-8864-66c547cad265", "sighting_of_ref": "indicator--a5509a06-20d5-4ca4-a0a2-ba679b055e53", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cde6a30-86ec-4cff-ba4a-8651d8d758d6", "sighting_of_ref": "indicator--a5509a06-20d5-4ca4-a0a2-ba679b055e53", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c95a9a-0468-4621-a97f-85d278bb0611", "sighting_of_ref": "indicator--09338e88-fa13-4a3b-8e64-5bd8b95f7758", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba023498-392c-4b28-8ae9-d6f7dbeafd6a", "sighting_of_ref": "indicator--09338e88-fa13-4a3b-8e64-5bd8b95f7758", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc1450d-e84b-4492-af59-7331fbcc710c", "sighting_of_ref": "indicator--09338e88-fa13-4a3b-8e64-5bd8b95f7758", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3b48a4-8651-45b9-a664-79a233839ba2", "sighting_of_ref": "indicator--5e20f7ef-41c5-43e7-9c1e-8220b9c1986f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816531da-5665-4538-ae79-efc653ba6b00", "sighting_of_ref": "indicator--a16fa719-bc29-4242-8c2e-af148b34a439", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f280ac0f-9892-4bba-ad42-1ddc4e179716", "sighting_of_ref": "indicator--a16fa719-bc29-4242-8c2e-af148b34a439", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41bc187-8107-450c-961e-6fb640e465af", "sighting_of_ref": "indicator--fc87b9c7-2ac2-4f61-b46e-f456558f407a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91dc2cb6-93ed-430b-8748-beadab2a2014", "sighting_of_ref": "indicator--fc87b9c7-2ac2-4f61-b46e-f456558f407a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9526c2bf-e3b9-430d-b81b-fd507f94cfe8", "sighting_of_ref": "indicator--fc87b9c7-2ac2-4f61-b46e-f456558f407a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2701df03-1689-4082-a1af-dd73a75f92c2", "sighting_of_ref": "indicator--c3de75b9-4c80-4e66-98a5-1e18cb43a80c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d3944a-51b8-49a3-9dff-e36dbe3dc830", "sighting_of_ref": "indicator--c3de75b9-4c80-4e66-98a5-1e18cb43a80c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7b5db1-ae74-47e6-af28-364a0524558c", "sighting_of_ref": "indicator--c3de75b9-4c80-4e66-98a5-1e18cb43a80c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648c4de5-9d10-4964-aee1-8efc5a7e04b4", "sighting_of_ref": "indicator--f9baaa81-d748-4689-897c-21c25085cbc9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f1ca41-b34a-4c54-8eec-f0e7f43ca8f4", "sighting_of_ref": "indicator--840ae0fb-40f7-46f8-bb6d-55193c0cdf4d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92da9ba-8499-410e-9e39-342eefe16b53", "sighting_of_ref": "indicator--840ae0fb-40f7-46f8-bb6d-55193c0cdf4d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796f04ac-3232-44f0-9066-a36495dd6566", "sighting_of_ref": "indicator--840ae0fb-40f7-46f8-bb6d-55193c0cdf4d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64337e7-0b7a-4556-a1c2-45e47df9cd5f", "sighting_of_ref": "indicator--13516445-cfa2-48cd-b90c-ff320582f63b", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f2655c-a35a-4ea5-ae21-630c70b5d8d1", "sighting_of_ref": "indicator--c8836697-23ae-417c-a484-3aec9cc96f33", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4de37ed-0790-4938-be5d-a938cadc21e2", "sighting_of_ref": "indicator--02a50643-e6e9-47df-942f-01bf68b77058", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7079ad5d-6abe-4998-b7b0-ae4e5e15eac0", "sighting_of_ref": "indicator--efd1293f-0cc0-4c04-894d-d8416ea1425d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71db6bab-f2bd-492c-bc2c-04f5be911543", "sighting_of_ref": "indicator--efd1293f-0cc0-4c04-894d-d8416ea1425d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff04dc3d-f739-4c02-b8a4-57fdb1408981", "sighting_of_ref": "indicator--d86bab95-6e03-4737-9863-11a5e0cf003f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a81c81-a47e-4b37-9ef1-471732fa91a2", "sighting_of_ref": "indicator--8b7a17b9-bb81-4bbf-8497-33cb1398889a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b335e1e4-8ed4-4fbc-abc1-7aa7430f2c3c", "sighting_of_ref": "indicator--8b7a17b9-bb81-4bbf-8497-33cb1398889a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1ad6f2-e7ce-4d4e-b6a9-749c4dd99589", "sighting_of_ref": "indicator--fb4acd1a-8e95-4191-b67f-0d9d99d9ec35", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5af73a9-89f0-452e-9e48-f9594933cd47", "sighting_of_ref": "indicator--fb4acd1a-8e95-4191-b67f-0d9d99d9ec35", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e12a7d-4df6-4a8e-91f7-85522a2f9115", "sighting_of_ref": "indicator--49e408fa-0353-4786-b6ac-bddad7ec42f0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a187ca-64d8-44bb-8f60-de1352ad6a05", "sighting_of_ref": "indicator--7549b23a-e49d-427d-a4cc-b1c412ef091f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39f65ab-b8ea-4e0d-aa9c-ea36bc3068e1", "sighting_of_ref": "indicator--7549b23a-e49d-427d-a4cc-b1c412ef091f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e8e1b8-e4d1-479a-bbdb-31da89302199", "sighting_of_ref": "indicator--dbb705d5-e30a-4901-9377-45d087ae5270", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122d0249-40d2-49cc-be2f-d0cdcb08e739", "sighting_of_ref": "indicator--469f9017-6e83-40b8-b325-7e72ac890a76", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd20415-5800-4ae9-b992-ed2d635d1354", "sighting_of_ref": "indicator--eca1e9de-d03c-425f-aff4-3397df233510", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94caccf-8d4e-40ca-adc6-f90eddbd9e77", "sighting_of_ref": "indicator--eca1e9de-d03c-425f-aff4-3397df233510", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4667fea0-01e0-4059-84d0-f94845406752", "sighting_of_ref": "indicator--f53a2721-4336-48d5-9a32-3dc36e79754f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0010754-e79c-40ef-8d93-2b9af341a78e", "sighting_of_ref": "indicator--f53a2721-4336-48d5-9a32-3dc36e79754f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08babf74-8624-4c74-9767-ca9970fa96aa", "sighting_of_ref": "indicator--228b98b0-4870-4872-92f5-ac112a32c88f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2b472b-29c3-4a8c-a832-d39cff1563b9", "sighting_of_ref": "indicator--228b98b0-4870-4872-92f5-ac112a32c88f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0012dc7-5206-425f-bce6-5d02f7c801cb", "sighting_of_ref": "indicator--8d165dc4-41d6-4fb4-86e9-9b8a271409f6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdc7ab6-302f-49f0-8437-acc484ae65ec", "sighting_of_ref": "indicator--8d165dc4-41d6-4fb4-86e9-9b8a271409f6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2896264f-2a67-4cd4-8b4e-ef0a70890465", "sighting_of_ref": "indicator--3fbaa3be-5ba4-4b2e-9ee3-6f420dfb1d52", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b99681-9adc-4377-b7ba-37a44023f263", "sighting_of_ref": "indicator--b2d93308-e345-4245-8101-c6cc2947f6a1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3a6cb2-8af6-4d71-91a3-1199696da384", "sighting_of_ref": "indicator--bf83590b-d80b-49b5-a2d2-73952afb5936", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b4d7bb-e220-4b09-9d12-06ddae506562", "sighting_of_ref": "indicator--9f254fc0-ad50-4282-8e51-c84c122385c5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce86ecd-52f3-406b-a441-a53e4f19de26", "sighting_of_ref": "indicator--16e015db-5c9e-472e-8feb-6d4ed29043a9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ad40d6-98dc-4b63-b1a1-efa0280123f6", "sighting_of_ref": "indicator--c330269a-83a3-4e38-b546-7ec4438d113c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b5f39a-039d-4ceb-9c1e-c837d6a30abf", "sighting_of_ref": "indicator--98c7445b-fcd3-4097-9ddc-ccb353e90a7b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc65cbee-6dce-4634-a239-6212e07b06c6", "sighting_of_ref": "indicator--cf21344c-0d7c-4f4b-9725-4710b71d7d95", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c9ee16-8f25-4f11-b269-30f5f73dfd8a", "sighting_of_ref": "indicator--de181499-f242-4a38-8c3d-d7d492266e0a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e324e8-556c-4153-9f0a-a698845965e8", "sighting_of_ref": "indicator--5811ee55-6e86-4b66-bffb-8c54ee6a35b4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ace498-3b15-417b-8f41-3eeb5515438d", "sighting_of_ref": "indicator--e60f740a-5c58-43aa-b8ef-4ecb1fce13ca", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2bfcf9-adcb-4560-b8cd-a281d8cd55ca", "sighting_of_ref": "indicator--36937454-123b-4064-ba42-56683b08c15e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ea6a0b-ad40-471f-8e43-0454898d116f", "sighting_of_ref": "indicator--78a9c076-4ed3-485c-b905-6748941c1507", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0022130d-1811-4ba0-ba5a-6244ab4bfd93", "sighting_of_ref": "indicator--4cb93a47-2574-4d63-a14a-13f5a76a416e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad217ec3-cc11-4dfc-982c-3eb95a9b0366", "sighting_of_ref": "indicator--ef16e86e-830c-4195-bc31-82fc45c042bb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1509568-b418-4e57-959d-51a1aa982574", "sighting_of_ref": "indicator--b52efd71-f1e9-444f-9821-15935f213a78", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ba966c-5613-48b6-99eb-5360caeaa2ee", "sighting_of_ref": "indicator--025b36f6-252a-4d84-9751-73c3aa8e5e5b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2092aa-b941-4be0-b62d-ce9bd884c83e", "sighting_of_ref": "indicator--2b6b839d-7584-4d4b-94ab-5ad771d8e5c3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a919a89-2d5e-4174-bee0-d8b90fd3d97d", "sighting_of_ref": "indicator--e66f69d6-1dd2-4298-807d-36703d3fa662", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397f139d-9e46-4bee-9a4d-71736295b64e", "sighting_of_ref": "indicator--c34b1549-1a0f-4d1c-a5d9-4e4ccbeb19be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7694e419-9a92-4306-9790-291e65c20f58", "sighting_of_ref": "indicator--da844a1f-d058-4640-b03f-0ec5cb642e6f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb34f8d2-2c72-4bc7-b8e2-e604fb593c6c", "sighting_of_ref": "indicator--da5e9487-6e20-4279-bad0-33817621d19d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8a2ab3-2113-4299-9c78-3e13d7a5eac8", "sighting_of_ref": "indicator--ec77f5da-14ec-408c-a247-f4b4a2f1ea84", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0be6ab-6e01-47d6-b16f-c0e09ca904ed", "sighting_of_ref": "indicator--090acc46-84d1-4c9c-952a-e496bdec66d6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00828c3c-bbcd-499d-b8b5-552fcb58864b", "sighting_of_ref": "indicator--090acc46-84d1-4c9c-952a-e496bdec66d6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914e21e5-fb3a-4c58-9c34-b77e20351f98", "sighting_of_ref": "indicator--061c7dd3-308c-4972-ba06-97710edbb163", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb52c450-8cf4-435b-bef3-2d1d2d615053", "sighting_of_ref": "indicator--34e9384b-31a7-4b0a-ac48-f08f94654b5c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1564c39e-e75c-406b-8660-44d2e0690131", "sighting_of_ref": "indicator--34e9384b-31a7-4b0a-ac48-f08f94654b5c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb008a9-a7aa-4bd2-bdd3-a77d6eecc269", "sighting_of_ref": "indicator--6f176cc7-2150-4423-b8c6-b4188b35f43b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9929bc1f-095a-4c90-892a-cf1f4ce04274", "sighting_of_ref": "indicator--6f176cc7-2150-4423-b8c6-b4188b35f43b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b76538-272b-4024-9066-5c37c95ec0b1", "sighting_of_ref": "indicator--13d0fab7-2c63-487f-acd8-08f16704d60c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63c13f3-50b7-42a1-a003-cd2dc1e7721b", "sighting_of_ref": "indicator--13d0fab7-2c63-487f-acd8-08f16704d60c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0879ec2f-24f6-4fd4-b418-ba4253b33d26", "sighting_of_ref": "indicator--3cf76a5d-6dc4-43ca-9309-f541bf65a9d5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d1199b-c928-4b4c-8ce7-35e3e0ff4543", "sighting_of_ref": "indicator--83692148-f37d-457f-93c3-4f981a29dad0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b5aa68-5b0a-4f52-9e63-a65761973055", "sighting_of_ref": "indicator--34639314-dc93-4687-8189-ba7656d5b931", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5d1403-bdd1-428f-83ac-88eb89344457", "sighting_of_ref": "indicator--7a91ee77-7e95-4358-8d31-a1c9c1bc3d31", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0a4e06-e3dc-4609-a89c-b2fb0fd03560", "sighting_of_ref": "indicator--dc32d00c-1c8c-4b1e-ab05-4a311695da58", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed65efba-350e-4ad7-ac0c-2f3f14470a59", "sighting_of_ref": "indicator--f36d2fe1-ec79-440d-8ece-a387d9997eb1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dea1b91-64c2-4a26-a9ad-22178e9e29a3", "sighting_of_ref": "indicator--d1e78802-ada4-4b5b-81ee-a1e74a780ecf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba93af9-d1af-49c9-8a27-2d9fbf44611a", "sighting_of_ref": "indicator--e64eaeb1-ee25-49a2-a1c9-3063cfce5196", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227b8e7b-fb74-45ed-b1bd-49a6221b2d2e", "sighting_of_ref": "indicator--328629b7-d6c1-4b58-9a14-9798a0e9ca62", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fc827b-a230-4b61-be68-774a8911e837", "sighting_of_ref": "indicator--8d12f52b-64e0-47d8-9a0e-3fdd2114c1ed", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d25002-0c1c-4986-8460-b0612aad1737", "sighting_of_ref": "indicator--6c029d33-a538-4095-8063-1ba5c3de94a6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a7e6f9-180e-465d-9b61-31f429c1a246", "sighting_of_ref": "indicator--c02ef719-6085-4216-af82-36ffba09db98", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d0dd22-8b1f-4d9d-a713-6c6510c4ef3e", "sighting_of_ref": "indicator--c02ef719-6085-4216-af82-36ffba09db98", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5536ccc2-f53e-4f4b-b391-ae2bc2198e81", "sighting_of_ref": "indicator--8e8a02ca-7c5b-4ce6-9c2b-076a980f9926", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0994cf7-6df4-4752-8f39-836017ea51ee", "sighting_of_ref": "indicator--9f15f667-104a-4807-bdcb-535c9251ee45", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcfaf4f-9ed7-4ed0-9bd9-340b132b39c4", "sighting_of_ref": "indicator--dfe1cdbd-6b2d-4814-90de-8ba0694790f6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4202c5f-a083-4f4d-acb6-4b6091de0352", "sighting_of_ref": "indicator--dfe1cdbd-6b2d-4814-90de-8ba0694790f6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b14e798-79a9-47a1-a9f0-990c3bbfae48", "sighting_of_ref": "indicator--dfe1cdbd-6b2d-4814-90de-8ba0694790f6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144e6449-ec7d-4517-afe9-67368bc64f08", "sighting_of_ref": "indicator--be1f891e-4af8-431e-9fa3-d33d986a1843", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1144b5-a86d-4da9-a805-dee94a0d9a00", "sighting_of_ref": "indicator--2fb177bd-6c54-4ad7-95d3-af30ca42b17d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9474b5ab-0baf-4908-9aef-d0d9ed869843", "sighting_of_ref": "indicator--7ef52d81-d298-4049-b633-6acaf7161faf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58eab82-b046-470f-8344-fd5301a46702", "sighting_of_ref": "indicator--7ef52d81-d298-4049-b633-6acaf7161faf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030234db-16b4-489c-8513-2c1a3d72a147", "sighting_of_ref": "indicator--13c2aa65-86aa-4c2b-8129-6500ae36f3e9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b475c5-6645-4361-a599-9a352bd41a85", "sighting_of_ref": "indicator--d768099a-9b3a-4532-a332-98952ee34596", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed43ab4-5925-49cd-8b38-7c2ae7ffc1b2", "sighting_of_ref": "indicator--d768099a-9b3a-4532-a332-98952ee34596", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992bc586-d98e-431c-87a4-3c4b6dca7672", "sighting_of_ref": "indicator--d768099a-9b3a-4532-a332-98952ee34596", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee85813f-8fe0-46e0-a0ee-fb60fdefda05", "sighting_of_ref": "indicator--856f41cd-5cc1-419c-a9e3-1910363ed823", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad668eb-9d03-4686-8d2f-b9e07f8a447f", "sighting_of_ref": "indicator--bbe22e60-7033-4249-9dcd-e635ef371c57", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e084452-df44-4397-afc3-0ad706a21b32", "sighting_of_ref": "indicator--e6cba287-0bb5-4da8-bbe0-7f083182fdb8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e5d764-6e7a-4e3b-bf47-07d6379533fe", "sighting_of_ref": "indicator--93e98fb3-35c1-463d-ba47-730ddc2b603e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bbb174-c1e1-451d-a5ec-6b59d993e224", "sighting_of_ref": "indicator--93e98fb3-35c1-463d-ba47-730ddc2b603e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d75dc1-f77e-457c-b10f-ee1b8dab72e2", "sighting_of_ref": "indicator--93e98fb3-35c1-463d-ba47-730ddc2b603e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d002f5e3-dffd-4c83-8b8a-06e0f1e54857", "sighting_of_ref": "indicator--79c88179-f505-4a4a-bb71-d5a5a46037da", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bbb2385-0f93-441f-979f-ed0952424556", "sighting_of_ref": "indicator--3de0633a-9181-4a0e-b9cb-925e92fd938b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129b31ec-97ea-4d05-84a2-f99abc46326a", "sighting_of_ref": "indicator--b882d712-f659-468e-8d21-49f3e47f42c1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9c6e90-580e-45a9-b40d-8d431bf0f11b", "sighting_of_ref": "indicator--e2db775e-206b-44b6-a87f-afc73073ba8b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d57085b-93e8-49ee-acd6-5ca1ebaaf340", "sighting_of_ref": "indicator--e2db775e-206b-44b6-a87f-afc73073ba8b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6bb7c5-40c1-4b76-a5d8-49e36961522d", "sighting_of_ref": "indicator--e2db775e-206b-44b6-a87f-afc73073ba8b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df9f486-000b-466d-90ad-ffd1cf7a4aad", "sighting_of_ref": "indicator--1a4c6b04-dbf7-4a66-86c4-9dae05155bd0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b288de-9970-4e90-8af1-0eafc770cdac", "sighting_of_ref": "indicator--1a4c6b04-dbf7-4a66-86c4-9dae05155bd0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d1edc6-5728-4a93-9c7e-d3caa6504a8e", "sighting_of_ref": "indicator--1a4c6b04-dbf7-4a66-86c4-9dae05155bd0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4c8a41-cf00-4d28-b88d-8710ca85ec75", "sighting_of_ref": "indicator--221a9b4e-6609-445f-93fc-e65ed0313e4d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef7d418-5f21-4064-88f7-3769ba32e498", "sighting_of_ref": "indicator--221a9b4e-6609-445f-93fc-e65ed0313e4d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab4f9fd-cc27-4f7c-a839-65a474283f34", "sighting_of_ref": "indicator--c2b1411d-840b-4b84-a406-922ebe31ea69", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78101a49-c895-422f-8b7d-bcccce696ed3", "sighting_of_ref": "indicator--c2b1411d-840b-4b84-a406-922ebe31ea69", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3750bc8c-6fba-48ea-be3a-6cce4da7b3ff", "sighting_of_ref": "indicator--c2c0129a-61a4-4f0f-96fe-ef6407c5b342", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eaa1504-f461-4bfe-880a-4f115ba2ca3a", "sighting_of_ref": "indicator--c2c0129a-61a4-4f0f-96fe-ef6407c5b342", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7eaf55-f991-4e90-9d49-344b56d9fb9d", "sighting_of_ref": "indicator--c2c0129a-61a4-4f0f-96fe-ef6407c5b342", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bbad8b0-3ffa-4bdb-baeb-6cae1d8d7eb3", "sighting_of_ref": "indicator--94391472-036e-462e-bdce-d45b49074166", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c8a872-bc48-49ff-88b7-8106624fc941", "sighting_of_ref": "indicator--f5148c19-cafb-48d2-81bf-3cf16f9becfb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599f4a31-4dd4-4e12-99e4-51d1c052bb71", "sighting_of_ref": "indicator--f5148c19-cafb-48d2-81bf-3cf16f9becfb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e21887b-00e5-4522-8b9d-f117eb3d5500", "sighting_of_ref": "indicator--98ae1ff1-f0c1-46b9-bc79-c6ae188f9d9e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1d8e6a-1328-4fc2-9ecb-21e02e1669ce", "sighting_of_ref": "indicator--98ae1ff1-f0c1-46b9-bc79-c6ae188f9d9e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9014cc87-a0b9-44f2-913b-ce2a649df291", "sighting_of_ref": "indicator--8b864b92-c5bf-4fb0-9423-527768a867d4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be094ad6-3d7c-4f35-99a0-9f5b24e8c118", "sighting_of_ref": "indicator--f0e6889c-b686-47b0-8090-225e938dcc73", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78cec8b-b07f-4c2d-b03f-3718fcea1d05", "sighting_of_ref": "indicator--8efb556c-75bc-4444-a712-4d21decb3397", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f24e32-5b38-4fb9-8afd-6e0a44f69a53", "sighting_of_ref": "indicator--29830d01-971c-4921-b877-f02bc0faf8d4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8696ebce-2e10-4dd0-ac94-2cfddd287ba6", "sighting_of_ref": "indicator--29830d01-971c-4921-b877-f02bc0faf8d4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc360dbc-5ffc-4e4c-bc31-6718a89c2740", "sighting_of_ref": "indicator--eb4d351a-dae3-48ad-a5c3-be4b1afe80ad", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5879486-a53f-470e-89a8-7c314f44f3fc", "sighting_of_ref": "indicator--1e230d8b-3007-4cad-8af9-0822cc31b09f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467c256a-c906-4761-b231-3cbbe77cf4ed", "sighting_of_ref": "indicator--29f5d415-2a08-45f0-b2f4-3ff04715918d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ca7f9a-c5f7-4083-b9d5-c08fd54388aa", "sighting_of_ref": "indicator--f0060824-fa3c-41cf-b9c4-8c33524045c0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e5bdc3-0ea6-4b74-920d-4b18686c43b6", "sighting_of_ref": "indicator--ede9edb3-e890-4e69-ac02-29f1d7a2bfda", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e67b824-a6da-40d6-b81d-fae4607990d7", "sighting_of_ref": "indicator--ede9edb3-e890-4e69-ac02-29f1d7a2bfda", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6579845d-0bfa-45aa-93d5-e230e580163a", "sighting_of_ref": "indicator--be9fa2ed-5fae-4eec-8e63-bf2e4838bf01", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109199a3-c802-462f-ac2d-7dec88721fd0", "sighting_of_ref": "indicator--be9fa2ed-5fae-4eec-8e63-bf2e4838bf01", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c08b40e-a0ca-4a88-aa0a-30011e7821cb", "sighting_of_ref": "indicator--be9fa2ed-5fae-4eec-8e63-bf2e4838bf01", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f618af8e-192e-4a02-b747-fb53a6b2fc45", "sighting_of_ref": "indicator--1dbbf047-6509-4bcb-b0fb-e75401991a99", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0a4ee1-5bc6-475a-a16a-cb530e857ce4", "sighting_of_ref": "indicator--1dbbf047-6509-4bcb-b0fb-e75401991a99", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583114f3-d7f3-4b81-87a0-faa5e203f6bb", "sighting_of_ref": "indicator--1dbbf047-6509-4bcb-b0fb-e75401991a99", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d133e2-1639-4d41-acb4-7ebd3a7a403a", "sighting_of_ref": "indicator--da8fb1f0-86ec-45eb-a207-972f82354e12", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e11e6d4-58cd-4ba5-99d4-2d4a1d053ff5", "sighting_of_ref": "indicator--da8fb1f0-86ec-45eb-a207-972f82354e12", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf44af7-9dff-4020-a800-cfa46a19f3a9", "sighting_of_ref": "indicator--754026a3-41ef-4b46-8dc3-af0432b6b208", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050c7d1d-5783-4d3e-9727-1a6684976653", "sighting_of_ref": "indicator--487342ed-b79f-40e6-918b-6fd3b8a4f721", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f30abff-bd6d-448a-93d0-cf6f24c1b521", "sighting_of_ref": "indicator--74e128ff-5e66-4412-b00f-e4ee4bb63774", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0856fd-3aa6-49bc-8fa3-471efdeb6992", "sighting_of_ref": "indicator--2a8df994-7a6f-4a74-abf1-8bd65bc54f15", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00259d1-2f1d-4e09-9891-815e7a0e5c9f", "sighting_of_ref": "indicator--c3c72209-e723-4fd8-b539-c586681fa85f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc07c21-f87e-4c7b-8653-1a54abeea68e", "sighting_of_ref": "indicator--c3c72209-e723-4fd8-b539-c586681fa85f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a9c913-d236-483d-acb8-b2b1fe6b2d49", "sighting_of_ref": "indicator--b8678811-ecea-4590-a9d9-f687095c789c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b20237-6832-4fc3-93b6-c38c9f696eed", "sighting_of_ref": "indicator--31ff68ec-545e-4325-93d4-671837da0d4c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357cda0b-16e8-4457-9265-b4c7c9d8409e", "sighting_of_ref": "indicator--31ff68ec-545e-4325-93d4-671837da0d4c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d1977f-247c-4fb7-be45-5d74c29d155e", "sighting_of_ref": "indicator--cae67157-4f56-4e7e-9e7e-a766bc307691", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625a63dd-d899-49e8-bd87-b0a021d49f25", "sighting_of_ref": "indicator--a584bf47-03ed-460d-bcfa-7a739381dcf9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24f7ceb-b9d6-4b47-aef5-7a05466749aa", "sighting_of_ref": "indicator--768e749a-85f4-4916-b93b-1a122950133a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fb1bd6-57e8-4b38-9ce0-e9e4d19d216a", "sighting_of_ref": "indicator--768e749a-85f4-4916-b93b-1a122950133a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd26f1f7-d64b-4cf4-b897-7194b07059c1", "sighting_of_ref": "indicator--af63adca-0b95-4b2d-a470-65ccb3b3fa7b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d099b6-ad57-43de-8901-ee9734b6c9fc", "sighting_of_ref": "indicator--ac615a86-30e5-4edc-a7e6-7b17b9b226a8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def98961-d756-4a68-9d81-016dd52b693f", "sighting_of_ref": "indicator--80dcce2e-b957-41f6-9fef-701d48b1f8fd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e6196a-dca2-4095-9b00-5fd0ea0e5cfc", "sighting_of_ref": "indicator--550d64a2-7cde-4803-8349-25946e5e9487", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd9589f-ebbe-4496-88ea-fae7dcc9afc3", "sighting_of_ref": "indicator--550d64a2-7cde-4803-8349-25946e5e9487", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48871197-f9ab-4191-869b-871e35a74de7", "sighting_of_ref": "indicator--888da556-f325-4f14-80a0-214f774bc7d5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284e80fe-f811-4229-ae16-c56658166300", "sighting_of_ref": "indicator--888da556-f325-4f14-80a0-214f774bc7d5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fdfe51-d047-4a94-aaf6-69da1cbe882b", "sighting_of_ref": "indicator--888da556-f325-4f14-80a0-214f774bc7d5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6826ac8-24a2-42a5-a6d8-bcfcd1e5dd5b", "sighting_of_ref": "indicator--30dbe2e2-26ca-4d11-8c1c-edea251dfc43", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a7b764-d510-4b15-88b7-4a06ee985a51", "sighting_of_ref": "indicator--30dbe2e2-26ca-4d11-8c1c-edea251dfc43", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3639690-44e3-44fe-bc3e-4ef163b77c4b", "sighting_of_ref": "indicator--c76aadfb-f176-4fd6-98b5-71ab877af472", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4716423d-ca81-41f4-b092-6c045569cc69", "sighting_of_ref": "indicator--ab57c052-3285-41fb-a578-a9b648d990d5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b60687-101c-4705-a712-e5a4f5d92e81", "sighting_of_ref": "indicator--60c628b8-109c-4fad-b4c4-91e304496ed0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a8e398-761d-4645-a89e-2ca60e3cb4e3", "sighting_of_ref": "indicator--60c628b8-109c-4fad-b4c4-91e304496ed0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5feccd1-cf5a-4f2c-8511-cbafe6a610a1", "sighting_of_ref": "indicator--03183106-1608-4c17-9b00-9c63055166dd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c944677d-1eec-4d8e-a85b-dd29bc4d6300", "sighting_of_ref": "indicator--680aa51a-6143-468e-8314-8d8223eaec20", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a43b68f-2d5b-417e-b82a-df8599694fb5", "sighting_of_ref": "indicator--4f9731e9-d9f8-454e-97dd-428f11c3429e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6cfab3-4e51-40f9-9fd2-a815e6b9ee74", "sighting_of_ref": "indicator--5a7d9852-2a09-4767-8ea4-0e4e943f84c6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682b2387-bfc5-41ea-afb2-cb2f825b89dc", "sighting_of_ref": "indicator--5d49b394-1158-42ef-8abc-e31088150562", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc9d4b8-17e3-4cb2-bee6-e345420769e8", "sighting_of_ref": "indicator--fae77904-cf04-44a9-be5d-7dd3230fae8e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f403744-be48-44b9-bc09-938132501081", "sighting_of_ref": "indicator--7bc648ed-629a-4fa4-9681-995aca5a3a3f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a6206e-740c-4e0e-865c-f53fb82984c7", "sighting_of_ref": "indicator--5fad6954-9195-40ac-b898-0a21c147a877", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f7ce08-2920-472e-b0bd-c12263727c78", "sighting_of_ref": "indicator--16448e6f-0f8f-4aa9-ba03-1a31c8e3ca46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4aab45-eac3-4ccd-abe6-81bcfa9edb61", "sighting_of_ref": "indicator--6e61f973-6d28-4dff-a45e-27dac68e477c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e845e3-27f7-4820-b388-7efe4ab2b711", "sighting_of_ref": "indicator--6e61f973-6d28-4dff-a45e-27dac68e477c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17f5aac-2916-41fb-918a-c5091c05bd7e", "sighting_of_ref": "indicator--6443bc62-3e5d-48ac-852a-29b10562f164", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cb9d7f-ca3e-4a59-957c-d69a246bdf76", "sighting_of_ref": "indicator--6443bc62-3e5d-48ac-852a-29b10562f164", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294f030e-0258-4ece-bcf9-5821479a8459", "sighting_of_ref": "indicator--6443bc62-3e5d-48ac-852a-29b10562f164", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6effbb2-eb48-4476-8359-e0fb891c51ad", "sighting_of_ref": "indicator--f7644525-dc01-46a7-85e4-79a48e9b7c17", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619bfbe8-074c-45e7-a6b7-0cf474817387", "sighting_of_ref": "indicator--2e1a3373-bba3-470e-b22e-bb4f9fe910a6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5216e6c4-a003-49b2-8bc8-1a62784de559", "sighting_of_ref": "indicator--085a7c4d-6345-4e9d-986d-01ff0c5ab5d7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48394a3f-62c4-4c96-9143-1b6611187ee4", "sighting_of_ref": "indicator--085a7c4d-6345-4e9d-986d-01ff0c5ab5d7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf3ec8a-892f-4757-b3df-d8ab16345a37", "sighting_of_ref": "indicator--b06ed57c-5a80-4300-a446-f5d8531b30a3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6956f2a5-f319-4f36-89d6-8b917f311bf7", "sighting_of_ref": "indicator--7ac5c81a-def3-49b6-9a9d-f17a2b685983", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0a800e-dff6-4f4f-a320-982606c95f8b", "sighting_of_ref": "indicator--a9d1dffd-e63a-4599-a0dc-0fdc167e564c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee788397-7539-46af-856d-62ed0d6c0a45", "sighting_of_ref": "indicator--1535c09b-7c33-424f-8c5a-943a6cd94bb2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00e5e2d-1419-4edb-8fbc-117dbbaefc1f", "sighting_of_ref": "indicator--13e497a5-9e56-4539-80e4-0af5799a6524", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789241ce-b357-4453-a086-ab6f04bfd0ff", "sighting_of_ref": "indicator--13e497a5-9e56-4539-80e4-0af5799a6524", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367e0cc0-a6aa-4c18-b22f-a966ed949db5", "sighting_of_ref": "indicator--2c60967b-4008-4faf-9e78-683babce6415", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f657ac9d-28d0-45ee-85a2-6baaaf2a6714", "sighting_of_ref": "indicator--2b614c9a-aa8a-4cc1-b135-3be802674d03", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca05f69-a8b7-40e7-bc43-da76ea87291a", "sighting_of_ref": "indicator--2b614c9a-aa8a-4cc1-b135-3be802674d03", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34fdac9-4d4a-4ade-bfe6-1cdef454ef89", "sighting_of_ref": "indicator--2b614c9a-aa8a-4cc1-b135-3be802674d03", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e29c6e4-4ace-4672-a0ad-7c3da316f6da", "sighting_of_ref": "indicator--2f0fa8ce-d0cf-4753-b0ac-c9157fee4a45", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd15b0d-7ba9-4e56-8052-9ee02c56ee1e", "sighting_of_ref": "indicator--2f0fa8ce-d0cf-4753-b0ac-c9157fee4a45", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71631776-81a1-42c8-8350-9578477205cc", "sighting_of_ref": "indicator--6eb532bd-cb2f-43d8-a9bf-2810dca048d3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc098295-7b4f-41ec-b148-565dcb18a64f", "sighting_of_ref": "indicator--6eb532bd-cb2f-43d8-a9bf-2810dca048d3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e94a504-8fc6-4745-aad7-a09b4a656191", "sighting_of_ref": "indicator--7d5e4019-ee39-4d88-9262-99fbe0a969bd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cd1a11-1ab1-4741-aa81-a86830d2110a", "sighting_of_ref": "indicator--06c8675c-917a-4a5b-8887-75176898a232", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df041f86-e573-4ae7-adec-1eec8d0f3fe0", "sighting_of_ref": "indicator--06c8675c-917a-4a5b-8887-75176898a232", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efc036c-fea4-41db-9847-5ff0895df157", "sighting_of_ref": "indicator--06c8675c-917a-4a5b-8887-75176898a232", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653aa209-eadc-4aeb-85c1-bade5351a844", "sighting_of_ref": "indicator--ea120f65-3492-48c0-aeab-bff2aee4e96a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d27324-acc0-428e-8cc7-4abbde81e097", "sighting_of_ref": "indicator--43af2d60-17b9-465f-b74f-823494b14c35", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208424c4-a632-4ff1-aa94-b9fe5b8b16a0", "sighting_of_ref": "indicator--b0f1ffda-2cfb-42e1-bffb-420511eb95e8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfa2e3d-4554-458c-af5a-0324351c3eb6", "sighting_of_ref": "indicator--5b162f6b-e55b-4c73-a7da-17f33b784316", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13f8627-dbfe-4ac8-9abb-2ed7b0e71778", "sighting_of_ref": "indicator--b8366247-ce0f-4a77-82ad-9b88a8e1dc3f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacff581-7e61-454f-9aa9-c13c7b1393ce", "sighting_of_ref": "indicator--a83471bc-2bb1-4045-92e1-22ac0afd1055", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc6100a-1937-40e4-908a-bb1ab99e51ed", "sighting_of_ref": "indicator--a9b059e1-d637-42bb-88d2-28b60d93413e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c62c8a-9d4a-41b6-8c85-3574b97ebb08", "sighting_of_ref": "indicator--764e24ee-cecd-4d03-810f-86a15a63d2eb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab23c7f-cd99-48e2-9b78-c81116609f0a", "sighting_of_ref": "indicator--34542ab5-5ccb-41f3-aff4-7a60a8292142", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c6b448-d406-45b3-bd84-2108af5cdcce", "sighting_of_ref": "indicator--7d5dab3e-af0a-4a4c-bc2b-1e3f68c9243d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b49c9ac-6e51-4a5e-a19c-8c3375a143fd", "sighting_of_ref": "indicator--19cfd761-825a-4b5f-8927-cf4d780a324f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05774af0-918f-402a-9a6e-99c422f5fc2d", "sighting_of_ref": "indicator--a39eb8e1-73ec-4eb5-b007-726fbe1a499f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1375a397-0af9-4785-968d-da600fe07a33", "sighting_of_ref": "indicator--20fab0f0-7ea4-40ca-9e7b-21820f605f9e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fdc3a0-80aa-4e16-9c7f-e3704ad6f57f", "sighting_of_ref": "indicator--1e6bf2b1-a330-4869-85a4-5568385c60ba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6690a3-ee93-4288-8104-66a01b6e110c", "sighting_of_ref": "indicator--52968ffe-e044-424f-9161-f41e537ee9cf", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1ba537-865c-4e66-a39d-c88d8bf5eb95", "sighting_of_ref": "indicator--ee4ba530-613f-4967-bb2d-7cf30c57518e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0351ec-f915-4716-8d88-d633a56808b5", "sighting_of_ref": "indicator--3092a33c-5ac8-4d3d-b72c-6d7b4381ccf5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6751f812-1124-48ba-b2f6-8388c2ad1bac", "sighting_of_ref": "indicator--ee980a1a-4ada-4e7c-9625-2f5acc3c0db7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201c0a4a-67f6-4c05-a919-90fe2be929da", "sighting_of_ref": "indicator--15cec041-d5ea-43ec-a3f5-c829dd1351b7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c73982-95df-49f5-a1c5-c963738eaf04", "sighting_of_ref": "indicator--4d1f0d3b-c22c-4517-9b68-34a4d3c3f937", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e8bf30-52c7-489b-aec7-0c1847564110", "sighting_of_ref": "indicator--ce03703c-e55c-4af8-ad40-8f65373da428", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40d7104-ddfb-4ecd-91f1-038b02a25253", "sighting_of_ref": "indicator--9fbf0707-34de-43e2-b946-98fcf73f6532", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7965df05-d98e-4c18-b33c-141608e6ff56", "sighting_of_ref": "indicator--e98deb92-5818-43a6-b46b-64f88eaa66cc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b38328e-01a4-41a7-bf3e-e3a8c1043ccf", "sighting_of_ref": "indicator--ee45463b-a61d-4926-8b2f-875aaecc0ea1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ef77cf-552b-456c-a9fd-f5557a95340b", "sighting_of_ref": "indicator--c85da388-3844-4374-87e4-f0837f286964", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e5235d-12f3-4ff5-bc72-9788c3d6fdd2", "sighting_of_ref": "indicator--110b4a7d-9cf9-4a30-95e6-309cbb99aecd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f047328-c261-4c77-abc5-40a6b2165558", "sighting_of_ref": "indicator--67e7d1dd-c528-46ce-8994-b7bc35d60df1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6107f5-289d-4d67-a63a-6e2038c94165", "sighting_of_ref": "indicator--c4389003-7324-41c8-a6d4-557b39382c43", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb07589c-657c-470e-b1d6-7e24f7011a16", "sighting_of_ref": "indicator--167d06e0-bd44-4c2e-8202-fc17c61463d1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386066e1-9044-44ee-bb64-a2e29567d7f2", "sighting_of_ref": "indicator--167d06e0-bd44-4c2e-8202-fc17c61463d1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1fb5396-e8ec-4c9f-9f45-2d036665e4f4", "sighting_of_ref": "indicator--167d06e0-bd44-4c2e-8202-fc17c61463d1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c7d2d9-7ccb-41cd-a742-3a991429b40b", "sighting_of_ref": "indicator--aeeba20b-6117-4ec1-8aa5-be818fdecede", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248bca40-36f8-489f-8917-381beb15ed29", "sighting_of_ref": "indicator--61153e8f-f6de-43e1-9c66-80d46e4694a5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d55d3f8-fb79-4e40-b34e-a67ec2d7323e", "sighting_of_ref": "indicator--d6511005-d795-4220-94c2-02812104bddb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a641c26-e44f-4a5b-9a62-b856d4b2abcb", "sighting_of_ref": "indicator--7db6bf6e-c76f-4e20-b241-4a26abaa10c0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb30b641-2d59-4dd0-a7a4-dbd2054bda24", "sighting_of_ref": "indicator--ac54f84d-42fa-4498-acae-1e7fb2aa1c32", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b96e592-86b3-4b29-b925-8877bee32888", "sighting_of_ref": "indicator--97bce0df-d735-4809-a22d-ad3c88f114c2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec4dfff-5279-42da-91bb-7429d66b638a", "sighting_of_ref": "indicator--97bce0df-d735-4809-a22d-ad3c88f114c2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1856a9d8-5f22-45ed-90e6-209e9bcc706b", "sighting_of_ref": "indicator--b528e129-442f-45ce-89f3-ec07c409000b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1404ee51-1bee-41e6-9316-d87da6a7784c", "sighting_of_ref": "indicator--d4330f99-46a4-4f6a-a58c-451f2b22164c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb9d8a5-5e01-4d8e-a0c3-e8af63548279", "sighting_of_ref": "indicator--dd686bf9-95e2-4fc9-b343-d94111646adc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51eb31b-643e-4975-a67c-44347f9e89e9", "sighting_of_ref": "indicator--beab4ecc-77bb-4f4f-bd56-3a0a66dea1ab", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30647ef-5d93-475f-9894-e8b1fff1c950", "sighting_of_ref": "indicator--1b9eb0a5-b313-4223-9289-ae60599fda65", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c13838-7b92-449d-8010-0202859ec904", "sighting_of_ref": "indicator--53b25bc4-f365-4dd9-959b-a0630099e411", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3ad2e2-a2fd-4e92-a47b-a725f51ca601", "sighting_of_ref": "indicator--f33fd0d0-1889-4f85-ba0d-3b9c3727b6a9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9217ee60-f81a-4b39-8e0d-bd57c14432ef", "sighting_of_ref": "indicator--f08b657b-f2ee-407e-93e6-a069a9204b63", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8909e247-4cee-4784-9b3c-0e6b21ef3876", "sighting_of_ref": "indicator--106a79f9-d525-4fcf-a2f3-c9f2754ff4a9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f3b7f1-e762-476e-a11e-1570409f0cf9", "sighting_of_ref": "indicator--6743f654-cf41-4d90-bf6e-d085006a8a7b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9680835-10dd-47b0-ac29-53f9529763b8", "sighting_of_ref": "indicator--6743f654-cf41-4d90-bf6e-d085006a8a7b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8df4563-3455-4c04-8839-7f6826342866", "sighting_of_ref": "indicator--33559635-4405-4dcc-8b56-c918c9397070", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89f544a-df7b-49a2-93ca-9abd54073b64", "sighting_of_ref": "indicator--18805233-7730-4fac-96d8-478460a52c2f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f5ba2e-1edf-45d2-9f64-17dc8f8d1e1f", "sighting_of_ref": "indicator--de31855b-0bf6-4d00-8c06-d429f5a19368", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6955b85-6305-46a1-a8d4-ca2d03469796", "sighting_of_ref": "indicator--2c1851b2-d6ca-4e57-9e34-1d854b5e1ac8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbce7f82-5c6a-4abd-a588-ea449cb55a09", "sighting_of_ref": "indicator--f0e306cf-2b04-494a-adca-05e447187b26", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227ba287-a1ad-4e16-94a8-b9e8f1a59b15", "sighting_of_ref": "indicator--337dba5c-72e8-4526-95d1-3654297183af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c5a0a5-33d5-4640-b962-6c4c704af0f5", "sighting_of_ref": "indicator--f30f94c6-517e-4895-b89e-e1412e603cf1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aef6368-b530-4696-9aab-d2dd6863d141", "sighting_of_ref": "indicator--4274cbf4-e460-4196-8595-1b513f521612", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e337a3-18f4-49a3-8a9f-7853b153f3a2", "sighting_of_ref": "indicator--7bc1fa93-114f-4a40-b785-fe471cbe63a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22fe9e9-207d-4f59-bd5b-5cd78c545476", "sighting_of_ref": "indicator--aa6e80b3-b883-4c33-8d94-adc06cf5315d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea52ea0f-8856-4644-82ad-a12224201727", "sighting_of_ref": "indicator--08d08e5b-73af-466f-8715-af5c12660f14", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93bb3d6-3aa3-4888-972a-e8fb349b47dd", "sighting_of_ref": "indicator--692a5ac6-82d6-41a4-83b2-8a280cea5197", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e300779-a353-4709-a145-fb997a7f5544", "sighting_of_ref": "indicator--00ea30a5-1725-426d-aafe-f2c5974feefb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f25b47-6b99-4d60-9ab8-ec4d4f21949e", "sighting_of_ref": "indicator--c797af3c-91b9-47c5-a91d-fb21de1d4267", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fba0d77-c750-44fb-8d1e-25b92ce3f2bd", "sighting_of_ref": "indicator--29160848-5d4a-43f9-817f-d9897562cdc4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2226b1b3-ee2b-4795-a7a2-69f744556317", "sighting_of_ref": "indicator--a0e31aea-1fcc-4565-b46a-52e952475612", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110387af-0ab5-4599-8bc5-dc6e4f462fe8", "sighting_of_ref": "indicator--6b201795-9725-4c85-8fbc-12b13ecd2c43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8bfb71d-6c07-4971-ab5c-8c18001aa047", "sighting_of_ref": "indicator--d9144b99-bf96-4cd4-bcfc-1a93f5be2062", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81fdc67-853a-45d7-9c4e-570b263eebed", "sighting_of_ref": "indicator--2a3dcbfd-1e89-44d9-90d7-4d81e87e4ac3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a222c692-61fe-415a-add2-aa0727ced591", "sighting_of_ref": "indicator--1ceaac53-9d2e-42fc-bae1-a67e229e568a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7879b906-3c74-4434-bd88-30e8e9f9d50a", "sighting_of_ref": "indicator--c354f9ec-de5b-4fbd-b765-b3304a07ec77", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a118c318-b0b3-4ae7-9641-fb4b6a96cc8e", "sighting_of_ref": "indicator--1d853b77-0959-4d32-bc82-c783c6a415ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b764c717-70b5-40cd-9ddd-b3d5190f146c", "sighting_of_ref": "indicator--6c7b8f40-ebff-4d1d-8b0f-7e7ff338ce3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589b559f-4e8e-44de-a0be-6996b39c6694", "sighting_of_ref": "indicator--e9ac6345-96e7-429a-85a0-b422a007c662", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37700c73-ba14-4030-b03d-1610acc3501e", "sighting_of_ref": "indicator--7e8537c7-946a-4c29-b430-b7a577928bc2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34b7653-1177-4de7-9250-78c50e9fb6f6", "sighting_of_ref": "indicator--5e4368bd-970b-49f4-81ba-4dc53fa2567d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d1ac50-c268-4138-98f7-377ad245ea6c", "sighting_of_ref": "indicator--4b2070a6-338e-431d-9bea-a0a583a62b19", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44155555-2b9b-4c88-aa09-bb08ab65ab93", "sighting_of_ref": "indicator--5bcf7b9b-71e4-45dd-8282-4b001c2fb6d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9008b567-70cb-4601-b8ff-733d79070709", "sighting_of_ref": "indicator--eeb930ae-c3a9-4167-b8d8-5ccbd2289949", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df895ce-f80e-45c7-a171-f8e2e87607cf", "sighting_of_ref": "indicator--31b4a00a-2053-439b-9f80-21971f7eaedb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db487b2-1d52-45f4-ad50-5faf474277c5", "sighting_of_ref": "indicator--c2faaf55-4834-439e-82e2-909fdffcac01", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e450f90-b689-407f-8a06-6f41aa405d7e", "sighting_of_ref": "indicator--63451c48-b960-4dfc-b322-e998b7cfa36b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10fc665-01d9-41d0-96cf-830e98837024", "sighting_of_ref": "indicator--6ccabd94-d467-4c6b-8018-cc466f7f0ccb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afa2215-7a72-447a-8cff-5d9647932c14", "sighting_of_ref": "indicator--ce919078-a022-4b20-a417-a71340d6c4f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942b89f9-a672-42f6-b7a7-b2a27cc494c0", "sighting_of_ref": "indicator--69e486c7-4309-43b6-ba3c-1ac9741b3951", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bb9f8b-1ec5-4c78-918f-399700b61677", "sighting_of_ref": "indicator--80333a7b-3146-4c91-86eb-44899690cfa0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f58a889-a450-472b-b787-729866e83b35", "sighting_of_ref": "indicator--4c77aade-3afd-405a-9dad-c5d3c186ce04", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64932e2a-8d08-4096-b1d9-c0159ee223c8", "sighting_of_ref": "indicator--abc15895-1e5f-42d0-bd86-aa7baa1aeb90", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9154981-d8e6-4dd1-8fc7-06d239911d7b", "sighting_of_ref": "indicator--91c94123-0f97-4ef7-ba34-f8b2c5cdbc10", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7142f96-2f92-456a-9a6a-16cba57aa9aa", "sighting_of_ref": "indicator--69b0a921-abbe-4185-9d12-205db4ec1d49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a001af2-b51d-4ed8-9be4-459b920275e4", "sighting_of_ref": "indicator--ad002308-5037-4974-a8e6-88a659e16698", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19144e38-e6ba-4fab-bc4b-51aadb6b37ae", "sighting_of_ref": "indicator--fb5a3861-d142-4dd3-8d6b-4ab830e12d24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8c8142-fdf5-408d-8a93-f0efa5de7d09", "sighting_of_ref": "indicator--f64c248f-1057-4ab9-b6ab-c6796cbd6772", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d3945e-15fa-41bf-9bf7-f01b07502b75", "sighting_of_ref": "indicator--c67e9df1-977d-454b-98e7-0c3aeec97bd5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd8ec91-0fb1-4bef-b260-4b3136bb3240", "sighting_of_ref": "indicator--93a3fb4f-084f-4445-8a73-347d8be76f3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ed6c6c-1018-4b1d-9ae1-48d07dc85369", "sighting_of_ref": "indicator--062912b8-9cf7-4d46-94e9-cb027a3ca240", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16ddc45-8ae5-47b6-b454-02a03c95c3ad", "sighting_of_ref": "indicator--080cef5e-ed19-4122-93b8-862f62ffc627", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44cf8ea-ab88-4067-88c2-43895da5fa7d", "sighting_of_ref": "indicator--12723b36-fc29-40d7-88eb-c2a15abd89b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de6d74b-6145-40a9-affd-898b038bb157", "sighting_of_ref": "indicator--1f013b7e-8439-4096-8ce3-2f610e72ab90", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eef1eb9-1225-4d75-9f09-4b0cc010749b", "sighting_of_ref": "indicator--b55cdd13-2410-4a17-a40f-762e0f2a0afe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e6a5f9-9607-4830-894c-3695abf8b7d7", "sighting_of_ref": "indicator--a4cd7756-a5c8-4551-b019-3764b864523f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dead6496-1498-4ad2-9f18-a39b539820a5", "sighting_of_ref": "indicator--e152ba5a-4abd-4f50-bb74-20cdc65522a9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2f450a-f190-499d-80ad-2266d7b57d94", "sighting_of_ref": "indicator--41da0118-c1ac-4244-8e0a-539ac169e5df", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afa9065-3e95-481b-9424-1b7fe780ec94", "sighting_of_ref": "indicator--3e97ab26-fce5-4e7d-ada0-f20f068724b5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8382b455-8be7-4d79-9944-e2e9f828c764", "sighting_of_ref": "indicator--70dbbd0e-a986-4df1-a75f-cae5316c3055", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6046fa52-af88-4129-a344-e0ab220cae40", "sighting_of_ref": "indicator--c8c73194-ccca-4daf-b257-8bdaf626fdea", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b583dbff-445f-4334-8c94-875e9c325ea5", "sighting_of_ref": "indicator--82958d84-255b-456c-bda4-754de5534f5f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62efb354-e399-484a-af72-f88c84f1d6ec", "sighting_of_ref": "indicator--82958d84-255b-456c-bda4-754de5534f5f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d5e496-3b9c-4b17-9aee-11f81e6570f9", "sighting_of_ref": "indicator--6b84b9e8-eae4-4853-8b5f-16da2e6c7bd9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0f14b1-d290-47e9-b389-d215da5d5fb2", "sighting_of_ref": "indicator--5bdc80c2-97a5-483f-9bab-04ed620dabb2", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ee825b-92ae-4e0e-bf32-728737f3e7fe", "sighting_of_ref": "indicator--d9128cf2-50ed-44bc-9f17-e8ca0153e348", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d64f44-6f8a-4258-b529-b79383226fb7", "sighting_of_ref": "indicator--d9128cf2-50ed-44bc-9f17-e8ca0153e348", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60d6dbc-0505-4f1b-9cfb-fbc2a5b4b5c3", "sighting_of_ref": "indicator--3c6fc761-e6da-41af-9d15-970267843637", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755821e9-01b9-456e-94c0-1fc9335bcb3c", "sighting_of_ref": "indicator--c20545c5-a838-4071-859e-65eecae77d8f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7164d560-01c0-4f7a-a4f4-7964b96ec48b", "sighting_of_ref": "indicator--d6cf91c6-dd14-40e0-8a4c-2976fffb2418", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92bcbb9a-e846-4929-b6a5-c13c927396ef", "sighting_of_ref": "indicator--a05f8b7c-36c8-4b16-bc22-7dabd115e633", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9febdcd6-54e7-4601-b5f4-c87065727d24", "sighting_of_ref": "indicator--9b20cb03-ba12-4b3b-9bcc-e85163f9e760", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe58b5f-2bdd-47e1-bd8e-3b630440eaf3", "sighting_of_ref": "indicator--8897a50f-2368-4cb2-b6ff-f6ca9d3d3075", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204fb685-bd19-4457-81b7-5b7fe6148c39", "sighting_of_ref": "indicator--a2d8a034-b263-4419-98cf-78e91b6dffff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7141ce5-a8c7-4b81-bd84-e76db143c105", "sighting_of_ref": "indicator--921802ac-5f55-43f2-b115-7178fe25a2eb", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d36f20-bd2f-4fd2-868b-1bc17fe7b137", "sighting_of_ref": "indicator--6de18d32-3658-4b7e-bcf1-3d2c488d44f3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79837550-624d-41e5-933e-ddb23defd8b1", "sighting_of_ref": "indicator--0949827d-1159-4c55-ab3c-42b1d5c74a2e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b299e25-f388-4fc1-aac7-49bc4043b2e9", "sighting_of_ref": "indicator--11eb1274-8807-41dd-a877-fd04f9f6811e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2261e4ec-cbcd-4a65-8d55-0881a3df6a20", "sighting_of_ref": "indicator--55549334-48a3-436e-a469-40bb0eef76a9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44c791e-41eb-4d1a-a0ea-e55dc9984e1e", "sighting_of_ref": "indicator--a007effa-1210-494a-9b43-915ae29ce7e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286d14eb-8e90-494a-9781-2791fe365c5a", "sighting_of_ref": "indicator--5dace034-b948-44df-af26-3493ca6240d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bdfcbcd-1cd2-4a72-b62c-0f5d0b8d3e8a", "sighting_of_ref": "indicator--7a3d528e-e19c-4941-9a1e-a0d336e9364b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ceb725-bedf-4869-8442-c55fdb4b19f8", "sighting_of_ref": "indicator--ff9694c4-f2de-4bf1-934f-dad983c04710", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720e6eab-e557-4526-8313-2195f740c6de", "sighting_of_ref": "indicator--705a4b0f-9a01-4160-ad4d-54461bd8f3b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd2f191-9a91-4af3-a12d-723bb7252d74", "sighting_of_ref": "indicator--feca24b0-421c-4306-bc41-b8adf9a3925c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323a3383-4c4a-4f19-bcb2-9343ddca3038", "sighting_of_ref": "indicator--5d2f40bb-b8ca-4780-9a8c-4cc85392fa1c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451cfa0b-8505-45d9-ba5c-73be82660dd8", "sighting_of_ref": "indicator--33745db8-f056-4fe3-9ebd-f97d9a057177", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701bf0bb-41a7-48cb-ab28-532e73d88f6f", "sighting_of_ref": "indicator--cc80fc74-c7bf-4801-b2fd-97fbfacff102", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0846624-a32d-40ab-876c-2a9e8bccb1d0", "sighting_of_ref": "indicator--1bdd61c2-c996-438d-be13-e4730eaede41", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5da6e8c-6f61-4e03-ac84-5a0560fa4fe0", "sighting_of_ref": "indicator--0a04c2a7-541d-40fe-9e64-a66c40dda2e9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab69cad9-02ea-420b-80d2-dae0b6ce8824", "sighting_of_ref": "indicator--7ab3aaac-8983-4581-99a2-422cfed939cd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c58086-482f-4e00-95cf-6bf1d9e9d2ff", "sighting_of_ref": "indicator--bc868b51-ebb9-492c-8bd1-5cdb49fc4550", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0076e588-9300-47fc-bd11-7de33cf36889", "sighting_of_ref": "indicator--211028c2-5cb8-4a8b-bb21-d2d792858320", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cb3546-1d06-4662-acba-2caec801a552", "sighting_of_ref": "indicator--5c8f6a8a-18b0-4436-ab15-b1fe9f3a39df", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea605a13-9e67-489b-b497-93ac28daaf56", "sighting_of_ref": "indicator--301e200b-0629-4948-bb29-9653a8678630", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0899e83-4a51-4181-9a58-3c53f2cea5ed", "sighting_of_ref": "indicator--0c38baf8-b355-4070-b1d2-c88ef200312f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6250833b-5f39-4a11-ab2b-7eda04648139", "sighting_of_ref": "indicator--d4d99ba9-5e30-466e-8649-51955923dbd5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54f4ecd-ad81-4b43-ba3f-2e530d43f82a", "sighting_of_ref": "indicator--e2791d19-9b98-4338-8d57-c0a8b1ae8a6a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecff5576-32d2-48bc-9ff3-b482cefc30ee", "sighting_of_ref": "indicator--399ff1ad-b9e5-415e-ba25-d5ca084063d1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6e9a68-e6ca-4710-be17-ddf1fd725db0", "sighting_of_ref": "indicator--46487922-4809-4958-9735-9559ca9c467a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872e590a-3725-4dd0-81a0-99b0aae7d1a3", "sighting_of_ref": "indicator--5dcaa339-fcdf-4ae2-82d5-2c9c53ed9ea8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae59e9b2-b48b-428d-88b5-d329c94770fe", "sighting_of_ref": "indicator--005bf386-4f8d-4401-956e-d35634eb0f5a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e6afe0-963e-4b38-9812-1f2d7a7feea6", "sighting_of_ref": "indicator--7939a130-31bb-4135-9210-87286919461c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c461b361-f9f0-4532-a8b8-66e9716df0a3", "sighting_of_ref": "indicator--e7c76639-008e-4a09-9054-44bf0c206810", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b23138a-9cf3-463f-bd5c-4f1261059b43", "sighting_of_ref": "indicator--8e47849c-45e5-4be1-b717-ed1450d958ef", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b90f6a-410e-44c0-b618-2b461b3eceee", "sighting_of_ref": "indicator--e907241d-fb74-4867-9eb2-bd5b7bd7b0b7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62df658-cdb1-46d2-8204-ec782412cb97", "sighting_of_ref": "indicator--b3b1bfd6-b881-475a-9c79-aa4c8f106eda", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4578f6ed-87c3-45e8-bda3-adbd44c35271", "sighting_of_ref": "indicator--68a17819-3e70-47d2-bb1b-aa7dae8ce15d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd997aac-6dd0-4a2d-96ae-cf89a630b421", "sighting_of_ref": "indicator--85a53160-a996-47af-8e15-6373f5585165", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3f2bdd-2664-44f1-a888-1baa59155815", "sighting_of_ref": "indicator--85a53160-a996-47af-8e15-6373f5585165", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c3e6ba-c902-4290-b170-b7f58a695151", "sighting_of_ref": "indicator--05b1f8a4-0f56-4d0e-8012-f6048e8fba3c", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1377a37d-d234-4c92-b74c-f63b1080ed12", "sighting_of_ref": "indicator--81bce1a4-82fd-4940-86b5-dbf9e0d6a19c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be42db5-1367-43e0-9bf3-8550119f018e", "sighting_of_ref": "indicator--85a3d0d8-2669-44a1-bfc7-3c8fab84cea9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8995794f-33d3-4987-8518-cd48ff3d81e4", "sighting_of_ref": "indicator--85a3d0d8-2669-44a1-bfc7-3c8fab84cea9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def0e860-7f9b-46fd-97a7-51355a45e983", "sighting_of_ref": "indicator--f17ea801-740c-4bf7-bed2-7eba9333c6ac", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac14e28-57ef-41c9-83e5-e3c56a77506c", "sighting_of_ref": "indicator--f17ea801-740c-4bf7-bed2-7eba9333c6ac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d9c003-79ac-44c9-b73c-af393ffd9b7d", "sighting_of_ref": "indicator--f17ea801-740c-4bf7-bed2-7eba9333c6ac", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad504e29-5c71-4ac0-882f-0036e2e1f8d5", "sighting_of_ref": "indicator--fb00d349-ef09-4662-8f54-091396a8e148", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b33e7c6-9f91-4edb-a828-b47967736f9b", "sighting_of_ref": "indicator--496961f0-e640-473d-b802-55fcc1fd73c9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8ba002-013b-4044-b6c7-19be0463379f", "sighting_of_ref": "indicator--496961f0-e640-473d-b802-55fcc1fd73c9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee1b076-5f5f-460d-9837-32f78fbe146e", "sighting_of_ref": "indicator--b33d4052-7f4e-4ab0-b6a8-37ba0a6b6512", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde5acb2-fed0-4913-b0f6-e36dcb9146c0", "sighting_of_ref": "indicator--725c2619-1ad2-4b64-8ef6-2504f37ab034", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9365ca2-4325-433b-a06d-2e8e048b43c6", "sighting_of_ref": "indicator--bba7ad4f-26da-4886-acd5-b67576253eed", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c795d016-9414-42e7-8e8a-1d4905f1d49c", "sighting_of_ref": "indicator--bba7ad4f-26da-4886-acd5-b67576253eed", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99f3872-b1ae-4956-b19e-86e427178dde", "sighting_of_ref": "indicator--bba7ad4f-26da-4886-acd5-b67576253eed", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5189a44-125c-4718-9e3d-4c2c6f8e4834", "sighting_of_ref": "indicator--ace35278-ec80-472b-b598-94980bc16849", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08dead3b-eb58-42cb-a17a-63667048ee16", "sighting_of_ref": "indicator--ace35278-ec80-472b-b598-94980bc16849", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118d69c1-7ed5-4346-b779-e29e222723f6", "sighting_of_ref": "indicator--ace35278-ec80-472b-b598-94980bc16849", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37103fa1-dc0b-4e81-93f4-cacca3a90b1d", "sighting_of_ref": "indicator--ea72fb89-357d-43d9-9ed9-0b7d7c8d41af", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5640341f-b7e1-4594-8bb3-fc24068f058e", "sighting_of_ref": "indicator--ea72fb89-357d-43d9-9ed9-0b7d7c8d41af", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6bdcf3-229f-4714-b028-48ab1cdd3ee7", "sighting_of_ref": "indicator--39342b0b-d261-468f-b50b-ac7c6db2e8fc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bffcb45-4196-47fb-b6e4-51c373fac0b5", "sighting_of_ref": "indicator--466c3c64-9a6b-409c-a3af-5e66be9a8ea4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d349e3-8ef1-4079-b81e-ed7a439acf30", "sighting_of_ref": "indicator--466c3c64-9a6b-409c-a3af-5e66be9a8ea4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c726c067-94d9-4b06-b1c5-a22d001bfa3e", "sighting_of_ref": "indicator--466c3c64-9a6b-409c-a3af-5e66be9a8ea4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19682c1-bda0-4aa5-807a-f40f88e09a30", "sighting_of_ref": "indicator--baf829ca-a2c1-44ec-a9f8-284cfb0bd77b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e319068c-ab1d-4039-98da-358eb4825db2", "sighting_of_ref": "indicator--81633b26-e644-49fe-b393-6c9e5a576085", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d2f0f2-f365-47e3-93df-d88d1dcca432", "sighting_of_ref": "indicator--f32ec00d-4ec7-42ca-9c78-ca4e84dac80c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7c2cea-2541-4646-85a7-b398a49b90aa", "sighting_of_ref": "indicator--ec10e614-3cd3-442d-960f-f84f3c125835", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ec68da-5965-47a8-8584-265e7429db77", "sighting_of_ref": "indicator--c47d5f93-6975-47a1-b69e-ba29a239e242", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f03f76-eb95-46b0-a415-69d7db238ebe", "sighting_of_ref": "indicator--7e39b2ff-b6b9-4e1a-b859-522ea20f5351", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec9e0d3-64a8-4558-88aa-fb48893372f2", "sighting_of_ref": "indicator--7e39b2ff-b6b9-4e1a-b859-522ea20f5351", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430ef46a-d789-4370-b161-730ca58c60a2", "sighting_of_ref": "indicator--7e39b2ff-b6b9-4e1a-b859-522ea20f5351", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54aa59ed-91fc-4864-af49-9ab682aa2a64", "sighting_of_ref": "indicator--21b9bbea-5df4-4f90-8e09-c9feb910ed21", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27db08c9-49e3-4311-8cb4-911d231ee7c5", "sighting_of_ref": "indicator--310e97a7-f615-4442-a20b-de0b3706c6de", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ccea42-62c6-4e6c-8b83-eba898f1cb9e", "sighting_of_ref": "indicator--c7678a4b-f9e1-408a-9e56-4978a1868321", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00809760-3c2e-4cc9-a463-bc97b2b012d2", "sighting_of_ref": "indicator--c7678a4b-f9e1-408a-9e56-4978a1868321", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfb5bbf-5ee4-4d16-b4d9-79e423d6ee4c", "sighting_of_ref": "indicator--02e568e9-4664-4518-9c9b-5063aca9c389", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447b069d-406a-4244-86e5-88a149539013", "sighting_of_ref": "indicator--9877d1d1-1b86-423f-b556-21322eb55c75", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f004d8ee-92e5-46cd-9352-950a29626f3e", "sighting_of_ref": "indicator--9877d1d1-1b86-423f-b556-21322eb55c75", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f389ab7b-8562-4a1c-bc8e-d809871e44d6", "sighting_of_ref": "indicator--e61ba88c-b287-460b-a091-366f6c5c3101", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c40faa2-0018-4c32-ab47-8e753fd2ddc8", "sighting_of_ref": "indicator--035c2607-6999-4991-b109-2c9800470a43", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd47fb4-8093-417e-9f64-a9b106c29dca", "sighting_of_ref": "indicator--035c2607-6999-4991-b109-2c9800470a43", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e33cbd7-584a-4956-a54f-5d032cdf23c0", "sighting_of_ref": "indicator--b98637ee-df62-4c84-9215-151ba82da9cf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f99dab-f2c8-4793-8926-2b8d6517d265", "sighting_of_ref": "indicator--244e26bf-db4d-43bd-8d79-ffedfffcbcd8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c67f68-7534-4348-a4b0-a2c85cc56f7b", "sighting_of_ref": "indicator--5a139802-625b-47ec-ae40-f22c1bd95940", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be72e994-d986-444f-a8b2-8f12939bbdaf", "sighting_of_ref": "indicator--1da05c24-d797-4a25-b5a1-56a9391f4751", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022d4521-22da-49a9-b36a-eb2c8673656f", "sighting_of_ref": "indicator--1da05c24-d797-4a25-b5a1-56a9391f4751", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ac2191-9eb4-4ef2-b2d9-4b8222972624", "sighting_of_ref": "indicator--1da05c24-d797-4a25-b5a1-56a9391f4751", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59f9824-2a0e-4c73-9a94-813172dcef01", "sighting_of_ref": "indicator--4b39744c-e5a8-4ea1-9663-41c8357d3228", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e54070-3c79-4d08-8a24-0878726697a9", "sighting_of_ref": "indicator--4b39744c-e5a8-4ea1-9663-41c8357d3228", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1a9d47-b807-4b35-a993-6d90db0b1a91", "sighting_of_ref": "indicator--4b39744c-e5a8-4ea1-9663-41c8357d3228", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6f58fd-8e4f-4cab-9eb3-8137e0e0d44b", "sighting_of_ref": "indicator--c2bbbec5-caf7-4643-a7be-cca23cf8eaa2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da42976-2f3e-4ac6-beaa-5ec46aa6fd3a", "sighting_of_ref": "indicator--c2bbbec5-caf7-4643-a7be-cca23cf8eaa2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853047bc-7b4e-4e6f-8967-d8707f41719c", "sighting_of_ref": "indicator--73d073bd-98ab-4694-b7f7-f924d86f5cb5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2181877-6c29-4c04-a859-8c25ba97f33a", "sighting_of_ref": "indicator--73d073bd-98ab-4694-b7f7-f924d86f5cb5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2458aa6-6781-41e9-b4da-2ef0c3c181c8", "sighting_of_ref": "indicator--2d0da969-0250-4050-930c-d9c444afc9ee", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a842a1c2-f846-4b25-876d-6c0af1729656", "sighting_of_ref": "indicator--2d0da969-0250-4050-930c-d9c444afc9ee", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa5b355-f15f-4588-a72c-bae724fdd8cd", "sighting_of_ref": "indicator--0a6485f9-7dba-498b-b39f-fc9764ca2033", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1ef21a-d187-4373-9bb9-e346edc58e38", "sighting_of_ref": "indicator--0a6485f9-7dba-498b-b39f-fc9764ca2033", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc93051-7a47-4a52-9120-5af3356517bd", "sighting_of_ref": "indicator--0a6485f9-7dba-498b-b39f-fc9764ca2033", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b161aa8d-a5a2-4dec-9640-9a2539f11485", "sighting_of_ref": "indicator--43152ab9-7987-4893-8b2f-65bd0876fe6c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31ad16a-69d5-4711-85eb-c38f998604fd", "sighting_of_ref": "indicator--79061b46-97b5-4b07-879b-f8e95567f014", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb00181d-ebd2-4651-9ce2-f856b8bff608", "sighting_of_ref": "indicator--79061b46-97b5-4b07-879b-f8e95567f014", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a646ab0b-36c9-4c90-8a45-9f293c8c88cc", "sighting_of_ref": "indicator--81ac0294-9699-4ac1-88d7-45bba8aa424c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69648cd1-4886-461b-b85d-3f5607bfac63", "sighting_of_ref": "indicator--81ac0294-9699-4ac1-88d7-45bba8aa424c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5a8814-e67f-4e31-b1e9-4fbb82658cc7", "sighting_of_ref": "indicator--dc4fc8e7-88bc-48db-960b-c0f4344f9c88", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a2d5b1-c804-4e6f-97a4-6b7e19c438cd", "sighting_of_ref": "indicator--dc4fc8e7-88bc-48db-960b-c0f4344f9c88", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e604ddd1-4ac7-4a8e-b47d-ab1f950ba84a", "sighting_of_ref": "indicator--dc4fc8e7-88bc-48db-960b-c0f4344f9c88", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9449eeec-dfc2-43a9-ad1e-481a5b6cc707", "sighting_of_ref": "indicator--e71ebef3-e3fb-441f-ae12-e462c2f9f6b1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2420c211-cc1c-4c62-a6a0-6a6ab5be2a8b", "sighting_of_ref": "indicator--e71ebef3-e3fb-441f-ae12-e462c2f9f6b1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06077cc7-752b-41b9-b77c-75050b227d5d", "sighting_of_ref": "indicator--e5879ce3-fcf1-42f5-b0c4-0f78a4b2889e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470055c3-170f-4cc4-9907-42a49d947271", "sighting_of_ref": "indicator--e5879ce3-fcf1-42f5-b0c4-0f78a4b2889e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94cf8d6-18ee-4176-8039-728a4d6ba967", "sighting_of_ref": "indicator--cd974b4c-d601-4795-921c-a1319aa6b578", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb675b4-a96b-4402-8074-9a39f94018da", "sighting_of_ref": "indicator--cd974b4c-d601-4795-921c-a1319aa6b578", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67ffcfb-9b2e-465f-8bd8-edcaefc5e9a6", "sighting_of_ref": "indicator--cd974b4c-d601-4795-921c-a1319aa6b578", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6031767-e856-4341-8085-dcf1bb0da9da", "sighting_of_ref": "indicator--00e9ee35-a6bd-4022-98de-c6b50ce6e3a9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5103ba4d-8769-4163-9837-268203f7fddd", "sighting_of_ref": "indicator--dbfaf504-9930-4382-a682-af8aa14358fd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90a6dfe-26b2-4f62-979a-9e290b844996", "sighting_of_ref": "indicator--c3be3ac4-2777-4ff3-bc2f-9346eb462355", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3eaf9f-5c90-4b87-8d87-13e3057044c4", "sighting_of_ref": "indicator--c3be3ac4-2777-4ff3-bc2f-9346eb462355", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b683083a-c28e-4d71-a0c8-d3f7e3ff07c7", "sighting_of_ref": "indicator--903ace61-b9fc-4d0c-bb09-0b68c70b1362", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1ea6e8-6de5-4209-b34c-fc37f4690ba3", "sighting_of_ref": "indicator--6f8389b2-3360-4219-a6c5-845750167f36", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67026b8d-acce-4467-a8d0-40aefd1382dd", "sighting_of_ref": "indicator--31db2b6d-7596-40f4-ae46-a47aaa7e0861", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fda2602-6534-4210-b1ae-6454d1fa30a5", "sighting_of_ref": "indicator--31db2b6d-7596-40f4-ae46-a47aaa7e0861", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b8c77a-e56b-4530-b24d-055032d82806", "sighting_of_ref": "indicator--31db2b6d-7596-40f4-ae46-a47aaa7e0861", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7da7a4-c3fa-4400-a4eb-6ca50184a3b7", "sighting_of_ref": "indicator--82999225-45fb-43fe-9aaf-93d2134f7725", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693fb2e5-ff70-4fcc-bbcf-25a471814044", "sighting_of_ref": "indicator--82999225-45fb-43fe-9aaf-93d2134f7725", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb70436e-7a5d-4268-a183-ebc11d37962f", "sighting_of_ref": "indicator--82999225-45fb-43fe-9aaf-93d2134f7725", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619d986b-7202-44de-9521-0107d02a9274", "sighting_of_ref": "indicator--2ef9411c-3bc0-4d6f-b281-14d8f58729e3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4cc596-e82e-47c8-91c6-fb4333bf6583", "sighting_of_ref": "indicator--baa18a31-03c6-4c8e-8a9f-46af22a8e22e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0cfbd1-7851-4304-86f5-e929d7a2cff6", "sighting_of_ref": "indicator--baa18a31-03c6-4c8e-8a9f-46af22a8e22e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9a32bb-54ee-493b-af7a-f0090b51068c", "sighting_of_ref": "indicator--baa18a31-03c6-4c8e-8a9f-46af22a8e22e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3677b2b3-f610-40a8-a326-9ac549a5ec2a", "sighting_of_ref": "indicator--fadcd67b-2e20-4b8a-aa3d-375f2603c66d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914c68d9-896a-470f-99d0-e31a7e26bb83", "sighting_of_ref": "indicator--fadcd67b-2e20-4b8a-aa3d-375f2603c66d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca353fd-0ffe-440a-b239-af2a4f41438f", "sighting_of_ref": "indicator--fadcd67b-2e20-4b8a-aa3d-375f2603c66d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ccf9fc5-a230-4b17-997e-947f2135e15b", "sighting_of_ref": "indicator--b5b81591-5e06-4b8b-b12f-5f7e93ea8920", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86202df4-4053-4a88-9244-88e6ed48847a", "sighting_of_ref": "indicator--b5b81591-5e06-4b8b-b12f-5f7e93ea8920", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e2063a-c15a-43eb-9745-0ddf3641a675", "sighting_of_ref": "indicator--b5b81591-5e06-4b8b-b12f-5f7e93ea8920", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb32f133-3f8f-4024-a045-14bf7a3f667a", "sighting_of_ref": "indicator--5b0ca778-3462-4669-8c65-c3bfade32e6b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e93525a-3528-4f46-ab04-29b104040516", "sighting_of_ref": "indicator--50f8d2b8-da28-4944-80e6-01b876f174a8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae50ac8-a645-48a2-a3cf-f8ff4032d0ab", "sighting_of_ref": "indicator--50f8d2b8-da28-4944-80e6-01b876f174a8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd33ba0-d051-4121-a554-6968cd77afe6", "sighting_of_ref": "indicator--fe7bb48b-891a-4300-bd77-cfd686820fd1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30421d65-9fe7-42b3-8198-08bc4e1c7396", "sighting_of_ref": "indicator--fe7bb48b-891a-4300-bd77-cfd686820fd1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8ca4e1-48e5-414d-8b38-7edbcc77193f", "sighting_of_ref": "indicator--fe7bb48b-891a-4300-bd77-cfd686820fd1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd99179-b612-4cd8-890d-6a11d0200baf", "sighting_of_ref": "indicator--3e5fb67a-6465-4e22-a304-abe6814ea682", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc53208b-1aba-4952-a113-5bad43c3c28f", "sighting_of_ref": "indicator--ed8d2bf6-44a0-4155-986d-396863b518fd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25b3b61-30c6-40fd-b3e9-e8115ff405bf", "sighting_of_ref": "indicator--9bc16c62-c766-47d1-b19f-70b2731b4119", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13cadf8-dca2-44db-9530-905caf5a024b", "sighting_of_ref": "indicator--9bc16c62-c766-47d1-b19f-70b2731b4119", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e91fb10-700e-4e4a-a6b1-1b68e61d3c5a", "sighting_of_ref": "indicator--9bc16c62-c766-47d1-b19f-70b2731b4119", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5fee66-0957-4d4d-82fa-d3e46cff300f", "sighting_of_ref": "indicator--47799778-dad7-4b36-b9f2-9145086f7811", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72a98e4-39b5-4321-9d2e-33de88c97cfe", "sighting_of_ref": "indicator--7d1544e1-3430-4908-b479-57ee63e81aa3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393babdb-c1f0-4583-82cf-12bcf3ae42a4", "sighting_of_ref": "indicator--7d1544e1-3430-4908-b479-57ee63e81aa3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbd5dc7-88d0-4fb5-9bdc-8016f589159a", "sighting_of_ref": "indicator--afef6a77-a697-4e03-835d-1f778af7031b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951a749e-cfc3-493c-a0f3-dd24d5beb561", "sighting_of_ref": "indicator--09efc688-9e56-422b-b957-2a51913ff7dc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528349c2-4060-4c1e-8d5e-c37fa492e173", "sighting_of_ref": "indicator--09efc688-9e56-422b-b957-2a51913ff7dc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb082cec-0f58-4194-9f9b-999043a90a7e", "sighting_of_ref": "indicator--ca1910a9-bb5a-4257-b2a4-5151a618310f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e822f67-20c2-4727-87ab-1268787c80d3", "sighting_of_ref": "indicator--c7477476-eb1c-40e5-8ec1-f234dc55ca94", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb61a579-1075-474b-a530-32cca8663328", "sighting_of_ref": "indicator--c7477476-eb1c-40e5-8ec1-f234dc55ca94", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02e4f70-b17c-4082-9d1f-bf0fd9e85f3e", "sighting_of_ref": "indicator--989c8413-d659-49d3-bbcc-fa01ec848516", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ed2076-ea7d-4950-89f2-748c2b12aee8", "sighting_of_ref": "indicator--989c8413-d659-49d3-bbcc-fa01ec848516", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884ae207-8dce-4f1f-be1f-0b7a1879cb72", "sighting_of_ref": "indicator--1e1e75ec-5ac5-47ee-9b04-09491c02e281", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e1b982-2c9a-4ed5-9f0d-febb6e664ce3", "sighting_of_ref": "indicator--1e1e75ec-5ac5-47ee-9b04-09491c02e281", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4b826f-b22d-406d-b8a9-edfd067255b1", "sighting_of_ref": "indicator--82f4a0d2-882a-4ccb-9477-ec7080bd9908", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f782eb02-23c7-4c04-9012-cc66bb7974dc", "sighting_of_ref": "indicator--82f4a0d2-882a-4ccb-9477-ec7080bd9908", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a095cd9e-59d0-419d-835d-e8b32e7204ef", "sighting_of_ref": "indicator--69668e6d-e4de-4f8f-b385-69aaa870b955", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31015f6c-96cb-44b6-b47e-0498713071a2", "sighting_of_ref": "indicator--69668e6d-e4de-4f8f-b385-69aaa870b955", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bccbf38-298f-4d83-8dd3-194e052bbb53", "sighting_of_ref": "indicator--69668e6d-e4de-4f8f-b385-69aaa870b955", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25240386-ace5-4814-8ef1-9ca588f0edcb", "sighting_of_ref": "indicator--005aa69b-5586-4dc8-8ba4-44d4fedc45f2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b41fb1-904e-497d-acc3-7e38f15f3e9c", "sighting_of_ref": "indicator--7f352e7b-63d6-4fc8-95ee-8043d6af010e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373933cd-11ab-4364-83b9-30761df6c11c", "sighting_of_ref": "indicator--5e5a0a65-37db-49f6-9ad1-9e2076cee979", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114c9e76-aac9-4adb-88b3-9b26450fb04b", "sighting_of_ref": "indicator--03cd6d92-99fd-4864-95cc-2a1556718173", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd181fd-af2a-4e3d-a017-438f78c86b77", "sighting_of_ref": "indicator--efbeba99-4ddf-4fca-95db-d03e7de1acf9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbfc329-e795-4035-972a-ca65dc2658d2", "sighting_of_ref": "indicator--4bc59944-0747-4b22-8355-6e3f4dad4548", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88bf9c3-1464-427d-a4ab-c0460c67ce03", "sighting_of_ref": "indicator--0344871b-3365-44c9-88f0-dba49e27896d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5183cc-63cc-4c38-94d4-1f5b06b7b676", "sighting_of_ref": "indicator--45acfb0c-aad2-49b8-9be1-ba5726c5c02e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f76503-5056-42a8-b238-b2f6f1389712", "sighting_of_ref": "indicator--45acfb0c-aad2-49b8-9be1-ba5726c5c02e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0a89bb-9ade-4faa-9b50-fe5d985dd4e2", "sighting_of_ref": "indicator--45acfb0c-aad2-49b8-9be1-ba5726c5c02e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6e902d-4264-499d-8f61-cfeb17f58a05", "sighting_of_ref": "indicator--69842d8f-a9ec-4fb6-a573-e4aa6b18309b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfe21ad-cbdb-4520-9da2-81dad1738fb0", "sighting_of_ref": "indicator--69842d8f-a9ec-4fb6-a573-e4aa6b18309b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab643d4-9265-48c7-bcc7-fb64d067ed76", "sighting_of_ref": "indicator--69842d8f-a9ec-4fb6-a573-e4aa6b18309b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d98c374-8b11-444e-9bbd-254725af6e18", "sighting_of_ref": "indicator--0ca09165-c989-4f2e-aa9e-3fca64fd2764", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0833576d-2596-4c88-b23d-3993b127bafa", "sighting_of_ref": "indicator--5e2e9e97-12ac-4aca-85c2-4147b18af299", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e318f724-2311-4dc9-875b-2d498db86fd7", "sighting_of_ref": "indicator--5e2e9e97-12ac-4aca-85c2-4147b18af299", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb3ef7b-8768-4861-849d-466e68c5b1ac", "sighting_of_ref": "indicator--5e2e9e97-12ac-4aca-85c2-4147b18af299", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780298bc-b979-4d10-9e8a-d1c506c9e0f5", "sighting_of_ref": "indicator--43539cd9-9b43-490b-8c96-be6a9f5c1cfc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967ccfac-d5c7-4161-b634-9db15df53731", "sighting_of_ref": "indicator--43539cd9-9b43-490b-8c96-be6a9f5c1cfc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344ce72b-29ef-4a46-bcc0-9cee59bfb03d", "sighting_of_ref": "indicator--43539cd9-9b43-490b-8c96-be6a9f5c1cfc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3de6dd-7e61-4daf-b3c8-1ea3e1eebfd0", "sighting_of_ref": "indicator--1ab5eb68-c9cd-4acc-b6c9-e17184cf6c7f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138b4c48-4cb6-4b0c-8df9-a3fe51c67365", "sighting_of_ref": "indicator--1ab5eb68-c9cd-4acc-b6c9-e17184cf6c7f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af4de10-6d08-4c21-b20d-942e692d1b82", "sighting_of_ref": "indicator--1ab5eb68-c9cd-4acc-b6c9-e17184cf6c7f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215f3bad-fa7f-4957-a36c-be77c9beec54", "sighting_of_ref": "indicator--e7a74c23-fedd-48c6-b574-91a70aff7694", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba6f4ff-ce9f-40a8-9cb7-c7ee4074643d", "sighting_of_ref": "indicator--e7a74c23-fedd-48c6-b574-91a70aff7694", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecfcfa4c-50ed-4784-a84b-3b105e745208", "sighting_of_ref": "indicator--e7a74c23-fedd-48c6-b574-91a70aff7694", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7db3d53-74bb-4fbc-8fbd-ad0e33a7f5c1", "sighting_of_ref": "indicator--e21d5654-4e16-472d-ac3a-4cde3dd87544", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3b503c-fcc5-408d-a2b4-e01481c0498e", "sighting_of_ref": "indicator--e21d5654-4e16-472d-ac3a-4cde3dd87544", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ced7f84-73d4-4a2d-bb08-141f64d1578f", "sighting_of_ref": "indicator--c856cdac-e53d-45b8-afa4-6d871f64e426", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fc78d8-40ad-457f-bb13-b3bf8863215b", "sighting_of_ref": "indicator--48b11f82-86b3-47db-80c9-e76da465fb24", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ab3c72-68d8-4429-bf27-9f35cbed2259", "sighting_of_ref": "indicator--48b11f82-86b3-47db-80c9-e76da465fb24", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db30b98d-aee9-4639-9dd3-bde58348ebd9", "sighting_of_ref": "indicator--4bac6fdc-0df5-41ab-9bf8-382d881ecb03", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e839d55-fe79-4a5d-ad20-a800fb8ebca7", "sighting_of_ref": "indicator--f0e2cff4-b4e3-4dff-8b51-14c748ec3a31", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c409202-7a34-49b2-956d-3769a649e392", "sighting_of_ref": "indicator--8087ed1a-a300-40c8-8c75-db6fcf5eead6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d821f40c-e3d9-4794-93b2-c46c4599e60b", "sighting_of_ref": "indicator--8087ed1a-a300-40c8-8c75-db6fcf5eead6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d3ae1a-4b02-4318-bdf5-ae3f24be4722", "sighting_of_ref": "indicator--04347646-5822-4300-b777-13a724812dc3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34ba06c-517c-40f2-af88-0419623636cc", "sighting_of_ref": "indicator--879dd48e-e99f-4fb0-a5b5-a5b07fe03059", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7e1750-6a51-4abc-affd-fc6f42108fd7", "sighting_of_ref": "indicator--6d09181a-042d-42bf-b9df-331fb543f0bc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e86713-6191-4373-8eda-8c9941855a01", "sighting_of_ref": "indicator--1b9a516d-4f2b-4e27-afb7-7c98b8d3b6db", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6090d5a1-b0eb-4e09-82d7-70a33668f9e5", "sighting_of_ref": "indicator--1b9a516d-4f2b-4e27-afb7-7c98b8d3b6db", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce563aa7-dc69-40f5-938b-bc377941b915", "sighting_of_ref": "indicator--9f0572e1-5fc5-4d7c-a163-c220acad55c1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3fbdf6d-6bd7-4df6-9a4b-baa0e97a0182", "sighting_of_ref": "indicator--c91beb5d-1131-45d1-a852-f65d2d9a113b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38cb75e-3597-477c-a480-cb556403f5a1", "sighting_of_ref": "indicator--4cc54c46-13bb-44d2-b23c-3dc8c9f00bcc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a416937-068f-48f1-b754-800a293b152b", "sighting_of_ref": "indicator--1c60ac8c-706f-4924-a64a-7a4dc959762b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ea3877-be4c-489e-85da-a812e3bf1af0", "sighting_of_ref": "indicator--93c8ba4e-131f-4137-99cd-0b2d8beff587", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299ca2af-ec2a-4c63-b3d6-53b7c11d0a3d", "sighting_of_ref": "indicator--65808cac-d263-4ec9-b22a-12625e6e5c35", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f29486-0e83-4160-9fbd-8da037fd918e", "sighting_of_ref": "indicator--60c1367e-3261-4556-88cf-057c47fbc367", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c46064-b45b-4c9e-a638-be467aa59c0f", "sighting_of_ref": "indicator--9c76aae5-1297-42b4-b17a-257c7bd230e0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb9231d-038a-493f-a700-83200fbe1934", "sighting_of_ref": "indicator--9c76aae5-1297-42b4-b17a-257c7bd230e0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e76dfe-b795-4042-a849-8a3814d302fe", "sighting_of_ref": "indicator--53bd6f65-a51b-4aa0-b4b7-0582c5d37480", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796aa026-606f-4581-8cb4-af7af37c3025", "sighting_of_ref": "indicator--36e7e859-9598-4b10-9c81-dea4bb4eb867", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40848498-9cf1-4c9b-8ed4-734f23d1f3d5", "sighting_of_ref": "indicator--69339781-3f4b-426c-8f27-4033abf837f7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f37f00-9f4f-4226-ab5d-886633bbae20", "sighting_of_ref": "indicator--b337c5f2-6ee2-4fda-b465-b47df31e7ece", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf76a17c-303c-4720-9142-78cfa0a2db63", "sighting_of_ref": "indicator--97a37371-ba0f-47fa-867f-1b871400bade", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7c86e2-2947-41b4-a3ee-cf326c397340", "sighting_of_ref": "indicator--46bc24bb-2d8a-4dfa-b96c-958f8caca0ab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159f9a3f-079a-493b-a662-381a173edcfa", "sighting_of_ref": "indicator--dc13ab25-6531-4629-9969-e975e3951044", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3e9450-f456-4b4f-823e-607d91921406", "sighting_of_ref": "indicator--9e6f4c6f-3e76-47e6-8655-0a9df234d828", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c869e00-79cc-4030-a97e-7da8c616096c", "sighting_of_ref": "indicator--9e6f4c6f-3e76-47e6-8655-0a9df234d828", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a66692-6d96-4b03-83ba-0cfa70395b95", "sighting_of_ref": "indicator--254887b8-f29d-4b4a-96e1-232ddc1d91d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7445106-5fc5-4389-946b-061ea9636a79", "sighting_of_ref": "indicator--85cbe128-a18e-4c90-924c-48b689525616", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0351a51f-8413-4a40-a30b-5109afd19c4f", "sighting_of_ref": "indicator--af2ab9f7-0c41-46b2-86dd-b68d63546be2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329881ce-e38c-414a-bf46-39e706f93933", "sighting_of_ref": "indicator--5d0f4488-475e-4609-998d-9fceb1942ed0", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75935ec-bf8e-4c81-9e32-d523d3028fd6", "sighting_of_ref": "indicator--e1d42f97-9d15-4ddf-a5c1-6053fedd8aeb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3758ebdf-30a6-4cae-91b2-270ba4c0a003", "sighting_of_ref": "indicator--bdd2c706-b68a-4461-891f-d8ee516e850a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b334661a-41d4-4b87-8ad4-ec1cbe5154bb", "sighting_of_ref": "indicator--31082420-fe96-4feb-ad34-fd83e3453d66", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35f86f6-d07d-4d4c-bf4c-5891cd360d6a", "sighting_of_ref": "indicator--3a976830-dec9-4e77-8288-ab1f581fd91e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b95f9d-2ecd-4194-aad0-466d9ec4801e", "sighting_of_ref": "indicator--1894c493-d703-4d0f-b3cd-a384037e699a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ac0f9f-dd16-45ee-bb12-72c5d6d32eb5", "sighting_of_ref": "indicator--1894c493-d703-4d0f-b3cd-a384037e699a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219f013e-9c55-4f22-b994-768d2cb59761", "sighting_of_ref": "indicator--43e56b7a-4e10-4482-8ed2-695cbf7414ea", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57956b12-bb80-4aaf-a0cc-6da970f4037e", "sighting_of_ref": "indicator--43e56b7a-4e10-4482-8ed2-695cbf7414ea", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054ba085-054d-4578-95f6-bf237da297ea", "sighting_of_ref": "indicator--a5ef6f26-50a5-4099-996f-015b89f4743a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b58482-f6cb-4b04-9129-71d2d8f5e888", "sighting_of_ref": "indicator--eb9d5a61-6ce1-413d-95f4-315a8849471f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c5b493-5d51-4d4b-acf8-8361a3c66ad3", "sighting_of_ref": "indicator--eb9d5a61-6ce1-413d-95f4-315a8849471f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321a0c50-34f6-4325-96c4-18ec7c9f86e6", "sighting_of_ref": "indicator--e46af71d-8a36-40a8-aeee-941dfcebd534", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10454ac-2cd7-4ed8-8ae1-31fa5a5075ca", "sighting_of_ref": "indicator--054b9967-d039-4313-907b-416548d5178f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fc17ff-a952-47c4-ad90-ace4d254cb4b", "sighting_of_ref": "indicator--4ad4a50d-5071-4419-b7ea-91958ba63223", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680bb30b-1d3d-4052-9efd-fb6bbecc3c20", "sighting_of_ref": "indicator--d11f0c58-af7d-4214-a5dc-dc73b9f98204", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2397a898-5bf7-4407-a87d-e2176f10ca9c", "sighting_of_ref": "indicator--0db618e8-3c97-43bd-a547-e901cc927959", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b583fcf-3b36-42cb-af97-e2e9722c0086", "sighting_of_ref": "indicator--9b17087d-1ebd-4a76-a7ad-9e38009dece8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fadf07-1974-480a-aa37-21cdeb715198", "sighting_of_ref": "indicator--40eb2218-823d-4911-832e-ace2071298da", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1630a19b-9e83-4124-b2fc-1786f32890d2", "sighting_of_ref": "indicator--d954d362-dddb-4116-9bca-0da533c29f8d", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6b2d5f-e15d-4808-a23e-a88c9d7e5ef6", "sighting_of_ref": "indicator--56269666-2ca5-464c-9c59-cdfa85346fbe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ad7bd2-8700-4c8c-a7dd-8aa5377f8f9f", "sighting_of_ref": "indicator--d8a1eea9-aacc-4ffa-b645-91b16eaf5bef", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e5724f-7bcc-4f94-a411-18369c211bb0", "sighting_of_ref": "indicator--177bc40b-309d-4c62-a9af-91a43527bec2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c36b45e-f268-4792-9bb8-cbdcca463eba", "sighting_of_ref": "indicator--177bc40b-309d-4c62-a9af-91a43527bec2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a030177-4779-4885-ae8b-efd05820663d", "sighting_of_ref": "indicator--3427868d-f41e-46af-b6a6-a37bc049a8b4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4faab5-c4cf-4aca-aeb3-d6f88f7408cf", "sighting_of_ref": "indicator--dc2f0801-357c-461f-8cb3-cf877f0622ca", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10fffa6-9f35-4260-b7b1-f5f5460a0106", "sighting_of_ref": "indicator--982524d4-96b5-438b-a5f4-2998514514ee", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f35e80-18d2-438c-98a9-b99eabd7bd44", "sighting_of_ref": "indicator--5eefc390-6778-4cb3-bc00-e08a2edcad01", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda6e714-e612-4ec5-b3f0-72940ad8879b", "sighting_of_ref": "indicator--d7cdb6bf-2c2b-4a37-943e-4f3e203ca574", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84cfa45-a783-44b4-a5e3-2ac6d01d9aa1", "sighting_of_ref": "indicator--d4309848-096f-4058-a843-0591f61396f7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3790437d-2b3a-4288-99cc-8182c8665506", "sighting_of_ref": "indicator--b9e134e7-e677-4270-8552-3d33579a0189", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2a0d95-99bc-4b59-befa-dd3fe582c2e3", "sighting_of_ref": "indicator--e56b32ca-6333-4929-9944-40389eb2576c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f83c6b-898d-4a1f-b30a-c9673298e40b", "sighting_of_ref": "indicator--179c89df-da47-4b4a-be21-005b05b9e5ba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0da6d2-e248-479d-9814-c668e36e42c3", "sighting_of_ref": "indicator--3ac9a886-0e6a-4008-b1c6-737f93de8f2d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b753a3eb-8b39-414a-91c2-54fde4dc9660", "sighting_of_ref": "indicator--50a5497e-e09a-4dbb-bcc7-6d97c7467873", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c5c0d5-1ae9-4896-9d1d-6280713693c9", "sighting_of_ref": "indicator--dbf7f3fd-23e4-4cde-8b80-503a166da949", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3640ea3d-8f72-45c1-bcbc-9b88871dbb94", "sighting_of_ref": "indicator--de735201-08bd-46b7-8390-6173ea25fdd0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512c50f2-3577-4356-814c-93075eeb10fb", "sighting_of_ref": "indicator--cfe09e7d-458c-41b3-903b-78028d00a254", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69310d23-ae27-4583-9fd5-d265f7ba82ef", "sighting_of_ref": "indicator--c7318e6e-9490-4460-b16f-b6722ac706c0", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05c3c6e-60e3-4a0c-8ded-54636b78229e", "sighting_of_ref": "indicator--af7a8313-9686-4a25-b682-7009d42eda16", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13cd749-72ba-42b4-a693-d23674b3d5ff", "sighting_of_ref": "indicator--c566dec4-6081-4d4e-aca5-49a7e657bce1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344dfd64-3583-40db-a891-eec98fcebea6", "sighting_of_ref": "indicator--ca76063a-a80f-4edb-b961-ed5a37cd8509", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b9ac06-edf6-4af6-acab-2056761772dc", "sighting_of_ref": "indicator--86154a46-337c-4f79-b000-69908ac87348", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1629ab28-37f9-4fb3-9943-214ea8dda8df", "sighting_of_ref": "indicator--8e760861-c4e6-417a-8813-25c21d168d45", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1ae8fa-55b2-4a10-ae08-1287fa1f9984", "sighting_of_ref": "indicator--06cef7f7-f11a-4709-8336-f84128c9aa4b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e99568-2065-41a0-a267-980bb0bf66ca", "sighting_of_ref": "indicator--216479df-254d-4f4f-99c6-38c556a09b54", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba878de-b9fc-4b12-b234-a98ab6fab792", "sighting_of_ref": "indicator--06bff8db-8533-4e03-8933-23c340611212", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c146ea14-8342-4ccc-9918-0d602b12c656", "sighting_of_ref": "indicator--251d0ccd-8e9f-4d65-a033-ae0042ad34b3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aeeff05-1a47-4aec-ba2a-19de49303592", "sighting_of_ref": "indicator--f41915fe-c1bf-49a3-9087-3bda8677c544", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bacaac0-0508-45f9-8b67-b61bc3346a2f", "sighting_of_ref": "indicator--5c326ba5-7e4a-4d4a-8193-477e495d6f65", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802d59cd-22e9-43f9-9a7c-780edeb942ba", "sighting_of_ref": "indicator--2b25d745-e146-42d4-a805-229c2cb5c62d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1201e902-0a49-4536-ad76-5a734345e3e4", "sighting_of_ref": "indicator--2b25d745-e146-42d4-a805-229c2cb5c62d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6554efd4-f0ee-4fb8-bc66-fc2a1dd034b5", "sighting_of_ref": "indicator--c84e7c4a-b198-4760-b5ac-0a2d6214233d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d17c75c-12ab-4a51-afd8-eecfdb71d326", "sighting_of_ref": "indicator--c84e7c4a-b198-4760-b5ac-0a2d6214233d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917fe098-bd04-4eac-8c40-8e7663bae4a9", "sighting_of_ref": "indicator--6840566e-bf03-4746-84b0-e603cdcd263f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad4f3a4-ac45-4aa4-8388-d756abda5d28", "sighting_of_ref": "indicator--6840566e-bf03-4746-84b0-e603cdcd263f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45ac0ac-c398-4076-93ff-0e8fb2516b0e", "sighting_of_ref": "indicator--06849982-7ce8-4474-a432-abbadc0ef0d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39fea95-acec-4494-be77-f81295c0c74e", "sighting_of_ref": "indicator--72d53816-2023-4836-928b-71d47894bda8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd9b9cd-6b10-44d6-ae4a-3df7ccd920f9", "sighting_of_ref": "indicator--72d53816-2023-4836-928b-71d47894bda8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa89f18-5110-457f-a3e3-517f44bbf1ff", "sighting_of_ref": "indicator--72d53816-2023-4836-928b-71d47894bda8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5339c62b-1e80-4c96-80b9-8d15e5a38cd0", "sighting_of_ref": "indicator--0e6362da-bc54-4e6f-96eb-a7730893d764", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c011c35f-e801-40c9-a3fd-b849fb3324b4", "sighting_of_ref": "indicator--3b8f36cc-3ece-42c5-9c73-bdb57046b378", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad805289-d734-46c1-94ab-5d3767fa0061", "sighting_of_ref": "indicator--3b8f36cc-3ece-42c5-9c73-bdb57046b378", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8e1a39-4261-484c-af9f-77af1184d85b", "sighting_of_ref": "indicator--3b8f36cc-3ece-42c5-9c73-bdb57046b378", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60261ed5-e129-4606-80d1-2c7c957fea07", "sighting_of_ref": "indicator--ed91a46b-e620-4a50-8bf2-59cbfea1f712", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36fa9bc-15f9-4249-bc4f-ec742ec4f77c", "sighting_of_ref": "indicator--ed91a46b-e620-4a50-8bf2-59cbfea1f712", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026c8a89-aa50-47d0-b1c5-16dd95f54a1f", "sighting_of_ref": "indicator--e9e49011-e26c-481e-818a-af90608cb37c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555ec77a-d23b-4558-8574-8faf6a1e7576", "sighting_of_ref": "indicator--e9e49011-e26c-481e-818a-af90608cb37c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ce8e2b-332b-40ac-b7cb-3667733b280c", "sighting_of_ref": "indicator--e9e49011-e26c-481e-818a-af90608cb37c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2d29b4-5a8e-43b0-af02-916f6495b9c0", "sighting_of_ref": "indicator--30c390db-f1cb-420c-8cfc-3b9a12ef7f01", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b43e862-e1bc-4b49-a02c-6627c863bf78", "sighting_of_ref": "indicator--1529ce27-c770-4dda-b733-6fce16fc94b4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c74c184-44c0-4e1e-8408-620f7d5cff20", "sighting_of_ref": "indicator--6dea1366-d7e8-4365-9eb6-1d8b0639ff6e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379bd788-1ae5-4ae8-8ff1-e95c6ff876f0", "sighting_of_ref": "indicator--6dea1366-d7e8-4365-9eb6-1d8b0639ff6e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb05792-e1a2-46e8-885d-999bfb604382", "sighting_of_ref": "indicator--6dea1366-d7e8-4365-9eb6-1d8b0639ff6e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3587d0b-6396-4ae9-ba2e-06f724ca2c71", "sighting_of_ref": "indicator--5d7c9a75-c108-46a3-87f7-2409af12e5ff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc875c7-0de0-4283-92e9-ddba819f8d91", "sighting_of_ref": "indicator--4edde5f4-a643-42c5-b054-0169d2be5117", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d116c6d6-3341-43bd-8d3c-44cd4872aa38", "sighting_of_ref": "indicator--b7112f07-39bf-43eb-9ca0-21738d620a9e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea8403b-1d62-4fdc-a9fa-ec54815654f7", "sighting_of_ref": "indicator--b7112f07-39bf-43eb-9ca0-21738d620a9e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e6de5c-099c-4a2f-b90a-b08c631bb9f9", "sighting_of_ref": "indicator--1c7ac355-db49-49d2-98a0-8964ab17d6bc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebd0216-178f-42da-9a6b-be1aabebd8d2", "sighting_of_ref": "indicator--e5f3e919-8b50-41d3-92de-858b22496906", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072786f3-edae-4c4c-8fa3-2577ece5ff1b", "sighting_of_ref": "indicator--0ce71634-f8c0-482b-8d55-264e4b28df76", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe78b90b-6f2c-431e-b05f-1210ac112778", "sighting_of_ref": "indicator--edfc9af7-07d8-4230-a041-992c3b3739cf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d7d202-6d3f-4743-a0eb-cb9f895eb7ed", "sighting_of_ref": "indicator--9ffaec27-f2a0-4859-8101-98ed1f4e5f65", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586a0ed2-3b8f-4336-aef7-dc52e59f2f97", "sighting_of_ref": "indicator--fbe915e3-c6c2-433f-9893-ead1afdfc91e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ebe0b4-21a4-4276-b30f-a572f48a48a9", "sighting_of_ref": "indicator--ddeb0780-6d4b-472f-a8f7-0bcc5fc181b7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdce2f75-61a1-44dd-83e2-fe4fce2d03ea", "sighting_of_ref": "indicator--7d833f12-477f-44d0-96c6-c64d6aaea92d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5bc1a1-eeb4-4d8d-8544-f591cd99058f", "sighting_of_ref": "indicator--7d833f12-477f-44d0-96c6-c64d6aaea92d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c79b223-ff3f-4948-bc5c-c85eb44104c4", "sighting_of_ref": "indicator--7d833f12-477f-44d0-96c6-c64d6aaea92d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd77a94-d321-416a-880a-863682e3c29b", "sighting_of_ref": "indicator--c0ce533d-53e2-4648-aa30-394f2d4aab4f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b445e08-0f42-4bbb-86f7-517a1f74758f", "sighting_of_ref": "indicator--9143b435-c188-4f42-92ad-b7f1969c25fb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73412216-f98d-42a5-a786-2f944ec5fabf", "sighting_of_ref": "indicator--47b8264b-60cc-49eb-92be-bb3823cad40c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2ac86b-6710-41d4-b8e5-c1170ab34b3e", "sighting_of_ref": "indicator--1af6e981-9f0a-4b50-a704-4caec90eb5fc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39a9d0f-cb23-4237-bb15-cc677438e10c", "sighting_of_ref": "indicator--501e1ead-1001-494a-ab91-964371aafab9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9700b07d-d451-4d6e-932d-5c13c7f81457", "sighting_of_ref": "indicator--60f45f63-9c7b-4751-93bb-b1e3ea7294b6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b9a24c-0ab4-41b1-ae03-9a87f8696503", "sighting_of_ref": "indicator--ff9fa475-7e52-4c3e-80f3-76e601025410", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9d38dd-7d17-4cb1-a76d-ad95c657fcb2", "sighting_of_ref": "indicator--157aab6c-da15-482d-a01e-281d4fe3e4eb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf08f2b4-f256-44ea-9c16-3136e0e6aad1", "sighting_of_ref": "indicator--1115b18e-4fab-43af-93c4-db0242254a40", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a45f30-a070-47fb-aa22-11f89cee9ef9", "sighting_of_ref": "indicator--473870fa-de00-4e91-ab10-af848986e24b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f5b636-519a-4ebf-bc23-1cc2a812e3e1", "sighting_of_ref": "indicator--d38090ad-0224-478c-a1f9-4d666c600e3a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbaed58-4f63-452f-86fe-4327113178c8", "sighting_of_ref": "indicator--2effbb91-c0e8-44dd-a691-e4dd29264c07", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94339510-5a55-4963-91e3-4a2d734a771c", "sighting_of_ref": "indicator--0160a939-f132-4b53-809d-abe6175f4b6e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7b7ac8-9492-43c9-88dd-4d2630383421", "sighting_of_ref": "indicator--ec899d52-debb-4220-ba7f-162ad4f04cb5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da8764f-f367-48de-8446-b3bbb8f5bb5a", "sighting_of_ref": "indicator--ab89b95e-1fa0-4171-95c7-77faa6b618fe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52748d74-b99a-4802-8225-d44a14c3ba22", "sighting_of_ref": "indicator--c58eea80-fc1b-4592-8541-b2b8345c8e3a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a643372b-70bb-4575-8a27-37fe66275a85", "sighting_of_ref": "indicator--477b2129-e30c-44e8-af2f-63107e5505f5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba2d456-226a-4f2e-a900-ecf462b8bbf1", "sighting_of_ref": "indicator--9d92890f-3cea-46bf-aeb5-3475614f7a4d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d124450-813c-4588-a018-1d16f4a2afb0", "sighting_of_ref": "indicator--a7adf7e5-e3bb-498d-bb0c-9d1b82231857", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad0fa23-d831-4762-9de1-0295ab2f5616", "sighting_of_ref": "indicator--8b25d3d8-6763-416f-b6d9-42510b97fd3f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7eabcd-92f3-410c-8b91-799a9a49fc52", "sighting_of_ref": "indicator--8b25d3d8-6763-416f-b6d9-42510b97fd3f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38413de-9b8d-4fe8-9fe9-dbe904657092", "sighting_of_ref": "indicator--0114fc30-dfb7-4039-be00-27b066bbacc3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e52e27e-335e-4ee4-800d-dfe159598f2c", "sighting_of_ref": "indicator--f8f14e2a-0153-4495-a7ba-3c2f1d983416", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33650466-1fd4-4cd3-89cc-eaf622928265", "sighting_of_ref": "indicator--a9a1ef45-c528-413b-966c-57becc7d7b13", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6fc20a-4b34-4268-82c5-558b28863d73", "sighting_of_ref": "indicator--a9a1ef45-c528-413b-966c-57becc7d7b13", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9470441a-c9be-4c54-906f-8fba3fde7c19", "sighting_of_ref": "indicator--a9a1ef45-c528-413b-966c-57becc7d7b13", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94db18d-9236-466f-86bc-51e1f9cdc2a9", "sighting_of_ref": "indicator--329486c7-2cd0-4aa6-90df-8695085590d4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa47b55-9dc8-4451-81cb-16f70fe4b65a", "sighting_of_ref": "indicator--992c636b-082c-4944-891f-78c9ce3a84d1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897d9dd3-f969-420b-a258-8a0c903e3d28", "sighting_of_ref": "indicator--992c636b-082c-4944-891f-78c9ce3a84d1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acfc651-4230-4d9f-a0ce-7fa4bb8c502e", "sighting_of_ref": "indicator--ecbc0ba3-40db-4028-b0fd-004385b0b3e5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8daf813d-6028-485d-a34b-4ba68675a7b8", "sighting_of_ref": "indicator--348b8441-0492-4af5-90c1-11162c17d252", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba6b6a6-90ff-40d0-bd2d-41191137ccc0", "sighting_of_ref": "indicator--348b8441-0492-4af5-90c1-11162c17d252", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce98f17-d1cc-4973-98f6-089ef00d95fe", "sighting_of_ref": "indicator--348b8441-0492-4af5-90c1-11162c17d252", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6146cbdb-da64-4fd8-880c-4fb1df0769bb", "sighting_of_ref": "indicator--4f583980-6ee0-4868-abf7-23fe31c12b71", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13deb7a1-0206-47f8-9fa0-ec3fba7f18df", "sighting_of_ref": "indicator--2fc2a1c2-887a-47b0-bec4-872c8db16695", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17541e69-72ba-41f4-9e61-603df95f15ca", "sighting_of_ref": "indicator--5e237e8a-b6f8-401a-908a-cd1cdcad7812", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65f2489-8569-431e-95e9-5932aaf942f0", "sighting_of_ref": "indicator--e82b02e6-bc57-43dc-bc1e-d4eae61d54f2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9aabd4-e66f-4fc2-a41b-c707c6dc5ddf", "sighting_of_ref": "indicator--e82b02e6-bc57-43dc-bc1e-d4eae61d54f2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446aa212-fb38-4777-bc20-f2ad7815ef4a", "sighting_of_ref": "indicator--e82b02e6-bc57-43dc-bc1e-d4eae61d54f2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5c2bda-1baa-4e40-a840-33a2707f301a", "sighting_of_ref": "indicator--5d49d8b1-b464-4819-b8f0-1c523615d3f3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da68e0fc-a986-4efb-af12-c931b94239a6", "sighting_of_ref": "indicator--5d49d8b1-b464-4819-b8f0-1c523615d3f3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909e7ad9-3be8-4bad-bab5-259cc81e6880", "sighting_of_ref": "indicator--5d49d8b1-b464-4819-b8f0-1c523615d3f3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ac619c-2a75-4669-b0ec-056d06425624", "sighting_of_ref": "indicator--19b7f335-ddd3-4825-9994-fd5881981c1d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5e3363-688a-4f05-92e1-2d6dc726cefd", "sighting_of_ref": "indicator--19b7f335-ddd3-4825-9994-fd5881981c1d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30483a35-d3e9-4a97-b0f2-de1ce09b1a41", "sighting_of_ref": "indicator--19b7f335-ddd3-4825-9994-fd5881981c1d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1d506e-d362-48bf-8eb9-7162835b7939", "sighting_of_ref": "indicator--1621785c-c270-4e40-a44b-eeafc29e3060", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab74a6b5-985f-4cad-906b-afee5f1053dd", "sighting_of_ref": "indicator--1621785c-c270-4e40-a44b-eeafc29e3060", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84eb149-dcc4-4f8b-8e48-d460817306e8", "sighting_of_ref": "indicator--1621785c-c270-4e40-a44b-eeafc29e3060", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f5db19a-07d8-4ef3-88f0-7327955f6234", "sighting_of_ref": "indicator--0363957a-5648-4a95-b96e-7692bbdaf5bb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9df71e9-0943-4f73-a632-8cd50bc59136", "sighting_of_ref": "indicator--e1fc878e-0c9d-44a3-8644-52ec7b0a5136", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f24598-71fc-4faa-b88e-0194fbe5ba88", "sighting_of_ref": "indicator--e1fc878e-0c9d-44a3-8644-52ec7b0a5136", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b18e603-6aec-4554-8a15-d15b982d349f", "sighting_of_ref": "indicator--e1fc878e-0c9d-44a3-8644-52ec7b0a5136", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ec0411-7fc9-46fd-9a51-71783c818eff", "sighting_of_ref": "indicator--e4338654-439d-47ba-b5a6-14a8d49240c7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70121b7a-d9ba-4d00-966f-3348336e4bea", "sighting_of_ref": "indicator--e4338654-439d-47ba-b5a6-14a8d49240c7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a5cde6-41e1-4fea-b33a-e693bf8a8951", "sighting_of_ref": "indicator--e4338654-439d-47ba-b5a6-14a8d49240c7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00fc133-01de-4bab-b410-e7f3ed53d5af", "sighting_of_ref": "indicator--759c0ef0-0d63-404f-8c0e-b9321f77d734", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90fb1d7-5807-4603-b237-d6073296211c", "sighting_of_ref": "indicator--759c0ef0-0d63-404f-8c0e-b9321f77d734", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131895b3-d054-492c-b5d3-678dc58a2c7c", "sighting_of_ref": "indicator--759c0ef0-0d63-404f-8c0e-b9321f77d734", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3959376d-2dcd-4f60-a015-54569d33250d", "sighting_of_ref": "indicator--43bb176f-c295-4979-881c-d894f6d90b35", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa7123f-2ad4-4e3b-bdda-2d1db1722503", "sighting_of_ref": "indicator--43bb176f-c295-4979-881c-d894f6d90b35", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1542d946-79d4-4ee8-a325-c12579f7b3cf", "sighting_of_ref": "indicator--43bb176f-c295-4979-881c-d894f6d90b35", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e813d0f8-a42e-49e7-8ebd-6d768d370043", "sighting_of_ref": "indicator--30bd161e-c2fc-4191-b1b6-550f4da5d3ab", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df39c14a-a852-41c2-9db0-3cf8fe748854", "sighting_of_ref": "indicator--30bd161e-c2fc-4191-b1b6-550f4da5d3ab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10868c18-f86b-455d-a4a5-29112340af1c", "sighting_of_ref": "indicator--30bd161e-c2fc-4191-b1b6-550f4da5d3ab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c46820-9bbe-4cfd-9650-0670060ee38f", "sighting_of_ref": "indicator--f821a172-2b7e-4179-879c-fa0c5fcdeb33", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9b7a07-39f7-4347-a274-66cbdab23692", "sighting_of_ref": "indicator--f821a172-2b7e-4179-879c-fa0c5fcdeb33", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a29873-f4f9-4d28-8456-d4c267285c57", "sighting_of_ref": "indicator--f821a172-2b7e-4179-879c-fa0c5fcdeb33", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94189c9-42ff-4485-9ba9-a420de370874", "sighting_of_ref": "indicator--08c9ad85-e619-4ce1-ac02-6269134d6525", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36257fa-345f-4ad1-b035-36bd7922773a", "sighting_of_ref": "indicator--08c9ad85-e619-4ce1-ac02-6269134d6525", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508cde25-2743-40d2-b35a-a5948c011185", "sighting_of_ref": "indicator--cf0154e7-c339-4f5e-9ead-6a8bb0571fe8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b4c44b-f55c-43cc-99fc-a669e95a7713", "sighting_of_ref": "indicator--660a01da-d4e7-46c1-a810-522d9ea40c50", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a8774b-baea-41f7-8101-3ba9ce5d18d7", "sighting_of_ref": "indicator--091fe6e8-4d2f-45c9-bb10-8c39020afb47", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faecbba2-c099-4d8f-bb96-e7e423211c4e", "sighting_of_ref": "indicator--83711a69-cead-401a-8bce-09bc25a9d137", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1875da3a-24e3-4a67-af8d-bc3bca6534ae", "sighting_of_ref": "indicator--6c87b2b6-610e-4bc6-9138-6dfc339302ed", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f944b7-dd54-47be-aaef-1aecf45d448d", "sighting_of_ref": "indicator--f9e06901-398c-415e-8cdc-c1981904e433", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c473000d-c06c-40aa-8f72-b5ad20b88738", "sighting_of_ref": "indicator--3e24b384-e938-4c22-9f77-39eb21bf42df", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aceb6d7-2567-4d88-85ae-4974dd20084f", "sighting_of_ref": "indicator--3e24b384-e938-4c22-9f77-39eb21bf42df", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c62372-7c12-4256-93d0-aca43cebd601", "sighting_of_ref": "indicator--8b375e1c-0939-4e50-ae4b-1f536a656f6d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3663efd-f499-4ac8-96ef-d9c819a38c41", "sighting_of_ref": "indicator--0ec1f009-932c-4e40-ac56-fe2c17073f53", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b58f4a-c4ee-491b-8a83-7e0df040c394", "sighting_of_ref": "indicator--6ff7be96-13ee-40e7-97a2-ef52f0a17453", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518b794c-ac74-41d6-a643-79a28dde2dbd", "sighting_of_ref": "indicator--c2986f81-b821-4d52-aaa4-d0201e9d93fe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3d222f-fe48-4066-aac4-2ab86b700c80", "sighting_of_ref": "indicator--14bcb96a-6b55-4710-add8-d43950b2087d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24c0619-3910-4854-ba00-965f4815403d", "sighting_of_ref": "indicator--043dc2fa-3ad6-4e07-9a72-d108aa5519e1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800af61d-e4d3-45cd-b226-555a2bc99764", "sighting_of_ref": "indicator--f9972559-ea90-44bc-86cb-b6ad8c18ae31", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48e96c7-348d-4b7c-9f5b-f5868c9507b2", "sighting_of_ref": "indicator--c29f769d-a8da-4f72-bc55-13fc30963cd6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deac1a70-fa98-4ea9-a525-0733156c49f0", "sighting_of_ref": "indicator--7487bee3-b5aa-4fd8-875f-8c065782eb27", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2078483-4f83-4f89-a865-31515ada50ff", "sighting_of_ref": "indicator--7487bee3-b5aa-4fd8-875f-8c065782eb27", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf88e23-56c5-406a-a5f1-37fde7aa6fb4", "sighting_of_ref": "indicator--7487bee3-b5aa-4fd8-875f-8c065782eb27", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92f853c-0ab1-4e6c-8393-ea9d327dcdc9", "sighting_of_ref": "indicator--a5ae371d-580a-476c-a562-89fe146ee8ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2a6989-e83c-44d3-9b1a-a5c190d09dcd", "sighting_of_ref": "indicator--757cb40b-8812-4e79-9dab-91286af22862", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3400e5c1-43ae-4776-9571-e722190f560c", "sighting_of_ref": "indicator--d6ceaf19-5af6-4055-93e1-8338725a2d0b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9febda43-e43d-42e3-a77c-9677af621e09", "sighting_of_ref": "indicator--65576ecd-03fe-4b50-96dd-3dd36811ed41", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778e7825-a54c-4664-b4ea-c6ed499b8918", "sighting_of_ref": "indicator--b12d6e6d-ab00-49e1-aed8-c0b871ffabcd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28d281c-acf9-40f2-98b7-c125ccdcd79a", "sighting_of_ref": "indicator--ab040c78-f5c7-40c6-ae62-8c90ecdbcbf2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5215e135-d142-4dc4-a0a8-2d079a3bf732", "sighting_of_ref": "indicator--622efb6d-d9fb-4f00-83aa-b22976793c3b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3dc2119-49e7-41cd-a9b1-59d765c28a56", "sighting_of_ref": "indicator--605b5e12-934f-4b6e-ba2c-17c2c9492447", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4e650c-08b4-4585-91e7-428cc9a1640b", "sighting_of_ref": "indicator--cd292ae5-7039-4cbb-a8ee-bc79fbcab121", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f65cef-96c4-4639-9825-42ccfb269777", "sighting_of_ref": "indicator--04264791-8e1a-45da-8e4a-312d34252073", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87db56fc-157a-435e-b12d-405a4eb48026", "sighting_of_ref": "indicator--083d5eae-259e-4e62-948e-8e8a9122d920", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d658036c-eebb-4de9-ad83-3ffde7371966", "sighting_of_ref": "indicator--74a70e3f-f491-46ff-985b-7fab964e1439", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3568ad-d5d5-4949-a134-ae0c42e81761", "sighting_of_ref": "indicator--b66f51fd-9512-4a4e-8e05-e670630cfe12", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7461a3d5-75d2-4cbe-8340-4c9a7423ca10", "sighting_of_ref": "indicator--27b286c0-bef4-49ba-9d91-ad49cd950e58", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8764f94-737c-46a6-b21b-6f1fbae194c1", "sighting_of_ref": "indicator--27b286c0-bef4-49ba-9d91-ad49cd950e58", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08dbecbd-14ad-4da3-b71c-8e13d2881d70", "sighting_of_ref": "indicator--e0362aa0-827b-4689-8ebb-e82dc02a4507", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a94fb68-3e6a-4f0a-af04-e3dcc5b72f29", "sighting_of_ref": "indicator--eef896d8-8054-466b-a68e-e1c0d7dc5af7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436c6f52-bb46-4fa4-bf23-25339ea07ed2", "sighting_of_ref": "indicator--2672e462-b386-4ddb-b4b3-bd63f5e85190", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31faae64-d3bb-44f9-80b6-ec0c3f0cc39f", "sighting_of_ref": "indicator--c4706f30-2837-49d7-af2b-fac36fd8b2d5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afee5f1-89a6-4c59-8c9c-b78802e98784", "sighting_of_ref": "indicator--8c312159-bc26-47ad-b39c-165866cf8106", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080bb4e8-ac6b-400e-875a-8ead4318c6e5", "sighting_of_ref": "indicator--c6497cfc-d403-49ed-9b0f-7dbd3b445213", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09b86c2-899e-49a3-a59d-21a34b3b7e97", "sighting_of_ref": "indicator--2e2f8733-21c3-4611-b947-e77935332098", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad960ba6-c5ba-4671-b64e-326f36ffdebc", "sighting_of_ref": "indicator--e5101591-9549-4136-bf67-6e4e72fe3950", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a38235-dd35-4025-8b53-b007c7051ffb", "sighting_of_ref": "indicator--2cfd4f2e-140f-40e8-b2c3-92284c7f35be", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59205e0-241d-481e-9e0d-e4b53886d6f9", "sighting_of_ref": "indicator--2c9ea63f-4f63-43e2-b11b-42e11136f8d2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcdd82bf-90c4-4801-9079-fac1d6257c81", "sighting_of_ref": "indicator--2c9ea63f-4f63-43e2-b11b-42e11136f8d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0754f146-241a-4281-8a9d-8bba965543d7", "sighting_of_ref": "indicator--8de2ad6f-82f5-48ed-88a0-35367dfd0f6a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27a305b-fdb9-4c5d-abc9-646a3370902a", "sighting_of_ref": "indicator--9bbe58da-8167-4d1c-a5de-87c153fdc707", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476d032a-2d9d-461e-875d-c0d27d77d479", "sighting_of_ref": "indicator--9bbe58da-8167-4d1c-a5de-87c153fdc707", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c818a5e-31ef-4b3b-965e-38cc52a4d4bd", "sighting_of_ref": "indicator--9bbe58da-8167-4d1c-a5de-87c153fdc707", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1593953c-f2e2-4b42-b616-cd11b0ab9e98", "sighting_of_ref": "indicator--0ca17879-071b-40fe-93ef-21a68542cb27", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18231c65-351a-4828-847c-832ce25ff656", "sighting_of_ref": "indicator--b1214f7b-944a-4e22-81d3-c0272944ab65", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c8b8ae-9366-4f7c-889e-8f54692569bf", "sighting_of_ref": "indicator--b1214f7b-944a-4e22-81d3-c0272944ab65", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5980373a-c2c9-409f-bf75-654acc503ce8", "sighting_of_ref": "indicator--b1214f7b-944a-4e22-81d3-c0272944ab65", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1764f97-f5b1-4492-86ae-82b135a074c3", "sighting_of_ref": "indicator--77b2948f-356c-47e3-a192-ecccfdd5b28f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff916ce-bf35-41b3-b04e-0d2578ffbbb0", "sighting_of_ref": "indicator--efc22b4b-c51c-45e1-bfa6-596b94048edd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bba57e6-9572-42df-a867-6ffe4d6e3b44", "sighting_of_ref": "indicator--058723fe-6a76-4e05-87ef-26bc5a6c0204", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb9117a-03e9-4913-a3f1-f853fc45d721", "sighting_of_ref": "indicator--058723fe-6a76-4e05-87ef-26bc5a6c0204", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71a8fb5-c480-4870-b1b0-25470d8fb815", "sighting_of_ref": "indicator--058723fe-6a76-4e05-87ef-26bc5a6c0204", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34762058-9daa-4f45-a339-3ea7ad437a3b", "sighting_of_ref": "indicator--51fd6ca0-9a27-4ff6-9ed7-1da366f93630", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7122fd8a-cc33-4176-af0a-a7f3afc11ed0", "sighting_of_ref": "indicator--fae7ead4-85bd-40bc-b1d5-9eef47c41d00", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81984fa4-af08-4c66-8878-e4859f900041", "sighting_of_ref": "indicator--24ad5e0b-d2f6-4fc8-8247-f0400c03cf08", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa42e95-e26e-42f6-afe6-746da5428831", "sighting_of_ref": "indicator--2838d8d7-5547-4592-998c-fc9c47eb7ad6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd16726-d2b5-40b9-9a91-22adb0d61889", "sighting_of_ref": "indicator--feb9b738-fb1b-4441-81c4-4c2796ce5e90", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9240588-183d-4926-92fb-c675538387ad", "sighting_of_ref": "indicator--feb9b738-fb1b-4441-81c4-4c2796ce5e90", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fc4eb5-8b04-4724-b430-6cb62f1e9a0e", "sighting_of_ref": "indicator--b4b2a602-8346-468e-a08b-7ba1815884e5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f87ec9-22a1-4f09-8039-8e99ce521999", "sighting_of_ref": "indicator--2da93153-3c5a-41f8-b7db-c532361fbee8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1310ec-174e-4a4c-ab53-602c080a6b8f", "sighting_of_ref": "indicator--1b1dcd6d-9ca9-48c3-9b88-ec0d425782bb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325fa97b-49a1-4866-b0d4-ac79892e1c68", "sighting_of_ref": "indicator--b5760973-e93e-4f22-abd6-4611aed1b52c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d666e28-34a3-481a-a55a-c650541f74ef", "sighting_of_ref": "indicator--b5760973-e93e-4f22-abd6-4611aed1b52c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e18e16f-b354-43e0-9f10-af59117fc7a4", "sighting_of_ref": "indicator--a9131343-ea8f-4a8e-b3eb-235b3e30340d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd7dea0-8eb7-4089-bee9-012292334410", "sighting_of_ref": "indicator--f9f3509f-2d56-4659-8c27-ed711f1d9800", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c14167e-7ca6-4a26-8ac5-9be315347a08", "sighting_of_ref": "indicator--a763691d-de95-40c3-a578-ad5c649105f9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97490cc5-1edc-4782-8491-b1db099b30f4", "sighting_of_ref": "indicator--a763691d-de95-40c3-a578-ad5c649105f9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e047cb5-e5ea-4677-8d6d-7e41a24512f1", "sighting_of_ref": "indicator--e1ba799c-034c-4e0d-8370-3e2740d496d4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6fe315-5c14-426b-beca-4e630a796ea6", "sighting_of_ref": "indicator--889ff3bc-838b-41fe-bce5-a45a8bd29ccb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e69bfb8-5d9d-4de8-91e7-d7f4c5a29e44", "sighting_of_ref": "indicator--a061c2e9-0e65-49b9-9d8f-ac65f43e8fa6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2a390c-862b-4171-9656-fb248faa3050", "sighting_of_ref": "indicator--7d1cba03-c661-4fa8-9005-05697d074e18", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf90feb7-b6d3-4f15-a99c-9217c5aea690", "sighting_of_ref": "indicator--f7374072-fdff-49af-9862-f7e627cb40a1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44276efe-5915-43da-a03d-18513122ba4b", "sighting_of_ref": "indicator--f7374072-fdff-49af-9862-f7e627cb40a1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11eadf55-10fc-4bb2-8568-251b672bea11", "sighting_of_ref": "indicator--68a52de1-722b-426d-b05f-f17505674822", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad66c05-da6b-4aa5-a3e1-fa3b8ac1d060", "sighting_of_ref": "indicator--68a52de1-722b-426d-b05f-f17505674822", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145b7bde-0ba1-4dd4-a243-ee14fb3f7e42", "sighting_of_ref": "indicator--049a8bbe-596e-4987-baa2-61bf276eb691", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1038cb0e-ee34-4fc7-9311-a8a15f0224e2", "sighting_of_ref": "indicator--9f5ab422-6d1f-4691-90b6-e8bf318d4989", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e73b0e6-29a6-44e4-af93-564b41d1502b", "sighting_of_ref": "indicator--9f5ab422-6d1f-4691-90b6-e8bf318d4989", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d99f2bd-223f-4ed0-be87-aa962b219dec", "sighting_of_ref": "indicator--62903f59-4c9f-4d25-8646-9b6ca3f1f909", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6df33ff-bf99-41ac-b558-44b53abc53ed", "sighting_of_ref": "indicator--497d24cc-e3ad-4ed7-bf44-2aa35f26b727", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c556ef-7a71-4048-9d91-be68094006cf", "sighting_of_ref": "indicator--497d24cc-e3ad-4ed7-bf44-2aa35f26b727", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7bccdf-3e69-4015-88e3-c57b7d06379d", "sighting_of_ref": "indicator--6cfd7baf-2f44-42a0-9a13-103a99c0ab8e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef7ac13-1cc3-42b3-abb8-093f64d9bd13", "sighting_of_ref": "indicator--6cfd7baf-2f44-42a0-9a13-103a99c0ab8e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b212c9-ba55-443a-a538-7671cedd8b39", "sighting_of_ref": "indicator--a9632ff1-803c-46cc-be01-35e585b81a51", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130c18e5-d0e0-4cb0-b190-fd57d990ed17", "sighting_of_ref": "indicator--663be1cb-ff4b-4572-aae2-8306b10ca412", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee4263e-d68f-4645-88ca-48e34a921082", "sighting_of_ref": "indicator--663be1cb-ff4b-4572-aae2-8306b10ca412", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f04330-920e-4779-b093-9772b63800bb", "sighting_of_ref": "indicator--4bc1d892-450d-497e-8002-2d5ce318fb38", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b7ea56-2e1d-40f9-8eb3-73b2d155d94c", "sighting_of_ref": "indicator--da2cf11c-9d7d-4244-ac6a-eeba1ccbb099", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d90c867-69db-4a66-9f2d-f7981d8c9a20", "sighting_of_ref": "indicator--410757f1-2946-4455-a745-158526569e91", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d9e622-455f-4910-9396-b00cc1661899", "sighting_of_ref": "indicator--3d6ad79a-fab3-4d6a-bbc2-9a2f98f6fa9f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f544f833-f1d0-42d3-9989-44102bbe7bba", "sighting_of_ref": "indicator--f99f6809-02ed-40e7-b53c-d6a07a6bb7ab", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12fe822-b16f-4651-bbd1-ce3f152aa4bd", "sighting_of_ref": "indicator--ccdcf2e9-c517-416f-805e-8a7cf862f3a4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860f0c49-2c7a-4044-9d04-19dc5de659e5", "sighting_of_ref": "indicator--dea9b6de-42b3-4087-9720-81dc7445d855", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be8a26e-a788-43b3-9eed-19b0bec114a0", "sighting_of_ref": "indicator--dea9b6de-42b3-4087-9720-81dc7445d855", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b0c845-cc62-462a-8b3d-8c9b4342bb20", "sighting_of_ref": "indicator--6a0f09a1-b315-4f0d-b9d5-7c81599d3e1a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a66e771-9586-4fa7-8889-72a044a8a102", "sighting_of_ref": "indicator--d6a0bae2-43ec-433d-893d-236418f1a218", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e54f5b9-f13b-4e1c-bf23-f688cdefa907", "sighting_of_ref": "indicator--aa7b3410-20e1-4f0f-8fcb-b47f81d0c20d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d8efe9-4d2d-433a-81bb-5671cbbdcc1f", "sighting_of_ref": "indicator--d2a24f88-b874-48d0-bfa7-06caf9c7b371", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b61410-6231-462e-a640-a6553b008dc1", "sighting_of_ref": "indicator--d2a24f88-b874-48d0-bfa7-06caf9c7b371", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c43acf9-ee45-4636-b6aa-2b2a166b94b2", "sighting_of_ref": "indicator--d2a24f88-b874-48d0-bfa7-06caf9c7b371", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6064cca9-78fb-49e4-a724-881bee28e33c", "sighting_of_ref": "indicator--b84fdb55-1c20-4036-8291-ba3b07385935", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e6948f-1b8a-4d29-8630-7315ba5d1f65", "sighting_of_ref": "indicator--2a594c51-7b3d-4688-934c-1d0a9a91e2e6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880f228e-87f3-458f-b661-b87cce32f64f", "sighting_of_ref": "indicator--624e818f-02b7-4a65-a73b-2e9c435880ae", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4518801a-3e83-4da6-bdcc-2cf8714c80b7", "sighting_of_ref": "indicator--0ed6eca0-8084-4bed-bb53-612246509228", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408fb3d9-0e04-4be2-8239-e0ba616d8e98", "sighting_of_ref": "indicator--0ed6eca0-8084-4bed-bb53-612246509228", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43919cc5-bae8-4ff9-9fe4-b1fd281145a3", "sighting_of_ref": "indicator--0c0610e2-df81-440e-bfb8-b119a639b7fd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1660c784-6064-414d-b747-21ab850a77c8", "sighting_of_ref": "indicator--9c84e978-eca3-4c83-a319-76e730b7742e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a00f72d-1b97-47b9-9bf4-430b80361a33", "sighting_of_ref": "indicator--d8805fa6-b873-45b1-a97f-b690a28bd898", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674d7fad-1f98-4fe0-9eef-5917c2be676d", "sighting_of_ref": "indicator--b364ebe5-118c-4095-b27f-85c1b630efa7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1852ee6e-be98-4f93-a13c-5ed46c593a80", "sighting_of_ref": "indicator--fe92e59b-e0e6-46ca-b3c9-8fb5690c0d79", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af293c06-97b2-4237-a1d1-b9a9bdad8f5c", "sighting_of_ref": "indicator--59c92ebd-d4af-4008-9980-194e4e44c417", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5784b073-5804-4d09-a7fd-b19e6cf273c5", "sighting_of_ref": "indicator--f57846ef-4cf2-4ca7-a0c8-e8216a49d8af", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1a3bee-11a6-41db-925e-0d6edede7f1d", "sighting_of_ref": "indicator--70f11b1b-a532-43ac-b38b-be6b7d37ad1c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375240e6-251e-4398-9c62-346351dd4728", "sighting_of_ref": "indicator--2baf65d7-d9b2-42c1-99a9-7525c7bcea91", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad5a87f-faa1-47b7-8fa7-207ea3c9bfbe", "sighting_of_ref": "indicator--539c3807-a770-441a-971a-4c337c649976", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e170e8e-df29-4211-8a12-b207431fa055", "sighting_of_ref": "indicator--bb0a3d75-92b3-486b-bcc8-378f2c11ef05", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556f601d-b552-4995-abd3-5368e53ab2db", "sighting_of_ref": "indicator--e5aa8a08-3e2a-4c80-94aa-d09e2f764176", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d84b79-d154-4967-ada1-770ac9a38730", "sighting_of_ref": "indicator--436195fe-6a2f-4b0e-84cf-3d54d2640d17", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5396f30a-df13-43d6-8333-85ce781ab0f9", "sighting_of_ref": "indicator--b575390d-e3b7-448b-9678-31491a017320", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b45a1a-9f4e-4172-a8f4-eb9822a79e7a", "sighting_of_ref": "indicator--e074c2da-cd83-4ec8-a8ee-325889e64889", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715f6ecb-2c8d-443e-bd2b-6f69c90924a0", "sighting_of_ref": "indicator--ea364f35-ded0-4599-b795-fa1983a5caaf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7e4873-2569-451d-9ec4-01c251aa75d8", "sighting_of_ref": "indicator--3c619c33-c04f-460d-bb7d-d2f086f066f9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04084648-49aa-4daf-8dac-490ea8a48b66", "sighting_of_ref": "indicator--3c619c33-c04f-460d-bb7d-d2f086f066f9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17928fc3-8d75-4100-af61-9378ddcecd90", "sighting_of_ref": "indicator--f059f563-c44f-4333-add3-2d9f15392a2d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97932916-637f-4170-8ed0-8af756a8e2c9", "sighting_of_ref": "indicator--b2e62887-bfe0-4a75-b8c8-980232f1a69c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddea461-9717-44d7-8532-31ca70a8a322", "sighting_of_ref": "indicator--a08fd55e-a8c8-48b6-8ea9-f3b06eb8b845", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712a846d-cb0e-41c7-9037-290dcda1f41e", "sighting_of_ref": "indicator--ac8892f0-a9aa-42da-8ce7-dd584f3d2fa4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19497e51-525d-466b-bf6b-650f2a9b510e", "sighting_of_ref": "indicator--dd5c2131-5cd4-427c-a1d8-4aec22353b05", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26abd193-c7a8-47cf-b6d9-dbdef4752c03", "sighting_of_ref": "indicator--cb9d5bf8-ac39-4543-a260-8e37465d2fd0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cab29e8-c9f5-409b-8480-72cdcf30b6e0", "sighting_of_ref": "indicator--7f80ac78-2cb0-421c-b790-6599bb325d80", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa2e1dd-058d-4a90-9638-4ab892d6194a", "sighting_of_ref": "indicator--3d9bd416-c9e2-43c5-81cf-b63ddf33f0c2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff576906-6c6d-45e5-8474-54d5c1353e14", "sighting_of_ref": "indicator--5eba91ff-b245-46b5-ac48-403494bd53d3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f69d57-5873-48d3-b0fe-f752ec03b198", "sighting_of_ref": "indicator--e4eee89e-2a68-42ad-85f7-76dc0fc26a7a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329aa607-7bfd-4c75-851f-e34844e13c94", "sighting_of_ref": "indicator--61bced8c-79a1-4119-98a9-ee883197e374", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0fde0d-9eab-4e91-99b8-dac15e13e9be", "sighting_of_ref": "indicator--557c84ca-5fa2-4e7c-a8b2-13e9d98c2b96", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538f7f81-1c6b-4aa5-9ce0-25bd3a94beaa", "sighting_of_ref": "indicator--557c84ca-5fa2-4e7c-a8b2-13e9d98c2b96", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb33782-5888-4be6-9206-c79e70328a74", "sighting_of_ref": "indicator--1167368d-d3b5-4dea-b88e-696d02a78a47", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a018cd3-963b-4bc6-a9ab-134b7cdd8c96", "sighting_of_ref": "indicator--fea15d21-6639-4b29-8167-77d28bccbde5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23f3323-9ad6-4a5f-b0c7-da18acf91f45", "sighting_of_ref": "indicator--37d44cb1-4b0a-400c-bcfe-f98e9c5ff7a1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a1651a-1fcc-4469-9013-c9ce973875a5", "sighting_of_ref": "indicator--940d1c45-188f-49e0-a1cc-aab08a61768d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5f86f2-072f-4489-bf75-32b22a979dae", "sighting_of_ref": "indicator--1d12357a-5c02-4071-a728-628c3fa04f44", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813ae3d7-48f2-4101-8bb9-962f079860f1", "sighting_of_ref": "indicator--f76e6a90-ee6e-4f1e-8b8b-8341e15de6f3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53038332-8c0d-4f54-9bc6-7d1bbb7faed0", "sighting_of_ref": "indicator--a53b84df-6eeb-4ac8-8b39-f98317328e9b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3003dc07-c105-41d1-b7ea-96d5f4d84588", "sighting_of_ref": "indicator--a53b84df-6eeb-4ac8-8b39-f98317328e9b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95884d90-b18f-4d48-abb0-3dd859735720", "sighting_of_ref": "indicator--9326cfeb-d1b1-4293-a8b7-c859aaa1954d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4df8e4-0763-4484-ac29-674a2ec2a5a5", "sighting_of_ref": "indicator--6c68fbc2-a014-4559-bd53-ce372a1ae81b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2200b013-a3d4-4121-9939-20e0ca84731d", "sighting_of_ref": "indicator--6c68fbc2-a014-4559-bd53-ce372a1ae81b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4c80d0-09c4-48ef-8fe1-9af39763e52b", "sighting_of_ref": "indicator--3d793b24-c617-47f0-9eac-cbb0b308243d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b81d261-19ba-414e-9a61-9023a5a499c2", "sighting_of_ref": "indicator--d6a05cf9-4e01-4483-b8a6-9ae93312b99c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84de71a1-6084-4628-8d29-edd560f28d8d", "sighting_of_ref": "indicator--3412760a-f90e-46f1-84b8-e4d4e54e18d5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea69cda2-35c9-49e9-8285-50b1a773dbc5", "sighting_of_ref": "indicator--a49b4cf9-af0d-42c3-8b75-df9f90bfa558", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60d635b-728e-42fa-a07d-66b82a1c54f7", "sighting_of_ref": "indicator--3e3dfab2-4b9a-485d-ae3c-2e89cc270dc8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd15592c-3a1e-45eb-803b-755c98bf076a", "sighting_of_ref": "indicator--aea1fafa-9535-4d5d-8aef-95a47ee62129", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fdb803-2536-47b6-a8eb-1efe59e78122", "sighting_of_ref": "indicator--56bb4adb-7787-4b9a-8534-aaaf0179d99c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07ef94b-ff1c-4564-bc0e-96859ecae116", "sighting_of_ref": "indicator--80c681e5-42f6-4445-b5be-43fd08e35f58", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda26fa9-ef0e-4ca6-9751-7a2c9a08be9d", "sighting_of_ref": "indicator--ab66375b-3c4d-4b58-bc5c-94ae61c965a3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0312ea0e-5e0d-4ee1-a92d-fa3944535cd5", "sighting_of_ref": "indicator--0663d2ff-e94f-4a3a-80c1-6c794c137bd6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53fc1be-a5e0-409f-87f3-14a79f1ba5ae", "sighting_of_ref": "indicator--e3297862-0fb4-451c-b269-fd412449f943", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f407e18-6534-4fb8-9f4b-4c1691634a2b", "sighting_of_ref": "indicator--88fbde82-b979-450b-b7a1-3608f1978177", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e348ac-536e-43b9-b081-c0d8b06e88ee", "sighting_of_ref": "indicator--7789e189-3ca9-4142-a65c-d8a5da2b2880", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9de885-08eb-4325-bb3f-e1c0e43b62e5", "sighting_of_ref": "indicator--7789e189-3ca9-4142-a65c-d8a5da2b2880", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8f1b4e-461e-49a8-a128-2404d12455eb", "sighting_of_ref": "indicator--85ea9c1e-dca8-4864-9005-2a9cdd82abe8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5e2011-5fdc-4bed-b375-0ac76b7702e4", "sighting_of_ref": "indicator--de6463ff-b61e-4e83-b31e-d929f1cdf5d4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a37e69-2c5f-4972-a63c-8b90c339e3d9", "sighting_of_ref": "indicator--b90e6d25-53f2-4391-aacb-e1276bbe38fe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087150e9-a995-4961-a397-fe8329d72141", "sighting_of_ref": "indicator--bf567543-bbc1-41af-ac64-53f5c93d9baf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb22df12-ac06-4555-84e3-0be072a14d93", "sighting_of_ref": "indicator--4f18c4c2-00e4-4529-abe6-e24cd107cfbc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45096d2-37f4-4e73-9c65-a423ac6245ff", "sighting_of_ref": "indicator--4f18c4c2-00e4-4529-abe6-e24cd107cfbc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e8254f-975d-467d-b5c0-cc63e6587330", "sighting_of_ref": "indicator--015f444c-9207-4cfe-add5-343939940ee4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fd5ad3-e7c4-4fab-89d8-f8eb45f6ed84", "sighting_of_ref": "indicator--3e2507f2-72dd-47fc-aa34-6930d5fb3dd1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb2f6f8-7e56-43b3-8dec-5c149d85d8c3", "sighting_of_ref": "indicator--32fea7e2-883a-4f2c-a7d3-72eb9f23ef65", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b31b59-3cec-47bc-a623-0d8633331f80", "sighting_of_ref": "indicator--32fea7e2-883a-4f2c-a7d3-72eb9f23ef65", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7113b2-d4c7-4222-b298-d68020235aff", "sighting_of_ref": "indicator--256144fc-7cd9-4d34-84e8-a6c4f81a07a3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b692966-0a11-4efa-83d8-a8951ece22b4", "sighting_of_ref": "indicator--256144fc-7cd9-4d34-84e8-a6c4f81a07a3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d22654-c35c-4830-8d8b-601416a63df9", "sighting_of_ref": "indicator--d28a6b1a-aba4-4561-a2b4-2e98df38214b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2036b05-0a4a-439e-9cc8-bba01b890382", "sighting_of_ref": "indicator--d28a6b1a-aba4-4561-a2b4-2e98df38214b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692d4e5e-8ddc-4ba4-b573-9b03da063ad0", "sighting_of_ref": "indicator--a1600192-a319-40f1-8863-a3e42e84cdfb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35688e8-d33b-45c1-8860-31cfe445b9c3", "sighting_of_ref": "indicator--a1600192-a319-40f1-8863-a3e42e84cdfb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c9288f-6613-4c05-8ebd-4ce68dc7fc18", "sighting_of_ref": "indicator--a1600192-a319-40f1-8863-a3e42e84cdfb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8278b8bd-5a51-4bf1-b619-ec5fb51e9566", "sighting_of_ref": "indicator--6aca5a55-032b-4cd2-b746-4da5dd06ab4b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daae95d0-15bd-4706-94ed-49d5ef30d723", "sighting_of_ref": "indicator--6aca5a55-032b-4cd2-b746-4da5dd06ab4b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0888d14-d9e7-42fb-be6c-4d19ecc7c7c4", "sighting_of_ref": "indicator--6dec5b0b-5dfc-4b69-ab7b-e38b5484bc43", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247784eb-b970-45bc-9fa8-341d135e7f5f", "sighting_of_ref": "indicator--6dec5b0b-5dfc-4b69-ab7b-e38b5484bc43", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb8a211-50aa-4869-98c0-eadc1d47cb73", "sighting_of_ref": "indicator--c9fbff7a-54e6-43d1-8723-37e30a1535d7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc1b997-3d4a-4141-8087-481ab34c7fb9", "sighting_of_ref": "indicator--d6a660c6-76e5-49db-9f96-fadef4301a50", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc18df7-9f16-4b33-98aa-9e26a3a89ede", "sighting_of_ref": "indicator--d6a660c6-76e5-49db-9f96-fadef4301a50", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec03860-8f93-440c-9aab-766ddd6bf062", "sighting_of_ref": "indicator--3dabe178-042a-421d-8ab8-d800fbb642fd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c32442f-ba84-442b-a1f5-28ff10a854ab", "sighting_of_ref": "indicator--3dabe178-042a-421d-8ab8-d800fbb642fd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a607dc-f6c4-474d-8a18-a146be3fe159", "sighting_of_ref": "indicator--c6dc800c-e33b-44dd-b42e-f7e05ead1947", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967136b3-0699-4537-b9a9-a04fe6d1b34e", "sighting_of_ref": "indicator--c6dc800c-e33b-44dd-b42e-f7e05ead1947", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e305045-c494-4db9-8921-0c8a9e3a8a4c", "sighting_of_ref": "indicator--c6dc800c-e33b-44dd-b42e-f7e05ead1947", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f251f549-6d9b-461a-9dd7-a170ca80c64a", "sighting_of_ref": "indicator--a87f2d96-dbaf-4438-9c36-b519d63227fa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f3c063-c50e-494a-9a73-7754c28f0139", "sighting_of_ref": "indicator--3c1330e2-7c67-4a8e-a496-a251a4b8e002", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e14528-ed13-4baa-b807-4af83e6c27dc", "sighting_of_ref": "indicator--3f7b14c6-c364-40ea-9a09-40fc2201644d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862a52df-46e0-48c0-9217-5d822b31a885", "sighting_of_ref": "indicator--4275403e-f9e8-44de-a201-5621ec9d9cfa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d52029-e620-4a0f-9651-a9bbb9575626", "sighting_of_ref": "indicator--e0b75259-b297-4385-96f5-788d1122d782", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1992bef0-8bbe-4d97-ac7c-f6cea004146a", "sighting_of_ref": "indicator--e0b75259-b297-4385-96f5-788d1122d782", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfdb497d-029a-402a-9d53-c7886623c2ce", "sighting_of_ref": "indicator--1bcb81b1-9ef0-4306-bfed-931049f0ad11", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791f9056-2ec2-4483-9206-7dfeab630a80", "sighting_of_ref": "indicator--cf8899d7-ccda-4865-8509-407dea0d3db1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa5de23-6735-4806-9d6d-759723b1722e", "sighting_of_ref": "indicator--5813fbe0-ab51-4d5e-a0ea-01e421da5032", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0a7fbe-a049-4c27-83a2-c23b72d825d8", "sighting_of_ref": "indicator--62a65f65-6892-48dc-8098-4cb3b7aefb62", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5773ef1-8d12-4730-8800-7c4f9fbfb9ad", "sighting_of_ref": "indicator--d3ff45ff-9889-4843-b788-e1bd2e9842be", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6efe30f-fa28-4f17-961f-149897f8caf9", "sighting_of_ref": "indicator--13a2e908-c14b-4e2b-8210-5a7c2d0e8212", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acfe4119-6a34-4601-b6bc-3ee745343d69", "sighting_of_ref": "indicator--549f2655-f3e2-4f98-b6f1-9196a2510c91", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69290ed-dac1-468f-b42a-0677b13ec269", "sighting_of_ref": "indicator--043cc6d1-980c-4247-a8e0-e09c25950167", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2c3f5f-e4b7-41b3-bb79-912b9f72da1c", "sighting_of_ref": "indicator--043cc6d1-980c-4247-a8e0-e09c25950167", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e87cb31-4a7f-4567-bbb2-fc4c68e95956", "sighting_of_ref": "indicator--043cc6d1-980c-4247-a8e0-e09c25950167", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693f6926-9af4-48a3-afdf-6d1708231a5c", "sighting_of_ref": "indicator--14718bdc-08c1-445e-b5df-ef07c11019d4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74aab530-1d90-4d72-a830-1058c13d1379", "sighting_of_ref": "indicator--14718bdc-08c1-445e-b5df-ef07c11019d4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bf0a3a-67ea-4398-9a9d-0ed39a9da6c0", "sighting_of_ref": "indicator--14718bdc-08c1-445e-b5df-ef07c11019d4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec95bfd-3ad7-4932-aa19-c2cc19fa3225", "sighting_of_ref": "indicator--276ed64b-1dc2-4ee0-ad33-f37654cde74e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7d991e-fe6a-4037-af70-81e97cf267da", "sighting_of_ref": "indicator--276ed64b-1dc2-4ee0-ad33-f37654cde74e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206dfa81-eb31-40a2-bb1f-c6aba6f347d7", "sighting_of_ref": "indicator--276ed64b-1dc2-4ee0-ad33-f37654cde74e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d2e4e8-f105-45fc-bf22-0a86e1c4c6a5", "sighting_of_ref": "indicator--8363219e-59fc-41ac-a338-7204886380b8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8edb08-bad3-473a-9ddc-9c270d022d0e", "sighting_of_ref": "indicator--28f63dbc-2351-414e-af75-504ff929bde9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cd79ab-68a2-4842-a786-666faad83386", "sighting_of_ref": "indicator--28f63dbc-2351-414e-af75-504ff929bde9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5a304e-d7d9-41b3-bf4e-0047d723b445", "sighting_of_ref": "indicator--28f63dbc-2351-414e-af75-504ff929bde9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5811102-7192-4bdd-b27b-21ec8c636f78", "sighting_of_ref": "indicator--b419e2f1-036c-4d74-9b9d-4421c6c4ca5c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568b6798-e76f-4669-812d-3fc61a1cce9d", "sighting_of_ref": "indicator--3d32e695-7245-416d-89ef-376c71170710", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d176a85-74f8-4da3-a4a9-39d8fabaf1ca", "sighting_of_ref": "indicator--565c0e15-1eb7-45f0-bedd-293a6d060a61", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b6339d-d6be-4c92-9469-b4dd9bd0f170", "sighting_of_ref": "indicator--565c0e15-1eb7-45f0-bedd-293a6d060a61", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d8e008-ea9d-413e-944c-975dd591a319", "sighting_of_ref": "indicator--e6983ff4-229c-4a14-b807-29a0dd76eb76", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0862949-6f11-46d7-b045-597b71dfda1a", "sighting_of_ref": "indicator--cf7dcb9f-cc7f-4b3d-9385-aeaee3e4fbf8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb6e81e-f993-4fb0-a65a-b08a17d7d834", "sighting_of_ref": "indicator--a8a649ce-5252-48e6-9765-2b3712f7778e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11c2d65-3215-45c5-b6ba-5dfbe7151fdb", "sighting_of_ref": "indicator--f367ba74-9ce6-4ac9-9caa-b3220e2534a8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec22df2-be8f-4ddd-9ab9-66932452d3f8", "sighting_of_ref": "indicator--f367ba74-9ce6-4ac9-9caa-b3220e2534a8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5972fb6-560f-4832-81f2-41a3e1b01c3f", "sighting_of_ref": "indicator--f367ba74-9ce6-4ac9-9caa-b3220e2534a8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ed9392-a90d-4f55-90b5-b41947bdd399", "sighting_of_ref": "indicator--7bf7ff2d-9fbc-4c82-86a8-a89e2cb26884", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707010ab-c3df-43c1-9fee-82072aba7512", "sighting_of_ref": "indicator--7bf7ff2d-9fbc-4c82-86a8-a89e2cb26884", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250550ac-a1ac-48e8-943a-1b9d723890b0", "sighting_of_ref": "indicator--7bf7ff2d-9fbc-4c82-86a8-a89e2cb26884", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e14ab1-7a2a-45c8-b054-124260f55ede", "sighting_of_ref": "indicator--b74347d0-0700-487d-b5ee-2b7353fd9f48", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac612b92-3315-414f-8cfc-846363f4b21e", "sighting_of_ref": "indicator--b74347d0-0700-487d-b5ee-2b7353fd9f48", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12efd4bc-490d-4135-8a09-5864afb1b0f0", "sighting_of_ref": "indicator--b74347d0-0700-487d-b5ee-2b7353fd9f48", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce00515-0348-458d-8eaa-e4caff193cd9", "sighting_of_ref": "indicator--cbbc5afc-9001-408c-9521-0e0c517d47be", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebce62ad-51f1-43af-ab03-a0ade98979cb", "sighting_of_ref": "indicator--cbbc5afc-9001-408c-9521-0e0c517d47be", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4a3484-06d1-49a5-8829-67f947221b61", "sighting_of_ref": "indicator--cbbc5afc-9001-408c-9521-0e0c517d47be", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd25ed5-6319-4eac-b93b-9d13bee2aeea", "sighting_of_ref": "indicator--77c76015-266a-4427-8cb7-8f819d34da3a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b06f06-1b6a-4407-b936-7c62d330cd51", "sighting_of_ref": "indicator--104cf417-2937-4e68-8ae8-ce8a95868734", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5af83b0-ffd6-49c1-942d-e9c093659d9a", "sighting_of_ref": "indicator--ef395474-0f32-46ce-8963-72d4f6d7e41c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17d452c-a0ec-4cba-aca5-5f8e87f41f24", "sighting_of_ref": "indicator--25323260-6bb4-44bd-a89c-1fe4443c6629", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ccb95a-5dad-4c99-90e5-3930b4fcce2b", "sighting_of_ref": "indicator--25323260-6bb4-44bd-a89c-1fe4443c6629", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65930bbf-510d-4870-825b-cefc679a5488", "sighting_of_ref": "indicator--b37aedb3-f682-4c6f-a95c-81fa0e68b890", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c5d121-b993-4ce9-824f-0e0785a67a87", "sighting_of_ref": "indicator--b37aedb3-f682-4c6f-a95c-81fa0e68b890", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a373874-a5a5-4cbb-99c7-13cc8395b13c", "sighting_of_ref": "indicator--eaeb7a58-8e6f-4a74-ad9f-993b50f5deae", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d675b3cc-db3e-434c-976b-2e97161f295c", "sighting_of_ref": "indicator--443150cf-3b49-4cde-95a8-8c295d5542bd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c235e6b-8936-4b2f-915c-baea3acd9bfb", "sighting_of_ref": "indicator--cc87bc36-31ab-4653-8737-b05b66e39c57", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3273e1fe-f588-4273-bc2c-8ac6647ff127", "sighting_of_ref": "indicator--85b0b632-8a9f-4107-abcf-b86ada7003b6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b01541-1ee5-4050-a5a8-907ec7737648", "sighting_of_ref": "indicator--f7e458c9-060d-4615-bee7-e75ef6f85e2f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b79cb6-1ddd-4bf6-969a-a02ea3569c30", "sighting_of_ref": "indicator--f7e458c9-060d-4615-bee7-e75ef6f85e2f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76149453-7131-4360-8622-68d8cd435816", "sighting_of_ref": "indicator--1bed6df8-9349-45b7-b343-d1f2cf8417c9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec5492f-2ee6-472e-9756-d0a153096a03", "sighting_of_ref": "indicator--67e47b2b-79be-4d90-94cd-1eeb8317b5d4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51251a6e-bd7c-4b7c-8e95-3dd3e182678d", "sighting_of_ref": "indicator--049ae77a-2c38-4575-b19c-f13f1191bda4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b33cc4e-e83d-41ab-b636-76e9ebd0bc4b", "sighting_of_ref": "indicator--1c6a1750-f5ba-4aba-9af2-52f8d16c983d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a357d95-1f81-4cb1-87f3-aee5ba857101", "sighting_of_ref": "indicator--33971489-4e9e-4a12-bb11-dd229f11d14e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a32851-e4ef-43e1-83dd-894fa783497b", "sighting_of_ref": "indicator--036ece1d-4862-450c-93e9-e16238d77ead", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685c99cd-1086-41a5-a6c0-5842528f67b6", "sighting_of_ref": "indicator--e26a9214-87d7-4d1d-b894-9db272d7882e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5d8133-06d1-4c60-be84-19e1cb688844", "sighting_of_ref": "indicator--6509746f-ac46-4112-8e1c-7c6f1100a3fd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd856a5b-fdc1-4afd-84e0-55c453b84fa1", "sighting_of_ref": "indicator--6509746f-ac46-4112-8e1c-7c6f1100a3fd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ad7aaf-18bd-4368-80be-6b2e6d53c4c8", "sighting_of_ref": "indicator--70d90364-d1cd-4638-b996-9c7ac23ff5b4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26934df7-99df-4d65-bd46-4b5e2d47ec09", "sighting_of_ref": "indicator--70d90364-d1cd-4638-b996-9c7ac23ff5b4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697414d7-d50b-4be6-935b-49f42220606b", "sighting_of_ref": "indicator--70d90364-d1cd-4638-b996-9c7ac23ff5b4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358f3754-e8b7-4036-8002-74d907693430", "sighting_of_ref": "indicator--60b1f7f6-0384-44d0-abff-abc879acaa79", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc024917-0489-4447-9e72-032c599297f4", "sighting_of_ref": "indicator--109d25d0-9d6f-4e1a-a1f6-557d583db79f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98bf83df-bbea-43c9-833f-bf8e4d7aa834", "sighting_of_ref": "indicator--7b19d1ba-9db9-4d59-9f07-92c6ca5c9fcb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0b5a1e-7dd7-4afa-a708-ede73c1c9d04", "sighting_of_ref": "indicator--a02800d8-59cc-45a6-9b68-0ea467e0ca57", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf93a36-3cb7-4909-9eeb-2dd4c8a71142", "sighting_of_ref": "indicator--34c28ac4-3a8a-407a-8a5b-da3498adbe80", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c64cd5-3029-4b55-892b-90b2a3cbdf53", "sighting_of_ref": "indicator--013a593d-028e-4c08-8982-275517ae2599", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcce4ccb-0854-4bfb-ab07-db5e131cf866", "sighting_of_ref": "indicator--2eda262c-2408-4b7b-926d-0b6d12f68a27", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e425ea-d6c6-47f4-b115-54d9c41afb83", "sighting_of_ref": "indicator--280466ca-7bf2-4933-ab39-7c800ba522e2", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55b3b12-3a73-4ade-b9fe-ad8babaea0dc", "sighting_of_ref": "indicator--f3c483c3-abf3-4116-9b10-4515891bb14c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed0c17e-1742-4e73-b56f-147c0149abc8", "sighting_of_ref": "indicator--3399aad2-7035-4538-89fd-28672e4195b0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63bbf6a9-11d4-4144-baab-b301a27a9d8c", "sighting_of_ref": "indicator--9157ec71-d344-48e4-99b3-e6196026e98b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e133219f-99ca-420f-9162-1cac798315de", "sighting_of_ref": "indicator--1dc3ddd1-f483-499f-9a57-7a7c95a3fff1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2700723b-f4ce-4c40-8a19-6da0565ccd76", "sighting_of_ref": "indicator--0ea9a30f-4443-4f88-af5a-28d86476c811", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f35dd1-673d-4790-b4dc-19fc93caf4b1", "sighting_of_ref": "indicator--f912c372-ec57-4cc2-bf47-1fd36792bb5a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f43931-9c68-4178-8d0f-f2471b245188", "sighting_of_ref": "indicator--87f3c2c5-336e-4892-8ab7-10eee66cbc5f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eaa6f5f-5041-4b8d-87fc-ef5814347ed3", "sighting_of_ref": "indicator--618bbc05-e453-4756-bbf1-e7d8df4c6bb9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d130c9-82cf-4d97-89c4-d859f02ad387", "sighting_of_ref": "indicator--6cbba9f2-4761-4ed4-a0d2-b1f0cf044449", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a80a76-6b73-4657-a54e-a6427bea7d83", "sighting_of_ref": "indicator--46d2ace2-070a-49c3-ae5a-e2a1e3b72395", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5611cd-f731-4691-8043-fe5d04d2cead", "sighting_of_ref": "indicator--04a0273b-0902-4733-8e56-53a0fe52e73d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612a7798-daf8-4ddb-8aa2-3159b411ea22", "sighting_of_ref": "indicator--3783c9d9-9c7f-4b4d-893f-74bc95f9b9bc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae680df9-af99-4655-9f04-fd6579f01548", "sighting_of_ref": "indicator--3783c9d9-9c7f-4b4d-893f-74bc95f9b9bc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e681716-40cf-47d1-9883-ebfa4c2ccc4f", "sighting_of_ref": "indicator--c122d154-7d4f-4016-938b-e3be95024701", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d0294f-5c15-4967-b724-8c38abb7dfb2", "sighting_of_ref": "indicator--87ccf04d-c852-4663-9007-664e36b7c651", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91b38f7-ac2a-4992-8ad2-4b320d133afb", "sighting_of_ref": "indicator--38d099cb-05c5-4ed9-8371-d4d517e2a4be", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d4d92f-bf58-49c6-95c3-29537a2ecb55", "sighting_of_ref": "indicator--953a2897-8d0e-4328-ba43-2baf34486ee2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93eaacc-2707-4d00-9ea8-05a28e810d79", "sighting_of_ref": "indicator--f602680f-03c0-4dc3-9cf3-696f044ea1a0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8d1363-a112-4f70-b076-29df650e096d", "sighting_of_ref": "indicator--efba7cdb-19e1-4237-ae81-6dcc8d87f9fb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f8c9ad-a2ac-4d7e-8c4d-a8ee17fe4b02", "sighting_of_ref": "indicator--e9b31b35-6118-4a1d-9648-70540561e608", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c872bf3-1214-49f5-aa2a-89132cb630bf", "sighting_of_ref": "indicator--e9b31b35-6118-4a1d-9648-70540561e608", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f79983-1168-4d1e-8057-a5755c66a32b", "sighting_of_ref": "indicator--e9b31b35-6118-4a1d-9648-70540561e608", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33ad170-eedf-4822-8464-b9f724593378", "sighting_of_ref": "indicator--4dfb9d21-0b7c-4adf-be99-4a7484fd0d54", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff0a0ad-5568-4160-9f5e-c0426b94ad43", "sighting_of_ref": "indicator--8bc6a20b-b6fa-4b5d-a7fe-576a7061951c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbffa7ec-f103-48b2-86e0-f8acf2c52d08", "sighting_of_ref": "indicator--ec6cdde5-75ef-423a-a7d7-cc42369cdf18", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bdb640-d36e-4778-990d-12e84e341d55", "sighting_of_ref": "indicator--39b776ff-133d-4b4c-b44b-0b2d8357f24a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416b7c97-55e2-45a5-b52e-3b73b7f84349", "sighting_of_ref": "indicator--39b776ff-133d-4b4c-b44b-0b2d8357f24a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0862b94-858b-49ef-a31d-6256684dc812", "sighting_of_ref": "indicator--10a1aff9-4d8e-461c-814a-fd523cf14af7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e7ebd6-6942-42be-aea5-71d21e750294", "sighting_of_ref": "indicator--9dc35848-5f60-46ff-8242-f4e4c1d5308a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a3186e-9234-48bd-95d5-691ac81919f7", "sighting_of_ref": "indicator--5705a4d8-216a-48fa-8a01-daf0b943ce49", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1929c0-d1c7-4db4-9337-b71cd9230509", "sighting_of_ref": "indicator--336ce7af-7697-45e3-b2e6-909913458a0a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eee1cda-1132-482f-936b-045a25a12f5a", "sighting_of_ref": "indicator--336ce7af-7697-45e3-b2e6-909913458a0a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba01309-97bb-4859-b8a6-feb4d0493397", "sighting_of_ref": "indicator--336ce7af-7697-45e3-b2e6-909913458a0a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704b602a-2a4d-4031-b3a0-d681746d3b2e", "sighting_of_ref": "indicator--55ac58a4-5f75-4bc7-99ca-b4bad8b7d43c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86ebb5f-6df1-4c21-aa21-2c74b420168a", "sighting_of_ref": "indicator--a2bb09a6-ecca-4a1c-9139-a4cb7cbc68c7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0cd845-6ebe-4d1b-8bc6-4faad9f091df", "sighting_of_ref": "indicator--5f7396c2-624c-41b0-91c6-7c137c88ac73", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144b2f5f-1697-40f2-b1e7-8cec64a877f9", "sighting_of_ref": "indicator--5f7396c2-624c-41b0-91c6-7c137c88ac73", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88595584-7546-402c-8897-d1aed5ecca7c", "sighting_of_ref": "indicator--a98276ad-3479-4156-868e-9d4257223aa1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b526bc85-e0b2-4f53-b191-d8146e572ed0", "sighting_of_ref": "indicator--fe46a288-def6-48a7-a7f6-744a8fd2fa15", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94441d34-fcb5-4462-be4e-a23a0bfdf3e7", "sighting_of_ref": "indicator--fe46a288-def6-48a7-a7f6-744a8fd2fa15", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba1e1fa-4be5-46e1-8ddd-706b547e7402", "sighting_of_ref": "indicator--fe46a288-def6-48a7-a7f6-744a8fd2fa15", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4160417-8616-48d0-b5eb-14ef30ba606b", "sighting_of_ref": "indicator--8eebfe7d-c39b-4775-8340-d42d91a57f3b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5f0fbf-117d-4d44-ba8c-97cca2c2b289", "sighting_of_ref": "indicator--588e32a8-4a80-4630-bdf5-f2261e767c28", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8051bdef-20f0-4503-8ad0-12d9a176a716", "sighting_of_ref": "indicator--b072d4cb-0eb3-4057-a38e-509e19300ffc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244d38e3-74ed-4347-9b9a-06513e4ec375", "sighting_of_ref": "indicator--ff1dfff0-2d8b-4a41-a970-c4d8882da38f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfffe04-756e-4cda-bb19-b41389a48e82", "sighting_of_ref": "indicator--abc60e1f-4fc4-4632-8dde-fe910e030981", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ad3f05-38e3-407d-adc7-e54fb4f2f5f6", "sighting_of_ref": "indicator--abc60e1f-4fc4-4632-8dde-fe910e030981", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c17867e-d174-40ea-83b1-2cab3a15f701", "sighting_of_ref": "indicator--187c6911-5a83-417d-8cb6-1eeeee6a76dd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d264b2-e330-4478-bced-f524d8e80963", "sighting_of_ref": "indicator--12987520-a38e-403d-aced-fb42f2ca3598", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eea100f-09e7-4722-a494-e65fd19889ac", "sighting_of_ref": "indicator--12987520-a38e-403d-aced-fb42f2ca3598", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3489126f-1b73-4735-9b55-53d91d4341e6", "sighting_of_ref": "indicator--c0d58210-a050-4112-863d-1fde63b340c9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e8545c-c893-497a-b530-cd7e410315f1", "sighting_of_ref": "indicator--c0d58210-a050-4112-863d-1fde63b340c9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ad8e26-43e4-4739-ad80-c556ed1ea719", "sighting_of_ref": "indicator--5eb4c6f0-2fa3-4e7d-8287-41677523663c", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effa0bfe-4db8-4fa6-b9ad-12cad8bda3a9", "sighting_of_ref": "indicator--9cf3cf32-8f1d-4505-a131-bc983f896001", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8300c417-68b2-4217-bd82-d9f10197226f", "sighting_of_ref": "indicator--9cf3cf32-8f1d-4505-a131-bc983f896001", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2b49d9-e98c-4000-9fba-bb9bef052b27", "sighting_of_ref": "indicator--e60a56c8-c5b6-48db-9e2d-0c304906cba8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e65a3c6-1522-440b-b3d3-6783d623ee2a", "sighting_of_ref": "indicator--e60a56c8-c5b6-48db-9e2d-0c304906cba8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47e2fbf-a16d-4f6a-aaf8-7015ad55e43d", "sighting_of_ref": "indicator--8fa18c2c-c575-4861-93f8-e0e76e42febf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4611a0db-5f15-4156-8fa1-1ae63ca264a0", "sighting_of_ref": "indicator--8fa18c2c-c575-4861-93f8-e0e76e42febf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a50f22c-d60b-47db-88af-289a6a113bbf", "sighting_of_ref": "indicator--8fa18c2c-c575-4861-93f8-e0e76e42febf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ae7e0e-1445-43d8-b3b4-b5ede2cea04a", "sighting_of_ref": "indicator--0e521229-e34e-4268-a688-8e674987ae9c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25453367-3695-4999-90a6-b243fec62b3d", "sighting_of_ref": "indicator--fe8e1018-9634-4ed9-89f4-cb10c0e3b8f5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1daade63-ec99-4a42-9de6-dc40dae7a380", "sighting_of_ref": "indicator--2dff46b5-e94b-467b-b6e1-28178b09ca6e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44848c06-c67f-46cb-82c4-832c6d5e3753", "sighting_of_ref": "indicator--2dff46b5-e94b-467b-b6e1-28178b09ca6e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed01879-6c59-44f9-84b3-ba826365f7b7", "sighting_of_ref": "indicator--6cb1592c-5c0a-48d3-9170-157bb0016eb7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddc357b-a0f2-42aa-ba57-b08ed8a804e3", "sighting_of_ref": "indicator--6cb1592c-5c0a-48d3-9170-157bb0016eb7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cd22ea-9bfc-440c-b38e-5898ad4af8a5", "sighting_of_ref": "indicator--9fda69ba-9803-4fff-a4a7-dce53759464a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6481c6d3-c5c9-453c-98ac-69cbac746ca7", "sighting_of_ref": "indicator--9fda69ba-9803-4fff-a4a7-dce53759464a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadaadf8-d787-4235-99cb-b08aebd01c76", "sighting_of_ref": "indicator--8c9b251a-7298-4f7a-8982-a355d8dc024d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befb98b1-c203-4e93-9d68-31444cec4979", "sighting_of_ref": "indicator--cadfa310-845f-4fe7-a157-a41ab5903be9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d17fa3b-d324-4ddc-a87c-439877b3391e", "sighting_of_ref": "indicator--e32d25d4-ca71-4f74-862f-1301f496bdf6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac2fca0-05f1-4332-80e8-8c3143ab5215", "sighting_of_ref": "indicator--0e028bdd-7317-4546-b220-3ed985e8825d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5235c602-f4a7-492d-92ba-d19258a1253e", "sighting_of_ref": "indicator--66d58714-d609-4392-b7ee-6efbb7f5d27e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9da9d7-bc2f-4052-bf51-84862bcc474c", "sighting_of_ref": "indicator--abd71030-c3bc-45e5-9ac5-8276f2a9bb43", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f4f38f-e758-44ee-a5ab-d46d66691646", "sighting_of_ref": "indicator--d09b1b9d-d430-4055-acca-d5787b082baa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba81834d-0171-4332-bec6-5513d392f33d", "sighting_of_ref": "indicator--d09b1b9d-d430-4055-acca-d5787b082baa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb9997d-2194-4344-b170-9c6ab20feb83", "sighting_of_ref": "indicator--16d300e1-3ffc-4685-b632-21fe318418db", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca1a5ba-e17a-4938-9f9b-683b900d6d1b", "sighting_of_ref": "indicator--170f9e5b-7f55-4972-8fd3-1d41b68d2e4d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8971705-8ab2-41ed-914a-374129005132", "sighting_of_ref": "indicator--ebb5ad85-69d7-427f-b901-f232a265148f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acb7b33-08e3-48f8-9408-efbfd560e81d", "sighting_of_ref": "indicator--325e6670-3fc2-42fb-beb3-8d6c2dd5e679", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5dea97-e844-4c7e-9e7a-93e790a4df0d", "sighting_of_ref": "indicator--0d4ead48-6be4-4fb9-b014-2a7e03176fd0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa15445-c8c7-46cc-8560-ba66bd61993d", "sighting_of_ref": "indicator--e21aa934-8a04-4fea-a616-13097a7c3f13", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe16ab18-fd8c-4443-85de-bbd1b3e84237", "sighting_of_ref": "indicator--e21aa934-8a04-4fea-a616-13097a7c3f13", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b46e2c-696b-47fe-9eee-db42af442dfd", "sighting_of_ref": "indicator--3abfaee5-d31d-4ead-a377-e99c28d8a1b0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8075748-2162-4e7a-9049-f1d2214a45e7", "sighting_of_ref": "indicator--8cc48442-cc9e-4108-b715-db5d899925fa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324da456-8fb2-47a3-b274-9263187c23f2", "sighting_of_ref": "indicator--8cc48442-cc9e-4108-b715-db5d899925fa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09738629-aadb-4a13-bbd2-d98808699621", "sighting_of_ref": "indicator--83d03af1-e704-4368-92b1-f8c3a9853fc5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632c067f-7498-4be8-bd0d-a79f144d999b", "sighting_of_ref": "indicator--ed846a43-54b9-4cf9-9996-bf6a80f31d2b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040f3829-827d-4c44-9798-6b85c41373ab", "sighting_of_ref": "indicator--693aeff8-c62a-4e71-b20f-2e761f54e9de", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a456b13c-7792-4f56-b9d5-51f57a3da65c", "sighting_of_ref": "indicator--777820a2-abf4-4b39-9d55-f9ddfa1e2a86", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc5d01c-e855-4a39-8912-7ca73c84285a", "sighting_of_ref": "indicator--aa9baf26-d34b-42f5-9df4-968b3f39ffa1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e213ccb-26be-458f-bfff-71fda01a1306", "sighting_of_ref": "indicator--4f9fa016-d23f-48e7-beea-0da60c918234", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3531715d-2c23-47be-ab88-2c0facedd3dd", "sighting_of_ref": "indicator--26737082-80b7-4ddb-a101-30f0d6c56004", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd411cf-a5c4-4812-aec7-c495a663271a", "sighting_of_ref": "indicator--3fac8fdf-52d7-4d13-b325-8ce6637620ba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef8903d-5507-4d71-b31c-c26554a2114c", "sighting_of_ref": "indicator--3fac8fdf-52d7-4d13-b325-8ce6637620ba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d451e736-df94-4c8c-9d96-fb44ca7a7790", "sighting_of_ref": "indicator--c15c5ca8-013a-4195-9cf0-a30afa15e402", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1730ed-cc05-4318-a627-97778f47030b", "sighting_of_ref": "indicator--1a07d4be-2d76-4861-906d-d26e18d29e84", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d505c45-248b-4f56-a102-5a8cd04fbccd", "sighting_of_ref": "indicator--1a07d4be-2d76-4861-906d-d26e18d29e84", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f44973-e710-4696-ac8e-3fa0f063a08f", "sighting_of_ref": "indicator--a6f47af1-976b-49a3-8753-ab0497daf2cd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f382c8d1-0440-4778-b5dc-db2daab3f5e4", "sighting_of_ref": "indicator--8e824a99-382e-4fdf-946e-12e71241b434", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e211b2c8-c484-4578-a2b8-aba668d3f645", "sighting_of_ref": "indicator--698bf9b4-24ec-415a-bff3-3ec9e1a19ea3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b74b8e1-15d2-44e4-acd2-e90423b01c2a", "sighting_of_ref": "indicator--cd8e4e71-0eb7-4d12-afb1-dbd0369b3b49", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abc6fc1-04b6-423f-a541-5b075563107e", "sighting_of_ref": "indicator--9a600e2e-3bfc-4666-b423-d8bb58586f35", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4d463e-3a8f-4e8c-a7fb-43e35b9805cd", "sighting_of_ref": "indicator--43f9e761-a610-4ddb-bd06-859a2a745ad5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5851fbe4-4d3f-41ea-8b5a-4a885887b437", "sighting_of_ref": "indicator--43f9e761-a610-4ddb-bd06-859a2a745ad5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67b9bb9-2ab0-40ae-b0f2-44a2f22e4bdb", "sighting_of_ref": "indicator--5c050c9d-b208-49e2-bf82-c2af89ff430a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933b23bd-cc5e-4e66-9d96-4a157a25721c", "sighting_of_ref": "indicator--27670f84-ceae-4e60-b3ae-812c7bb48325", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12309b3-af03-4772-a9e8-5465693db1eb", "sighting_of_ref": "indicator--68f3a59a-a44a-4fcb-977b-75038ee91a39", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ff3a70-7ed0-4354-be38-905b7b5350ba", "sighting_of_ref": "indicator--68f3a59a-a44a-4fcb-977b-75038ee91a39", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c33fc93-34bb-4ad2-a9de-f3a09a59cd4d", "sighting_of_ref": "indicator--ed9404f6-8113-4a94-a0ef-163fecbfe7a8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b83f144-24bd-4dc0-b3aa-1c4af5d58319", "sighting_of_ref": "indicator--ed9404f6-8113-4a94-a0ef-163fecbfe7a8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83268eb-fbe7-492c-a0e7-7bc6fe0d32ab", "sighting_of_ref": "indicator--0ab29551-1f06-4cfc-8f18-3775e8b6ef4b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9af37b5-4ae6-4974-9a29-9917835f4e02", "sighting_of_ref": "indicator--0ab29551-1f06-4cfc-8f18-3775e8b6ef4b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8309708c-71ab-485f-9393-5dba495d7890", "sighting_of_ref": "indicator--0ab29551-1f06-4cfc-8f18-3775e8b6ef4b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5a5e90-418e-4d90-9e6a-4fb44c343f35", "sighting_of_ref": "indicator--9a9618aa-9136-415f-a082-6d8c98a674dd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c740435-90e1-4222-a4c0-6381e99e3b47", "sighting_of_ref": "indicator--9a9618aa-9136-415f-a082-6d8c98a674dd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a5831b-4fb5-4f14-870f-d0fcae054e46", "sighting_of_ref": "indicator--9a9618aa-9136-415f-a082-6d8c98a674dd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b576f4-46d7-4a8e-b60a-fa712f4162f2", "sighting_of_ref": "indicator--5ba6c5b0-ea4e-4db5-9076-59ca65914a09", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9bd1a67-d32d-4597-ac1d-f9a213ce2f97", "sighting_of_ref": "indicator--5ba6c5b0-ea4e-4db5-9076-59ca65914a09", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7397da90-dd0d-4026-9e43-af7ab542c53e", "sighting_of_ref": "indicator--5ba6c5b0-ea4e-4db5-9076-59ca65914a09", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22cfb0b-b4a4-4fe5-9eaa-b5a23c9cb6f6", "sighting_of_ref": "indicator--18d597f9-a760-4ab7-a3e5-36c60478b44e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af3197e-5c0a-4514-9c7f-7a57b4dd783c", "sighting_of_ref": "indicator--18d597f9-a760-4ab7-a3e5-36c60478b44e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b00548-3b57-4d34-8da6-5c902fa3da4c", "sighting_of_ref": "indicator--18d597f9-a760-4ab7-a3e5-36c60478b44e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2726bf-3a2b-4699-ac10-5e740bff2531", "sighting_of_ref": "indicator--77f4e10f-62cf-47be-91b6-2cda15f3a18c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628cfb6f-6a01-4989-ba9a-070c3d631822", "sighting_of_ref": "indicator--77f4e10f-62cf-47be-91b6-2cda15f3a18c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc6f161-3918-4ee6-a5f4-7b378cc2babb", "sighting_of_ref": "indicator--77f4e10f-62cf-47be-91b6-2cda15f3a18c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a51cc1-27ff-4d5c-af93-7207e7ec37d4", "sighting_of_ref": "indicator--edc3593d-30ad-4383-b880-5d0e2d63cce2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771b3268-a93c-422e-8212-ab129a625cdd", "sighting_of_ref": "indicator--edc3593d-30ad-4383-b880-5d0e2d63cce2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8280dc2f-36f6-436b-8bd6-8f92facf74c6", "sighting_of_ref": "indicator--082bd480-43c5-49c5-bfd1-1815cebd73c2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72354fa-2532-4784-a3ff-967a350a8f99", "sighting_of_ref": "indicator--082bd480-43c5-49c5-bfd1-1815cebd73c2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89172cfc-66c1-4434-a6a3-e6eff81f3b92", "sighting_of_ref": "indicator--082bd480-43c5-49c5-bfd1-1815cebd73c2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553a1fb2-7882-464f-8019-429669968746", "sighting_of_ref": "indicator--ba09e07e-70de-4a55-85ab-a3d0b6bc5fdf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd4a8bb-f027-49db-a3ea-0690e523e35e", "sighting_of_ref": "indicator--ba09e07e-70de-4a55-85ab-a3d0b6bc5fdf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9edc0579-2a58-4520-af72-a221a677a99a", "sighting_of_ref": "indicator--ba09e07e-70de-4a55-85ab-a3d0b6bc5fdf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872c5034-75d5-4a71-902b-0a1f5a9c9214", "sighting_of_ref": "indicator--7f0ee444-92c8-420d-950f-300adda663eb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112d8a46-2ae7-444c-ba41-c6bcdac4c42e", "sighting_of_ref": "indicator--7f0ee444-92c8-420d-950f-300adda663eb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2864ca48-1e8c-4574-9240-ed30187daa8d", "sighting_of_ref": "indicator--7f0ee444-92c8-420d-950f-300adda663eb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1f6f2d-3f70-401f-be16-d63d46bdec2d", "sighting_of_ref": "indicator--763c7f39-c888-442b-bf73-f7151252d323", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4d4f09-fefa-47c9-bfe8-b9e5d7571475", "sighting_of_ref": "indicator--763c7f39-c888-442b-bf73-f7151252d323", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3244ad85-415f-4135-9c77-20879df3543f", "sighting_of_ref": "indicator--763c7f39-c888-442b-bf73-f7151252d323", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a24fb79-5505-4107-9f49-5f350e51e5c1", "sighting_of_ref": "indicator--f5099374-1d9a-4169-b964-b68a77f07017", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc4ff5d-1c4f-4887-acd0-00034c3f167d", "sighting_of_ref": "indicator--f5099374-1d9a-4169-b964-b68a77f07017", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505eb453-670c-4eb5-a383-bebb260f7152", "sighting_of_ref": "indicator--f5099374-1d9a-4169-b964-b68a77f07017", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349ad0a7-114a-47ec-ba84-8c43c9650be4", "sighting_of_ref": "indicator--a2090e42-c8eb-4fc5-88f2-e2d74f1415c4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5274876-5174-4e82-b8de-5705bf2199b3", "sighting_of_ref": "indicator--a2090e42-c8eb-4fc5-88f2-e2d74f1415c4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98d0654-dc91-4605-b727-b61423b99e46", "sighting_of_ref": "indicator--a2090e42-c8eb-4fc5-88f2-e2d74f1415c4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa8741b-5f50-4f24-8904-597010576f8f", "sighting_of_ref": "indicator--537d5c51-709a-4fef-98d3-00652a664d35", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cad3acf-db79-4c73-beb1-ab2a8c27d06f", "sighting_of_ref": "indicator--537d5c51-709a-4fef-98d3-00652a664d35", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce25abb2-2895-4059-bebd-60dc064b0ea5", "sighting_of_ref": "indicator--537d5c51-709a-4fef-98d3-00652a664d35", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80b0921-ed98-4547-8f4a-3c8205c3942a", "sighting_of_ref": "indicator--1738effe-f88d-4a30-9efe-f0942f0cbcae", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d6b60b-7714-4dcf-9e42-3e3078159651", "sighting_of_ref": "indicator--1738effe-f88d-4a30-9efe-f0942f0cbcae", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debd2c8c-ef71-4146-a3d7-1258068e95ee", "sighting_of_ref": "indicator--1738effe-f88d-4a30-9efe-f0942f0cbcae", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc018fd-6cb4-4a46-beb7-e25372b6ea6f", "sighting_of_ref": "indicator--aa22080d-f298-4b52-b9e9-962c782cd047", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3a469d-a6c8-4aa9-b686-8d80771f1d31", "sighting_of_ref": "indicator--aa22080d-f298-4b52-b9e9-962c782cd047", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc97166-c2f1-4488-bfa8-81c57da20012", "sighting_of_ref": "indicator--aa22080d-f298-4b52-b9e9-962c782cd047", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a148f7-17a9-461c-8428-a3d3dc320ed9", "sighting_of_ref": "indicator--003e7676-f85d-4320-a0a1-ee79c43f8e2e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7238cdb5-4cf5-462f-b2bf-22997119bf51", "sighting_of_ref": "indicator--003e7676-f85d-4320-a0a1-ee79c43f8e2e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08459e4-641b-4206-a2be-91f5b705a11c", "sighting_of_ref": "indicator--003e7676-f85d-4320-a0a1-ee79c43f8e2e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548abdff-5a54-45cd-8a0f-4af0e93726a5", "sighting_of_ref": "indicator--38c26c46-9bd5-4a22-9ef6-2ca340cc0103", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd53a98-51c9-40df-ade4-cc6538370fae", "sighting_of_ref": "indicator--38c26c46-9bd5-4a22-9ef6-2ca340cc0103", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b20e69-ed91-482c-a093-7f9c64fc81f8", "sighting_of_ref": "indicator--38c26c46-9bd5-4a22-9ef6-2ca340cc0103", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501834ea-bac6-49b5-9ba8-a8b94f44cc8d", "sighting_of_ref": "indicator--d5514920-eb40-43f8-9bea-183c47f6a736", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f027ce3-c3eb-4f25-b8b9-6352647146ed", "sighting_of_ref": "indicator--d5514920-eb40-43f8-9bea-183c47f6a736", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd71df11-2f1b-44ac-b482-ac796d8862a7", "sighting_of_ref": "indicator--d5514920-eb40-43f8-9bea-183c47f6a736", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fb3c1f-d8ce-4b2f-9524-25a96aab3c12", "sighting_of_ref": "indicator--17ec6334-4b8f-4b5d-bf1c-18c2fdbc7635", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9595afb-6786-4ceb-a992-001bdf8c20d8", "sighting_of_ref": "indicator--17ec6334-4b8f-4b5d-bf1c-18c2fdbc7635", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4ee7b9-8378-4192-baf5-7a9475912358", "sighting_of_ref": "indicator--17ec6334-4b8f-4b5d-bf1c-18c2fdbc7635", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e2cceb-a09d-42bd-adef-a66838881b6f", "sighting_of_ref": "indicator--c7c53dc3-282f-4048-85ee-0896aaea2f42", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ee9222-4302-466f-acb3-07586216e519", "sighting_of_ref": "indicator--c7c53dc3-282f-4048-85ee-0896aaea2f42", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30cc92f-7467-4d3f-a7cd-d16a1a5b5f3d", "sighting_of_ref": "indicator--c7c53dc3-282f-4048-85ee-0896aaea2f42", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ade6d2-ec0f-4e7a-b38c-a1373bdb4c14", "sighting_of_ref": "indicator--4cb2e1f0-9c22-4478-a5b3-67d8cf145a63", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a336d7-340d-44fd-9efe-cedb79f2c03a", "sighting_of_ref": "indicator--4cb2e1f0-9c22-4478-a5b3-67d8cf145a63", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d82273-f884-4c65-b986-4fcdee39f323", "sighting_of_ref": "indicator--4cb2e1f0-9c22-4478-a5b3-67d8cf145a63", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa75a60-f643-4dd5-bb1e-93499852ee78", "sighting_of_ref": "indicator--b237b4b5-5f7f-410e-8606-9e90798870db", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5273aae-3979-40b5-b0e2-0c741b3512e3", "sighting_of_ref": "indicator--06fac8cb-747d-4996-95e0-28848bf4a6d6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883719f7-f7f8-426f-8f4d-9e8809f7e628", "sighting_of_ref": "indicator--16dae21e-0fa1-4948-b71c-c29eaef8a538", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6e834c-42c4-46c9-b107-a6e884cfdd57", "sighting_of_ref": "indicator--16dae21e-0fa1-4948-b71c-c29eaef8a538", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1788c22-e0c3-401c-82b1-a5fc65283f51", "sighting_of_ref": "indicator--16dae21e-0fa1-4948-b71c-c29eaef8a538", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbe52ae-2a14-470e-b86e-610aa0750f63", "sighting_of_ref": "indicator--9b717f64-59e8-4fb8-9fb3-02204f479c30", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ecd2b5-f6b2-4d5c-84dd-614d6fd34b07", "sighting_of_ref": "indicator--a8d9fe0c-5004-45c0-b5b3-a828420566a9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d0f868-aeae-451c-a675-1e140fb7d9b1", "sighting_of_ref": "indicator--9f263492-bd2a-479c-a6ad-25aa67e13aec", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a70405-013e-4751-9a56-7156b4abcd95", "sighting_of_ref": "indicator--9f263492-bd2a-479c-a6ad-25aa67e13aec", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20473a3c-9502-4cd9-b8df-dc3d72e5cdcd", "sighting_of_ref": "indicator--9f263492-bd2a-479c-a6ad-25aa67e13aec", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a0b4fd-6214-4021-b7f6-f3c66185df3d", "sighting_of_ref": "indicator--3e2b1782-a6de-4d4b-8a55-3a270b173fb4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd46b5b3-acd2-4681-902e-bdf569ec0066", "sighting_of_ref": "indicator--3e2b1782-a6de-4d4b-8a55-3a270b173fb4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333a1611-14d2-40b9-a278-6fc9d211f875", "sighting_of_ref": "indicator--70fda70a-80b7-4d02-8195-4c068e827862", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55969e6c-32d7-45f5-8d68-11a34c38386a", "sighting_of_ref": "indicator--2eea2be9-cb5e-4666-8b92-dc6fd83a3ca2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cabb52-9868-4968-bdb4-ae8eded10b5a", "sighting_of_ref": "indicator--7b22c8cd-4148-4d34-bb4e-5fe2d742aac5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d86ba7-c035-4a95-a738-980c9d32ec99", "sighting_of_ref": "indicator--13f6e25b-9410-4922-a21c-65fe755d8e3b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da1a1bf-1938-4f29-ab3b-000cd5bff3bb", "sighting_of_ref": "indicator--4b3d19f9-0503-4f44-b798-4596074af429", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f336cf-03bf-4f51-8bb3-b2ea0e61d4db", "sighting_of_ref": "indicator--1a79a957-91a6-4c00-a102-b400bcfb6e1d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ef0962-8141-4c3c-a6e6-19d7b8d7a8ad", "sighting_of_ref": "indicator--1a79a957-91a6-4c00-a102-b400bcfb6e1d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f0ab04-291b-4a4f-8fe9-c278164404c7", "sighting_of_ref": "indicator--1a79a957-91a6-4c00-a102-b400bcfb6e1d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec24a42-a0cc-4139-b10a-cb6e7899e24b", "sighting_of_ref": "indicator--86ab671a-f1f5-43bb-9882-e444428b43a3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff2fdcd-e902-4113-a3c8-e1e1ef382e2e", "sighting_of_ref": "indicator--b024ecb5-0a5f-438d-ad43-1e25c344ce94", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd5749d-0ce2-45a6-a958-659174dbb3f7", "sighting_of_ref": "indicator--b37fe960-2e35-4e3e-85b1-93a58acdf88d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef237ad-acf1-4f74-ace9-0c880dacb26b", "sighting_of_ref": "indicator--f4e8b9a0-59db-412c-a136-5c8ef5a3db9d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d0f42a-3e72-4234-b5ed-9a70b3a2d1f4", "sighting_of_ref": "indicator--f4e8b9a0-59db-412c-a136-5c8ef5a3db9d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6215677c-8520-41fb-a7a8-7806d358f9ff", "sighting_of_ref": "indicator--f4e8b9a0-59db-412c-a136-5c8ef5a3db9d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad46247f-fd84-4bc5-a3e4-c670d1b5a5df", "sighting_of_ref": "indicator--56ef3266-5fe3-4443-b75a-27efa69e3cb2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa87d227-8678-48f6-b13d-439a39ccf9b6", "sighting_of_ref": "indicator--7d71dc9c-3d22-45b0-bc18-80cbe1988d5f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527c896d-2d59-49cd-880c-70dc88f954c8", "sighting_of_ref": "indicator--d299543d-1231-470b-a7be-73e3da42fa56", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0cac8a-0647-44f6-900d-28c11a12b75a", "sighting_of_ref": "indicator--bbc8e892-da5a-42ed-8060-60135cb206ca", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0850572c-df1a-4f0e-82a0-84af171714f0", "sighting_of_ref": "indicator--51dff5db-c770-42bb-8db9-ba9392d05008", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62662e8c-1e66-4a7c-9259-eb2a5c75a380", "sighting_of_ref": "indicator--f5be1ecd-263a-46b4-8ecc-e54dcce92562", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2441786-6a4d-495b-b117-1885a35dca82", "sighting_of_ref": "indicator--c6cb4406-e40c-4abb-a8f0-6ece88900559", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae9dc9f-6732-4bb0-bf2f-6eb094f43c71", "sighting_of_ref": "indicator--c6cb4406-e40c-4abb-a8f0-6ece88900559", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578bf290-d7d5-47c2-939f-92ec39cfca28", "sighting_of_ref": "indicator--c6cb4406-e40c-4abb-a8f0-6ece88900559", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de288083-9491-43f1-bf48-f5919994d03e", "sighting_of_ref": "indicator--5e6df11e-1839-4821-8668-d33197f45fc8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa3359a-85bb-45f1-97d0-f081e68d3e0c", "sighting_of_ref": "indicator--9be11719-1b96-47ad-965e-0abb06e00551", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13d3a73-edbe-4049-8d87-bdc1de6fc767", "sighting_of_ref": "indicator--9877d935-fff1-47c8-967e-a3d4b97be994", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad59cb5-c542-4185-bbc3-4cf5142f7a64", "sighting_of_ref": "indicator--f5e511e6-3794-4d8f-91e7-c32dcbeab9a0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581a924e-c9e6-403c-9573-d787b988570c", "sighting_of_ref": "indicator--f5e511e6-3794-4d8f-91e7-c32dcbeab9a0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66130f45-0c4f-49e7-8128-0cee609df8ab", "sighting_of_ref": "indicator--f5e511e6-3794-4d8f-91e7-c32dcbeab9a0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd0c0a9-53e8-4b14-986f-79951ea18118", "sighting_of_ref": "indicator--7c127935-5ee2-479a-8964-8bbd088e2738", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af75fab-7911-42a5-8dab-6d62fd2018d4", "sighting_of_ref": "indicator--7c127935-5ee2-479a-8964-8bbd088e2738", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2046ee4-2fb9-4d85-88aa-da35d6195088", "sighting_of_ref": "indicator--7c127935-5ee2-479a-8964-8bbd088e2738", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f10fff6-ad8b-4542-8189-ee70cf7de099", "sighting_of_ref": "indicator--87cd98e4-ad4f-4de1-8e2d-0d7f6fc949e1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138868c1-a86b-43e6-8670-a84412928f4d", "sighting_of_ref": "indicator--87cd98e4-ad4f-4de1-8e2d-0d7f6fc949e1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e43ee0-8d48-41e4-9afc-3d84c4ace777", "sighting_of_ref": "indicator--87cd98e4-ad4f-4de1-8e2d-0d7f6fc949e1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ae0386-9592-4a42-b4f0-9b315265d9a0", "sighting_of_ref": "indicator--f2f5ef0a-ac67-4cf8-9d56-75a8e267738e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850e4096-e40a-4522-b8eb-6ea191c4817b", "sighting_of_ref": "indicator--f648bb00-b217-4439-a393-a8e66d840598", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1bbfa8-f11b-4b48-947f-4b48eabdc507", "sighting_of_ref": "indicator--d7f092d5-e3ac-4ee3-86e0-fb923d7ec215", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d4090e-f5cc-40e1-940d-43179e7939df", "sighting_of_ref": "indicator--d7f092d5-e3ac-4ee3-86e0-fb923d7ec215", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515248f9-71e6-458b-9edd-ba7492724f63", "sighting_of_ref": "indicator--d7f092d5-e3ac-4ee3-86e0-fb923d7ec215", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9031c8-28ba-42b3-aea2-d1cfcaca3780", "sighting_of_ref": "indicator--fe85de79-9617-4219-b711-bdd08a7fd163", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c509f17-0718-4bb7-907a-800f72ebcf4a", "sighting_of_ref": "indicator--af0a3fae-153b-4e76-b4cd-403f1aab4861", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a9a1b6-b5da-49ae-bddd-301cfad4f80c", "sighting_of_ref": "indicator--af0a3fae-153b-4e76-b4cd-403f1aab4861", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50aebe6-9486-4b48-bac6-1a124b6ea33d", "sighting_of_ref": "indicator--7cd1d26f-2e7f-4e09-ad10-42b0f03f278e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27ea6cc-36dc-47c1-ab77-b2284f4b2c73", "sighting_of_ref": "indicator--945c2f41-6cf4-4f55-9a68-c56383cbadaa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d0fd4f-8dec-486c-af46-74533153fb80", "sighting_of_ref": "indicator--945c2f41-6cf4-4f55-9a68-c56383cbadaa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5dc078-f13f-4236-9414-880eef232465", "sighting_of_ref": "indicator--945c2f41-6cf4-4f55-9a68-c56383cbadaa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac0da32-3b3b-49e4-b88f-c50ecdbe4f96", "sighting_of_ref": "indicator--0176f852-0b5f-4936-8268-10f301463a98", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a02e8e-46f2-41c4-80e0-776b794c98e8", "sighting_of_ref": "indicator--0176f852-0b5f-4936-8268-10f301463a98", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06cb4f9-eb74-4f71-b991-2e5af8b01b18", "sighting_of_ref": "indicator--491c5664-6f7f-4555-bea8-3948433a0860", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171da879-9f4e-4cc4-99cd-ef47445892ab", "sighting_of_ref": "indicator--33235c24-7177-4d35-98eb-ce924522bc8a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6b1dd4-e7a3-4c4f-b9a8-f906afda0572", "sighting_of_ref": "indicator--f59cdb71-aacf-4caa-871c-6dd9954df461", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4625bdb1-b901-4336-8d48-b687ff92d60b", "sighting_of_ref": "indicator--ba7052fe-b007-400c-9357-4f7f8553a3b8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686d39a0-6d27-49ef-ae59-291b8d509d12", "sighting_of_ref": "indicator--ba7052fe-b007-400c-9357-4f7f8553a3b8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3bc832-b6fa-4131-b3f8-cc85fdd3434d", "sighting_of_ref": "indicator--864cef95-46c5-4852-a3f6-bea94d788094", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e55ca7b-67e8-47c0-a276-634abd5e5844", "sighting_of_ref": "indicator--864cef95-46c5-4852-a3f6-bea94d788094", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7f8b48-6341-4622-834d-d65b6df0fd8e", "sighting_of_ref": "indicator--864cef95-46c5-4852-a3f6-bea94d788094", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1cc372-1da6-45d5-be6d-244fa9f53c99", "sighting_of_ref": "indicator--d069c993-8c0c-4330-a3ba-1bf70fd010f7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b773c536-6c61-46c4-a956-5b50f480a027", "sighting_of_ref": "indicator--b184f7c7-c8aa-4fb3-84de-9e9ee9c94d25", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2f53bb-488e-46e6-a173-1b74f720ede9", "sighting_of_ref": "indicator--b184f7c7-c8aa-4fb3-84de-9e9ee9c94d25", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b85c12e-0e5e-4c1b-8c7c-a97ab79dbf19", "sighting_of_ref": "indicator--8e69a72b-bd0b-40de-a798-db1a5cedea61", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2e9bce-4b0c-480f-88c6-00b9fe883d83", "sighting_of_ref": "indicator--16aeb218-50d7-4045-9196-182e0530712d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1663f9-7c01-41f8-a381-f58870719cd2", "sighting_of_ref": "indicator--16aeb218-50d7-4045-9196-182e0530712d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f00888d-4f60-4a42-92f8-042069d0f9b1", "sighting_of_ref": "indicator--8d4f4326-e6ca-4bbc-a2f9-454e67ec8942", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784c10ef-81e9-4297-ad4e-a5fff18b8b77", "sighting_of_ref": "indicator--8d4f4326-e6ca-4bbc-a2f9-454e67ec8942", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e90248-0176-4abe-a192-487598915f91", "sighting_of_ref": "indicator--9bcbe3f4-ba0c-4aca-9de2-74103b2a1d55", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208f5161-d26c-4405-96a6-2e07ef4836e1", "sighting_of_ref": "indicator--ce376b21-5acb-49f5-9999-f6a682dd2bb1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141fc539-fc5b-45a6-b52f-1ede860d56b3", "sighting_of_ref": "indicator--ee189535-8140-4eec-9918-5cf25631a8a8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a6a870-6d7a-4a18-82c7-12a42d6c31ec", "sighting_of_ref": "indicator--f886c827-9e24-424c-9288-b9f62704d659", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa426b0d-5f95-41b6-a75b-92ce85618d7d", "sighting_of_ref": "indicator--4aac0b3f-42df-4d10-8eb1-68e77bd83c59", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2322cb5a-1a21-40c9-b984-6cba20f88a15", "sighting_of_ref": "indicator--4aac0b3f-42df-4d10-8eb1-68e77bd83c59", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee2927bf-61e3-418a-ad2b-084f8c83b374", "sighting_of_ref": "indicator--a24d55d7-2ca0-4768-a5c7-c25c7565b7ae", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa15019-f48d-440d-bd26-509d54a39be9", "sighting_of_ref": "indicator--5fe999aa-b295-440b-828b-050170ae1efa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff2b7be-e872-46e7-884e-8abb3127ef9f", "sighting_of_ref": "indicator--694cc04d-5c15-4f1d-bd76-33e322caa843", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804d40fa-8c2b-4754-816b-ef36ef8744d0", "sighting_of_ref": "indicator--6095d589-32dc-4c0b-9936-f93dc1eea1a6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20534a1-b992-41af-abbb-80a99ee5e005", "sighting_of_ref": "indicator--5bb98179-bc06-4e42-b205-f6a984de0406", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660a94df-9f87-498e-b1ad-ed78cf15a345", "sighting_of_ref": "indicator--683d3c3b-ed74-4ee8-862e-8145b408baf4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f54c38c-aa11-4bdc-864d-ae281d9d6227", "sighting_of_ref": "indicator--c85d9391-d4da-4b03-94b6-ba7153ee3ad8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb54398-5e3d-4c7a-8b15-820ab482d0ca", "sighting_of_ref": "indicator--c85d9391-d4da-4b03-94b6-ba7153ee3ad8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ae15a8-5b06-40b4-a336-ea9e86634443", "sighting_of_ref": "indicator--6ba049a5-2dc7-49c9-91cc-4d0bc7587260", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f998c4-a300-45da-825f-6b3e10b4f5d9", "sighting_of_ref": "indicator--6ba049a5-2dc7-49c9-91cc-4d0bc7587260", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a11580f-7926-410e-9c85-f3aab276c716", "sighting_of_ref": "indicator--f92f754a-e76d-4d5d-a77f-027b22e1f171", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b7425a-1c9a-4e98-947a-8e290b653930", "sighting_of_ref": "indicator--f92f754a-e76d-4d5d-a77f-027b22e1f171", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb8db0d-e922-4fd4-a59e-50aacef907b4", "sighting_of_ref": "indicator--c46a32b4-7bb4-412f-a0b6-df6b1267b62d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6ccbcf-c0b2-4bba-b1ed-5178d8ced117", "sighting_of_ref": "indicator--9f8abfe4-3007-4a4b-b6c7-0d45c9ce4f74", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf91eab-11ec-4f57-add4-e3d8330bd063", "sighting_of_ref": "indicator--4a1d633d-f27f-406d-a4ce-af84650f7985", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4841855-bf31-44ae-9cf1-2a8ee7d34b2d", "sighting_of_ref": "indicator--2bc5a038-c3e1-40e7-affb-0fdb46703bb2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a984703-140d-4ab5-a4cc-085a55cf90e2", "sighting_of_ref": "indicator--2bc5a038-c3e1-40e7-affb-0fdb46703bb2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d993a42-a562-49ca-b98a-f19ee1992bd1", "sighting_of_ref": "indicator--42a713a1-d0e9-48e8-9fbd-237400121d91", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd204fec-5981-4adc-9ab8-9c6dbbebebde", "sighting_of_ref": "indicator--ccdbfb20-6ef1-4c6e-bc1d-d4d1aeb37555", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13c498b-6a44-41b4-940a-a507a1831ed3", "sighting_of_ref": "indicator--bc30afc7-4fea-49cd-9c6b-74c5417ad894", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf7832d-3b2a-4076-803c-c04fc8110a31", "sighting_of_ref": "indicator--bc30afc7-4fea-49cd-9c6b-74c5417ad894", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f38e1ab-31e6-40ba-8285-48eb0cd754fd", "sighting_of_ref": "indicator--c95696c1-ab4e-49da-ac04-885edc80cb06", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef89760-1f09-49a3-a3a7-51c61d871282", "sighting_of_ref": "indicator--6d7e7a35-a759-495b-93f1-444f512d8ddf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb14f54-1889-4061-9893-de3c4132737b", "sighting_of_ref": "indicator--f40144f5-6000-48a8-8677-32dd828b2567", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7f0691-98dc-4f5f-a640-4312205211a6", "sighting_of_ref": "indicator--21ca2083-3429-466b-aca9-8e064f9b0581", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350b1bac-2d31-47b0-971d-f713aef519af", "sighting_of_ref": "indicator--c2e3eaf8-dbda-4c60-a6a1-8e30b575acdf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35644bc9-d238-4487-9c8c-13096b3c5fce", "sighting_of_ref": "indicator--7a694168-051d-4474-928a-f632a88c6640", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4169e3b-cfa6-4294-8ad5-2a0b0ea65c3c", "sighting_of_ref": "indicator--e764bf85-483c-4cf2-986a-46733c5557cd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef7ffdc-e9be-4cb7-a092-7fb4605c2010", "sighting_of_ref": "indicator--e764bf85-483c-4cf2-986a-46733c5557cd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e2aff6-ac6f-4f05-8dad-ac72f2dafd96", "sighting_of_ref": "indicator--2affaf2a-c41e-483e-bd47-72545fe58b12", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c248e9-ec37-4e40-8cd7-f52da40a7df9", "sighting_of_ref": "indicator--2affaf2a-c41e-483e-bd47-72545fe58b12", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071b9ff4-439e-433f-bb7e-995739b5a3d7", "sighting_of_ref": "indicator--a579046c-4c76-4c1c-9544-a9c917f7897f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ac1ffd-bebe-438d-af73-8b01dd79bfe7", "sighting_of_ref": "indicator--a579046c-4c76-4c1c-9544-a9c917f7897f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f32ac2-32c9-47c0-b3e9-2979dcf77534", "sighting_of_ref": "indicator--fe04fc46-27ff-4687-837c-5c61158772dc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db17892-f5fc-4e0c-9d5b-126140a954a4", "sighting_of_ref": "indicator--fe04fc46-27ff-4687-837c-5c61158772dc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc5ab5b-82fe-49fc-a781-cff94cc01881", "sighting_of_ref": "indicator--315b86fe-75b7-42a2-8a3b-9942f6cb406d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c0d629-119f-47c6-a602-9c0415e49dfd", "sighting_of_ref": "indicator--8a0a8a33-45ef-4c97-a33d-297e0ba7ce14", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e9ca57-8ca2-4a69-8282-d35075d02ceb", "sighting_of_ref": "indicator--ef6d9973-8a1f-4158-85b2-767f50a7b2ec", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd0dd12-b637-472b-84dd-cebdb5c7c2d3", "sighting_of_ref": "indicator--2e09887f-e011-481b-93b5-ce5dbb4396f3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b4257b-2cc4-46b7-a697-dad772d8ef24", "sighting_of_ref": "indicator--18d6866e-e389-40fc-a224-d670223f5ba9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9819eb5a-c8f0-4cbe-9707-380472b7ddc7", "sighting_of_ref": "indicator--18d6866e-e389-40fc-a224-d670223f5ba9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c252817-2919-484c-8c7f-c81afe246736", "sighting_of_ref": "indicator--042aaeac-dc32-49c8-81f7-273d97b8bf99", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7272b8c9-d3ef-49fe-93e8-0b1cd4220905", "sighting_of_ref": "indicator--042aaeac-dc32-49c8-81f7-273d97b8bf99", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af17a6f-2da5-43aa-8b54-6ac2d84382b9", "sighting_of_ref": "indicator--042aaeac-dc32-49c8-81f7-273d97b8bf99", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1e9363-76b8-4aa3-b342-8d8087513283", "sighting_of_ref": "indicator--a646ea69-2af4-43ee-ad36-8e0485cb22b6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02851b06-5227-4598-ac5b-eafc63f8951d", "sighting_of_ref": "indicator--09ebd4ee-f9bb-4e24-8bd9-7995cfefe926", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e239c77d-a675-4bb1-a063-ae175f2e3cf7", "sighting_of_ref": "indicator--7a839002-cc5a-4d00-a0b8-9607e1f3ef19", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fdd18e0-bc21-4a42-bae2-fe1917f80247", "sighting_of_ref": "indicator--a9412b34-ddbc-4809-83af-41ace5315d39", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74bdd353-2f59-411a-af68-4037b9c7aa12", "sighting_of_ref": "indicator--a9412b34-ddbc-4809-83af-41ace5315d39", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff13be4-d1a7-44cd-90ae-dba5356b28f5", "sighting_of_ref": "indicator--f204580a-49ee-43b5-a704-639969e979ba", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10c990a-0456-4327-adf6-15690cab2d25", "sighting_of_ref": "indicator--f204580a-49ee-43b5-a704-639969e979ba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a74553e-8608-412e-9127-a12638bd29ea", "sighting_of_ref": "indicator--e54d338f-3fc0-45cb-899f-eb9b9385bb2d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad4d3e9-1712-4c0a-b6d1-bf1e1b4c5b2b", "sighting_of_ref": "indicator--e54d338f-3fc0-45cb-899f-eb9b9385bb2d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf790e8-1a07-4de3-b099-15aa47397a69", "sighting_of_ref": "indicator--2063aff4-1eb8-49ca-b891-b342ea36a98d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e77c60-9820-403c-95d2-d20b649460d6", "sighting_of_ref": "indicator--1109d93b-3f46-41fa-934d-5fba9f5aeea9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7cffbc-fb19-4097-8f0f-89f785307328", "sighting_of_ref": "indicator--1109d93b-3f46-41fa-934d-5fba9f5aeea9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08db2056-9dd0-40d0-a726-a65ae81d0904", "sighting_of_ref": "indicator--b0296215-154d-4a74-b1b6-d85b400e9127", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7892e0-8385-4208-8ede-c8c17e67440e", "sighting_of_ref": "indicator--b0296215-154d-4a74-b1b6-d85b400e9127", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36118b9d-38be-47f2-a271-c82223dd06ce", "sighting_of_ref": "indicator--f103235e-1d8e-49ca-a892-205467e4940c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2813bd40-5347-442b-95b5-5cec086eacea", "sighting_of_ref": "indicator--f103235e-1d8e-49ca-a892-205467e4940c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab07730b-e5a4-436b-8714-b14ca0d272dd", "sighting_of_ref": "indicator--7ed8bcf8-020d-40d6-9dfc-f720d2fd42e7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e7ff69-fd7f-4363-bfa4-25989c49af78", "sighting_of_ref": "indicator--7ed8bcf8-020d-40d6-9dfc-f720d2fd42e7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b641cf8-f84a-4974-aca4-fa9d4b6d16f2", "sighting_of_ref": "indicator--babdab0e-5399-40cd-9299-035fb3e873bf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bca6f70-0f81-4471-a161-c36de52aa415", "sighting_of_ref": "indicator--24ce83ff-d52c-413e-815b-4c933d870aaa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c3ab49-3b5b-4a38-a7a5-2c589796245c", "sighting_of_ref": "indicator--b54db00a-dba9-4521-bea0-d5ab69a4a613", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba52b337-c520-437f-81dc-e23f8d901174", "sighting_of_ref": "indicator--bcb73347-f47d-48b2-95ba-615d4df1f6b1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e40a2c-a8a3-4f69-b249-d6685f5e4f8b", "sighting_of_ref": "indicator--bcb73347-f47d-48b2-95ba-615d4df1f6b1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322e7ad5-0120-4476-af95-b8519202607a", "sighting_of_ref": "indicator--0a03ce8a-9492-4b7b-87d5-706af9019c05", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b87baa-2922-4956-ac36-a25b770b7122", "sighting_of_ref": "indicator--dc5dbca6-8ffe-477a-a9fd-df86f2f965a6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2f74b9-20a5-4bab-8a8e-50dd78314efd", "sighting_of_ref": "indicator--6510b34d-17ae-4f9b-89db-ba1a4ede6df1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0faef81d-09d2-44b5-bc04-00f018957d3b", "sighting_of_ref": "indicator--5383718e-fefa-44f0-ad77-a16840ccbe8c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae16afda-1d0a-4aed-bb0a-79878e5dc0cd", "sighting_of_ref": "indicator--5383718e-fefa-44f0-ad77-a16840ccbe8c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2f39cf-b44e-4d84-a02d-3a7e205a8ff5", "sighting_of_ref": "indicator--5383718e-fefa-44f0-ad77-a16840ccbe8c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3bbac42-2266-486f-b263-dc7a3f1c1287", "sighting_of_ref": "indicator--cadb9060-3d82-4f40-af1f-10129d7b8c5d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081f3a7a-c23b-43fe-8521-1f4dbc69172c", "sighting_of_ref": "indicator--a6f885c2-ba92-49f3-a9ec-090f47ff28f5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4282ee03-1a7c-4b17-982c-df4e2756caf7", "sighting_of_ref": "indicator--a6f885c2-ba92-49f3-a9ec-090f47ff28f5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0686fc-7091-4671-9a7f-2623933b1a3e", "sighting_of_ref": "indicator--1f4e9544-2c3f-4c96-9e32-cc3a8da57b2b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575db015-8c7f-4fdf-be8a-8ffddd72ce5d", "sighting_of_ref": "indicator--bd9f3705-62a1-4731-99ba-23e2d85fb2fa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d66290-c67e-4011-bd33-8c3925c60b73", "sighting_of_ref": "indicator--bd9f3705-62a1-4731-99ba-23e2d85fb2fa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923d12a7-721c-4e51-a074-a35258ee0473", "sighting_of_ref": "indicator--df905c01-2279-48ce-b2ef-777695d2b16e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4905765-ca1f-4d1d-8f56-2cf1c83c9ec6", "sighting_of_ref": "indicator--df905c01-2279-48ce-b2ef-777695d2b16e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36ea0e0-b9b6-4632-8ed2-0697af1bc026", "sighting_of_ref": "indicator--0718823d-7546-452f-bf01-5f495c7a0f2b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c18598c-6fd0-415b-80ac-335b74a19a54", "sighting_of_ref": "indicator--b6022541-899f-4573-b913-688e493b44c5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457ca483-0bc4-40de-8813-708826951484", "sighting_of_ref": "indicator--1ec4a348-1ab6-4135-a060-e4cee0b14953", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a9c6fc-1925-4fa7-8080-2a6d3bcd5fe0", "sighting_of_ref": "indicator--bdef7f6d-fcc5-400f-9794-ef64fa0c486c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a612eff3-bcc2-4b32-96ac-3a0428c2862c", "sighting_of_ref": "indicator--733a6f09-e7a4-4d37-bd30-859891a7b0c2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadd6cbe-4b64-4760-aecc-93ac747dc328", "sighting_of_ref": "indicator--733a6f09-e7a4-4d37-bd30-859891a7b0c2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c717868-e36b-4900-9f74-bf46d2b4ed79", "sighting_of_ref": "indicator--733a6f09-e7a4-4d37-bd30-859891a7b0c2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d329941c-f624-4f84-a96a-0c7737a1cdea", "sighting_of_ref": "indicator--9efc62db-723c-4a32-9cdc-a278e5315da7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed09060-03c4-4bc3-a6dc-f485fbbcba56", "sighting_of_ref": "indicator--eac7e88e-cef8-45ca-8836-141d85085831", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9d234e-ebd2-4ba9-a1c5-c9a9a96cac48", "sighting_of_ref": "indicator--b08cbc74-adce-4a79-b299-2f36eb394602", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83399fe-1ba2-4cfa-bd9d-0702100113f7", "sighting_of_ref": "indicator--2da1c164-c84d-4f18-af9d-b66a4f1f37ba", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f89475c-12ce-42e2-84ca-006b73730f26", "sighting_of_ref": "indicator--2da1c164-c84d-4f18-af9d-b66a4f1f37ba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279d20f7-f53a-4624-9820-5f94e464cafa", "sighting_of_ref": "indicator--61da154d-373f-4487-ad1b-99f090d242ec", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb881a0-b13d-4983-9b0b-4630d4fb1981", "sighting_of_ref": "indicator--ecc415e9-b101-44ca-832f-ea6456cce2ac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91b3373-bb47-49bb-8dd5-e1ccbb467479", "sighting_of_ref": "indicator--ecc415e9-b101-44ca-832f-ea6456cce2ac", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9fc07e3-d54e-40d6-a5d1-bffa35e2fffc", "sighting_of_ref": "indicator--d3a0d777-111e-4822-bb6e-e0dd5cbe76d2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2cc1804-66f6-4b87-adbb-dfab85322081", "sighting_of_ref": "indicator--d3a0d777-111e-4822-bb6e-e0dd5cbe76d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f97e9a-bceb-4ee2-af86-32efe4d50f33", "sighting_of_ref": "indicator--4ff06a79-ee19-4519-9c8b-153c1da49177", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d9c0a8-e4d4-49d9-b438-6adb6e40efed", "sighting_of_ref": "indicator--4ff06a79-ee19-4519-9c8b-153c1da49177", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781b1357-9672-407b-9a5a-a684e617d5e8", "sighting_of_ref": "indicator--fb4cb76c-79ef-4f40-bb12-48fd0979641b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d811aa8a-c101-45e7-aef7-35699f52b5e8", "sighting_of_ref": "indicator--24eb9904-b53b-436f-b085-909223845b1f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb799611-0738-4d7f-bf4e-98de6b04cb46", "sighting_of_ref": "indicator--24eb9904-b53b-436f-b085-909223845b1f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ebefb5-ea9c-4df8-9e4b-3c9620b9e9fa", "sighting_of_ref": "indicator--65aff3ae-a66d-4693-b94d-91e4a121656e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598daeba-03a1-4f9a-a960-6a8072971a59", "sighting_of_ref": "indicator--65aff3ae-a66d-4693-b94d-91e4a121656e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb38cc3-083e-46b9-a3ca-de001a7b3292", "sighting_of_ref": "indicator--c0151024-58e2-4555-9f96-14676ea3e397", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81033195-5e7c-45d3-9985-41c3a777da76", "sighting_of_ref": "indicator--082c6cdb-5084-49e7-917b-5746d484c198", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71b3a89-2b15-43fe-b865-0247550751c8", "sighting_of_ref": "indicator--18f6081c-5772-45fc-9db8-348710c45344", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f8eb2b-4ac8-4bbc-a852-b6b434870170", "sighting_of_ref": "indicator--2200da7e-f849-4399-b97c-baf80db87083", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d5b17b-5773-48d8-9ec0-cd4613e329b9", "sighting_of_ref": "indicator--2200da7e-f849-4399-b97c-baf80db87083", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31ff383-d9bd-4bcf-85f6-7582438ddfcb", "sighting_of_ref": "indicator--4bdfba49-5037-4e5d-921d-66e344730788", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb09d2a-5e18-478c-954d-9a9019e4cf94", "sighting_of_ref": "indicator--9b4a56a8-34fe-4f4a-8e25-96d7b6e49d8e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779f1a21-fbc8-41b2-930e-fecd686e6b08", "sighting_of_ref": "indicator--9b4a56a8-34fe-4f4a-8e25-96d7b6e49d8e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a74bcd4-3a81-4901-95f0-44eb985b3790", "sighting_of_ref": "indicator--399eb72c-efb5-4538-bf26-3b599a891186", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38257f33-7868-485c-b2b4-6536896fcb61", "sighting_of_ref": "indicator--bea160e4-a9ac-419e-9019-03499fb0e7a7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6b464a-a1ee-4623-9cbb-2b058be04893", "sighting_of_ref": "indicator--bea160e4-a9ac-419e-9019-03499fb0e7a7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3e2c07-219e-4138-b1fd-75503e3d3249", "sighting_of_ref": "indicator--6c8be4ae-abc7-4bca-9df0-d701f1c54211", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf44c5d5-20f2-4bd3-a89e-646a65aa0601", "sighting_of_ref": "indicator--dc6b7a24-3e9e-4c43-ac29-03535f5ae140", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860c3a21-b6ef-44d3-8413-85aacc0c1886", "sighting_of_ref": "indicator--8848a338-7508-4ff1-a7bb-94c288a9270a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab5a0e7-cdb1-4bb4-91c9-0b99ae689777", "sighting_of_ref": "indicator--8848a338-7508-4ff1-a7bb-94c288a9270a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e681bc-1c68-4e4f-8a3b-fd7a0ddd6c38", "sighting_of_ref": "indicator--8848a338-7508-4ff1-a7bb-94c288a9270a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20eb855-d834-4b27-9c89-3b74bb5fc02e", "sighting_of_ref": "indicator--6ca609f5-fb90-489a-987c-99b438e0c68a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbf9c8d-b078-422f-a9d0-4f88484644e7", "sighting_of_ref": "indicator--54a3d296-3934-4077-8c98-7cee09c11ea0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3eab95-eb5f-4e63-95f4-aac178c45cd6", "sighting_of_ref": "indicator--ff02e745-bab0-4611-96f0-a49ada7baf59", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29e50b6-8c22-4fd6-96ca-6e130252502b", "sighting_of_ref": "indicator--202c686d-ba08-49ee-a0b5-7ad9b5f0b4bc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a741a7f6-809b-4f5b-90ab-6944880134bb", "sighting_of_ref": "indicator--202c686d-ba08-49ee-a0b5-7ad9b5f0b4bc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61f5c63-1379-4dc1-9085-074502094ab2", "sighting_of_ref": "indicator--5facb402-1103-4a08-ae70-fd4fa0e3ca47", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15233ccf-bdb3-4b9e-80cc-fcfc124f595f", "sighting_of_ref": "indicator--e98e165c-6033-47b6-bf87-38333d34782b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c29cd68-1929-4e27-8695-87f52a93f0d0", "sighting_of_ref": "indicator--e98e165c-6033-47b6-bf87-38333d34782b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83ce99b-4ce2-40e4-9fe2-f578c60de719", "sighting_of_ref": "indicator--e98e165c-6033-47b6-bf87-38333d34782b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0d119a-efc7-4d97-b4bf-4c4a0e82a508", "sighting_of_ref": "indicator--2c2a9169-e811-492b-90a7-436cabbf11e3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29f4f14-c32c-47eb-825b-a91550b2c7f4", "sighting_of_ref": "indicator--2c2a9169-e811-492b-90a7-436cabbf11e3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d477c48-9052-454f-a83f-0c65cfba7170", "sighting_of_ref": "indicator--2c2a9169-e811-492b-90a7-436cabbf11e3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b52d98-4f49-47fc-8799-3dc75c889546", "sighting_of_ref": "indicator--7c2f4297-ec64-43b4-9bec-936b73559ccf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4193c0ef-2ef7-4aa1-bb80-230a3b4241ce", "sighting_of_ref": "indicator--eede4fe8-95ab-44eb-b1e6-4c456cf322e1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed574b75-be93-4d3b-b0fd-1e37b7efcfae", "sighting_of_ref": "indicator--eede4fe8-95ab-44eb-b1e6-4c456cf322e1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f1173e-e275-47ea-9065-ded44af591eb", "sighting_of_ref": "indicator--eede4fe8-95ab-44eb-b1e6-4c456cf322e1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52eccc1-15f0-497e-a2e2-7f3d8e6b6ede", "sighting_of_ref": "indicator--26770892-c7bb-4dfa-8345-a7d8be33fd84", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ef77f7-16f6-405e-b581-173a97aa80a2", "sighting_of_ref": "indicator--9106be1a-07c3-47e5-bee1-918dc6738a15", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1898693e-b569-4508-b4fa-7184c2680087", "sighting_of_ref": "indicator--9106be1a-07c3-47e5-bee1-918dc6738a15", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da7a5ce-fdc3-40dc-9ad0-caa69c57ff28", "sighting_of_ref": "indicator--b692197f-17bf-4d3f-85cb-b6c7ef0f2ff9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6074496-72f8-4e84-831e-9b2aa11cd9ec", "sighting_of_ref": "indicator--b692197f-17bf-4d3f-85cb-b6c7ef0f2ff9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b231b8c-15d6-4ef5-8fcb-b1624428aac7", "sighting_of_ref": "indicator--486cf641-91a4-4863-8675-a10e451f0275", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7b392c-6b5d-443e-8071-bbb5f03fef71", "sighting_of_ref": "indicator--486cf641-91a4-4863-8675-a10e451f0275", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4195b6a6-dd1f-41fc-a758-3e6b579373f6", "sighting_of_ref": "indicator--857bd7b4-f38b-423e-8a38-90963bc59d4e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71f1712-fb14-49df-8bce-c81a309f7cfb", "sighting_of_ref": "indicator--f86fcc7d-0ea0-4f62-ab8c-6c0653812f26", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd777072-237e-4eb3-b328-0d21149eeee2", "sighting_of_ref": "indicator--0aef677e-577e-4215-b1d3-57c9ab2cc59b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432b4e5c-01df-4746-a38e-ef656eaea96b", "sighting_of_ref": "indicator--d68467bd-211e-41b9-b6b7-ab6803b83e0d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fec64f-ff46-4166-b5e1-c3675f6be90b", "sighting_of_ref": "indicator--f3f12175-7d8a-4323-a357-fd9cc546a1dd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0016674e-ca9f-4b24-884c-3755f8635939", "sighting_of_ref": "indicator--f3f12175-7d8a-4323-a357-fd9cc546a1dd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0d2681-8f56-488e-8700-beceefb831e9", "sighting_of_ref": "indicator--96bc98ba-6adf-43da-9cc0-b93c9ba05174", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710eaea6-e59a-4584-bc4b-55ce38495b3c", "sighting_of_ref": "indicator--ef4b7d05-ad68-4fc2-a6cd-ef0440a28f1b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3984e034-6e27-44a8-9483-1bd3581a65d6", "sighting_of_ref": "indicator--ef4b7d05-ad68-4fc2-a6cd-ef0440a28f1b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a94c07-681c-40ff-b8a5-4b69cfbf1e32", "sighting_of_ref": "indicator--85386a1e-02dc-4cb7-bb7b-f158f643fc0a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c2e4dc-99d2-4dc4-ad57-08a0203ca7a0", "sighting_of_ref": "indicator--280acf44-320b-40fc-9781-92d56fec3807", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9da305e-0778-4d8e-8a60-7bb98069884d", "sighting_of_ref": "indicator--280acf44-320b-40fc-9781-92d56fec3807", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287c5c0b-80a8-4f4c-9189-e50c75803280", "sighting_of_ref": "indicator--8162344d-c547-49dc-a6a0-0263a182a952", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133bb612-0963-4e5c-b9d9-dcb0f86f0097", "sighting_of_ref": "indicator--8162344d-c547-49dc-a6a0-0263a182a952", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808fa074-724f-4a24-8c8c-d0aea6c6752d", "sighting_of_ref": "indicator--f7b57a4c-30b5-4151-b6ad-669ebd4a5b56", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c3131d-e07f-4f23-99c0-29d128d4f966", "sighting_of_ref": "indicator--f7b57a4c-30b5-4151-b6ad-669ebd4a5b56", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11841b14-ea71-4429-a4b3-97a5c2733951", "sighting_of_ref": "indicator--a99e4c94-daaa-4fa8-93d7-53125cd1179e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2171fbfb-82b8-4515-9621-fb08763b4a03", "sighting_of_ref": "indicator--335e6f10-d2dd-464e-9ce4-2858c2eba6d8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3eed68-ae09-44ab-8ccf-c1282524549f", "sighting_of_ref": "indicator--455f39e7-6755-4161-a3cd-9434cc66561a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3cea54-63c7-4b6e-81ab-faf9cee00e90", "sighting_of_ref": "indicator--455f39e7-6755-4161-a3cd-9434cc66561a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d7571f-c419-4965-b928-83f36981aac3", "sighting_of_ref": "indicator--c6ec1710-26bb-4d73-90d8-a808bf32eace", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c224347e-21fa-490c-a507-34ab4f14b101", "sighting_of_ref": "indicator--200ad3ac-225d-4260-9f87-eadd37eaecad", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34e7935-47b7-47a0-ad62-a58ca98b953c", "sighting_of_ref": "indicator--39435ed2-e8eb-49c3-9676-2b887f3512ee", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1041dd-e9fb-44b8-b205-34c48868212f", "sighting_of_ref": "indicator--3740c5e4-fb84-4111-a3ae-fa11c8a857d0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f56825-2acb-4de2-be90-f79471bef583", "sighting_of_ref": "indicator--3740c5e4-fb84-4111-a3ae-fa11c8a857d0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11af8fcd-072c-403b-b0aa-013d0c23e2f3", "sighting_of_ref": "indicator--3740c5e4-fb84-4111-a3ae-fa11c8a857d0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0840e76-c6b9-4cce-950d-e2a2454d5476", "sighting_of_ref": "indicator--84563b70-d5c4-4417-bd6e-77cc471b9a33", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc5c6df-f32b-4406-803c-cfa5272a3704", "sighting_of_ref": "indicator--6b56829f-e090-4000-98d0-ebbb01864b4e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0329bd3-7e72-4cb3-9994-18dcc94a8fdf", "sighting_of_ref": "indicator--6b56829f-e090-4000-98d0-ebbb01864b4e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a937be9-3928-4aa2-b847-25db6e6009ec", "sighting_of_ref": "indicator--946da925-57e0-4c9b-9402-7c28ae5a221f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7944ee0c-57ac-4544-8942-9bea218f2c39", "sighting_of_ref": "indicator--946da925-57e0-4c9b-9402-7c28ae5a221f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36672bb-fb9b-4358-957d-ac9cbb177491", "sighting_of_ref": "indicator--946da925-57e0-4c9b-9402-7c28ae5a221f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9655ffc0-f009-4ab3-a5b9-87ec2b9247c1", "sighting_of_ref": "indicator--ca7a65e0-f7fe-47a5-b0d1-4c94ef3c4d6d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dba2753-0f81-4036-818f-55510b0ac22f", "sighting_of_ref": "indicator--ca7a65e0-f7fe-47a5-b0d1-4c94ef3c4d6d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e7ee68-ca58-4886-8d52-603af8bd04c4", "sighting_of_ref": "indicator--ca7a65e0-f7fe-47a5-b0d1-4c94ef3c4d6d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75296cb6-5932-46ee-81f8-142de2f8af38", "sighting_of_ref": "indicator--17da96fa-22f6-4130-a07e-2114d3060544", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fb1cdd-51a0-47df-adcc-2c5cc307e4ee", "sighting_of_ref": "indicator--1565637d-7cc6-4a44-9076-92546e531f54", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2327b10-fb23-4f60-9081-47264646ed99", "sighting_of_ref": "indicator--1565637d-7cc6-4a44-9076-92546e531f54", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e11c15-5dd0-4754-bec0-969a18cac6cb", "sighting_of_ref": "indicator--38c2d80f-2d08-4a3c-8a37-8ee54c18ace6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50f8def-b868-4942-944d-ee89f63ab551", "sighting_of_ref": "indicator--38c2d80f-2d08-4a3c-8a37-8ee54c18ace6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282f9d3e-1c5d-40e9-9e25-ca19ad8b57b6", "sighting_of_ref": "indicator--ba78dd8b-5fb1-4e7b-a9c8-8862b7dcff0f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944e6a87-288e-46af-a5e4-5c816de1e889", "sighting_of_ref": "indicator--ba78dd8b-5fb1-4e7b-a9c8-8862b7dcff0f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1408eb-bdbc-4ae9-97d6-7779a49d232d", "sighting_of_ref": "indicator--bca0c04a-3673-42da-8a5c-fdbdd503bbd2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65742454-cd68-4673-80b8-81238b629d4b", "sighting_of_ref": "indicator--bca0c04a-3673-42da-8a5c-fdbdd503bbd2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9bba5f6-8dc0-45fd-b08d-b4808c3b5e5c", "sighting_of_ref": "indicator--fccd4da7-4331-4276-962a-589c9018af03", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b4adc6-aa78-4b20-9398-61914683a99a", "sighting_of_ref": "indicator--fccd4da7-4331-4276-962a-589c9018af03", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd0b9d7-43d3-44d3-abed-488b636dfa7d", "sighting_of_ref": "indicator--9be97f15-8664-4f2e-99d4-d14b34a15d68", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc03e25c-ab8c-4a0a-8dda-8e230935826c", "sighting_of_ref": "indicator--6bc7d4cb-c885-4b02-af5f-7dade3fdd3d6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76ae5b7-d293-4352-bc88-3c491ae7e8d3", "sighting_of_ref": "indicator--8a3ab031-86df-467b-9d4b-2f3449423b2a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39fa876-4196-469f-964b-1986f060fd38", "sighting_of_ref": "indicator--34a11aa2-4e62-4dc8-b644-2b41e53ae519", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e14b5c-91a6-42aa-817f-db514cb10f9a", "sighting_of_ref": "indicator--ef506c6c-4414-4acd-a11d-0174b478667d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d465908-ccd5-4f66-8360-df4f19a14eb9", "sighting_of_ref": "indicator--71359afe-96a2-4ecb-b44e-e5306b9a5ca0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907db379-8ced-495b-9c0f-9828a168fbc8", "sighting_of_ref": "indicator--cba4f9a2-dfd7-46f5-82bd-532ec4c366e8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d62698-1833-449a-864b-5d2768ef9c3a", "sighting_of_ref": "indicator--69a59942-404f-4521-b5a8-ee3900b4043f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109e6cb6-c0de-4c60-9c35-8fc0df0a03d5", "sighting_of_ref": "indicator--ba18a0b3-9ce6-41bb-a890-c7e22848f16b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15326524-2db8-4b59-8812-d78bb2596e91", "sighting_of_ref": "indicator--16c4ac90-77a5-41cf-9fe2-5724c4454703", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f2a288-9c61-464f-bcbd-cd68787277db", "sighting_of_ref": "indicator--452090d9-cf8e-4368-bcb0-eebf66388bc0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27e6011-025b-40ad-8c1f-1eecb63e56a9", "sighting_of_ref": "indicator--23ba673f-a954-4f97-8d3f-b10ee97a38dd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a91994-3516-454b-aadb-56ccede447ff", "sighting_of_ref": "indicator--04acae75-aec8-4783-b582-2d86543bf9f6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf72c3a-23e7-4d7c-bd61-1970101e132c", "sighting_of_ref": "indicator--5fd098fa-59c2-466b-85f8-d57bdb13e739", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf82608-e211-4101-b9b8-72f77b5cfd88", "sighting_of_ref": "indicator--6d8b00cc-3443-484d-af11-afa24c64dad2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe299c7-08ab-4e74-8374-f2891912c866", "sighting_of_ref": "indicator--cedbe61c-66cc-4093-8a22-973644cf6e93", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607b8985-8144-4835-bcc8-9af280519b83", "sighting_of_ref": "indicator--00095584-8827-4ac6-a158-ce8c445b3b9c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f856b63-cd30-478c-b2f6-9ad7d4eee213", "sighting_of_ref": "indicator--e7227159-8242-4c4b-929a-46be92be0fe3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40090aa7-395a-4cb9-a99d-3a7e68a484b3", "sighting_of_ref": "indicator--6dd15fa5-64a9-4396-9161-4bec526c0cdd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf6fca8-4f68-4c16-b587-d51f4fb1ec85", "sighting_of_ref": "indicator--3e2234a2-cf14-41a1-b799-2a47e72b55f5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aca332e-d625-4c82-9509-e29b173f6366", "sighting_of_ref": "indicator--4c5a0ee2-7964-4ba9-88d1-8d69d8778e9f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246c5df7-6a24-44ff-adca-c89ad8a30fe3", "sighting_of_ref": "indicator--2461ff7a-c715-4910-8bb8-c344176d30f8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4762f3a4-468f-43b2-95e8-2d2a37e7af85", "sighting_of_ref": "indicator--92eb839c-0883-4338-955c-012958b8d475", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3731e93-ad4a-40d6-b4f4-c15151670f39", "sighting_of_ref": "indicator--a2a6c46c-9bb2-4901-862c-220ca1828254", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f61a50d-35e4-4fa2-bb82-bc179d1c9f86", "sighting_of_ref": "indicator--c521976b-20eb-4ec6-8539-3af1828e9fef", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a15a1db-e008-4306-9cab-a8a26539e837", "sighting_of_ref": "indicator--fbad0074-c753-4b73-8ed9-3cee99dbc308", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75508c4a-516d-4aaa-b44d-3ddbb3b048e3", "sighting_of_ref": "indicator--828cc618-4d0e-41bd-850e-63533f2b85d0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477b3b97-c9c3-4250-ad6a-adb5dc83198e", "sighting_of_ref": "indicator--4b98a4ea-4d3a-4375-8bd6-b0c8cec67dfb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d563ae75-d053-4d00-8a55-7da5b105fb8f", "sighting_of_ref": "indicator--c526c54d-b9d2-48cc-9554-09da2feae255", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d071adc-bba6-4dda-9e15-312c98b885b7", "sighting_of_ref": "indicator--1304523a-13a9-4d1a-b7c6-42b84a2b0e85", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68fe8c3-d10c-4416-b5cc-44243d20fa76", "sighting_of_ref": "indicator--ac79d9be-7362-403f-a9ca-9e5a33757ab3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a83875-1531-4aae-bab1-f07dc1092196", "sighting_of_ref": "indicator--8ada55aa-26d0-4890-a62b-472b35ab5a0f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bfb405-0744-414b-8f26-7b31aea112fc", "sighting_of_ref": "indicator--1d1ce7fd-ec66-4bcc-a289-80799aaa701f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae14bba-cc43-4b36-8cfa-1ae64aae47d5", "sighting_of_ref": "indicator--dde2d290-f779-43c3-b80c-97b776696a78", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee6c119-a0e5-4131-90af-6f96ea63259a", "sighting_of_ref": "indicator--fcd2696d-4b2f-432e-8b44-328df7b6bd93", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b9700e-da35-4a79-859b-e9a1fcb7e541", "sighting_of_ref": "indicator--8fef4816-bb50-4a8d-8a4b-779663335d93", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f9320b-522c-4ea9-9f14-6fecee8bd6b1", "sighting_of_ref": "indicator--d29a687c-12a3-48f2-b030-2275464e2972", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cabc55c-50c5-448e-8a26-e9129c9d346b", "sighting_of_ref": "indicator--2276b737-9012-47a0-b613-44399a6c73d2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b92ef5a-00e9-487b-b5ab-974b91ab780c", "sighting_of_ref": "indicator--335c78cb-fcea-40a6-a930-347c59d0bd98", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a476d2-bc99-491b-82f5-05926c0d0d91", "sighting_of_ref": "indicator--03119e3f-303c-4a8a-8a85-feb5afb16e36", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c7eaae-1d09-4bf0-8822-ebffecfd1b21", "sighting_of_ref": "indicator--95401644-5764-4306-a3b5-40923711c455", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51138097-3555-421e-ab68-2ea2b0e8f484", "sighting_of_ref": "indicator--921b505e-d388-4ecb-afa1-00bc60671356", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a78818-3a8c-445d-a493-a75447544500", "sighting_of_ref": "indicator--d5468b9e-c9b0-4e28-88c5-83cb44cefbd5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2bf700-fb06-4a20-b910-844be256ae4a", "sighting_of_ref": "indicator--9ab2e3a4-df2b-43b6-850b-17d4aa146d53", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9ae9ca-0913-4c47-af88-64fec989d1fb", "sighting_of_ref": "indicator--7d3cd1c0-5c41-4ab5-bfcf-912622beb8dc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc1a1fd-2b20-4f30-8ee4-55b91813121e", "sighting_of_ref": "indicator--5319a3c5-4b14-4add-8c22-51a392ede83a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f4d73d-3b27-4fed-837e-e2d4638fc61f", "sighting_of_ref": "indicator--8153d52e-3a00-484d-a246-36fde2713858", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c617a89c-2bfa-4b74-840b-f53c7aaf9ba4", "sighting_of_ref": "indicator--0cb0cba9-e507-49fd-9cab-a6a9adef505f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e8ba6f-995d-4083-8ccb-462cd7c4e25f", "sighting_of_ref": "indicator--cdcdd58f-ab11-433d-877e-7bb1f4b19f58", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad9cad4-2eb5-412e-9e46-a8b91928a856", "sighting_of_ref": "indicator--0b798fae-1438-4d50-8c29-48fe8104e0cc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34aa395b-b32f-48ae-b0e8-ae067db32ca0", "sighting_of_ref": "indicator--d25fcbbf-037f-438c-b9eb-c5676697084f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df39deef-f104-43b4-ae71-c737466c2143", "sighting_of_ref": "indicator--2a5813d9-ba1f-4e8b-b92e-26ec73ffc5f8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4e4308-4867-4c5b-bc0a-9f9733ada7af", "sighting_of_ref": "indicator--2d45f39f-6aac-4953-9ff2-d497ce714b4c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a6db24-5dd7-455a-9e85-2b462bfedfb8", "sighting_of_ref": "indicator--2249c7cd-6409-48c0-9744-a1b7add27bcd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f252e3b-69e9-487f-88cf-3e5922a82ed7", "sighting_of_ref": "indicator--171b8742-5dc1-4eef-b80e-0cff108e7a44", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3fa8b8-c44f-4969-a36c-8ab6164776c9", "sighting_of_ref": "indicator--171b8742-5dc1-4eef-b80e-0cff108e7a44", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f857c0f-a73d-4c81-9d50-6c72def13808", "sighting_of_ref": "indicator--2153b432-c2bb-4182-b035-896eefb0163a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae3046e-2580-4152-992d-bee07f30a5a9", "sighting_of_ref": "indicator--2153b432-c2bb-4182-b035-896eefb0163a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25b925d-49a3-4c95-abc0-fc294112ea0f", "sighting_of_ref": "indicator--68b6580e-e794-465d-8070-82b3a413b4a1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d720d784-ed85-44d8-a687-8dcbb8c7c2a0", "sighting_of_ref": "indicator--68b6580e-e794-465d-8070-82b3a413b4a1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fafdf5-ff53-4101-903c-0ed4068f93df", "sighting_of_ref": "indicator--7cdb2c2a-dc84-4e88-821f-85414cfc7d4a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f808a7-c4f7-42f4-b7c1-bdb881863f6d", "sighting_of_ref": "indicator--7cdb2c2a-dc84-4e88-821f-85414cfc7d4a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053ce6c5-ef4c-40ab-ba4f-8c7a532b2115", "sighting_of_ref": "indicator--65b71276-0025-4d3e-9bc3-167c8f66d112", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606a6649-15ab-480f-aefc-4b2d8a0c6eb7", "sighting_of_ref": "indicator--a12f02a6-1a24-4072-873d-c457646536e3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63897272-d9e2-4e86-be53-16ff7f54892e", "sighting_of_ref": "indicator--e4b375d3-f771-4b30-8579-f28b5b785d35", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2816617e-9e99-4fec-b49e-e1fef3f61c17", "sighting_of_ref": "indicator--e4b375d3-f771-4b30-8579-f28b5b785d35", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95950585-2437-44f3-b8a1-463fa606e0d9", "sighting_of_ref": "indicator--6a9c139c-a4c1-4681-ad0e-1596b1f88a62", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43abba2e-23bd-446a-9c8e-ea5573e48452", "sighting_of_ref": "indicator--6a9c139c-a4c1-4681-ad0e-1596b1f88a62", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4424dafe-867c-4748-bf2c-21b77becc42b", "sighting_of_ref": "indicator--dcd87b83-92fb-47a0-8dc2-9120098582a6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12540067-6a94-47d5-85fb-f500a045ac20", "sighting_of_ref": "indicator--dcd87b83-92fb-47a0-8dc2-9120098582a6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056d305d-1db0-47d8-9d8e-18f885bf48c8", "sighting_of_ref": "indicator--ec93dce8-0335-4702-9c2f-dc3d425b1d2f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da231344-902f-4cc6-910d-c689d6f223be", "sighting_of_ref": "indicator--e43dd33e-7cca-4bbb-8821-8b14112f29d3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ea3f3d-ab8e-4fef-9798-7a83d2ce4a57", "sighting_of_ref": "indicator--bbbfd93b-7604-4974-b3bc-7cb27d756b3b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67dfa947-e1e9-44b1-9aef-3043465d82d1", "sighting_of_ref": "indicator--bbbfd93b-7604-4974-b3bc-7cb27d756b3b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283711be-9619-48c9-950c-efa432eaec95", "sighting_of_ref": "indicator--5019a7b2-2adf-4ffa-9bab-e6e0cf150ad8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2f5320-5f6b-4b8b-8cd9-82d5497d7b24", "sighting_of_ref": "indicator--5019a7b2-2adf-4ffa-9bab-e6e0cf150ad8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a345d02-60d8-4230-b6df-51a76831cda7", "sighting_of_ref": "indicator--969ce51f-730b-4775-a720-4b290a3c2a96", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d473669a-e1d7-4c33-876e-fc21abbc8570", "sighting_of_ref": "indicator--5fd0249d-88d1-4a86-a41e-f68fe33e6399", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55827dd7-1187-4559-a669-d941e79c2ad0", "sighting_of_ref": "indicator--5fd0249d-88d1-4a86-a41e-f68fe33e6399", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe36bea-b3a2-41dd-a7bd-1149f642a4be", "sighting_of_ref": "indicator--5fd0249d-88d1-4a86-a41e-f68fe33e6399", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82fd6c56-5da1-41bd-a7ee-0b581a6fd5c1", "sighting_of_ref": "indicator--115e85b8-5167-4e45-b9a1-5c6ec0ca69d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2334e58a-9f9f-4c78-b505-6da7896a5302", "sighting_of_ref": "indicator--05308cb4-bfc5-4fde-a856-530ce6a94842", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05765aee-bac0-462b-8507-8b79a8a2d29f", "sighting_of_ref": "indicator--05308cb4-bfc5-4fde-a856-530ce6a94842", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e0780b-47b9-486b-aeb9-d3f74ffe96d3", "sighting_of_ref": "indicator--05308cb4-bfc5-4fde-a856-530ce6a94842", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7ebb20-661f-4bbb-9f30-b26dead42ec5", "sighting_of_ref": "indicator--bc55c6fa-3214-4127-b720-8613b9fc1688", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de316869-bb4a-4144-b199-c2f76d622871", "sighting_of_ref": "indicator--bc55c6fa-3214-4127-b720-8613b9fc1688", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad49ba6-2f2a-4e25-ac18-ea19ff3588db", "sighting_of_ref": "indicator--63a0611d-ef93-463b-ab4b-bed21cb6371b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cdf19ab-5001-4db8-b1ee-a81a3cd3d95a", "sighting_of_ref": "indicator--2f0dd96d-a502-424e-a27d-df76dafc8d87", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bb0522-5b62-4ecd-a462-1edf227fecc3", "sighting_of_ref": "indicator--2f0dd96d-a502-424e-a27d-df76dafc8d87", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062e80c0-3950-42ed-a25f-498d498592bd", "sighting_of_ref": "indicator--368ad29d-5fb9-4d05-88c9-18d24d04497e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a9d7ef-dd37-4bf8-a605-8744ad4e065b", "sighting_of_ref": "indicator--368ad29d-5fb9-4d05-88c9-18d24d04497e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e241eb7d-a341-4d2d-99a6-e82905527768", "sighting_of_ref": "indicator--878b8e22-3051-4397-b655-64d4ad458da8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c76841c-ba4f-4c5a-98b3-aa1749355ddc", "sighting_of_ref": "indicator--ab6e8779-2b21-44c5-9a50-e780b3f0a631", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b2b0e5-bf13-4125-a4d2-c529a7de7b90", "sighting_of_ref": "indicator--6dbfba37-fc71-437c-9b58-07936e1544b4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c84a1f5-b025-4589-8a22-93abdcd86441", "sighting_of_ref": "indicator--6dbfba37-fc71-437c-9b58-07936e1544b4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638bbae5-f910-436a-b542-887fa8de15e5", "sighting_of_ref": "indicator--6dbfba37-fc71-437c-9b58-07936e1544b4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505acf86-d71b-4f3e-b382-105eed23cbc7", "sighting_of_ref": "indicator--d7418f74-002b-48e7-866b-499b1fde9649", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7424ae89-4675-43b5-bed0-db96231f602b", "sighting_of_ref": "indicator--d7418f74-002b-48e7-866b-499b1fde9649", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb9516b-befe-48e9-b613-77039d00bed6", "sighting_of_ref": "indicator--d7418f74-002b-48e7-866b-499b1fde9649", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7788361-6d03-4724-8b39-8edf35ba56cc", "sighting_of_ref": "indicator--58fe2168-1a5d-4b01-b240-b57db87a2cbe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e22513-aa30-4696-bf48-5735af41225f", "sighting_of_ref": "indicator--d5a2a9ce-7292-4da3-9e65-157d2264150b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a524ff6-706a-4712-86c0-2cb0045b9672", "sighting_of_ref": "indicator--d5a2a9ce-7292-4da3-9e65-157d2264150b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c951cdd-27b3-47fd-b879-8545cfb4cdf4", "sighting_of_ref": "indicator--991e7deb-6e1c-4189-91d9-68a543845b31", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060ee4b7-139a-4f7c-8c2c-43cbac0c0020", "sighting_of_ref": "indicator--5e4d4174-6c86-4b01-a10a-a1b7be299af4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3c6529-ea8b-41c8-8b76-87cb7f9ba1c0", "sighting_of_ref": "indicator--5e4d4174-6c86-4b01-a10a-a1b7be299af4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff013b7-2cc5-4942-910d-cde9cbbbf322", "sighting_of_ref": "indicator--f44578e7-bc23-451f-832c-b0486b39815e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b49bac-1d3d-4930-859d-dd27a15e9f7f", "sighting_of_ref": "indicator--e9c17976-87c5-4d80-b9cc-655e8bb24cb1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0af11a0-f554-419d-b244-8d4b2deb9455", "sighting_of_ref": "indicator--bc41e6e6-c681-4b78-bb25-7c5416b07d13", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b900ec0-4439-453a-961d-f7c4d419e168", "sighting_of_ref": "indicator--ce79f683-848a-4d57-9c62-a1d698a1b9c9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f0ab78-8dbe-4020-baf5-d1d9e78e0e69", "sighting_of_ref": "indicator--ce79f683-848a-4d57-9c62-a1d698a1b9c9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10fe5f7-f725-4887-b8b5-468c6222bc3f", "sighting_of_ref": "indicator--d8987859-6341-4480-be22-c47f4fcd354c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47b7a81-c9d3-4a83-9d4f-ce2df34573a5", "sighting_of_ref": "indicator--88dc55cd-37bc-499a-a9f9-32701a89f51d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58117b79-7c8e-4dd6-b70e-e67c9160421d", "sighting_of_ref": "indicator--88dc55cd-37bc-499a-a9f9-32701a89f51d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cd5c49-fea3-4901-bf1c-f4b5b27d26f6", "sighting_of_ref": "indicator--88dc55cd-37bc-499a-a9f9-32701a89f51d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3596014-7522-4c01-8f75-21dcbabd85f4", "sighting_of_ref": "indicator--3038021d-505d-4dc3-acc1-acc1b8ef3824", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd553e8-28ed-47eb-96b1-4d6e1cb2da88", "sighting_of_ref": "indicator--3038021d-505d-4dc3-acc1-acc1b8ef3824", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44a66f4-7bd5-4f08-a7d4-4ea83ca2d430", "sighting_of_ref": "indicator--5a8df523-0f1d-4f27-ba6d-522ca310cab2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4526dad-15da-44f2-b02c-7ada5935d6af", "sighting_of_ref": "indicator--0c3927ca-3d0d-4054-8846-f3f665688345", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988ebff4-090a-44b3-8252-8868397f5ac2", "sighting_of_ref": "indicator--4a5c2be1-b60f-4e51-a975-13513dc34217", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5f8043-c822-4869-a5e0-1e7b83d929dc", "sighting_of_ref": "indicator--997bff73-a6fb-4c79-a0c5-ba88daee323c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08351fa8-96e9-4384-9fbc-a276b3c00ffb", "sighting_of_ref": "indicator--997bff73-a6fb-4c79-a0c5-ba88daee323c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8946e6-cd6c-45c9-8775-bc2e2eb522fa", "sighting_of_ref": "indicator--d41f252d-01a2-4d3d-b8e5-96355f4efe26", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d17d52-3b81-4670-b7e3-7134e6055620", "sighting_of_ref": "indicator--d41f252d-01a2-4d3d-b8e5-96355f4efe26", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acad9804-4524-4137-94d4-0be6d4df9d9d", "sighting_of_ref": "indicator--d41f252d-01a2-4d3d-b8e5-96355f4efe26", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94b65d2-e8ab-4d17-8388-937cb546110d", "sighting_of_ref": "indicator--1c84116c-26cf-4bb8-8290-aeb329af55e3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9cb9c36-84bf-417d-968d-5cf04183dae6", "sighting_of_ref": "indicator--1c84116c-26cf-4bb8-8290-aeb329af55e3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3f377e-4c89-4b81-b9c8-21247f7eb5d9", "sighting_of_ref": "indicator--a5fb6efa-0edc-4af2-be7e-1ad44c6f5de9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bac6315-a484-4983-bab5-756bffdebd01", "sighting_of_ref": "indicator--9b361323-ce94-4e09-9731-7b265ccf281c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4184176-d15e-4c7b-b843-12973268906e", "sighting_of_ref": "indicator--0fe30f56-ee8c-4de7-aff0-a52e9b13ff61", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8736c3-ad5f-44e0-bd5e-d0c9bc0e885c", "sighting_of_ref": "indicator--d41601e5-e5cb-437c-a74a-2368d6ef0b72", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7738e7-71e3-45b6-a7bf-0d0655980ecc", "sighting_of_ref": "indicator--5c1db4b5-04d2-4788-adf2-0097edb61345", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c539d1-2df1-4e5b-9ef9-8a45992c907e", "sighting_of_ref": "indicator--f931a60c-b237-4ba8-b156-bc7e20713082", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73d665b-27d2-4a88-b6dd-f53a7272dcf1", "sighting_of_ref": "indicator--1687cc71-4232-49a1-bbf4-c93b74fa1013", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c2fdce-19f3-4eb3-b277-8b5782266bd3", "sighting_of_ref": "indicator--3c647e7c-b3a6-4974-82cb-3fd6d1d7b873", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d780ae8-d66b-487f-ae54-42404325d794", "sighting_of_ref": "indicator--3c647e7c-b3a6-4974-82cb-3fd6d1d7b873", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47964e56-e87f-4e8c-b988-8b43ad8c19a7", "sighting_of_ref": "indicator--adff1020-d61b-4e58-befb-4eaf48c4630f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171c2359-848f-41ae-806b-fc83f08ff969", "sighting_of_ref": "indicator--adff1020-d61b-4e58-befb-4eaf48c4630f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba835c9-43c9-4c39-a025-a42aa2b5b07b", "sighting_of_ref": "indicator--a654ddfb-33fe-4413-bd72-670805e1f931", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d43901-be58-47bf-a89e-62eebf8e7631", "sighting_of_ref": "indicator--439d6664-8cef-4ebc-967b-5b12afc9662e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc241198-cc42-472f-a275-227775a7bb51", "sighting_of_ref": "indicator--439d6664-8cef-4ebc-967b-5b12afc9662e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e09bae-231f-45ba-8c60-2b3ffde32782", "sighting_of_ref": "indicator--780f28ab-6c35-48a3-b642-ac440a031017", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ac5b06-19f2-43e3-893b-d9a4ab0d6ca0", "sighting_of_ref": "indicator--780f28ab-6c35-48a3-b642-ac440a031017", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a3510c-ce90-4875-a27b-dff190f1263f", "sighting_of_ref": "indicator--8deb9f71-2a19-4621-ae5c-ed446c733bd4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c25da7-fee2-4bbe-a4e1-2801c4928787", "sighting_of_ref": "indicator--7bf5562a-7e00-4199-9a78-66ef0067c8b4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2b632d-96b9-4931-8381-1eba41e7297e", "sighting_of_ref": "indicator--71310bcd-253c-4b50-857d-232b1b7515d3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18412723-2e46-4808-ba62-98c2b89da851", "sighting_of_ref": "indicator--ea50550a-3bd6-48d5-8ae1-c654f31febe8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e995eb98-e71b-468b-9f06-4edc7c6a9b19", "sighting_of_ref": "indicator--627c455f-b725-47d7-8ba3-27a888bed1dc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe62107-009c-4a2d-88c8-ebd21d28b883", "sighting_of_ref": "indicator--627c455f-b725-47d7-8ba3-27a888bed1dc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b402adf-b81c-4512-b624-35dc598f9fb5", "sighting_of_ref": "indicator--4fb76460-5914-4a8f-8127-86ad0d48d8f6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacebd3b-7882-4706-9d03-40a1acd02340", "sighting_of_ref": "indicator--549616df-6586-4468-a89c-99e4c08c9ba2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247a87d4-cfbf-4c27-8666-15ddab90462f", "sighting_of_ref": "indicator--767812de-0bcf-4628-85ee-9f59037ae54a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a4c95c-cbf1-44de-b1d1-966f28902d68", "sighting_of_ref": "indicator--767812de-0bcf-4628-85ee-9f59037ae54a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1be516c-e328-4412-8cb2-3683d802400b", "sighting_of_ref": "indicator--50dc5b96-e62b-4339-8e6a-c17be1b36bdc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9519b2c-e1fb-4bcb-8ef2-957c6f962074", "sighting_of_ref": "indicator--82c2039d-bdf2-4266-947a-ac9ee20dc35e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e1cc9e-0838-4c1f-8675-9139db66a671", "sighting_of_ref": "indicator--95a690c7-4733-4d9b-8bf6-93b2f27d65d5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f201cf1-681b-4aa2-9b9a-ab49ce94ec18", "sighting_of_ref": "indicator--95a690c7-4733-4d9b-8bf6-93b2f27d65d5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a69660b-75eb-4894-b21c-0e0532fce753", "sighting_of_ref": "indicator--aed15043-2785-4d53-9636-f2b4f6f9644e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4635df-5e99-48a4-8479-b8a2aee53f1d", "sighting_of_ref": "indicator--c823bc7a-7679-4328-b8ab-3e5ab5cdeb1e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b520497-23b4-4f1c-bfdd-4e0c8a2cf216", "sighting_of_ref": "indicator--6b15ba82-675b-4d4c-8292-2b936e488e90", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f2d792-0e37-4f6a-af94-26e925f036b0", "sighting_of_ref": "indicator--70ffe997-6a9f-4a3c-9bca-1a02930b083e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8443ef07-c6b9-4ed2-a70c-c29b88b96e50", "sighting_of_ref": "indicator--70ffe997-6a9f-4a3c-9bca-1a02930b083e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fb5022-a4b8-4f52-a9b8-45b0595a8391", "sighting_of_ref": "indicator--bbdb8930-a8a9-4f26-9b4d-01d7fb3fe9f1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a2e86d-c82b-4b95-af2e-5fb5c639489c", "sighting_of_ref": "indicator--8d9b3bdb-4aa0-462c-b013-069586da840b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5dd47e-af30-4a41-b5c6-a56a52a39f11", "sighting_of_ref": "indicator--67ac1245-8316-43a7-9b0d-ec3158cfb74f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ecfad8-994e-4cc9-89a4-847aa06c1595", "sighting_of_ref": "indicator--31d4db2b-a6c1-4a79-8ddc-48440880aada", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2882c9e5-bebd-41dc-bb97-8363240f3bce", "sighting_of_ref": "indicator--8ce5b4fb-71a5-4f98-b185-0dcf819e1296", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4935f48d-9eac-46e1-a7cc-a55612da82b6", "sighting_of_ref": "indicator--5388728a-b9d1-41bf-8fd1-8c1b516e5156", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e318166e-2349-41f8-ab31-1178c75d27a6", "sighting_of_ref": "indicator--36733281-06bc-4f2e-bc40-a6ef28ae6fe2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8b3377-aafb-41ce-bd2d-aa1554b3ed9e", "sighting_of_ref": "indicator--530751ac-f271-4d10-9f7b-8b282726a00b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0c59dc-3a7b-4a9e-80fc-a4eedcf8c75a", "sighting_of_ref": "indicator--783ca54d-89bf-4ae3-aa20-c3f1ceb35ffe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93dc1eb3-6473-4617-9b8b-6f9a8adc7359", "sighting_of_ref": "indicator--783ca54d-89bf-4ae3-aa20-c3f1ceb35ffe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63384fb-544c-43a6-af30-6df3fbb40570", "sighting_of_ref": "indicator--0dd40c05-c684-448b-a51f-c643504e218a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9da42ce-f1fd-49e6-8f6c-47b8b7066cc5", "sighting_of_ref": "indicator--7a1aaac4-96be-4a4e-b39a-cfd0ff5384e0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a92af3-8a17-4699-93e2-aed89c3c9788", "sighting_of_ref": "indicator--7a1aaac4-96be-4a4e-b39a-cfd0ff5384e0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ae27a6-76df-468d-99c8-aa37d41ae8f3", "sighting_of_ref": "indicator--7a1aaac4-96be-4a4e-b39a-cfd0ff5384e0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0078ac38-814c-461f-a6e4-412057b30c0d", "sighting_of_ref": "indicator--4136a805-c813-4f56-88ae-a81f6f2544a3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd377a7-e2ca-4453-895f-5272c515db36", "sighting_of_ref": "indicator--affaec3c-e848-4691-9be3-1f260ba7e363", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571b355d-88a7-427e-9deb-cb9c1b19d82d", "sighting_of_ref": "indicator--213377f0-a85d-4dfc-bd19-19c28cfb92ae", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f96c6c-b03f-4dfe-8f7e-e777e8fc2389", "sighting_of_ref": "indicator--3b72357a-6e60-48e6-b267-2464db74bf45", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8a365d-f5ac-400a-a517-4accda0f1327", "sighting_of_ref": "indicator--8707d201-3685-4757-8965-f20a3bde00e7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b723a5-c5bf-47fb-8c1f-d5fefc0f0deb", "sighting_of_ref": "indicator--bc65a116-115d-4440-8309-07779c1f4aff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93145f9c-f2b1-4ddc-a51c-e3afffcaff9b", "sighting_of_ref": "indicator--bc65a116-115d-4440-8309-07779c1f4aff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbfd45e-6e8e-458d-88a9-361f4de4469c", "sighting_of_ref": "indicator--f0cda457-5ecb-48c5-9ac6-ac269c5d21e2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288f5320-6864-4f57-af06-0c851b50f8fd", "sighting_of_ref": "indicator--8a2bd0fe-439f-464f-9e2f-ae4392e1b2d4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be60c06-8192-4edf-9586-4ba48ba41846", "sighting_of_ref": "indicator--f6fb13ad-fcb0-459f-8890-e8ae8ab1f060", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be74ba03-393f-40a1-be2c-adc2be2deef7", "sighting_of_ref": "indicator--6fb9e277-5c02-49d9-b81d-14d49b866f21", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bcd5cc-326a-420a-9c1f-320cefaa34ef", "sighting_of_ref": "indicator--4ed74d57-3133-4c76-b9d5-8b0a0d2580b2", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facee9cd-fcdb-4061-a8b3-44d1c097f2d3", "sighting_of_ref": "indicator--17a7ab5d-cefa-444b-9a5d-58c5582907d3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a848b40f-a6e6-4a9f-9172-68b1800d2418", "sighting_of_ref": "indicator--4fd49d9a-ba40-49a6-8f76-d14c6be651a5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719d2033-a9ba-47de-8f39-ad0548aeacb2", "sighting_of_ref": "indicator--e9804e29-bd59-415a-aa37-ea54231d73bd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ee9f13-29ce-40e8-998c-cc878f7a0e74", "sighting_of_ref": "indicator--7cda762a-f811-4e7e-890b-8ef8910667db", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4604dc46-8feb-4800-9b0e-137a066a7bbb", "sighting_of_ref": "indicator--7cda762a-f811-4e7e-890b-8ef8910667db", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a175ce-9d1e-4ec9-b101-88f88f92b9e4", "sighting_of_ref": "indicator--7cda762a-f811-4e7e-890b-8ef8910667db", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce46aee-9394-4bc0-93c8-dfcf4d1205cd", "sighting_of_ref": "indicator--65da6739-7894-435b-b6c4-5fe18d90bb50", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791b476c-ba40-4798-b114-161ec6100738", "sighting_of_ref": "indicator--34640858-d020-4498-a243-ccedbe17e459", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4fbccea-ae10-4015-bb6f-0d47f1fb3016", "sighting_of_ref": "indicator--34640858-d020-4498-a243-ccedbe17e459", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2871e445-05db-49e0-937c-6a9a3ebdf910", "sighting_of_ref": "indicator--3dd9d369-9380-42b3-80f6-e42f6029e4f4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16e6f38-345e-46bd-aa79-10fea4b9fb79", "sighting_of_ref": "indicator--b2c70408-592b-4999-8656-66de663f8c5b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fca7a1-0f45-4d20-919b-2601d3f41e64", "sighting_of_ref": "indicator--da84582e-70d3-4c3c-a950-882fc1c61d8f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c9ab2a-e97c-451c-a51d-b914e2af4c3b", "sighting_of_ref": "indicator--9d9a72b0-f4c7-4f8e-a3a0-1f5dec01b496", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a77e38b-f180-4adc-816c-e18e4a0d33d9", "sighting_of_ref": "indicator--9d9a72b0-f4c7-4f8e-a3a0-1f5dec01b496", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b13916-adb3-4935-b699-918ce9d20865", "sighting_of_ref": "indicator--0a551271-7940-4deb-a497-ebea21f3366f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6964b800-188a-484f-a5a0-92ce9e6858f5", "sighting_of_ref": "indicator--60c91977-78e0-4f0d-8dc7-88f7d9133a1a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a854b96-4d41-4b29-8ff0-5326f7a3dbe4", "sighting_of_ref": "indicator--a71bb3ce-5b4d-4ee2-bad2-b03c3318a37d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e72bb53-736f-4519-aa99-9ce89ac9e406", "sighting_of_ref": "indicator--a71bb3ce-5b4d-4ee2-bad2-b03c3318a37d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81549010-695d-498d-8762-1cb84e423563", "sighting_of_ref": "indicator--a71bb3ce-5b4d-4ee2-bad2-b03c3318a37d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a8a48f-fdfd-4374-b46f-193750bbfed9", "sighting_of_ref": "indicator--e12895c3-f67a-4ec0-9f6b-e08a6b7ab0c4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f137ff4-eac1-4676-bb40-c77c7e8d5cf8", "sighting_of_ref": "indicator--e12895c3-f67a-4ec0-9f6b-e08a6b7ab0c4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b975ad2-95d5-404b-829e-b07aba10b56c", "sighting_of_ref": "indicator--9cb4a095-ef2b-4070-951f-e5a103782675", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6ffbaa-6772-4d09-82f7-1e8c51078e7d", "sighting_of_ref": "indicator--a3560bc4-a91a-401d-b614-5980f33ca0f7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cdcb33-84e2-4532-9d44-6642cd1116c4", "sighting_of_ref": "indicator--bab655a9-b2ba-4c0f-aac6-4db550b85f3f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37243659-1f89-46de-9188-1ad752348abb", "sighting_of_ref": "indicator--790d3848-d284-4cd2-b5e6-59f4a77f1e18", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e12a4f-b5e8-4231-824b-ff7b23fbf5b4", "sighting_of_ref": "indicator--790d3848-d284-4cd2-b5e6-59f4a77f1e18", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec51f466-b297-49ac-9ce3-78070e20fc25", "sighting_of_ref": "indicator--fbdb4b3f-aa62-4e28-9f80-4dc25afe1183", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4781403d-ffa9-4fdc-ab97-66b545ff4af0", "sighting_of_ref": "indicator--fbdb4b3f-aa62-4e28-9f80-4dc25afe1183", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64af1d50-37dc-45e4-986d-9b16420f276c", "sighting_of_ref": "indicator--fbdb4b3f-aa62-4e28-9f80-4dc25afe1183", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052e5071-a92a-40e3-aa27-4cd90854534f", "sighting_of_ref": "indicator--d2cd5999-2b53-4289-90ef-988af221cc11", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe1d7d5-d139-49f6-8dc5-1602a6dfbe8a", "sighting_of_ref": "indicator--d2cd5999-2b53-4289-90ef-988af221cc11", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b044319-5316-4a15-92b7-bb43a408ff0a", "sighting_of_ref": "indicator--8414a2ab-d96d-4a50-a570-ce0ac9de39c8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee6c165-da23-4381-b124-357395109f1e", "sighting_of_ref": "indicator--8414a2ab-d96d-4a50-a570-ce0ac9de39c8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c535431-8977-4ff5-ae9e-d3e3380b0c54", "sighting_of_ref": "indicator--5eb18707-44ea-471d-ba2c-031793df097a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb46df34-e3be-4302-9280-e3f81b880115", "sighting_of_ref": "indicator--202563b1-c48b-437e-a9f0-f746571864fc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1b67d1-f7b1-45cd-ac36-839f3b789af6", "sighting_of_ref": "indicator--202563b1-c48b-437e-a9f0-f746571864fc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da72bad4-5696-4a92-901b-90a737974d7c", "sighting_of_ref": "indicator--202563b1-c48b-437e-a9f0-f746571864fc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df635ae-a574-4d5c-8121-6e4bd4e63bd2", "sighting_of_ref": "indicator--6995b6b3-8f72-4454-a3ec-4944ff7543ad", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c54d20-717b-4d5d-9bea-2d1be7ff61a3", "sighting_of_ref": "indicator--5c38d1fc-6f82-4010-834a-afd4fe696bf9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33791d1-f729-48b0-b3ba-eeefc135b746", "sighting_of_ref": "indicator--5c38d1fc-6f82-4010-834a-afd4fe696bf9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb060aa-505b-4a85-830d-214bd037b8e3", "sighting_of_ref": "indicator--6419bff9-a696-4f41-a66b-4524db5d17e4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f183c346-616a-404d-aec5-bafefe6d0df5", "sighting_of_ref": "indicator--6419bff9-a696-4f41-a66b-4524db5d17e4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4c19b0-12e9-45f1-b36b-f1209639f3ef", "sighting_of_ref": "indicator--e1921b19-467c-459c-8069-f91e2921702f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406e875b-0f98-4b41-8f23-bdb68ef8dc09", "sighting_of_ref": "indicator--4dca397b-6846-43b8-8382-4d6272076670", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74d1764-adc8-4f8b-af3b-cff57edf182b", "sighting_of_ref": "indicator--4dca397b-6846-43b8-8382-4d6272076670", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8444c5e5-c17f-49d3-83c1-62f06650fc8a", "sighting_of_ref": "indicator--a077dcd5-4ebe-43b0-913b-0e37eee70a4b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c20e2cb-b469-4bc9-a894-d88cafc02d2a", "sighting_of_ref": "indicator--a077dcd5-4ebe-43b0-913b-0e37eee70a4b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ecd5159-5a5f-4bea-a2a4-8a26a2ccebf9", "sighting_of_ref": "indicator--485ae497-f549-469b-b046-d31fb3c726c8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab034e8-8149-4c81-b9f0-4bc808667cb8", "sighting_of_ref": "indicator--485ae497-f549-469b-b046-d31fb3c726c8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fd62b3-a69d-465e-9f77-f884aacf3344", "sighting_of_ref": "indicator--485ae497-f549-469b-b046-d31fb3c726c8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb762f87-b708-4bc3-9a08-ddefd8bc01ec", "sighting_of_ref": "indicator--d0eda55c-3178-4c23-9bf9-dd9e31ede76d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509783f5-2d01-437d-9509-a09d80dc132a", "sighting_of_ref": "indicator--d0eda55c-3178-4c23-9bf9-dd9e31ede76d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a078fa-eb7f-4297-9589-43f98aadadc9", "sighting_of_ref": "indicator--d0eda55c-3178-4c23-9bf9-dd9e31ede76d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d77ef7-5873-45f5-966d-6e1ffbba26e2", "sighting_of_ref": "indicator--fa762d2e-4be7-4bc8-8230-caffae29975b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1597556b-6b25-457a-af55-22b7bc8300c5", "sighting_of_ref": "indicator--fa762d2e-4be7-4bc8-8230-caffae29975b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac6bc20-d0fd-42bb-9e79-f20bbaaccd21", "sighting_of_ref": "indicator--fa762d2e-4be7-4bc8-8230-caffae29975b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3311bae1-7863-4724-a01f-68be15971019", "sighting_of_ref": "indicator--57ecbdd8-713a-4d70-bf4e-4681604cb4ed", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0391d5a-cd64-41d1-a1b0-e11aa3c1f263", "sighting_of_ref": "indicator--57ecbdd8-713a-4d70-bf4e-4681604cb4ed", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389ab9b2-d911-4468-acb7-ced5f665b7e9", "sighting_of_ref": "indicator--57ecbdd8-713a-4d70-bf4e-4681604cb4ed", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e017a213-04f5-4ef4-af2e-2bc84987478e", "sighting_of_ref": "indicator--8653c180-b547-4a84-83aa-3a2f53563dde", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3890808f-fa5d-4c0c-bad1-9b4bd71b04eb", "sighting_of_ref": "indicator--8653c180-b547-4a84-83aa-3a2f53563dde", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8c4d38-bf7b-40ad-8608-4bac5a042d78", "sighting_of_ref": "indicator--8653c180-b547-4a84-83aa-3a2f53563dde", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e539cde-68c9-4c69-9bb7-956d9ff6d8e2", "sighting_of_ref": "indicator--b3796a3d-ab66-4074-a90f-97d348743897", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e0eafa-facd-4136-b0f3-32599f22589b", "sighting_of_ref": "indicator--52825697-d51f-46f5-871f-c14ec749c0a5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928035b7-bacb-4dd6-a2dc-a9fada5084b9", "sighting_of_ref": "indicator--52825697-d51f-46f5-871f-c14ec749c0a5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c6326d-5657-40c0-960d-ff98061ddb45", "sighting_of_ref": "indicator--d4d55d99-54f4-4d18-b739-94d4893e8f3a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5423e1e8-0d41-4411-8bf0-188112bfcd97", "sighting_of_ref": "indicator--d4d55d99-54f4-4d18-b739-94d4893e8f3a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458eead9-ba1e-438c-b383-e00d2b4c79a4", "sighting_of_ref": "indicator--d4d55d99-54f4-4d18-b739-94d4893e8f3a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e3e694-5db5-4141-8106-5b4b4d5103fa", "sighting_of_ref": "indicator--baf04dda-9d56-4238-8a03-dc466368c766", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c101c6a8-4263-40dd-a275-cc96e7c6cf41", "sighting_of_ref": "indicator--20f00c01-7089-496c-8fa0-7b60b0fd785b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3c26c8-71ca-4039-8069-f447b58b6977", "sighting_of_ref": "indicator--8c805deb-ac91-4e65-9c59-11dd52cc983d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0471df00-b162-4155-bf08-b5baf20c3237", "sighting_of_ref": "indicator--c79ab52b-5679-48c7-b21c-5ed389a5aa98", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1073cc0a-b06e-42e9-b31f-40168ba80cea", "sighting_of_ref": "indicator--c79ab52b-5679-48c7-b21c-5ed389a5aa98", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e904c90d-192c-483d-8f8a-c5da690410c6", "sighting_of_ref": "indicator--c79ab52b-5679-48c7-b21c-5ed389a5aa98", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cf8920-5ff2-4c4e-8a08-7592d5dcd513", "sighting_of_ref": "indicator--893b6d59-f834-427e-8124-3f8ac551f393", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21628059-f6bc-4a8d-98d5-d2fd4467f41e", "sighting_of_ref": "indicator--893b6d59-f834-427e-8124-3f8ac551f393", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f860305-551b-4aa5-b105-fdbe3d9a5903", "sighting_of_ref": "indicator--e8c096f5-12d5-4899-ad97-d9332c6f89f9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7e5718-1c91-477d-9fc1-4c6bacb7f07f", "sighting_of_ref": "indicator--415caba5-66cc-43ee-8f01-8b31cc474341", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4986a4a3-0ed5-4330-bd0e-56ac85023f13", "sighting_of_ref": "indicator--d849ff29-20e1-4ac6-b922-42d43f7eee84", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376e550b-d9d0-48fb-841e-3cf0ad5516fb", "sighting_of_ref": "indicator--d849ff29-20e1-4ac6-b922-42d43f7eee84", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642002eb-a658-4102-9389-f496c8eb5cb4", "sighting_of_ref": "indicator--d849ff29-20e1-4ac6-b922-42d43f7eee84", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed8b321-2d1d-4641-86bf-743fb6d69a34", "sighting_of_ref": "indicator--e65d6550-9574-4248-863c-64913b7d551c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f61107-a2c9-4e56-ac9d-65bc1722c8ba", "sighting_of_ref": "indicator--c1f59ac3-6850-430e-9379-ed12da1bb777", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e555cb4-695e-46fe-a514-6e6954ecbf14", "sighting_of_ref": "indicator--c1f59ac3-6850-430e-9379-ed12da1bb777", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3488340-82d6-430a-8345-7617cdcf11f4", "sighting_of_ref": "indicator--c1f59ac3-6850-430e-9379-ed12da1bb777", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b65342d-2ff1-4e02-bad7-2f083d876c64", "sighting_of_ref": "indicator--fcc8765a-770b-4ae7-9d0a-bbd470f09bb0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7427145c-a11f-4df9-8a05-683c0de729c9", "sighting_of_ref": "indicator--fcc8765a-770b-4ae7-9d0a-bbd470f09bb0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7478eaee-4b2c-4112-af8f-cfe5c97395a3", "sighting_of_ref": "indicator--fcc8765a-770b-4ae7-9d0a-bbd470f09bb0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5c507b-f32d-40e7-b577-48995ae24960", "sighting_of_ref": "indicator--3a061c3e-48a6-422e-bf6c-c430edb2a80c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6461b89c-b130-4917-a9b5-4ca407644ded", "sighting_of_ref": "indicator--5d222e80-c35a-4d7d-98fd-136c9099cd01", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df603542-a2ff-4ac2-9566-a00052f7debd", "sighting_of_ref": "indicator--5d222e80-c35a-4d7d-98fd-136c9099cd01", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01820889-c907-403f-b2c6-8ebad705e24d", "sighting_of_ref": "indicator--5d222e80-c35a-4d7d-98fd-136c9099cd01", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2976177-f1f2-46c6-bb46-3e37e78f28e4", "sighting_of_ref": "indicator--384e0cff-2379-4762-9645-8f7293a01c76", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04a28b4-11a7-4565-b60b-5545336a6e53", "sighting_of_ref": "indicator--ebee639b-e46c-4794-b8a2-3862edd0a5e2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b027ac37-5134-4e0c-80ae-4aa9dfcc0c22", "sighting_of_ref": "indicator--cb660e5f-a4a2-4b1f-86cc-173162fe33ff", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad54a93-8bc7-476d-8202-b17fc0f9ff71", "sighting_of_ref": "indicator--cb660e5f-a4a2-4b1f-86cc-173162fe33ff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8dfdacc-3b60-4618-bf80-7ede12b8a9b2", "sighting_of_ref": "indicator--cb660e5f-a4a2-4b1f-86cc-173162fe33ff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342c2293-3a35-4a0d-a9a2-f4d8d8c9afee", "sighting_of_ref": "indicator--43a7468f-3e52-48e4-8997-962b5f458c6a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8157254b-4efb-45eb-9bf7-87eed0647b94", "sighting_of_ref": "indicator--05043992-301b-4064-bcf9-1c3cafeaf860", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c772e10f-b4f5-4369-a3f9-d083f46e3e66", "sighting_of_ref": "indicator--05043992-301b-4064-bcf9-1c3cafeaf860", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8377ffcc-28bc-4019-84e7-c6dd1b291183", "sighting_of_ref": "indicator--05043992-301b-4064-bcf9-1c3cafeaf860", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2f0bb9-819a-4072-b9d6-86fa8d640dd1", "sighting_of_ref": "indicator--fcefc165-98d9-4c23-9649-ab7d09e9e4f5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42dfa454-3db6-4c9b-ae3a-9062239c5a18", "sighting_of_ref": "indicator--4b738fd6-dfd2-4398-b420-4d97eb9018f7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6d026e-aa07-4bd6-8166-4ab2107a7f99", "sighting_of_ref": "indicator--4b738fd6-dfd2-4398-b420-4d97eb9018f7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a68474-5049-4189-9146-197a049e6695", "sighting_of_ref": "indicator--8f55ea8c-806f-4f3f-b181-6e87763f5633", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707d4b1f-ab3f-4e5d-a131-c0e186561dc8", "sighting_of_ref": "indicator--4738a110-a6bf-4e3f-91ff-0315c36ed94e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80676a3b-d8e3-43cb-b0e6-54670ace855a", "sighting_of_ref": "indicator--4738a110-a6bf-4e3f-91ff-0315c36ed94e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cf2fbf-0c07-4ffe-ad97-e610f96fe98c", "sighting_of_ref": "indicator--97f09fc5-a87a-4e9a-a08b-6acb4321fdba", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae8ad7b-f2e8-409d-a9b5-bca4f63823e6", "sighting_of_ref": "indicator--97f09fc5-a87a-4e9a-a08b-6acb4321fdba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6576410-bffe-48cb-81f2-4cee03273495", "sighting_of_ref": "indicator--97f09fc5-a87a-4e9a-a08b-6acb4321fdba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed0eabe-3914-4d98-982b-bb6de05b3c66", "sighting_of_ref": "indicator--48d0cc6b-9462-423e-9d45-ed4eb4cf1307", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8e0dc4-cd84-419d-b8c1-80977ec2e06a", "sighting_of_ref": "indicator--48d0cc6b-9462-423e-9d45-ed4eb4cf1307", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44731bd6-502e-4f59-a70f-660ad6b8122d", "sighting_of_ref": "indicator--14f25c2d-9f49-4f43-a4dd-c72c4b53f0e3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b6d280-a4d2-4e9c-a30f-7eb8bd5c4067", "sighting_of_ref": "indicator--f2aae8ca-0b50-40de-9e9b-845509cdb114", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0f5af3-90ff-4bef-bb9a-ec7f11983331", "sighting_of_ref": "indicator--f2aae8ca-0b50-40de-9e9b-845509cdb114", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53cddb5-1362-4bd7-9963-a9a98a56889e", "sighting_of_ref": "indicator--f2aae8ca-0b50-40de-9e9b-845509cdb114", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa5cadd-9a25-488c-aca7-e85f92d0b748", "sighting_of_ref": "indicator--9260e401-4b6e-4c6d-9940-866916febdba", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873df0fd-782a-4719-b8c7-67875e71d8f6", "sighting_of_ref": "indicator--9260e401-4b6e-4c6d-9940-866916febdba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ae3a0c-ee13-433b-9c06-31619c3693b2", "sighting_of_ref": "indicator--9260e401-4b6e-4c6d-9940-866916febdba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6055ee-bc40-4788-86cb-d8e5776ce923", "sighting_of_ref": "indicator--3a55eaea-eca9-425f-afa6-3285966dfc31", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ebe4d4-e3c8-49b1-8406-433a96485c99", "sighting_of_ref": "indicator--401e0f53-3c65-4604-8335-31691617a952", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c228051a-d607-42f1-830d-32288ea1a601", "sighting_of_ref": "indicator--afee12e0-5ce9-4e1a-816f-43f4fd9b6403", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee55408d-2a7d-4168-a649-14e66c3f4503", "sighting_of_ref": "indicator--afee12e0-5ce9-4e1a-816f-43f4fd9b6403", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599223c0-9528-4bd4-8c3b-e472b970e86a", "sighting_of_ref": "indicator--576278cb-0358-4293-95e2-1e0b0072142e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862440cd-b01f-4a91-9aea-2601fa1fc748", "sighting_of_ref": "indicator--576278cb-0358-4293-95e2-1e0b0072142e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7fc1e4-5a88-4560-a6c5-5878bc49632d", "sighting_of_ref": "indicator--576278cb-0358-4293-95e2-1e0b0072142e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9f9f7c-c4c0-4d00-be8a-fabe54707a6f", "sighting_of_ref": "indicator--6a5dbc51-e9ad-4d7a-bbe4-5db1ff923ada", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0af5ec8-8f15-495e-8969-597e6b737a2c", "sighting_of_ref": "indicator--d2c4d775-d026-4d39-baa3-906392c8ea7b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca69376-8f82-491f-9b5a-46e98db164b9", "sighting_of_ref": "indicator--d2c4d775-d026-4d39-baa3-906392c8ea7b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ddff7ed-e786-4717-a53d-1eb11afd3bbf", "sighting_of_ref": "indicator--446c9fdf-1bcd-45fd-a6e5-60de4f83dd75", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55381878-82a3-4ae4-ac10-2cc6957c10f4", "sighting_of_ref": "indicator--66d1147c-03d6-46ce-bf4d-84b444accea8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c103d5c-293d-4f32-b3f8-b13e225a2b12", "sighting_of_ref": "indicator--561e11ce-81f3-430d-94cb-d1de88640b61", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2bc40c-b118-4dae-a330-c801c1b52e66", "sighting_of_ref": "indicator--e6297128-2e35-4ecb-928d-370e11e41fef", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ebab99-7842-47b7-a7e6-9e78976a4933", "sighting_of_ref": "indicator--b5709443-54b6-4fba-9b0e-238504b68af5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee847f38-e958-4854-97fd-0fce145cd20e", "sighting_of_ref": "indicator--b5709443-54b6-4fba-9b0e-238504b68af5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205935d1-931f-4312-bca1-2b18dc4e7a8c", "sighting_of_ref": "indicator--396557a0-0685-4b20-ba68-dc9a963a5029", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7e7454-2c15-4a9e-b3fd-a3c22511ec40", "sighting_of_ref": "indicator--396557a0-0685-4b20-ba68-dc9a963a5029", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aee8b5c-544e-4768-ba8b-9aa74969945f", "sighting_of_ref": "indicator--396557a0-0685-4b20-ba68-dc9a963a5029", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1ea1b6-65df-40fe-8885-04fc44b1fed0", "sighting_of_ref": "indicator--28ac93bd-a445-47c3-b78f-22cca228c09f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095689cb-84dc-4cfa-a22b-6f9c91ee3f03", "sighting_of_ref": "indicator--55eda37f-dc10-4114-9547-ca29cb2d4979", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8d5676-aef8-4328-a6e9-b15b07cb858e", "sighting_of_ref": "indicator--c401814c-1812-4aed-a5ff-4c8c8e43b75d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426dbf78-231b-4433-955e-04e225b7d042", "sighting_of_ref": "indicator--c401814c-1812-4aed-a5ff-4c8c8e43b75d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010c1094-141f-467a-9357-77911503341a", "sighting_of_ref": "indicator--c401814c-1812-4aed-a5ff-4c8c8e43b75d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e18f37-6865-42b5-b5e6-a08c6994f6d7", "sighting_of_ref": "indicator--93072903-14cd-4742-bf02-fcd892173e08", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79cc9e3-f74a-40a7-a53c-6097265d8264", "sighting_of_ref": "indicator--93072903-14cd-4742-bf02-fcd892173e08", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b1ceff-a04c-4792-99f5-d1ad58d4cae5", "sighting_of_ref": "indicator--063a9f41-b534-4478-b9d3-fd58432ac0ba", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b0c372-c1b5-401a-81aa-d3ff4897ee9c", "sighting_of_ref": "indicator--063a9f41-b534-4478-b9d3-fd58432ac0ba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43649fa-514c-47b4-ace9-917c9fa029ae", "sighting_of_ref": "indicator--063a9f41-b534-4478-b9d3-fd58432ac0ba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f742e9c3-de02-4cf8-9dd8-c24a8b660130", "sighting_of_ref": "indicator--80e7c09a-5af9-4758-a2ae-4ffe97e2b0c0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd903d2-206c-4251-9bb6-0d1d57d7fa29", "sighting_of_ref": "indicator--80e7c09a-5af9-4758-a2ae-4ffe97e2b0c0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76dd11fd-2fec-4055-baf8-638847741f47", "sighting_of_ref": "indicator--43484a3f-6ed9-4705-bf71-fac6651762c5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f76a013-a0ee-4249-9b9e-b3abe70103a0", "sighting_of_ref": "indicator--77f94444-d2d1-4162-83c8-1b5072d372f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b48cfad-9334-4136-b6f8-db9aa2a343ac", "sighting_of_ref": "indicator--77f94444-d2d1-4162-83c8-1b5072d372f0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b66b10-df78-4ed9-a281-2a4a58ab6cb9", "sighting_of_ref": "indicator--77f94444-d2d1-4162-83c8-1b5072d372f0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099e99ad-730b-4bb0-9c26-3864d7ea4696", "sighting_of_ref": "indicator--56736716-c235-4b50-9c03-e856f649f032", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92075a84-7003-495c-b4d7-d6d9ba4bb936", "sighting_of_ref": "indicator--ec026446-69b4-42ac-a10e-46ddc09d4bff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8477ae9-b3de-4c78-b227-c6e4c44e5d84", "sighting_of_ref": "indicator--56f0dd42-e21a-4af7-a307-95afdeb51d76", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864a4c1f-700a-4849-a53b-70e38d94403c", "sighting_of_ref": "indicator--56f0dd42-e21a-4af7-a307-95afdeb51d76", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541a2dcd-8a3f-462c-b5b9-eb33b6cb2aab", "sighting_of_ref": "indicator--56f0dd42-e21a-4af7-a307-95afdeb51d76", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f7c3e0-38d8-4678-b9de-ea32ea96d325", "sighting_of_ref": "indicator--d6e40518-18f6-4c6b-8ad8-fee215ae11dd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91abee13-48b6-47f9-b7c5-2911d4b04edf", "sighting_of_ref": "indicator--d6e40518-18f6-4c6b-8ad8-fee215ae11dd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba254a81-4d50-4095-a552-f15259197b33", "sighting_of_ref": "indicator--d6e40518-18f6-4c6b-8ad8-fee215ae11dd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b085d7-a624-4939-8a02-3e287bb50683", "sighting_of_ref": "indicator--78ff8ca0-41de-4ef2-bfa7-98e24ed6bf9e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a188fb6-af60-4ef1-9bd3-0d2054630d07", "sighting_of_ref": "indicator--78ff8ca0-41de-4ef2-bfa7-98e24ed6bf9e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98754f78-eda9-4841-b929-87d73cfd2838", "sighting_of_ref": "indicator--78ff8ca0-41de-4ef2-bfa7-98e24ed6bf9e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0e5dfc-3ab8-4281-bc9f-2da3fb700274", "sighting_of_ref": "indicator--a3183a1a-8a0a-4587-8f5e-b06678b644f1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af0417e-c9e8-408c-822c-e5d22aa08be4", "sighting_of_ref": "indicator--a3183a1a-8a0a-4587-8f5e-b06678b644f1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bd6ac4-4921-4ac1-a09b-a933e72e5bed", "sighting_of_ref": "indicator--a3183a1a-8a0a-4587-8f5e-b06678b644f1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5d9c72-96bc-48fb-ab12-b043c5d735eb", "sighting_of_ref": "indicator--a9d5a59f-58cd-4551-ad5d-7d4057a54fd5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fb7e85-2c02-4a7a-b1f9-644c9eb0f5b7", "sighting_of_ref": "indicator--a9d5a59f-58cd-4551-ad5d-7d4057a54fd5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f440f369-f52a-48c9-8f18-b415c8fe4230", "sighting_of_ref": "indicator--a9d5a59f-58cd-4551-ad5d-7d4057a54fd5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1d9981-f4a6-482a-96b8-03a6f533a611", "sighting_of_ref": "indicator--2b8ccd64-acfe-4179-ada4-adf5ef75ff91", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e866880f-c71b-496d-bcd6-cf6498ba14c5", "sighting_of_ref": "indicator--2b8ccd64-acfe-4179-ada4-adf5ef75ff91", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e4b748-d40e-4a30-a42d-867704a0e3e1", "sighting_of_ref": "indicator--2b8ccd64-acfe-4179-ada4-adf5ef75ff91", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5653151-67d8-4e3c-9703-c53119b95ba0", "sighting_of_ref": "indicator--46411103-b28e-424f-994a-c89623873226", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64cf9fb2-4384-4fb4-905a-71abf63c1c9c", "sighting_of_ref": "indicator--46411103-b28e-424f-994a-c89623873226", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45959b12-4362-4de7-964a-7467b9bbd818", "sighting_of_ref": "indicator--46411103-b28e-424f-994a-c89623873226", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a3149e-5246-4da0-a395-240515145569", "sighting_of_ref": "indicator--5ef6b46e-d71f-4837-aae8-858fe8c7256e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d6c148-9a26-49a0-aa7f-a24952d50d73", "sighting_of_ref": "indicator--5ef6b46e-d71f-4837-aae8-858fe8c7256e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93514d3-9582-43c8-957e-2101ae3eaf3f", "sighting_of_ref": "indicator--5ef6b46e-d71f-4837-aae8-858fe8c7256e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34157e8-ffb7-4b90-a3ca-6c7d21a114de", "sighting_of_ref": "indicator--9ae6743d-cd29-44ee-bd27-513d4ecb59fe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f59625-a6a5-427a-9142-fbe8ac09ea60", "sighting_of_ref": "indicator--9ae6743d-cd29-44ee-bd27-513d4ecb59fe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788d3e45-e1c0-465f-831a-c69caa071072", "sighting_of_ref": "indicator--9ae6743d-cd29-44ee-bd27-513d4ecb59fe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69496940-0262-4d27-82d8-f068bd6a92da", "sighting_of_ref": "indicator--4433db1d-e62b-4672-807d-11c46fc369cf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d051ede9-2b81-48a8-beba-dd3bafa44df4", "sighting_of_ref": "indicator--29b7b11e-c193-40c9-82c0-4c91c4f767f2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478ac501-f903-4a48-b607-161e6c56e41e", "sighting_of_ref": "indicator--29b7b11e-c193-40c9-82c0-4c91c4f767f2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befbc443-41ae-49cf-a36d-065f1af1247b", "sighting_of_ref": "indicator--b9ff403c-810e-45a7-a670-8b0459f2d85c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed610d37-4fa9-467d-8591-0fa3312e6e6b", "sighting_of_ref": "indicator--b9ff403c-810e-45a7-a670-8b0459f2d85c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6f122f-cce8-4cd8-b218-3ce0a7fd7635", "sighting_of_ref": "indicator--16e22156-8233-48b2-8490-ab7d6640851e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e889f533-4a1d-4f95-882d-2cdee4276dee", "sighting_of_ref": "indicator--16e22156-8233-48b2-8490-ab7d6640851e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6755dc89-d7f2-4d30-b4ef-62a10c451756", "sighting_of_ref": "indicator--16e22156-8233-48b2-8490-ab7d6640851e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db7f846-06b8-46af-9934-ad1bf094679f", "sighting_of_ref": "indicator--e6172231-ca65-4a81-9c3b-f36ff57f4033", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067ea955-eea6-4292-a75d-92645acc774f", "sighting_of_ref": "indicator--e6172231-ca65-4a81-9c3b-f36ff57f4033", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966fbb63-097b-4cf5-87d9-7894880b08cb", "sighting_of_ref": "indicator--e6172231-ca65-4a81-9c3b-f36ff57f4033", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa409254-8d1d-41fc-8791-7df5aee8c72d", "sighting_of_ref": "indicator--89e6bdb3-c301-4ddc-adec-8b3ba06a1d64", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0c7042-5a03-468b-8891-119b471d0feb", "sighting_of_ref": "indicator--89e6bdb3-c301-4ddc-adec-8b3ba06a1d64", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcdd0cbf-87ae-4bb9-b331-7e3b0f8192d0", "sighting_of_ref": "indicator--b90c4f19-60d1-43b3-8fd6-3b2152bab178", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b9e441-06d8-4b55-a038-4b7651b67d0d", "sighting_of_ref": "indicator--812c8ffc-ea18-488a-bf99-c452c4a021c0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34928360-dcc5-4c0d-8fed-6123b1baeea7", "sighting_of_ref": "indicator--812c8ffc-ea18-488a-bf99-c452c4a021c0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a651cefd-fd29-4662-ae63-c35b6d0f98f9", "sighting_of_ref": "indicator--1b43f2f4-d308-4f15-acc8-1d4bcf24bbc1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387c9de7-066e-422e-8932-381521fc5f9c", "sighting_of_ref": "indicator--1b43f2f4-d308-4f15-acc8-1d4bcf24bbc1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c41b2e1-4277-499e-a8ff-b105228e56af", "sighting_of_ref": "indicator--f6869b17-1d3a-42f6-9257-1f406bdfc62c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b430ab52-ad35-47d8-bd70-56db73b4ab39", "sighting_of_ref": "indicator--f6869b17-1d3a-42f6-9257-1f406bdfc62c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87b9676-54c5-4337-9e73-6d271d529414", "sighting_of_ref": "indicator--182af272-6147-45a2-886d-e4c30afefa87", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bd00ff-102e-4f5c-b189-571a6d7618c2", "sighting_of_ref": "indicator--b31ca9ec-12f0-488d-bc64-a6558c526157", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14aeff9c-c24f-4791-b0ae-13eb4d05a23f", "sighting_of_ref": "indicator--842acb3b-c971-47cd-9d7d-66d2b479945c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03fbcde-7e18-4a29-a0bb-0557401c815d", "sighting_of_ref": "indicator--2c604659-b93f-4b62-81f9-7922c2b60b87", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1325133-0bb5-43c6-ac3e-f6ba263938a6", "sighting_of_ref": "indicator--2c604659-b93f-4b62-81f9-7922c2b60b87", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4692cb4b-d798-4d22-92a9-9825a65fb7ce", "sighting_of_ref": "indicator--2c604659-b93f-4b62-81f9-7922c2b60b87", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818d986a-6112-4698-96b6-3f455acf17b8", "sighting_of_ref": "indicator--48346b19-aba3-44c9-80d0-c32d45c74f0e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98425e1-0c01-4e62-885d-0debd79510a1", "sighting_of_ref": "indicator--5ce5b011-338a-4f9c-8737-8c069378fcbd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e48369-4e66-410a-ab54-c787f44c1267", "sighting_of_ref": "indicator--9e308991-7803-4567-87e2-8e414b634aaa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da16e00-cfc0-4306-b80e-236b95e699c2", "sighting_of_ref": "indicator--28e0c964-aafc-470e-b5b2-afb72f912d02", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7f1541-6176-430b-b326-b173cbdf09de", "sighting_of_ref": "indicator--28e0c964-aafc-470e-b5b2-afb72f912d02", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8caf4395-c9ff-4f96-8d23-5caccb29a5b0", "sighting_of_ref": "indicator--d26dd0ff-99b0-41ff-b1ce-65b505fca0cf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c341f2-6577-4611-91e5-188f1ec7a41a", "sighting_of_ref": "indicator--4ab46737-5da8-48dc-9c99-fe741eb90772", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d1606e-0c91-45b4-8d2c-5542e73fc190", "sighting_of_ref": "indicator--7f77372a-bdd5-42bf-9047-d3281c624b2c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e6d846-aa7c-4fa0-a9b8-326586ecab72", "sighting_of_ref": "indicator--7f77372a-bdd5-42bf-9047-d3281c624b2c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5f57ff-b6e2-4e08-aca9-6fd16862a378", "sighting_of_ref": "indicator--7f77372a-bdd5-42bf-9047-d3281c624b2c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db982bc7-ef01-438f-85a7-1a8a6e30003e", "sighting_of_ref": "indicator--00ef6789-4fe2-4cda-ada6-3bc7273ba85b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c1f03d-0593-4e69-8353-4939d483cab0", "sighting_of_ref": "indicator--00ef6789-4fe2-4cda-ada6-3bc7273ba85b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594d285c-7ff0-4d0d-9433-a52dcb1b2b36", "sighting_of_ref": "indicator--88876f5c-759c-4fbb-9703-ba23014eddfb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c763e0-3765-4e0c-a55f-030ac478f22c", "sighting_of_ref": "indicator--88876f5c-759c-4fbb-9703-ba23014eddfb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd66012-05fd-4efa-85b5-7bcd04340851", "sighting_of_ref": "indicator--88876f5c-759c-4fbb-9703-ba23014eddfb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707173e1-e0b3-43f8-86e6-8b504603960f", "sighting_of_ref": "indicator--30401eb0-628e-4d83-87e0-8bd121b5c5f2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80179513-0e93-4c09-9347-ca81f0d20bf2", "sighting_of_ref": "indicator--30401eb0-628e-4d83-87e0-8bd121b5c5f2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99a4487-5df5-49da-9c1d-c0e9314ac8a7", "sighting_of_ref": "indicator--30401eb0-628e-4d83-87e0-8bd121b5c5f2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f164fdce-3743-4c60-9da3-019a56d74ae9", "sighting_of_ref": "indicator--f748ddf0-d801-4e23-9a7b-ee81e1cab852", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450ec71e-fbd7-41bb-889f-3c78266bc4d4", "sighting_of_ref": "indicator--f748ddf0-d801-4e23-9a7b-ee81e1cab852", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969d170f-e76b-4a8a-b240-a5bf037d40c5", "sighting_of_ref": "indicator--f748ddf0-d801-4e23-9a7b-ee81e1cab852", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d91da45-bc82-43dd-b97a-f69849facf81", "sighting_of_ref": "indicator--21dc5b63-c231-474d-a313-a54a27c945a8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e99ec63-2cb7-40d7-9d4c-603e5a4410ef", "sighting_of_ref": "indicator--3144880e-63eb-4222-a17b-50ff2cb46a02", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7452a314-8f1b-40b2-aa45-1cc24850a152", "sighting_of_ref": "indicator--3144880e-63eb-4222-a17b-50ff2cb46a02", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0b89d4-c1fb-4440-be08-281028397908", "sighting_of_ref": "indicator--3144880e-63eb-4222-a17b-50ff2cb46a02", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa5fd6b-60ec-43c5-986e-c20ebcfb5df9", "sighting_of_ref": "indicator--139868c2-5b24-45a9-aa8c-92a5c00117c0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1483d576-e910-46b4-b7bf-d137b09395f8", "sighting_of_ref": "indicator--139868c2-5b24-45a9-aa8c-92a5c00117c0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244605aa-b910-4efc-a8e0-171cf927e151", "sighting_of_ref": "indicator--139868c2-5b24-45a9-aa8c-92a5c00117c0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c8bfb1-ee4e-41c5-9fa7-770595cf4466", "sighting_of_ref": "indicator--d18c0d80-49b6-4d88-90bf-3d8621e91197", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e993a8d6-6451-438a-a597-06f09f030cac", "sighting_of_ref": "indicator--4caab174-2c2a-4a06-bc02-9b3854a78369", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b538076-fc41-44ce-b7f4-5acc45156e4c", "sighting_of_ref": "indicator--4caab174-2c2a-4a06-bc02-9b3854a78369", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2412911-87a7-480d-ba34-a6c3a257407d", "sighting_of_ref": "indicator--88b0d4ce-5f65-4e38-a654-cca6b9e26049", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf85152-1035-4568-8724-bdbb524868e8", "sighting_of_ref": "indicator--88b0d4ce-5f65-4e38-a654-cca6b9e26049", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d62edf-5e20-4228-834c-26537f442fe1", "sighting_of_ref": "indicator--0b1be441-bf28-42a8-9f19-215c2d5d29ed", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55878dd4-e0d9-47d9-92c5-f6afa485152f", "sighting_of_ref": "indicator--f49dd937-6dcc-4b9b-add9-e52b4e0b88b9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e97c46-f91f-4a58-8107-c54ff7b5028a", "sighting_of_ref": "indicator--f49dd937-6dcc-4b9b-add9-e52b4e0b88b9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1429a6da-c1a2-4845-a7dd-60cbc1ccd723", "sighting_of_ref": "indicator--f49dd937-6dcc-4b9b-add9-e52b4e0b88b9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ad360f-8ec7-435e-ba85-53b81f821020", "sighting_of_ref": "indicator--e7a40778-6edf-4e65-b7de-eaab72572fa9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae90af9-be10-4cb3-9eb5-a576cc7a7d39", "sighting_of_ref": "indicator--891c9190-7425-443b-82a7-562c15f23a22", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12230b5-d2af-4894-b547-ed388d9f5df0", "sighting_of_ref": "indicator--7672717a-4180-4459-8fc8-a2a4580f9228", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d86e23-b287-4271-bead-5550dd665f10", "sighting_of_ref": "indicator--4a33636f-90cf-46bf-bc5a-d6b5ee316368", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f26644f-2db0-4a3e-895a-4d8729b17ec4", "sighting_of_ref": "indicator--d7bbf1ba-f8bf-4a89-9773-426aee8796a3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209d1a2e-ae48-409e-bd58-3e3d874eeb68", "sighting_of_ref": "indicator--d7bbf1ba-f8bf-4a89-9773-426aee8796a3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75186f44-a747-4711-8cb6-a5811541cbcb", "sighting_of_ref": "indicator--31c3852b-0d8d-4286-a855-7a36a4acb771", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57750ce4-f6da-4f5d-a13d-f802f6fa33ba", "sighting_of_ref": "indicator--31c3852b-0d8d-4286-a855-7a36a4acb771", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38edc855-9dd4-4f87-899e-ed8661eb432b", "sighting_of_ref": "indicator--5d40b1b8-7cf4-4824-a672-8b57cc89ca39", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee921721-a942-45d8-a7f3-66780bf57fe6", "sighting_of_ref": "indicator--58e53813-0070-471c-8e32-846f5ee7cc8e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bfaa0b-a28d-485e-94d9-af08046bd027", "sighting_of_ref": "indicator--54ad2e2b-ed52-43a3-b781-1a9e84c81273", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849e51e5-ed6e-432b-b375-43729f3bff1a", "sighting_of_ref": "indicator--54ad2e2b-ed52-43a3-b781-1a9e84c81273", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad17db1-8f3a-48a9-94f3-23ef6beed5aa", "sighting_of_ref": "indicator--26833c01-7e35-4cde-992d-c39568a33b7a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8253f37-8e6c-4af8-98f6-1f3eae9b835e", "sighting_of_ref": "indicator--26833c01-7e35-4cde-992d-c39568a33b7a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4141207-f1ca-4ed7-b5ac-c608379eb43c", "sighting_of_ref": "indicator--d5e66d73-3c6f-44e1-a676-2e5488dd908b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef390fdc-6655-452c-9128-57243fd66dc6", "sighting_of_ref": "indicator--c81d7c47-e115-4040-9fe5-3296aa6afb4e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af674478-89a8-4255-8955-3d5de5d8fc90", "sighting_of_ref": "indicator--4678a255-1e50-4964-b862-a6b7cefe2cd3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de50680e-994e-4f02-a2c2-f071b2f8f5d8", "sighting_of_ref": "indicator--4678a255-1e50-4964-b862-a6b7cefe2cd3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6710fc1d-285d-48cb-a519-43dab677934f", "sighting_of_ref": "indicator--344224f1-0384-482f-a325-df8cb5c202fa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5073d6-e157-487f-b36f-445791b32d0f", "sighting_of_ref": "indicator--cf38e6e4-fd17-4552-bf87-cd08ac66c681", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a777c241-bb14-497e-94c4-369544a5fb8e", "sighting_of_ref": "indicator--cf38e6e4-fd17-4552-bf87-cd08ac66c681", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d259ff-ef1e-4aad-92c6-7fce2c02c253", "sighting_of_ref": "indicator--cf38e6e4-fd17-4552-bf87-cd08ac66c681", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5525a175-8a62-4ab5-9e1f-8d7a5473c60f", "sighting_of_ref": "indicator--d8458788-63f9-44f6-84ab-3144751707dc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73d915a-ffd9-46d1-92bd-b5f19cb61621", "sighting_of_ref": "indicator--d8458788-63f9-44f6-84ab-3144751707dc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e30ea6-59bb-4364-a279-193b89a264ba", "sighting_of_ref": "indicator--d8458788-63f9-44f6-84ab-3144751707dc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515fae93-ee28-4cf1-a083-4a7f8b3df1a5", "sighting_of_ref": "indicator--6d6f82f3-c191-4875-801a-761072bedba6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671f32e1-9c79-4fcf-acba-b33f76c26cd3", "sighting_of_ref": "indicator--6d6f82f3-c191-4875-801a-761072bedba6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90318395-881d-469a-834a-5aeb83bba1b5", "sighting_of_ref": "indicator--89155176-3e32-4eea-8a76-3e775e5561f7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd3f647-143a-481e-be4f-93a93c3a89b3", "sighting_of_ref": "indicator--89155176-3e32-4eea-8a76-3e775e5561f7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dae1e7e-f3da-4458-a2c3-0845c453fa02", "sighting_of_ref": "indicator--47cd2d12-fce3-4610-a7da-032dd37af648", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2fbea98-a3b8-4082-b905-e814f2e38768", "sighting_of_ref": "indicator--c8555ce2-c6c3-404d-9934-ed485380acba", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e61e6b2-12b8-4c6e-936b-c2e989ba2ba0", "sighting_of_ref": "indicator--c8555ce2-c6c3-404d-9934-ed485380acba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30801de3-57b5-4b61-b6f4-a2a0f6469672", "sighting_of_ref": "indicator--c8555ce2-c6c3-404d-9934-ed485380acba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8da750-f0a2-4ed3-be63-02e335c8fbee", "sighting_of_ref": "indicator--baa39d97-72be-42da-a435-c99e8a18b1f4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf73491-1699-4302-bf56-50bd5ecfb02a", "sighting_of_ref": "indicator--baa39d97-72be-42da-a435-c99e8a18b1f4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe6afc8-f5be-4b9a-8b7b-65c2f72bbd8b", "sighting_of_ref": "indicator--4d3bff49-12bb-43b9-b808-d6993e46639e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fbca95-11a5-4677-b14f-06675974e376", "sighting_of_ref": "indicator--4d3bff49-12bb-43b9-b808-d6993e46639e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ead4a2a-6e6e-4259-ade0-1fe38050a2b1", "sighting_of_ref": "indicator--1c64a943-9426-4f11-ab05-b0a9a64e01f7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a45d62-55fd-4e5b-b122-6adfca041ced", "sighting_of_ref": "indicator--3a5a3efd-1f92-402e-bf44-38277b624342", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beada88b-4f94-49ac-9fda-b504f462ed77", "sighting_of_ref": "indicator--3a5a3efd-1f92-402e-bf44-38277b624342", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9460ca-1521-455b-9a46-86864dd5cd1c", "sighting_of_ref": "indicator--e33d1344-9718-419b-b3e1-148c39b33915", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2166172f-5a79-4449-b561-6848eafc067c", "sighting_of_ref": "indicator--e33d1344-9718-419b-b3e1-148c39b33915", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f17d40-b14d-48f5-8efb-d2cda663717c", "sighting_of_ref": "indicator--e33d1344-9718-419b-b3e1-148c39b33915", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc832f2-259d-4319-83c5-5d83baa61c44", "sighting_of_ref": "indicator--68248185-a620-46fc-867d-0571fe1fb0a8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7eb9ba-7212-443d-90cc-e1559ee3507e", "sighting_of_ref": "indicator--68248185-a620-46fc-867d-0571fe1fb0a8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b374684c-9605-44d0-a2f9-41b34dcd5d09", "sighting_of_ref": "indicator--68248185-a620-46fc-867d-0571fe1fb0a8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e769e1-a425-4e15-b995-878f5379d757", "sighting_of_ref": "indicator--584c4a37-7744-4dea-b960-1a7ea7e20d4c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd5f3fb-1b19-4af8-90a6-4cb3a253605b", "sighting_of_ref": "indicator--584c4a37-7744-4dea-b960-1a7ea7e20d4c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59f8451-fe34-4801-961c-d858e75a3c80", "sighting_of_ref": "indicator--362c28d0-6303-497d-b043-8b0b81a99c51", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc26362-1c3a-454a-9741-35a6b1ace62f", "sighting_of_ref": "indicator--a5317bbf-3237-4c0d-b80e-000b079f26dc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5708c4f1-6555-477c-83e7-08a0990b0c87", "sighting_of_ref": "indicator--a5317bbf-3237-4c0d-b80e-000b079f26dc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f553020d-7d04-4711-93c7-c94155566260", "sighting_of_ref": "indicator--a5317bbf-3237-4c0d-b80e-000b079f26dc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa74ed6a-79df-4827-a50d-f1da69959cfa", "sighting_of_ref": "indicator--85c409eb-6ec0-4689-b5a1-c6f8089c555c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c61d27c-ef8b-42ea-8a49-7025ac9a3e73", "sighting_of_ref": "indicator--8614b94f-e27b-4f8e-8401-4a78cefbb575", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88c49d7-8c82-41ba-ac7f-c9a2511cf129", "sighting_of_ref": "indicator--8614b94f-e27b-4f8e-8401-4a78cefbb575", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22dac626-cd13-425f-a55e-42c248351148", "sighting_of_ref": "indicator--8614b94f-e27b-4f8e-8401-4a78cefbb575", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a6bddc-efb2-4bdc-b8c3-3f8c69f5e325", "sighting_of_ref": "indicator--e77dd065-9c92-40c0-887e-a994369ef740", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bafacfd0-9c01-402d-9163-4774e1ae51c0", "sighting_of_ref": "indicator--9e51f570-d65f-4402-aef7-8b41f0cafe94", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7a64ac-a22c-4473-927d-92978678dbc1", "sighting_of_ref": "indicator--cf882aeb-aa36-49e4-9145-cf2183ea9e63", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f371fb7b-1815-477c-80ad-4c2c5b6fdb8c", "sighting_of_ref": "indicator--cf882aeb-aa36-49e4-9145-cf2183ea9e63", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441d6054-3f03-4dd3-9332-af35fe30fb0f", "sighting_of_ref": "indicator--2d1bfeff-c23e-4396-bfd4-6487c81feddf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ff0c6f-5692-42e0-8760-dd86b7f0eca2", "sighting_of_ref": "indicator--9042ec7a-07bd-4ddb-b44e-69e48410a4be", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19de4584-7b0e-4e99-864a-e19bf415f994", "sighting_of_ref": "indicator--9042ec7a-07bd-4ddb-b44e-69e48410a4be", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0194690d-132b-495c-adcd-8b9dfd210878", "sighting_of_ref": "indicator--9042ec7a-07bd-4ddb-b44e-69e48410a4be", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d22e2d-fbc1-421e-a3e3-d2af9a8602c6", "sighting_of_ref": "indicator--53b785ea-eaa6-46fa-97c0-bc3e44720b41", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b7d62b-8c89-4c47-bc14-a50f4cc33eb0", "sighting_of_ref": "indicator--4f4da9a0-0c8a-4cfa-993b-0bcfdd96c7a3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee0ecb9-5c23-480d-8d0a-4f51dccb27fb", "sighting_of_ref": "indicator--5020cafe-66d4-4cdd-8dba-f6b05d4855e2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016be362-d8ea-4782-980c-4313065fe738", "sighting_of_ref": "indicator--7fd42ea1-c0ef-4af3-a957-82ad8a16910e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e11f78f-8080-45e7-a5d6-b8911d81d876", "sighting_of_ref": "indicator--7fd42ea1-c0ef-4af3-a957-82ad8a16910e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d730e0-36f1-4db5-804a-0a9203eb7245", "sighting_of_ref": "indicator--7fd42ea1-c0ef-4af3-a957-82ad8a16910e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f3b185-e8c8-4dc7-bc87-ae1b51f23fc8", "sighting_of_ref": "indicator--7a4df84d-7114-4e9b-b75d-ab146fb0a924", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369e727a-b622-4e8f-b038-6fa21348607a", "sighting_of_ref": "indicator--7a4df84d-7114-4e9b-b75d-ab146fb0a924", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d130fdc-d6b6-4fc0-9edd-a965aa4beae7", "sighting_of_ref": "indicator--7a4df84d-7114-4e9b-b75d-ab146fb0a924", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb694eab-b1f7-43d0-9e13-282c71ee2ff8", "sighting_of_ref": "indicator--3dfa5b1f-0d32-42ce-ab28-ac63b172fdd1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeae3011-ec8a-4d02-addd-b7cbbba27170", "sighting_of_ref": "indicator--3dfa5b1f-0d32-42ce-ab28-ac63b172fdd1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b85ccd-b473-4fd5-9dd0-3c8cb7b7ef30", "sighting_of_ref": "indicator--12843392-c087-4694-adfc-c35c5e3a2dc4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0386f3-6cd7-41d9-8669-b4e597ca953f", "sighting_of_ref": "indicator--12843392-c087-4694-adfc-c35c5e3a2dc4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe715be5-34de-4760-9b7d-556b638c76c4", "sighting_of_ref": "indicator--12843392-c087-4694-adfc-c35c5e3a2dc4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c04693c-5262-46b3-bd72-65be74f41214", "sighting_of_ref": "indicator--31662e43-a8b7-452f-a15d-b3c8410ca40b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10794f33-f7c4-43bc-abd0-27364a147caa", "sighting_of_ref": "indicator--541e9400-301f-4964-8266-d673f439afc6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff3b9dc-d8f4-4bc1-935e-b0307cbe25af", "sighting_of_ref": "indicator--02a9f1cb-d725-4b2f-b989-db2a094e201a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cee2ca-afaf-4570-b59c-0879ff4810b3", "sighting_of_ref": "indicator--fb3197c4-b956-4398-9832-f5448c22c463", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e4b7a4-5e10-43cb-99c6-82467aec2388", "sighting_of_ref": "indicator--f4da94d1-70e5-4b55-8724-d2e85af96ae4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c040d4e-1d57-4ccd-af64-65a809b45d8f", "sighting_of_ref": "indicator--6334109c-d538-4f04-9923-f59de165557e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cab368c-85b8-4672-bda2-049b3268f80b", "sighting_of_ref": "indicator--6334109c-d538-4f04-9923-f59de165557e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe56257-3608-4e85-bfb9-a54afd0e8648", "sighting_of_ref": "indicator--6334109c-d538-4f04-9923-f59de165557e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac58f39-749b-4418-9ea0-e41e91519f19", "sighting_of_ref": "indicator--0e9cb133-08d5-42aa-9e4b-0a12d1255b64", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b60f22-edab-4bb0-9e6b-79837f072ecb", "sighting_of_ref": "indicator--6b6cf2b5-4858-4a42-9fc4-6a91d2df8622", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79172cf2-7f17-4f2c-a753-3473e81fa2fc", "sighting_of_ref": "indicator--5c489ec2-8ac1-484b-8e3c-a83a47750deb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47b6914-8180-4f5c-8fc9-c4fac8bfa7db", "sighting_of_ref": "indicator--f37b6ec3-25d0-4b36-ae8d-7cfebc6c4a46", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194d07bb-efae-45fa-bef6-8ecae88654a2", "sighting_of_ref": "indicator--f37b6ec3-25d0-4b36-ae8d-7cfebc6c4a46", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0562af0-9270-4ebf-8548-5669e3c0d013", "sighting_of_ref": "indicator--fe97c17f-0171-4354-b00b-96563212e5a1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca03471c-3d43-440e-bce2-6b6aeae5eb5f", "sighting_of_ref": "indicator--28e53bfb-8c25-434e-b3d7-7af1808ea60b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9c5e96-ec99-4d81-a0e0-0409ee955eec", "sighting_of_ref": "indicator--8007cec1-a51e-464e-80b9-3ef83f668b17", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4eb67c-a76b-4faf-8482-f6fb027de574", "sighting_of_ref": "indicator--4531a116-236e-47b3-8ea4-4309f3cd341c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464e487a-b207-49f4-8494-7b26cebcb1fb", "sighting_of_ref": "indicator--cfec55fe-009f-415a-9d62-9abf4cbd9b93", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aabdb593-1af2-422b-9859-0c868247c9bc", "sighting_of_ref": "indicator--b2a41fb5-3fea-403f-893c-7addbf6aa653", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85260515-9047-421c-80a5-f5e0daf131f6", "sighting_of_ref": "indicator--55de80e1-8428-4c9b-8d8b-64624bed1654", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac843e65-52e6-4092-b2a0-4223fa4639b0", "sighting_of_ref": "indicator--55de80e1-8428-4c9b-8d8b-64624bed1654", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ebd19e-1ceb-475d-9bd2-f21cedb76999", "sighting_of_ref": "indicator--55de80e1-8428-4c9b-8d8b-64624bed1654", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4951e7bb-b0db-48ac-a363-0d4434052d6d", "sighting_of_ref": "indicator--76799e30-1364-4cdb-aedb-bad288e458f1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd42fc22-8d70-4e74-9e78-d18ce6bf4e65", "sighting_of_ref": "indicator--76799e30-1364-4cdb-aedb-bad288e458f1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd55e40d-3492-47ef-97d4-f77d3aa6afd4", "sighting_of_ref": "indicator--5a3a8e61-3a5c-43c0-b48e-97d1b2d59eee", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e43f044-23d7-4163-adfd-8d04faa8b119", "sighting_of_ref": "indicator--611408d5-5e9d-4d55-afcd-364edae1305a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d55b7bf-a74d-4b09-a9b7-4b705d91e162", "sighting_of_ref": "indicator--74cfa833-6a7c-4ae9-83b5-d1419230da4f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84c682e-9d4e-498c-985e-c5655d916a16", "sighting_of_ref": "indicator--74cfa833-6a7c-4ae9-83b5-d1419230da4f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f70fcc-7f0b-4929-9002-d108dc38c9a1", "sighting_of_ref": "indicator--1a2945a9-4870-4157-aa09-52dc75c38b64", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bb8aba-a22c-4e85-aadf-fc05396e5f2b", "sighting_of_ref": "indicator--6344e832-9c65-414c-9040-36aae17864e7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668cdfe1-0536-4a17-9a42-fbe585db4e78", "sighting_of_ref": "indicator--d01c472c-2163-4773-9a9e-2f759c18705b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94db2da3-a747-4e76-9646-274bb2486a05", "sighting_of_ref": "indicator--d01c472c-2163-4773-9a9e-2f759c18705b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fcf6777-7db1-41b0-ac45-f1dd051dc430", "sighting_of_ref": "indicator--bb7d83ca-cb71-4f30-b9ae-272791f83650", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038b037a-f450-4f98-b87d-a9fc38f05f74", "sighting_of_ref": "indicator--92879fe3-d56a-4a0c-ba66-2d0edd1c3369", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3704ab4f-fc51-4493-a3fd-c845ca8ad249", "sighting_of_ref": "indicator--4e7d286b-1ad5-40a1-b301-a153a3cc157f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc43124-9ccf-4ac8-a82e-9cc1441193f9", "sighting_of_ref": "indicator--2d50e04d-964a-458e-9b84-d458afd5d82a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e3133e-9385-4f6e-ab09-b44e0670f4ad", "sighting_of_ref": "indicator--af98d89a-3eb1-4c9a-99aa-bddf7b4fa6ee", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a727c7d0-85c9-4be4-9e25-8179ffe80f01", "sighting_of_ref": "indicator--af98d89a-3eb1-4c9a-99aa-bddf7b4fa6ee", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa0f2b6-2c5d-4adf-afa1-5c3ea783094f", "sighting_of_ref": "indicator--4188e507-aeaf-4d1f-925f-8d71f5f07d6b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c0a54a-c1ea-44d2-96c8-cc0b425b70db", "sighting_of_ref": "indicator--889d404f-fd3f-43c7-ae8d-532c502ebeb0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71eb9ec-dd3f-48c2-a885-100c540dfdf0", "sighting_of_ref": "indicator--889d404f-fd3f-43c7-ae8d-532c502ebeb0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8932df56-27fe-43e2-8f1d-188566047efd", "sighting_of_ref": "indicator--415d4223-5169-45ff-b033-ba51df2e6abb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5936243-ca7d-4f2a-9aad-b7fc67181615", "sighting_of_ref": "indicator--415d4223-5169-45ff-b033-ba51df2e6abb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9da46fc-9cea-41d9-8b28-71d597f14847", "sighting_of_ref": "indicator--f0308861-8184-401f-9bde-78e45f830c74", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937a76bd-9327-40fc-84b3-a76afdc6a607", "sighting_of_ref": "indicator--f0308861-8184-401f-9bde-78e45f830c74", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1193d7e2-caea-4795-9132-4e1f8d128d68", "sighting_of_ref": "indicator--b16b6b3a-b9e0-44a2-965a-6697885403d1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91fcfe8-3ec4-47cf-964c-c429dce38e45", "sighting_of_ref": "indicator--1693c852-cbfe-474a-855a-27b5ed2aecc6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7dc761-1f34-4be6-9ee9-52a7c157eb81", "sighting_of_ref": "indicator--fa06288f-f4d7-40bf-926e-fce20e8adf55", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9732ff8d-0c04-498f-9ea2-fcb183ae4411", "sighting_of_ref": "indicator--1b5cfef3-feb3-492a-9053-0f2aa5869425", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb9c640-0a10-4e81-be8e-704a3a82986d", "sighting_of_ref": "indicator--6ccbfe91-8628-47db-97a7-d83a3c252019", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fc603c-d011-4c25-b062-a785e7f4ef33", "sighting_of_ref": "indicator--b321edb2-0202-40f9-97ab-8fe1e401703f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7cd3ad-b0d9-47cf-b61a-9db62493bb08", "sighting_of_ref": "indicator--b321edb2-0202-40f9-97ab-8fe1e401703f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d687d4a7-8b15-43c6-8b1f-22f506b9a41a", "sighting_of_ref": "indicator--b321edb2-0202-40f9-97ab-8fe1e401703f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4852c03-8b65-41bb-86c1-b5e20431cb90", "sighting_of_ref": "indicator--e168259b-b54b-4c50-ace8-abc0d1cd43ef", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318d8836-6a08-4d10-af25-b73f640e587a", "sighting_of_ref": "indicator--e168259b-b54b-4c50-ace8-abc0d1cd43ef", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c3967a-84d9-4d62-b383-916c4f7c5c80", "sighting_of_ref": "indicator--b505804c-9388-492b-bd3d-76d85d44baab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20f2fe8-f826-4bca-b106-8e5fe4b4a94a", "sighting_of_ref": "indicator--3cf0ca0d-abd6-4203-af82-e09cb6f62ff9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2bd66c9-32c3-4da4-a982-68cd5e0ecb17", "sighting_of_ref": "indicator--e0bfa357-5a95-474f-a208-0150e16cc6ae", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e35ac6-1fa5-4a7b-8e4c-5149b8a2f2dd", "sighting_of_ref": "indicator--0a40f9dc-1207-42f2-a9f7-1ff777c1b581", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898dbe14-0a34-4bec-8012-91ad23a5ae0a", "sighting_of_ref": "indicator--0a40f9dc-1207-42f2-a9f7-1ff777c1b581", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6aa50f-f61d-44ba-afe1-f2d2ec43a950", "sighting_of_ref": "indicator--0a40f9dc-1207-42f2-a9f7-1ff777c1b581", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe5f5e3-5b92-43a6-9251-81720971d4e4", "sighting_of_ref": "indicator--d7b779d2-3a96-4e68-a592-f26b0c750e1b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36172be7-961b-4c33-8f46-d8a3ee961411", "sighting_of_ref": "indicator--d7b779d2-3a96-4e68-a592-f26b0c750e1b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43246eca-66d5-4fad-aaed-d0a40f5ea17b", "sighting_of_ref": "indicator--04f3e067-01ca-441d-8b4a-a88f54676bef", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050a6426-2a27-4544-983e-7ca2ae377012", "sighting_of_ref": "indicator--255d452e-5f7d-414d-8c16-15bc61614a93", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc474f0-7569-420d-af3c-8ee4ec943d5b", "sighting_of_ref": "indicator--472a6fb2-10fb-4b80-8483-d3f74832fb8e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda2c96a-bbb6-473d-b16b-723a7d3b681b", "sighting_of_ref": "indicator--8c4485fe-d0b6-48bd-8c2e-fd5ef33f3cb9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a423d4-c8f3-47b0-8af3-eeccecdd8fec", "sighting_of_ref": "indicator--f8cf0303-511d-46ac-a250-748f12ff136b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff4d837-3249-4a82-8c0e-eb85564f39c6", "sighting_of_ref": "indicator--d87307dc-44d0-4f26-a517-517097f63273", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27aa6d5b-87f8-4ba8-a9ca-50373465dd9e", "sighting_of_ref": "indicator--b30cd594-e589-4c00-bbe1-132d87440d91", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45d4e1e-b86e-4c41-b923-72d2d712080e", "sighting_of_ref": "indicator--7f44e0f0-c2bd-470c-b9f0-11cae980ae33", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af924f2e-4b12-4cc9-a13e-6f6eb68ed75f", "sighting_of_ref": "indicator--7f44e0f0-c2bd-470c-b9f0-11cae980ae33", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43d884d-2226-4535-a5d9-e054448c42d6", "sighting_of_ref": "indicator--947947ec-2e32-44ea-b4c7-9ecaba9a6482", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b90e3f-e194-40c6-a9db-f391cd869798", "sighting_of_ref": "indicator--9d89d8a3-ee33-43f0-8aab-cc7bfc94dc1c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567531fc-bbb2-4f3f-a47c-09c67ed66fe7", "sighting_of_ref": "indicator--9d89d8a3-ee33-43f0-8aab-cc7bfc94dc1c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ee6db5-6fd8-4f09-8e4c-fe9771ef01a7", "sighting_of_ref": "indicator--6cab1f95-39f7-41c6-b414-1993500e73bf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43614540-8855-42e9-ac6a-8438a2a021b3", "sighting_of_ref": "indicator--94c497bd-faa2-4b4c-bd90-e7ced75d7bee", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c9ada1-89b0-4fb5-ba87-552e1d4196d8", "sighting_of_ref": "indicator--748151b2-87b9-4583-b2f6-5875671fb587", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a883a83-572c-4749-935a-282af3435ef5", "sighting_of_ref": "indicator--b55d0296-5f1a-4b93-a3ae-f2c4368a6369", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf33b5b-bb23-4054-a13b-85d1559669b5", "sighting_of_ref": "indicator--b55d0296-5f1a-4b93-a3ae-f2c4368a6369", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9e8989-9563-458f-8d25-d7a8e758c114", "sighting_of_ref": "indicator--b55d0296-5f1a-4b93-a3ae-f2c4368a6369", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7c76e8-fe7c-4296-a660-02a7bc4af4f9", "sighting_of_ref": "indicator--d005e7c0-b016-4067-a34e-a223f2f4e2b6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce853a60-cb72-4e01-adbc-740bd961216d", "sighting_of_ref": "indicator--d005e7c0-b016-4067-a34e-a223f2f4e2b6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48616c3-68aa-4845-8a5b-9a3756a648bf", "sighting_of_ref": "indicator--2cc4a1f9-8508-4adc-806e-ec041b067ef1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1492408-9ac1-4f0c-8788-6e897a4eec46", "sighting_of_ref": "indicator--e2fd14bb-b228-4962-8f85-29dcb0499f5e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30016d73-b0af-455c-a142-2b2699bc8fba", "sighting_of_ref": "indicator--e2fd14bb-b228-4962-8f85-29dcb0499f5e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335986bf-0fd8-4209-a62f-491ff6468caa", "sighting_of_ref": "indicator--6e7be48f-a6a7-4f31-b748-ca4b0c77dcac", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6780358-d9a9-4a3f-bd92-895f1547f32a", "sighting_of_ref": "indicator--a36ca13c-17d1-47df-930f-feb1205a6247", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b167f0-40e0-4145-b43c-12514e0f48a0", "sighting_of_ref": "indicator--4a3f4250-a1d4-4a42-8a6f-ab0b401fc358", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd2b071-6905-4e83-a6c7-b696968dd57b", "sighting_of_ref": "indicator--aeec74e0-0047-43dc-8093-6cea5d07b6da", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c34e0f5-a34f-4bb2-898c-10591b036b03", "sighting_of_ref": "indicator--80a8dc1f-3460-4422-bad8-6acabe6e996f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af742148-6298-406b-b069-0096ab13c525", "sighting_of_ref": "indicator--80a8dc1f-3460-4422-bad8-6acabe6e996f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6767beb6-2c9c-4181-ad18-c3fc08fdeea1", "sighting_of_ref": "indicator--b9ca2716-f06a-414a-a75f-b21b8def850a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a0397a-1976-4ff0-ae5d-9571958d659e", "sighting_of_ref": "indicator--7629bfee-bf24-4acb-8dda-ac7c83ea1253", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d49502-4e48-48aa-89cf-2c72e6067a51", "sighting_of_ref": "indicator--b166aa5b-03c2-4df1-9e6a-1bc091e1e973", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b5ba22-2a06-4f6a-aa8f-0a33bbfe80f6", "sighting_of_ref": "indicator--e66bddb4-b4da-4424-aceb-c9e85fc2fb59", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe72460-61e9-4c9e-b3a4-18bd3e49a3a3", "sighting_of_ref": "indicator--91279ebe-4640-4294-bcdd-645df0bad103", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ead15e-558b-48f7-81cf-2b1761e90225", "sighting_of_ref": "indicator--44144510-09e9-484a-b71d-b283b371b14b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ee490e-de58-425c-bc06-7295fbaa1617", "sighting_of_ref": "indicator--fdd915b8-3421-4803-ac78-ff1bc7c939f8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908f6249-46f9-41c8-b9ca-164d00e74f3a", "sighting_of_ref": "indicator--9502b4c2-b1e1-49bf-ab4f-0b16dc3087a9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c8a84d-c700-42b0-b81a-9ac2782af147", "sighting_of_ref": "indicator--9502b4c2-b1e1-49bf-ab4f-0b16dc3087a9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83c6c17-fbac-4701-b7cf-a2929f1c0460", "sighting_of_ref": "indicator--dfd2d000-28f4-478a-8a6c-9b59f8dbe99e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7ffa90-f53a-462b-9865-0698c1ce30ce", "sighting_of_ref": "indicator--9791229e-c568-4e50-b4b1-e3a63fd4bade", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfcd7e0-65ae-4990-ba10-92f2d0b26a86", "sighting_of_ref": "indicator--fc9e5fbb-f320-4fbd-b219-87c16cf6e623", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf57aa6-2b72-4bcc-b075-8de826cea9f9", "sighting_of_ref": "indicator--13a23cc4-4a33-44c7-bd50-34e9efc3b7e3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679ce5e1-b880-4073-b9ee-c39c59f69fdb", "sighting_of_ref": "indicator--67078377-af90-4963-b8c2-8e0aea56891a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8ee334-c50f-4407-a9bd-87448cfea69b", "sighting_of_ref": "indicator--67078377-af90-4963-b8c2-8e0aea56891a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61dce956-438b-4385-816e-76f43baa8325", "sighting_of_ref": "indicator--5e09e087-e0cd-43b8-b94f-e088ff79c514", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24bd4c6-beb0-471e-bd80-fec62925434a", "sighting_of_ref": "indicator--5e09e087-e0cd-43b8-b94f-e088ff79c514", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54000bd6-58a8-4914-997d-820d3980b417", "sighting_of_ref": "indicator--5e09e087-e0cd-43b8-b94f-e088ff79c514", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9208f075-cb62-412d-bd07-7777a664f23e", "sighting_of_ref": "indicator--591b367d-2e21-4447-ac73-7b47c950fa78", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d9bbbe-dcf6-4eda-b980-b9cb7fa58057", "sighting_of_ref": "indicator--0e82edaa-1b2b-4fa5-aaf5-d7c96dccd2fa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255590fd-4497-4d41-b8ce-d38caae2e9f6", "sighting_of_ref": "indicator--cdc02103-f4d2-410b-b38d-94067bbec817", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38938c1-d27c-43fd-ac27-8fd06f86ecbe", "sighting_of_ref": "indicator--69d899c9-b611-4e50-a7b2-4107db9a883a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54079354-ffbf-4cd6-aa90-be764629cd9e", "sighting_of_ref": "indicator--d779eb4f-7d56-467a-9ec5-45dcbb3a3532", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bf5d7b-6a3b-4d67-af01-f7a06f3f7191", "sighting_of_ref": "indicator--e612eece-2386-4575-8012-7ca87f6c63eb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af4955a-e88c-404c-a7d4-cdbe64e960e8", "sighting_of_ref": "indicator--e612eece-2386-4575-8012-7ca87f6c63eb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6a4f2c-04f6-48ff-99db-c610f108d544", "sighting_of_ref": "indicator--007dd91d-8460-4d9c-886b-9682055e5740", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ed2e8d-cc49-4363-92fc-72e59afb1e94", "sighting_of_ref": "indicator--4bbf5135-2034-4720-97b5-f754335f47d1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549b9e46-5617-4db6-9a19-5134928a22bf", "sighting_of_ref": "indicator--ba8ad73e-451e-47c8-a13c-ec49067b5564", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d70896d-8a4b-45b1-9751-bdd85207aa4c", "sighting_of_ref": "indicator--ba8ad73e-451e-47c8-a13c-ec49067b5564", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce3361c-b453-4011-bf18-f8c790588719", "sighting_of_ref": "indicator--7d7a52d4-8c05-44fc-9017-3950a50050c8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df18ebf-deee-4f44-b4d0-e428a4d4af5f", "sighting_of_ref": "indicator--7d7a52d4-8c05-44fc-9017-3950a50050c8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a1d028-080e-4cc4-855c-2baf9965f681", "sighting_of_ref": "indicator--399fbf12-6adb-4359-9b1d-611434579dcb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb8caeb-dd7b-4c15-88a5-719294b68bd0", "sighting_of_ref": "indicator--e0fee88a-d5f6-4ee7-aebf-cd11474d5ad7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a201b52f-cb3b-4db6-921c-25c2e1ca3fd6", "sighting_of_ref": "indicator--d430886e-9d3c-45a4-afdb-76f5e9934954", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559cb2a0-09d7-41d1-8ba2-45e7e258da3c", "sighting_of_ref": "indicator--441c2882-eadc-4bd2-bf80-f870302db387", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74aa6544-3dc1-4d6e-9a55-c0c16e5d70a1", "sighting_of_ref": "indicator--373a3182-ebc8-43cf-87df-ca215f246109", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c6fb42-0acb-4870-8388-5e05729970b3", "sighting_of_ref": "indicator--373a3182-ebc8-43cf-87df-ca215f246109", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b539a00-d367-4b27-8dfb-d231ec2947ef", "sighting_of_ref": "indicator--2d301111-918a-4fd7-a21d-522b03e94861", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ff7e87-ddd1-49b5-9f1c-a20684ed1b0a", "sighting_of_ref": "indicator--2d301111-918a-4fd7-a21d-522b03e94861", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebeb58a-2d7d-4757-b6bb-4f8310f04a38", "sighting_of_ref": "indicator--e0e7d9b8-1628-479c-842d-b0def92d7f7d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f92c95-9e2c-403c-b458-d7caafe56351", "sighting_of_ref": "indicator--e0e7d9b8-1628-479c-842d-b0def92d7f7d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a2ce55-c276-470c-8209-aca587ca2463", "sighting_of_ref": "indicator--961e0435-c808-4b84-8c27-e74bfdf3b6fe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8c6e10-dc75-4ab3-907c-a7ede213fc72", "sighting_of_ref": "indicator--18c5a062-3d7a-410f-a55e-29eca3134e68", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783f66bd-e0f0-48e9-bdcb-485c215e88dc", "sighting_of_ref": "indicator--18c5a062-3d7a-410f-a55e-29eca3134e68", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2fdb90-a4be-472d-a229-4951f160297c", "sighting_of_ref": "indicator--af94929b-a239-4457-a4e9-7337ed5f263b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423c5186-4fce-445d-8890-55021d22c952", "sighting_of_ref": "indicator--8b979cf3-f247-4589-bef7-90be1bd0076a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d482a503-b5d4-4767-8eb6-e5d0e3ecbee0", "sighting_of_ref": "indicator--e3895a3d-d8ca-47a5-93f6-2eb857317d15", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656910e8-66f6-4398-9181-3cd70167ae39", "sighting_of_ref": "indicator--395cd31a-b688-4cd7-8938-fc9853e2b5df", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112e283b-cfa7-41c4-ab22-2b86d9d57e86", "sighting_of_ref": "indicator--62b5f1c5-b5cc-4311-bd8c-48e2879a69cb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4821cc-0375-45ed-81d1-be2e8230dc50", "sighting_of_ref": "indicator--62b5f1c5-b5cc-4311-bd8c-48e2879a69cb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dbd47f-49af-420b-b1f3-0b3147406f6a", "sighting_of_ref": "indicator--1bae85c4-b728-411b-8bd5-ad259be8ce9d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae89b83-141a-477e-8ec8-32e30543c875", "sighting_of_ref": "indicator--847a9491-197b-4c3f-8627-33203ac50016", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc73777f-e01c-433c-a4d0-1ee52b10b70b", "sighting_of_ref": "indicator--3e58d0c1-c154-4155-89f5-156a0c9fbb48", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6b4457-64b2-4058-93ee-c29780803129", "sighting_of_ref": "indicator--33de4680-08ce-4be4-9470-9ed220fb9655", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01fd0f5c-cfe8-45f8-895f-dd64b67b62a4", "sighting_of_ref": "indicator--96924881-bfe8-4090-baf1-269ab476674c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016ab5dd-1379-475c-ab4b-abb655a49206", "sighting_of_ref": "indicator--f5bcbf1f-91d3-4895-bd31-1b88eb41cdde", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67b9a35-8ab1-459f-a136-61b74e0d86a6", "sighting_of_ref": "indicator--f5bcbf1f-91d3-4895-bd31-1b88eb41cdde", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d22e8b7-7690-4947-b46b-b2c24dd4c3d6", "sighting_of_ref": "indicator--bfa8831f-34e9-46f2-bc04-42d9bcbd75de", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2dd8b22-ce9c-466e-b609-8920516b25d5", "sighting_of_ref": "indicator--4659e162-23a2-419f-9e65-ff71832182b2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6056b54c-2f2b-441f-8ce8-8658e2088816", "sighting_of_ref": "indicator--3e0002f7-b665-45ef-9030-d08836a4b28e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a725658-9af3-4aef-9781-0b9e7d0ee66a", "sighting_of_ref": "indicator--3e0002f7-b665-45ef-9030-d08836a4b28e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c597ee6a-447f-4858-9770-bf422d0b47fc", "sighting_of_ref": "indicator--ee56f0b2-b4c5-4801-ba1e-dc850ae584fc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e580c3-b193-4068-8ace-9af8bcacb472", "sighting_of_ref": "indicator--ee0dab00-623f-4268-8279-e81178a470d9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aea41f5-e8b1-450e-947e-8e14614e6890", "sighting_of_ref": "indicator--76db5260-8e86-435c-ba02-398feab5f02f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4131911-0927-412c-8f09-871f9e113f90", "sighting_of_ref": "indicator--625efb14-0cde-4cc9-8a00-d787d0dc3a61", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfa6b3a-d380-4620-a545-7ffd4aaf470b", "sighting_of_ref": "indicator--4900f083-34e9-4fe4-80ca-9ceabf23fe31", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e2d828-1fc2-4d6d-a1e0-c3a4f2154198", "sighting_of_ref": "indicator--4900f083-34e9-4fe4-80ca-9ceabf23fe31", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc363b8-da77-4fd0-a900-b8a7214f4263", "sighting_of_ref": "indicator--cd61d589-20a9-4350-a60c-a7996fd6102b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa7bf66-d6bb-4363-9d01-d045f6a38e23", "sighting_of_ref": "indicator--cd61d589-20a9-4350-a60c-a7996fd6102b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44be27b-eeb3-46da-b3b6-c133d3903e6f", "sighting_of_ref": "indicator--900825e7-4562-4410-9142-0ab0d88a99ed", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab3cafa-03b9-46f6-b622-967057b280f7", "sighting_of_ref": "indicator--e11868fe-3bb4-4b94-bd3e-7813b80c39a9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e722dfe8-8e1e-4153-9d19-0d7cc99505ab", "sighting_of_ref": "indicator--e11868fe-3bb4-4b94-bd3e-7813b80c39a9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f98db11-d28c-4a0f-a0d3-2cb7e452bb63", "sighting_of_ref": "indicator--d81a0d41-defa-4e9d-afd7-8a7aa19c857c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccc0856-edda-4cea-9bbf-9de114350b81", "sighting_of_ref": "indicator--ea6c3763-2931-4cf6-b740-0d720cfe564e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5f9b41-352d-4848-b7a9-c4fb46cd84dd", "sighting_of_ref": "indicator--5b99b960-76c1-4acc-8599-4009315d56d3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3dba32-982c-4dd9-9cf4-7a22202cd9fd", "sighting_of_ref": "indicator--fcf0096a-f39a-49d7-8028-20e63a6d9501", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbf9734-e71a-4825-81ab-204e3b342574", "sighting_of_ref": "indicator--48e2bf88-195e-4fa4-b120-22391eb820a8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355af815-a0b0-4613-b99f-2e660979affd", "sighting_of_ref": "indicator--3052f191-2f6d-4427-8bc0-b88ca70a2494", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d16f0a-56a3-43a4-9e72-3be9d62f616b", "sighting_of_ref": "indicator--5bf59dae-f690-4177-9316-e3c18d35e22a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524325ad-d5b0-4fb1-b618-233683076232", "sighting_of_ref": "indicator--dc7116c2-4847-4473-bd37-c75571382d60", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28faa9e5-9790-4ce5-b33a-9ad3a4987f20", "sighting_of_ref": "indicator--4029eab1-4d70-45b5-8196-7886f7484b5f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483f005c-d56a-4147-b407-d6f98ac9df90", "sighting_of_ref": "indicator--2e4299c9-4579-4d83-9294-cc39ab1a8f09", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f3312b-31e0-46a7-8fd3-1e04653f7341", "sighting_of_ref": "indicator--af12cc00-9183-4ce7-93a1-aa1f20b4bf24", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e4435a-b99d-4d92-8b13-eae9ab8d676e", "sighting_of_ref": "indicator--d73a76d0-3414-463e-b4c7-1a663f646a26", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c546bf-d0d7-41a6-b797-f43b263e5c1b", "sighting_of_ref": "indicator--d73a76d0-3414-463e-b4c7-1a663f646a26", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9772d2c7-a3c2-489f-850b-0c5926ce49c2", "sighting_of_ref": "indicator--10777352-11b1-4142-b692-d3097a0b362a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4feac6cb-0c4f-4f6f-8e4a-954139ab2495", "sighting_of_ref": "indicator--9dba6bb2-7522-4bea-95ae-a4363451ac6b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ead867-733b-4687-aa26-c3d3bc4b25bc", "sighting_of_ref": "indicator--604d7bf6-e2c3-4f69-9126-8f5c409e7167", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c32295-b659-4b4a-a408-ef6baa683e11", "sighting_of_ref": "indicator--604d7bf6-e2c3-4f69-9126-8f5c409e7167", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b5123c-1599-4a6a-b9c9-9505091ae1e5", "sighting_of_ref": "indicator--7592ae15-241d-4d95-ad90-16af3b6f5d42", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba28b4b2-fbef-496b-8867-584f3700a5ba", "sighting_of_ref": "indicator--7592ae15-241d-4d95-ad90-16af3b6f5d42", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ecb56d3-2943-42e7-b65c-85545ff78259", "sighting_of_ref": "indicator--962d686b-9da7-4bf6-b8ec-df4ec05280b4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad704372-b5d2-4566-a773-2f411eaa5b96", "sighting_of_ref": "indicator--962d686b-9da7-4bf6-b8ec-df4ec05280b4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db186a3-a2b2-4a40-8ef8-1f05edcd075b", "sighting_of_ref": "indicator--9879038e-19af-4b2a-aa06-85f4282b3390", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cedbb287-66e1-47ca-a615-7cedf4bcafdc", "sighting_of_ref": "indicator--031ce32f-e6a9-4852-9a2c-c08f64ccf788", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ade5c7-7ef7-4ad7-bcdc-222973c0131e", "sighting_of_ref": "indicator--bd3cc4af-092b-47f9-bdf6-9172e9839ec5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400cebcc-a335-4a9a-9346-69e2d0bff7ca", "sighting_of_ref": "indicator--bd3cc4af-092b-47f9-bdf6-9172e9839ec5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa66c57c-e79f-41d7-a685-66838cc33622", "sighting_of_ref": "indicator--d8bb878a-e840-49c6-a0b9-2bd521a784f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed9dc60-29db-4065-9e7b-c6a2290a37c1", "sighting_of_ref": "indicator--d8bb878a-e840-49c6-a0b9-2bd521a784f0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bccd2b5f-71aa-42c1-a864-5e4f279af872", "sighting_of_ref": "indicator--d8bb878a-e840-49c6-a0b9-2bd521a784f0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b584dccb-b5c4-4c1b-9322-5d2eea192ad1", "sighting_of_ref": "indicator--9b3d35fc-04fc-4777-87b9-8607c30529f2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96ddaed-b20f-4207-a070-5b331de8d250", "sighting_of_ref": "indicator--71ac65fb-bd7b-4a77-aafe-3ec90f92b052", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216c340e-e1ea-46cf-b5b4-74e74d441901", "sighting_of_ref": "indicator--a6fa1b46-817e-4af0-a7bf-8ebad8f09a28", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f722fe2-ed8b-48e5-83fe-6c45a9b5791d", "sighting_of_ref": "indicator--85c3dcf1-78f4-402e-894d-6d9af9959b06", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeccc527-3024-4f1a-aa82-45653114c113", "sighting_of_ref": "indicator--1019427a-3021-49f7-9bba-ced061af3532", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7a817a-64ae-4dad-adde-af76ddf49f7e", "sighting_of_ref": "indicator--be7fb466-73db-484f-9ffd-be14429da911", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc83a8c9-dff0-473e-91e0-bd112a829807", "sighting_of_ref": "indicator--be7fb466-73db-484f-9ffd-be14429da911", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e1c4b5-8874-4b28-88b8-b8ff96d36a75", "sighting_of_ref": "indicator--be7fb466-73db-484f-9ffd-be14429da911", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1205ff99-ae51-4963-82bd-e26a09d2d367", "sighting_of_ref": "indicator--37478843-93a9-4a2e-a1fd-2a4e45272ff9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c1d177-ec0b-40e4-bc86-4ec3e04edf82", "sighting_of_ref": "indicator--37478843-93a9-4a2e-a1fd-2a4e45272ff9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb48bb6-a1e5-4fa1-a018-3ccb557a3cd7", "sighting_of_ref": "indicator--c842146a-a9b8-4ec5-af54-d67575e63f91", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e608c2-a361-4057-9bfc-c7b83f6103a6", "sighting_of_ref": "indicator--c842146a-a9b8-4ec5-af54-d67575e63f91", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1a344c-d3c5-4c99-9e94-7ecf110616bb", "sighting_of_ref": "indicator--c842146a-a9b8-4ec5-af54-d67575e63f91", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090247c2-d299-4943-9962-0042912c6de8", "sighting_of_ref": "indicator--2a0c6600-bd8e-43af-a120-17dc0c6591cd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee5cb0d-5b58-41c6-876e-d591f34ddfe4", "sighting_of_ref": "indicator--13b20f68-c73b-4351-afdf-b522f333a0ac", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ea2fe5-e8a9-45f1-9d45-7ac68e87f2a0", "sighting_of_ref": "indicator--13b20f68-c73b-4351-afdf-b522f333a0ac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9aac96-b405-4bbf-b021-218a906e60d8", "sighting_of_ref": "indicator--54a291dc-f963-4268-80a5-1430e7658b16", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902ef108-98e1-430a-817e-cb04cde526fa", "sighting_of_ref": "indicator--28b221ec-50c8-4f74-8083-408d92b02834", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58a89bd-58a6-4068-8ee8-516653b6960e", "sighting_of_ref": "indicator--69eb7b2f-ea2e-4703-8e36-c85acc1a7221", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3876c552-6db7-444e-8d04-209008722ebc", "sighting_of_ref": "indicator--fcbedb6a-b76d-492f-bbd4-68e55b9a4e2f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28eb6946-9036-41dc-b801-da695875eb70", "sighting_of_ref": "indicator--fcbedb6a-b76d-492f-bbd4-68e55b9a4e2f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f5803c-ecb7-4adf-b92d-60487361e6e9", "sighting_of_ref": "indicator--fcbedb6a-b76d-492f-bbd4-68e55b9a4e2f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e78400-1ad9-4f69-b7cf-37ac0d1d084f", "sighting_of_ref": "indicator--b6edfe43-bcad-4331-89d1-87b4825d1d6d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efc33f6-cab1-4658-a838-10098ab035c8", "sighting_of_ref": "indicator--b6edfe43-bcad-4331-89d1-87b4825d1d6d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f5e400-df24-426d-898d-0c653accbb71", "sighting_of_ref": "indicator--b6edfe43-bcad-4331-89d1-87b4825d1d6d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa74487-abb7-4170-b75a-21b1dc14d800", "sighting_of_ref": "indicator--021c49a0-35a6-4e01-be38-ff07bbbe1df1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d800126-a64c-4ec4-8fe9-1edad3d50ac4", "sighting_of_ref": "indicator--021c49a0-35a6-4e01-be38-ff07bbbe1df1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998f5be6-577a-4dc0-886d-e990d001d020", "sighting_of_ref": "indicator--021c49a0-35a6-4e01-be38-ff07bbbe1df1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873c8fa4-d27c-4d8c-94d3-cd00912684c3", "sighting_of_ref": "indicator--65c00c9d-b589-475e-bdc8-dda9649e2469", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55ea4d1-cf5e-4a60-a584-fe480070c160", "sighting_of_ref": "indicator--746896c1-4f62-40ee-8aac-27adec59ba87", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0df7671-11ca-4e36-84d6-b42e311f51ee", "sighting_of_ref": "indicator--66ec67dd-d6fe-4b0d-8a32-29c619406bf4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc264789-0576-4640-99fc-1bb3e6c70ce2", "sighting_of_ref": "indicator--1d187fcd-712e-4a13-bd0d-dc4638c47e7d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f3892b-5941-4884-9761-4d3f5be6a816", "sighting_of_ref": "indicator--d115a3e7-1edf-496d-ac95-4174502dcb8c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae57f2f-ecdf-430e-a9ca-518ddc192012", "sighting_of_ref": "indicator--0eb68e28-a9cb-4ad2-bda7-a0ea9281af71", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59997852-2f07-4cca-a6e8-f26bfc84cb0f", "sighting_of_ref": "indicator--bd298cd7-963e-4008-b316-4d5529933066", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e8d958-66d3-48a4-bcc0-9d24ef720f58", "sighting_of_ref": "indicator--bd298cd7-963e-4008-b316-4d5529933066", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1609ab-e198-4881-9a21-aebbc0f16f53", "sighting_of_ref": "indicator--bd298cd7-963e-4008-b316-4d5529933066", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b175a7-86f3-40fa-8d5c-6ce8df00be1b", "sighting_of_ref": "indicator--34cc181f-84e3-480f-bd52-f11fe5f9551f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48bcae5-d767-4764-844c-942f96c39caa", "sighting_of_ref": "indicator--cac09ba8-67e4-4af9-9b65-b246d7e47da7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1929aad1-d697-41b9-9155-fd43c614016a", "sighting_of_ref": "indicator--a136be96-9df9-4475-a1c3-70a043d346d1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0740c23e-8fbb-4958-98f0-55cf64bba2b1", "sighting_of_ref": "indicator--a136be96-9df9-4475-a1c3-70a043d346d1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50266f40-834d-4a34-8bf1-0673b2bdee89", "sighting_of_ref": "indicator--4f7236a4-e47d-4198-a8d6-550d520ad498", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b2a3f8-7cc7-42f3-906c-013286e8f5c7", "sighting_of_ref": "indicator--62166724-fc2f-4616-8062-68769e7876bd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877612c7-1754-438f-9ddf-906feb7f6ad2", "sighting_of_ref": "indicator--62166724-fc2f-4616-8062-68769e7876bd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d75e2ce-0919-4505-8645-b5bd5c980534", "sighting_of_ref": "indicator--62166724-fc2f-4616-8062-68769e7876bd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7da1bc-7022-41c4-a292-fc6963c8e8a6", "sighting_of_ref": "indicator--1986da45-4a7c-4946-b6c4-608aa778bb03", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ffb22f-5935-48ee-9035-b7c244091de9", "sighting_of_ref": "indicator--6c1697ea-3123-4c61-bae7-0941ff849037", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac3d575-8203-4c45-93f0-db371b9dcb32", "sighting_of_ref": "indicator--6c1697ea-3123-4c61-bae7-0941ff849037", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3caafe-3471-4e83-944a-184c7a767c5a", "sighting_of_ref": "indicator--39f55567-2fe2-455a-8938-48e1fdd3b2c9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d889c0-86a2-49f7-95ad-7ec01e9bf5ff", "sighting_of_ref": "indicator--03571465-8c90-4665-8e39-a24ca77c8d3d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd28164e-cfd5-49ad-b69c-38cf0c791572", "sighting_of_ref": "indicator--2377974e-a7aa-4978-9382-8c55a1c643f9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c46b1f1-b7b2-4b84-8b93-81ee1c1264dd", "sighting_of_ref": "indicator--f194e6e6-8689-49e0-a033-84f9e12e61a0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707ab885-08c0-4561-a270-a09967150e7a", "sighting_of_ref": "indicator--f194e6e6-8689-49e0-a033-84f9e12e61a0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11788ef7-5628-4c00-be5d-5608d42608fe", "sighting_of_ref": "indicator--8f4eca1a-83fe-4895-ba6c-75f13ff529e7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da74df09-c4ff-48d6-9f96-6a03fb0f26cf", "sighting_of_ref": "indicator--8f4eca1a-83fe-4895-ba6c-75f13ff529e7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e19e3d1-d28b-4def-8d78-ca6d7c00e9e8", "sighting_of_ref": "indicator--8f4eca1a-83fe-4895-ba6c-75f13ff529e7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b277f456-3eb6-45b4-994c-4223f1bdc227", "sighting_of_ref": "indicator--332e6aeb-bc42-4f91-86cc-be8ad58054b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ee727b-02e3-43cb-92a4-b660ead447b1", "sighting_of_ref": "indicator--10a189b2-1b8d-461f-83ba-f47508f812a0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddccac4f-b5c4-4979-85fc-54255a3ce848", "sighting_of_ref": "indicator--6e2ba92f-31e7-43b1-9cec-766bb3a10709", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a125ec-8a4e-4388-b582-bade4bd2e3f9", "sighting_of_ref": "indicator--b6ba7d91-a98c-4fb5-a637-a289401bf0b1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63fdba83-aaa6-4850-929c-d64a8ad8bf43", "sighting_of_ref": "indicator--fffe8333-20c7-4d8b-a67c-434601372df9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bdd794-6673-4291-bb56-cc7cd98adff0", "sighting_of_ref": "indicator--fffe8333-20c7-4d8b-a67c-434601372df9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6483570-bc1b-4df6-9810-589d9d2d608f", "sighting_of_ref": "indicator--fffe8333-20c7-4d8b-a67c-434601372df9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0eba4bf-96e8-4a47-9181-9d968848aca8", "sighting_of_ref": "indicator--faf6cead-00ee-4410-bd30-51c21e3268ae", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f156e0-85f3-4880-bbfe-9ca3d8876c55", "sighting_of_ref": "indicator--faf6cead-00ee-4410-bd30-51c21e3268ae", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cde741-664f-4f05-9ced-c729c4a1c6d8", "sighting_of_ref": "indicator--faf6cead-00ee-4410-bd30-51c21e3268ae", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aeb1bcc-5b0c-48ce-a794-76e527903ca4", "sighting_of_ref": "indicator--327b3484-4e56-4c77-ad13-493b26176b29", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0105de-98d8-44c2-94a7-16db1847a493", "sighting_of_ref": "indicator--327b3484-4e56-4c77-ad13-493b26176b29", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd280d8-c37a-4ea6-984d-d3f01aba3846", "sighting_of_ref": "indicator--8955da4e-3170-4e12-91e1-0dfff8e48897", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0a810d-f4ca-4755-8b2b-afc97dd11ed9", "sighting_of_ref": "indicator--8955da4e-3170-4e12-91e1-0dfff8e48897", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ffc60c-da39-41be-ae06-6601c772ef09", "sighting_of_ref": "indicator--8955da4e-3170-4e12-91e1-0dfff8e48897", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f9cb36-0943-4637-92ac-2661bf13fc77", "sighting_of_ref": "indicator--74a83be0-9659-47cc-a4a0-1ee3611410ce", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f214d426-f56f-4504-9079-8e6055912ff1", "sighting_of_ref": "indicator--74f17de1-78db-43a0-9c72-6ad4e1939230", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6673649e-9385-4581-b3a9-94bcfd0c7cc9", "sighting_of_ref": "indicator--832bb353-2375-4a1f-91e0-5233807e3837", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e41540-5373-4631-b6ca-af7be2f950d6", "sighting_of_ref": "indicator--53f33f8d-6dfe-4439-8e9b-036c71dc14e1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4182fc37-6177-41ba-b2cf-300e6bf8320f", "sighting_of_ref": "indicator--7cb5cc75-b1b5-4737-9748-622dd2cee5f8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49f8a83-dc5e-4e2d-8edb-0bbb76b770ce", "sighting_of_ref": "indicator--e7dac4a1-4353-4543-ad82-8f11394906a2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979b14e7-6e2e-4d31-a146-3e9feb01b1e7", "sighting_of_ref": "indicator--3dfec508-7fba-47bf-a7d7-278729b9a6dc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e80d10-6336-4b8b-9627-5f27fc09d33c", "sighting_of_ref": "indicator--3dfec508-7fba-47bf-a7d7-278729b9a6dc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3109e4-11eb-4941-b116-53d1f6904e71", "sighting_of_ref": "indicator--3fd11578-e001-41b5-94b6-659be54c271b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1436850e-fab6-4f34-9197-6e41ae2150d5", "sighting_of_ref": "indicator--65c73aca-3234-4fc8-910e-0f809a632b34", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368a7a25-d712-44a3-8499-06b4f22e1004", "sighting_of_ref": "indicator--c266298b-b04b-4f2a-bbee-dcb1a6f1473f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3bb9e2-279b-4e53-8b74-d73dcda24c96", "sighting_of_ref": "indicator--c266298b-b04b-4f2a-bbee-dcb1a6f1473f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a97da32-e492-4aa0-95a6-abe170e1f789", "sighting_of_ref": "indicator--c266298b-b04b-4f2a-bbee-dcb1a6f1473f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a354d7-0fbe-40ad-9283-42628bbf2866", "sighting_of_ref": "indicator--e0ca9362-8a09-419d-86d1-f32fd4b5fcab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498ec6e8-1dbe-45b5-8dd4-9d7deab2ee4a", "sighting_of_ref": "indicator--54288665-3e8e-4ef4-b3a9-3339e19f1ce9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7026876f-ef84-403b-a18a-c025ab4c6ca8", "sighting_of_ref": "indicator--4134b30c-7304-4c67-b31b-f1f849622f81", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6623b58-856f-41ab-a951-1b720691d5c4", "sighting_of_ref": "indicator--5abbd516-0d82-4e2e-ae70-8cc4602fb46e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067d16d5-7d64-46e8-9e4d-68cdafb52357", "sighting_of_ref": "indicator--5abbd516-0d82-4e2e-ae70-8cc4602fb46e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919e99fe-e740-47f3-8381-387c7a65adc2", "sighting_of_ref": "indicator--3aaa9c7a-77bc-4bf0-b73f-6778e1857a56", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0c609f-044f-4831-aaf7-912ae9a3dba4", "sighting_of_ref": "indicator--8b225841-b43c-41a9-b169-240f2e79fb9b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b1817d-5105-4c6f-9e7b-92e28c4562b6", "sighting_of_ref": "indicator--e14063e0-2ac7-4946-a00d-bd7560c28e30", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37061bfa-a1ac-4e62-882f-34cd4be8636f", "sighting_of_ref": "indicator--e14063e0-2ac7-4946-a00d-bd7560c28e30", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf1a362-920d-47fc-a2df-5f13769edfd4", "sighting_of_ref": "indicator--2aa6745f-e9a9-4872-add7-159ea949956b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d765a0-c2dc-4420-a0b2-2d4d1c17e299", "sighting_of_ref": "indicator--bb003893-f453-4720-8060-33ba476e54d8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9019cc0-9cf0-45b9-99ce-89b350493bfe", "sighting_of_ref": "indicator--b2658eaa-7699-474a-9574-d99420006658", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada1c93b-71d6-438c-b110-7195005310da", "sighting_of_ref": "indicator--c55cbd63-d205-4335-ab59-f4283d52f9b5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae66bd6-ad2c-41fe-a0a9-94c289263eab", "sighting_of_ref": "indicator--3ef6f697-793e-4855-b9fd-2a93832e6aff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00eaee2a-a57b-4867-938e-36ff33704e21", "sighting_of_ref": "indicator--f1c735b9-1664-4402-921a-117a44efc5a2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fb32e2-9f84-4151-aeaa-c6b5cd5cb2e5", "sighting_of_ref": "indicator--fbba34b5-3f38-4325-8eec-e1d6fd24f14d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b56079-78f6-49aa-abed-15bec5815545", "sighting_of_ref": "indicator--8050ac61-b7cc-49d4-bba4-eaf1442df175", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0100203e-9a7b-4aff-a6bd-29e567f6e5ad", "sighting_of_ref": "indicator--f041c416-729c-4622-b894-ed886d314587", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35ef77c-c609-41b7-ab4d-460787dbf6f0", "sighting_of_ref": "indicator--4dc63cb3-65ee-41b1-b61b-ff9a857893cf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eba2a33-87d5-42f8-b620-b60e9be2a700", "sighting_of_ref": "indicator--dcea4c77-4ded-48c5-9193-6826b4cebe74", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea93ce9-0168-4985-9d19-5b2d529920c8", "sighting_of_ref": "indicator--dcea4c77-4ded-48c5-9193-6826b4cebe74", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23132c1b-f748-4c09-9821-844e65e1fe15", "sighting_of_ref": "indicator--1dceae4f-2c6a-4dce-a75f-a86cf6bbc290", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12cae79-8d43-4f93-a846-1c6efa38a5d4", "sighting_of_ref": "indicator--408bf723-0881-4596-86a0-6eb74552d489", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4beb967e-dd87-442d-a21d-6dc7a2139f09", "sighting_of_ref": "indicator--d849a472-7ee6-466f-b9b0-5bef9fcc33f8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842bf00f-ff38-4b77-bbf9-c47b5dfd72c1", "sighting_of_ref": "indicator--c6aea7ec-50a7-45bb-b07f-13fe6c01a3a6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3474d5-fbb4-4415-95a4-443018e9f874", "sighting_of_ref": "indicator--198a2b27-2fd0-4c40-aa61-5b36403b7232", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba5cd14-d423-470a-a4a6-d495d44aae7f", "sighting_of_ref": "indicator--cb4dd9e9-bb15-4e0d-bfaf-d92e40863677", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258d6b19-bf60-4777-8c40-1425e48a7914", "sighting_of_ref": "indicator--40585271-a88b-49f3-9b70-25404566b55d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a53e13d-1628-472f-b2b8-2c0e7897aaa7", "sighting_of_ref": "indicator--e6a0622a-1664-4d36-9215-6f0906da8ba7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6c7f22-405b-4ce4-9487-63f8d0462446", "sighting_of_ref": "indicator--a5601d67-25af-4df8-a63a-e3c9f90dc394", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20df3fcb-a26d-4b7e-aa46-ec9c7a3dfc6b", "sighting_of_ref": "indicator--fb2e623d-2444-40b2-9ac7-7630d5dcb08c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e17cd6e-7772-449b-9c11-f2f8dc091776", "sighting_of_ref": "indicator--6a8fa5b2-4f21-45aa-9995-4de5239c6bfc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f4d1a6-f0af-44c6-afb7-96f9592e606d", "sighting_of_ref": "indicator--af8f2990-6d69-4b10-b09d-d0602cd21ac9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778b6faa-303e-476e-8ef6-debfd0f52b29", "sighting_of_ref": "indicator--51b051e4-2142-4a5b-b86c-0a90173eeb5c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4beb8bc7-a960-455c-ba97-15b7349215d0", "sighting_of_ref": "indicator--29778cc1-9c68-4f5b-9ca4-7dca9583227f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fe0337-a4d6-4f6d-a5f5-6d172dbc1d11", "sighting_of_ref": "indicator--40889f50-fdd2-4a78-9a14-43ff37c0b0ab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c850b0bb-d707-4901-88de-fe2608c8838b", "sighting_of_ref": "indicator--a2163a44-116d-4920-81a7-2b33b08475e7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14609ac2-f401-4bfd-9e10-fab39103cb3f", "sighting_of_ref": "indicator--bd12f360-1514-47dc-9878-ef719ef408e6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5755053c-458e-484a-8483-deecb85b436d", "sighting_of_ref": "indicator--f4cf412c-c567-4f78-983e-04c8f7218a55", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7b50b9-53b6-428d-a61a-53ee2df2f6eb", "sighting_of_ref": "indicator--0e0e6888-75d5-4f02-ac26-e45f33c9affd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730d14cd-f3c4-4bb8-be5f-cac44e8221d4", "sighting_of_ref": "indicator--4139962d-c2cd-468d-b1e2-7b7d76960d42", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50465a9e-1322-40df-a5e1-9b3c5c6246f1", "sighting_of_ref": "indicator--c3b61654-d9ef-4c8e-b99b-44baa0dc2889", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e81567-e3f7-4260-a143-bf7e4747fdea", "sighting_of_ref": "indicator--c3b61654-d9ef-4c8e-b99b-44baa0dc2889", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6307dc92-f12a-46d7-b91c-16c7402474f1", "sighting_of_ref": "indicator--19e16da3-13a9-432d-a804-99b9d02e72ae", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1851b93b-12eb-46f5-b781-76b5670888dd", "sighting_of_ref": "indicator--bd38d1e0-1971-45a2-adb2-adee21173585", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf6460a-f951-4cbf-91f7-bd56a390ff53", "sighting_of_ref": "indicator--e5821e3d-1640-4fe9-9f5b-2a694b2d784e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7f1249-4a6c-4ca8-b688-0cd90eeb034c", "sighting_of_ref": "indicator--9ae1be6b-1ab2-4c41-9bf6-3d8c4d74cb42", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2bd15b-8a11-4644-b1ad-b08daf41336b", "sighting_of_ref": "indicator--be25d072-f4ad-4785-808a-f4ee0381beff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc12995b-0add-4db6-a010-5b117a27c39f", "sighting_of_ref": "indicator--9f5ada73-1fd9-48e3-b1e6-dc18e305c904", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac8f75f-fa60-4cac-acf2-ee4202c041eb", "sighting_of_ref": "indicator--abb7263c-61fd-4288-8aca-894d5cecb291", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc135536-c8b0-4e9b-a0b2-4de47e491ad0", "sighting_of_ref": "indicator--edddb859-5fb3-43a8-a5fa-70acfb0993a8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7681307-9764-4df0-b457-9425fc23a1f8", "sighting_of_ref": "indicator--edddb859-5fb3-43a8-a5fa-70acfb0993a8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fb1963-0082-4818-9499-28f17abcba67", "sighting_of_ref": "indicator--8059007c-6f75-4396-a456-cce89bd348d9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce8ce0b-9da9-44cc-9f8e-2d064f744aca", "sighting_of_ref": "indicator--8059007c-6f75-4396-a456-cce89bd348d9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6451eb8-23eb-4270-9058-53cb8589603a", "sighting_of_ref": "indicator--6c0a0a88-ce18-408f-8a9c-97f3e2af28b8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8432a326-16b5-41a7-8ea2-093c7c95996c", "sighting_of_ref": "indicator--26c42348-8deb-45bb-af66-207c94dca7e7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605e02fe-1d95-4b17-8b2d-2b4a2e3a27d1", "sighting_of_ref": "indicator--d235d0eb-7e4e-4984-a103-5331a4e0e95c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177062fb-b290-4806-bab9-2ed5f8168180", "sighting_of_ref": "indicator--dc8236a7-b3ff-48ed-9663-ab7d55855c36", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c25f272-b53b-44a0-b58f-89bc05d8b415", "sighting_of_ref": "indicator--30161729-9d28-4c56-b1fc-fdb258034123", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c7d41e-073d-459c-8d45-ddc6825c1e5b", "sighting_of_ref": "indicator--30161729-9d28-4c56-b1fc-fdb258034123", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a6f764-6dbe-4a25-8a54-af5774df1a90", "sighting_of_ref": "indicator--a5cef013-f981-4c28-947e-d77785f81c3c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a7d6b2-0581-45c7-93d0-5924ef3fd983", "sighting_of_ref": "indicator--57b7c42a-e71a-4032-bd72-40c24c397e04", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cad5b6e-9f5d-42e8-af3e-04d59c9f707c", "sighting_of_ref": "indicator--c712a018-c55d-4069-9ded-14af6a06a6fd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5a50ba-0f1f-4181-ab6e-fc1e602fc933", "sighting_of_ref": "indicator--c782e9df-548b-4d15-a3ac-34a474f29fd2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea03b63-1a9f-47ed-aae2-70e6e53043f9", "sighting_of_ref": "indicator--a084da43-5f27-486f-86ba-abf4d5c3ff54", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488d1468-6c99-4cd8-91fb-565d99a6dafb", "sighting_of_ref": "indicator--75c3631b-c5c0-4c05-9ffa-63dd2b8606ca", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71e2dfe-7530-4c19-b94e-62b38e80e30d", "sighting_of_ref": "indicator--87401e06-b335-41d6-ba0d-e73de5370053", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb4df75-7db2-4c36-9b6c-0a4c508eae41", "sighting_of_ref": "indicator--593e6099-bf2c-4edc-bd21-311e6ff91266", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97eba3c-11dc-4cd4-9f87-a71ab32e6c23", "sighting_of_ref": "indicator--ce47fe40-791f-4a51-9486-deeb3a30efcb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c421267-c6f2-4a81-a4a5-f0b72211343a", "sighting_of_ref": "indicator--19418323-e986-492a-8eb4-69fceab3a519", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc26f71-213a-4066-b102-022ce8d6e318", "sighting_of_ref": "indicator--f1b871df-aa2b-4484-8e17-f091ad0bcc47", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c55b74-6187-4858-86e5-86646cef8424", "sighting_of_ref": "indicator--4851b304-a5b8-407f-8273-5f903692733a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86dab33-1ccb-4861-8a4e-721e3ac0b745", "sighting_of_ref": "indicator--78a6fd9a-8aaf-4d57-85a0-114a5716d003", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a0e19b-7b52-4489-9427-378d878e28b7", "sighting_of_ref": "indicator--5d09547b-cf9b-436f-8a20-98885ff195fb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881cd9dc-40d3-4992-ba1d-c87016d9cff3", "sighting_of_ref": "indicator--7c073aab-3e15-43db-97a0-e140aa495290", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d8c81a-a48a-4b0a-bdd4-1e7751f73ee4", "sighting_of_ref": "indicator--d29e0a99-53d5-4c23-b820-a7311767b748", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9505b3-c615-46bb-802b-e37f373f6b05", "sighting_of_ref": "indicator--d869812d-7f54-4c46-b7c5-31ff2091f7e9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1fb2f3-5780-40af-b0ba-9bc393ece87e", "sighting_of_ref": "indicator--791b597c-5d91-4638-bd97-2d143f4b1039", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3509ac2a-6b7d-4876-9d6d-d5ba39337d11", "sighting_of_ref": "indicator--abcea839-2bc5-46a2-a932-9da14da99695", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c92be1b-e24b-4629-89d1-4b18e21083dc", "sighting_of_ref": "indicator--bfa5dbd3-c318-4eac-8198-01c9a7df2935", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77a4116-9627-4a09-947f-fa279d281bad", "sighting_of_ref": "indicator--f785339a-c3ed-4f07-870a-dc5421d77007", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42506dd-0405-454c-8e36-c22c7df4224a", "sighting_of_ref": "indicator--c981438e-c7b9-4b66-aa33-f469e552d27e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5c6219-19ca-4764-92d2-af9adca33789", "sighting_of_ref": "indicator--18143cbb-8e47-47de-af4c-c1d6f1c3501a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6eded4-0c7f-4df5-9b2e-7d1d7618e791", "sighting_of_ref": "indicator--18143cbb-8e47-47de-af4c-c1d6f1c3501a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c692d47-5cfb-46b5-bccb-da9ff666a26e", "sighting_of_ref": "indicator--fbfc50b4-2c82-4832-90dd-a308087a800f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee138b5d-99e4-453e-9915-8365631c09f9", "sighting_of_ref": "indicator--fbfc50b4-2c82-4832-90dd-a308087a800f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccda1b8-4b1a-4b3e-a382-29781a06c8ac", "sighting_of_ref": "indicator--8b9f9c73-3924-476b-b3ec-44bb79ac3b82", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16bfd524-4a76-4afd-810f-b8df6706dea7", "sighting_of_ref": "indicator--61cf3c68-63bf-4581-8298-ec2a0b8f263e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425d1b8c-c947-47da-ae65-92c5447f03b2", "sighting_of_ref": "indicator--554f9927-1afb-4efd-baac-1c1cc7d2ee3c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb95520-071e-4891-96b6-34e09b0984c8", "sighting_of_ref": "indicator--554f9927-1afb-4efd-baac-1c1cc7d2ee3c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cf0b59-c39e-4438-becf-568ce4a50c6b", "sighting_of_ref": "indicator--cdff7be4-a2d3-4935-9906-b1777ed118e1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebc93ee-7bda-467b-9a85-91bef81e6a16", "sighting_of_ref": "indicator--a45fb07e-6511-4f96-801c-8f8a3f5044c3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a579ef-7727-4954-98fe-9e738ff42025", "sighting_of_ref": "indicator--34acd8e5-6df1-4d92-8a72-4aa95b55e722", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80ae6b8-8482-4297-ae5a-dcb909611c80", "sighting_of_ref": "indicator--b03071e7-1477-4a39-a692-509f2ba6b5c8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aab2532-d11e-459d-9d56-883d9ca397c6", "sighting_of_ref": "indicator--1f8df801-1aed-4c35-910b-ab97763b94d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46366c92-41b5-455f-ae86-e6eb563a580c", "sighting_of_ref": "indicator--0c977a95-2c11-4d41-b5d1-3b7a370947be", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2abc587-a829-4cd0-a2ff-68851be5a904", "sighting_of_ref": "indicator--f6654281-7562-4730-9469-1f031d482f6a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930072d8-06dd-4cdc-a1c5-c2127a18ccda", "sighting_of_ref": "indicator--783c2237-e21e-40a1-8c55-4a17a198e805", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4902bce0-6120-44b4-afd9-6051155f88d8", "sighting_of_ref": "indicator--41083ed6-a485-48c5-b931-c00e2951d0f2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad85cf6-4bd7-4c44-a700-7f90393d14b5", "sighting_of_ref": "indicator--94d5bf4d-cfc9-46eb-8f3b-104f3d56af31", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997c3203-5011-44f4-b8d3-b262e4474a57", "sighting_of_ref": "indicator--33a462e6-01ea-4b4b-92ce-34046e2fc68f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b66e374-b23e-449d-a667-9a5d248a7372", "sighting_of_ref": "indicator--bd419a8c-1807-4ae3-bbd8-102316f39d23", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c013dc-5d61-4df7-a1aa-3ed39a87cd7d", "sighting_of_ref": "indicator--5ddd7a6e-d3c3-481c-a98c-4745e1ce37a4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bec1ce-043b-4f82-87cf-1e911cfa7fa5", "sighting_of_ref": "indicator--190d596e-53cf-4fca-914d-373b900817f4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896e857d-2970-48f2-a14e-1d61fe3a44b0", "sighting_of_ref": "indicator--77e4d1b4-d7f2-483e-add2-2efd50d7eeba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7d7f38-0c8e-4a2a-93f7-0ea6c7e929a6", "sighting_of_ref": "indicator--ba957d40-d415-47a2-9fa0-fdd0da7694c3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9510162b-e307-47e7-b9d2-aa4d712c30c1", "sighting_of_ref": "indicator--ba957d40-d415-47a2-9fa0-fdd0da7694c3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da038ae-ab9b-4c86-88ed-0eaf5227e913", "sighting_of_ref": "indicator--736caa41-d570-4f51-aae3-4cc0b645554a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e4d0c0-5b0b-473a-a990-997753d891ec", "sighting_of_ref": "indicator--d78e5acf-577a-49c7-903b-cb0cde644391", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14261b3f-756a-4508-99cf-fabf6438859d", "sighting_of_ref": "indicator--7f0c1c0c-76ac-47d5-9010-fd52b6b035bb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b18ff7-b9f1-4c67-9fae-94166bbcfdba", "sighting_of_ref": "indicator--a2eea6d6-ae9f-4483-86f9-858f722d4981", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a437d70d-14a6-4415-ba84-b17ee19dcdae", "sighting_of_ref": "indicator--a2eea6d6-ae9f-4483-86f9-858f722d4981", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3725affb-fa82-4653-baa1-e6f0d02a2572", "sighting_of_ref": "indicator--52723952-2278-42e9-8099-38994e0efc95", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1aa2dc-c7d0-400f-8d82-5adc15447e74", "sighting_of_ref": "indicator--d5abd8b1-0a2a-4410-83cc-aa3472755321", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28bcf6f3-0325-4ae1-9d91-6edc6b2175d5", "sighting_of_ref": "indicator--be38dfca-84ee-4697-81c8-cde338737648", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f002ae85-7941-4891-b412-6ad3a806135b", "sighting_of_ref": "indicator--16b76c75-b9ab-4ec6-8053-efd861fbaa17", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f0c115-d960-4096-a941-88a447bd6460", "sighting_of_ref": "indicator--d5e35470-8dbc-499f-957e-5cfca7ed01ad", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aeda8a7-c759-4a29-b34d-622d8c837d2c", "sighting_of_ref": "indicator--dc425af6-4465-4bed-aa2c-b874721f2c47", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66532ad-673e-492f-8070-cfb217e0762c", "sighting_of_ref": "indicator--3bf78888-1b1f-45a4-963c-e626afffefba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97720d53-66a2-403d-b145-65ee1c180eec", "sighting_of_ref": "indicator--7b97dd4e-9fd9-4833-b9dc-164588a58f74", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6394c88f-b29c-48ae-a76f-18d0ada183a2", "sighting_of_ref": "indicator--cb788f2f-d787-480a-9f92-2dfef933d958", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3651329f-6e90-4b94-a04c-fea9e5013353", "sighting_of_ref": "indicator--4f2980a6-0fd2-4f18-84b5-467bc7545680", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc1c68e-53e8-4825-b17a-04d3ef100482", "sighting_of_ref": "indicator--c0b8af6c-20be-460a-a190-ac2d2ae0b76b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38892fa0-e438-4f04-98b4-6ef34de62481", "sighting_of_ref": "indicator--370161b2-5049-4d99-a6f1-18c67a0d9ec8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fc6e2d-c008-4b81-b496-9cdf3ccd8485", "sighting_of_ref": "indicator--06f4dd3c-3e02-4ddf-86d5-2e5e09345eab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b3a1fa-31f1-48f3-a570-81ba112da7b3", "sighting_of_ref": "indicator--77660a42-19bc-403e-a768-8bd93b70bb5b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a70964-3354-4a10-aa10-ea8ded285f65", "sighting_of_ref": "indicator--7c40b33d-4eb9-44bc-b222-dbf52bb60a73", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e513799-b58f-4652-9f65-e5588dda0a2f", "sighting_of_ref": "indicator--4e788956-475f-4cba-9c99-516252a5885a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae430a4-8b35-4051-86a2-599c4d3ffabc", "sighting_of_ref": "indicator--c0ad80fd-ec49-4b20-ae6f-b783a45a2ee4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca219c45-06d4-4ff5-bd24-778890a99d28", "sighting_of_ref": "indicator--54c64c81-66ca-482f-b322-452b3eb1a5ec", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391b83a7-8a88-40d8-bfc5-a40e1088bfb7", "sighting_of_ref": "indicator--d871c715-5f9b-4e5a-965e-8ec9b4ef22a0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84500593-8bde-4b63-8cf6-131bef68325f", "sighting_of_ref": "indicator--bec2d034-af80-4ca4-a3dd-41da22edf0a0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da9bd55-7408-413e-a99e-1d8e6761c8f6", "sighting_of_ref": "indicator--400fb5b3-f65e-4c83-8ef1-dffe421121bd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01aeebf4-6d81-4e61-a7b6-b9269f5adc27", "sighting_of_ref": "indicator--5d27f0e2-47b7-4e60-afa0-118032d4fb1a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8008a1e7-bd31-411e-ac32-e4fff4591cf7", "sighting_of_ref": "indicator--4b5ed478-3131-4ce0-a5e9-0eac98dcc943", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0000431-c317-4a0e-9b08-807016402799", "sighting_of_ref": "indicator--38fd086d-ae75-4726-80fa-22d9233487e6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b48bf4-ea3e-4e21-95a9-b4ee41e2b432", "sighting_of_ref": "indicator--c46f3003-20e1-4ba8-94c8-06219486b68b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35a0669-d0e4-41a2-9477-4e985fd96af4", "sighting_of_ref": "indicator--b93dfd0c-a09e-4950-8604-e41f460350eb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200dd99f-d84e-43db-84ec-1d3e6cc74ba5", "sighting_of_ref": "indicator--7701f2b0-8fe3-442c-bf0f-9600e69c8c51", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f02481f-9470-4722-8c3f-d4ee4ecc677b", "sighting_of_ref": "indicator--0ab9e33d-3fb2-4987-be9c-56c788d15577", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a436de9-d211-4e35-8395-d4a29ddf1b08", "sighting_of_ref": "indicator--17569752-c450-4a65-b1cb-730754d5e6e0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34326020-bff4-4427-8afe-3c06ac13d6f3", "sighting_of_ref": "indicator--17569752-c450-4a65-b1cb-730754d5e6e0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c221d808-1225-4fb9-8e88-6e26fac85e56", "sighting_of_ref": "indicator--fb577c22-ed88-4f57-8d47-1cc02e11a8ad", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99262ba-52a6-4425-98e0-79cbad040d90", "sighting_of_ref": "indicator--fb577c22-ed88-4f57-8d47-1cc02e11a8ad", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97edd464-1ada-443b-ab29-74b045093c18", "sighting_of_ref": "indicator--5f799a98-36b8-4194-8555-aed20859fef1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aaa88df-1815-4480-9d51-bdd43aec9222", "sighting_of_ref": "indicator--5f799a98-36b8-4194-8555-aed20859fef1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abbecbb-e8ee-4005-a1a9-3f1e62ec9dd8", "sighting_of_ref": "indicator--a95b3146-fdd5-43f4-8508-f50e300c17a6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c245afa-b2a8-40da-b28e-547bdb5a6f1c", "sighting_of_ref": "indicator--14c62338-9441-418c-b806-6b829ec12e1e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8afe895-44a8-4d5f-8b6b-a388b9b8a4b6", "sighting_of_ref": "indicator--bd0e5f35-b182-4e10-9b78-2c6e2c34a5c6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfe51ce-7cca-4a0d-81d5-483a9467e366", "sighting_of_ref": "indicator--7039881a-e059-4f2e-beb2-1310f7f6db54", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9310242-6a7f-4755-96c9-ed101cae5bb4", "sighting_of_ref": "indicator--3413d807-5f90-4784-aecf-ba277825d6ae", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d692319c-7d54-475b-a63a-8da5d2ee8b79", "sighting_of_ref": "indicator--2e811bf2-3c08-410f-88fa-bfcaf3babdce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ddd1f5a-3a86-4af2-a60d-71e9c919de69", "sighting_of_ref": "indicator--df262d78-ab81-449b-8adf-8c4a674e9e31", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194cc304-31c0-46bd-88ed-01c292f9c342", "sighting_of_ref": "indicator--1ec3c7cb-0d9b-4bdc-a981-0b5520a682f3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dba6e4d-c364-49e4-a35f-ad6e57ea0d39", "sighting_of_ref": "indicator--26934110-c43f-4df1-94ec-d82ad8212554", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27f87b4-d9e3-4e58-a38c-de6445c0c02c", "sighting_of_ref": "indicator--28571362-30f3-4f5d-81e9-ea246aab6e2f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31de088b-a90b-4c1d-9c17-11314f1db3be", "sighting_of_ref": "indicator--28571362-30f3-4f5d-81e9-ea246aab6e2f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc5e6e8-7540-4d66-b0b8-aaebf9b9d9b5", "sighting_of_ref": "indicator--28571362-30f3-4f5d-81e9-ea246aab6e2f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25420a4-acd6-40af-ac85-761ec233cbc6", "sighting_of_ref": "indicator--e4970ee8-618a-4edb-a97d-fa5ab9ca0b49", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760e8b3e-9288-4287-beb2-0d5418dd332b", "sighting_of_ref": "indicator--a9b5eba1-1f73-4905-8f2c-7b56e21a21aa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd8266e-d291-4ccf-aa89-ff6c3260fb94", "sighting_of_ref": "indicator--4a56ad7c-a051-4987-b1ff-aa08dc1e6916", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c632c29-839b-4773-9d1b-37fd7ebf0c80", "sighting_of_ref": "indicator--4a56ad7c-a051-4987-b1ff-aa08dc1e6916", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77e1917-5e92-4ee9-980c-671711db02f0", "sighting_of_ref": "indicator--4a56ad7c-a051-4987-b1ff-aa08dc1e6916", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d25c34c-0c6a-4022-8a0c-0a383ae0c1e5", "sighting_of_ref": "indicator--9d59c0c9-55f5-4b1b-893d-637c82bd5b6d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f61ec61-7162-4727-bd06-2ec610ea36d4", "sighting_of_ref": "indicator--9d59c0c9-55f5-4b1b-893d-637c82bd5b6d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278f51e7-4bf5-4e66-81e1-8f9a72f46b58", "sighting_of_ref": "indicator--ea45cf61-e58e-4e19-a6fa-3993515d5709", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a07226-f2bf-4c06-8d9c-6dcc6d926d9c", "sighting_of_ref": "indicator--bafbf21e-5b8e-4ce6-9c88-13fab321bcc4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13743e4f-0db0-481a-a73f-4a38ad43b3f2", "sighting_of_ref": "indicator--9558d9a1-734a-402e-81a5-666fc2f64040", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4140b93f-49bf-453b-8bc7-95cb5192422d", "sighting_of_ref": "indicator--f7da3f19-5d5f-4093-892b-40aed989fb70", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9946689a-fa23-4f5c-9b9b-9785832d3742", "sighting_of_ref": "indicator--f34922d0-6239-461a-a4da-5720c12e6c2a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f87a9a-f601-43f6-bbd3-208e05a43811", "sighting_of_ref": "indicator--a0ecb51c-173f-43d1-a26a-a1922fa5c60d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7599064-b5e6-4809-8b97-ffe64ad088ea", "sighting_of_ref": "indicator--df72a3a5-c8c3-4b47-ba3f-c642230b56e4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5850a543-c80e-4729-87a1-564f7f275f10", "sighting_of_ref": "indicator--4e650c0f-91ee-494a-896d-e69c3a14c9ca", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abeeb1a-e651-4f07-86e6-e22804f86cfb", "sighting_of_ref": "indicator--7ac19838-f0e2-473d-a234-9e208bdb9169", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7eead26-f499-4375-92d2-673569a77a3b", "sighting_of_ref": "indicator--4a8cd6ab-dc1e-4a64-b84c-8291bedd3ea0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9a45a6-fbbc-4a4f-aa5e-65a547be8a86", "sighting_of_ref": "indicator--4a8cd6ab-dc1e-4a64-b84c-8291bedd3ea0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49194c6-a15a-4ad9-a913-0638cc71cf89", "sighting_of_ref": "indicator--4a8cd6ab-dc1e-4a64-b84c-8291bedd3ea0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4169ddde-8487-4a9f-9274-d9ae472c51d4", "sighting_of_ref": "indicator--73f0c7e5-1736-41bb-8a9a-e1a5af34e376", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d587ae9-6d4e-464e-9c21-3aa26c600750", "sighting_of_ref": "indicator--3e4f7cd1-3063-42e5-a093-f94f999009ac", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9953062f-db81-4957-9d82-268dbdcb9225", "sighting_of_ref": "indicator--ec2603ba-4e7d-43f9-afcd-ace12449cea4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c172f82-decb-4a89-b66c-c9142425885e", "sighting_of_ref": "indicator--6b7030b3-5775-4a30-978c-6a4030f07020", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e421ed2-e32a-4b8d-80c7-1bb6a5dd8d5e", "sighting_of_ref": "indicator--6b7030b3-5775-4a30-978c-6a4030f07020", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52ee083-aa98-4462-b51e-95346cfa9e6d", "sighting_of_ref": "indicator--75a1c009-60a8-4b52-a4af-6bf8f09c99c3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e8bdcd-7e99-4ef7-b675-c987ab8b3148", "sighting_of_ref": "indicator--45d8ded2-c53b-4886-b98e-b34422344f7f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44035dc-6454-4eb4-881e-a9711464e247", "sighting_of_ref": "indicator--d4a41cd0-3ac0-4cc9-80e9-8ff85b4c9381", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ac2adb-ffb0-49bb-b9f2-222c0bdf6e51", "sighting_of_ref": "indicator--86387153-a6b6-401f-830e-308d9b00c8a5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f751c8-4105-47a6-a142-33b1de2962a6", "sighting_of_ref": "indicator--86387153-a6b6-401f-830e-308d9b00c8a5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f271107-e3c7-4da0-b756-cb7d529ea80c", "sighting_of_ref": "indicator--dbfd4f61-72ff-468f-ad38-0e7c962c87c1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b114cf4-4c12-4164-9084-f2471074bad7", "sighting_of_ref": "indicator--84ecde72-339b-4657-ac9e-3f45aa00ec2f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d9f35c-19e7-4596-af1a-d917cd94bb9a", "sighting_of_ref": "indicator--a4909332-faf9-4870-a174-12e60b397624", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd25f26-b1ff-4b45-8180-610b3cd1e5f8", "sighting_of_ref": "indicator--a4909332-faf9-4870-a174-12e60b397624", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd8e6b7-4255-494e-877f-955f6c3812d3", "sighting_of_ref": "indicator--a4909332-faf9-4870-a174-12e60b397624", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd492181-ceb0-47d1-9d1a-55ef25f5d81b", "sighting_of_ref": "indicator--b5faa0e5-5f21-439b-a0e7-2303dacaba8f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbeeba5-9c11-42c0-8a9b-817521a77ea8", "sighting_of_ref": "indicator--b5faa0e5-5f21-439b-a0e7-2303dacaba8f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21e9d9b-870e-46df-8e3d-e4f7e88b3cf1", "sighting_of_ref": "indicator--b5faa0e5-5f21-439b-a0e7-2303dacaba8f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e89517-2afd-462c-870e-b3617929383c", "sighting_of_ref": "indicator--3b8273d1-74d9-45d7-b998-a38577dd599c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9661eb0a-684a-4092-b944-7943a5b3bbf9", "sighting_of_ref": "indicator--3b8273d1-74d9-45d7-b998-a38577dd599c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9192d5ee-ba08-4f23-8db9-8339de16c225", "sighting_of_ref": "indicator--0b25a3fc-cdcf-4654-a04c-095877c6cc08", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3696b54d-2581-4f96-983a-107042d61583", "sighting_of_ref": "indicator--0baaa409-d885-4bb1-8ba0-d52421f7857c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc73c26b-be89-48af-9be5-dfdfa3ecc965", "sighting_of_ref": "indicator--2e291d15-6a6f-4045-b7ac-62a108e95e25", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b51a8a-73f2-401d-b641-e047bf35ef6c", "sighting_of_ref": "indicator--a31b1e1c-51a9-406c-8e6b-220418cb1b53", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3496691d-dc7a-4f7c-a0fc-5a087bc44cb9", "sighting_of_ref": "indicator--521fd7b8-fe4c-4ef1-b0d9-573954d1a692", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cdd5c6-0836-4de3-b7c9-158d92d2bd43", "sighting_of_ref": "indicator--521fd7b8-fe4c-4ef1-b0d9-573954d1a692", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fc89b4-435a-4bd0-bb71-68ce3b6a842d", "sighting_of_ref": "indicator--76fa4f01-d0a9-41f0-98a5-35c91e557b5e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e494a0a-a5c2-438d-b84e-98e1f8b24a3c", "sighting_of_ref": "indicator--76fa4f01-d0a9-41f0-98a5-35c91e557b5e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6780440-056e-4f76-be69-af759169dfd4", "sighting_of_ref": "indicator--76fa4f01-d0a9-41f0-98a5-35c91e557b5e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f1a728-7ffb-417d-8dfc-983c035b4acb", "sighting_of_ref": "indicator--937080a0-da7b-4819-ba73-c2bbccaa433a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4988bba9-4991-4041-963a-364d65f05ed0", "sighting_of_ref": "indicator--3c260f96-7e29-49d3-83e5-ca588ced1e2b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158db4e8-66d0-4db5-8bd1-ae3f8718f1d4", "sighting_of_ref": "indicator--3c260f96-7e29-49d3-83e5-ca588ced1e2b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2a49dd-7903-4503-9033-9a0c53bba7ed", "sighting_of_ref": "indicator--5409944d-dd1a-4522-bdee-d370aae71f4f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81976c42-159c-4a61-8976-db0375d2b510", "sighting_of_ref": "indicator--5c2f3237-cb05-4bec-b09a-773e812b0468", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5562c4-866c-4a42-8f53-35bd6fef0e85", "sighting_of_ref": "indicator--baf7b9f3-0653-41c4-b045-091ee68cea63", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0afb4b-e520-4f4b-b55e-36209762a0d6", "sighting_of_ref": "indicator--baf7b9f3-0653-41c4-b045-091ee68cea63", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77246241-df3d-48e1-a993-b419e1328e06", "sighting_of_ref": "indicator--baf7b9f3-0653-41c4-b045-091ee68cea63", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0b15a5-000b-45de-a268-d4fd62008be4", "sighting_of_ref": "indicator--4f66dad4-42f1-42c5-8951-81242e77635f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8a4745-100f-45ca-a83d-e8f9c7febe73", "sighting_of_ref": "indicator--4f66dad4-42f1-42c5-8951-81242e77635f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f7ce5d-c42a-4cda-97c2-d404733d6992", "sighting_of_ref": "indicator--4f66dad4-42f1-42c5-8951-81242e77635f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba482d44-fc10-4f7d-91b4-911e9c905445", "sighting_of_ref": "indicator--d86b49cb-edd4-496e-920d-04ecb1d62ed7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650ff6eb-b5c6-4051-803b-f9509e5f701c", "sighting_of_ref": "indicator--4e9936af-b645-42d9-9b12-cdf587a261d4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d4650c-87e6-4e97-964a-d036fb30f260", "sighting_of_ref": "indicator--4e9936af-b645-42d9-9b12-cdf587a261d4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf25701-3ff5-430e-9c42-974f3359740f", "sighting_of_ref": "indicator--4e9936af-b645-42d9-9b12-cdf587a261d4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb568882-4183-48dd-bcaa-4600af31855d", "sighting_of_ref": "indicator--daa295ff-7642-4245-b107-1d33e81b5d09", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b310b4-ed5d-45b2-af51-fa9f74987371", "sighting_of_ref": "indicator--6bcc4e7e-1fdd-49ee-ba6f-6a5fde6ff5a2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac686795-1b46-4a73-8540-31046d61b110", "sighting_of_ref": "indicator--b57fd936-9f8a-4364-8ca6-0fdc6092adb1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbc2b78-409b-4fdc-ba21-4f47e3a62a46", "sighting_of_ref": "indicator--b57fd936-9f8a-4364-8ca6-0fdc6092adb1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816c3f0b-652d-4274-b144-c37262b99479", "sighting_of_ref": "indicator--d487fa97-cab2-4c4f-946b-74c02026fa5b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae8537d-1629-4470-b606-81985a9ed9be", "sighting_of_ref": "indicator--c22a4200-dcdf-4540-8dcf-97cbed5d8235", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbfaf31-ee2d-44f8-9283-63779d109c3d", "sighting_of_ref": "indicator--c22a4200-dcdf-4540-8dcf-97cbed5d8235", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5578604b-deff-4e83-8fd4-e2512dfd6f94", "sighting_of_ref": "indicator--c22a4200-dcdf-4540-8dcf-97cbed5d8235", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7b0bf3-9158-4766-9b2b-6d2d944d3534", "sighting_of_ref": "indicator--a4958583-deb9-45f3-b0d3-2c376e5cd5c6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b29709-1094-4cdc-acb9-65963cc57c37", "sighting_of_ref": "indicator--2f9c61ab-193e-4a0e-a43b-8d9d6a68b8e4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ed434a-07d5-4129-b05c-c5c17d070d6b", "sighting_of_ref": "indicator--2f9c61ab-193e-4a0e-a43b-8d9d6a68b8e4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5961a35c-2997-4cf5-a7a2-0f41658dffa8", "sighting_of_ref": "indicator--2f9c61ab-193e-4a0e-a43b-8d9d6a68b8e4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc82671-38a0-42f9-9dc1-1dcd8cca2917", "sighting_of_ref": "indicator--e98b9105-8537-40ce-92f2-dd51d48833c8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48271f1a-0e55-444f-af4c-1cd9be5a4884", "sighting_of_ref": "indicator--10ec5f1e-f0d4-4136-aef2-32d5da09e8a6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ae7ca1-e805-40e5-ba50-e7a4d3023a30", "sighting_of_ref": "indicator--a0b6e8b3-d744-4dc6-92c7-a238b23c1383", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53657d37-d514-4edb-a8e3-f63b74387b18", "sighting_of_ref": "indicator--5c1445c0-9f6a-4215-981b-7b8ff4e4bc7b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2afbf4-72d3-48c7-98f1-0df9de1db334", "sighting_of_ref": "indicator--5c1445c0-9f6a-4215-981b-7b8ff4e4bc7b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9adac62-98d9-4617-858f-984a73f06d38", "sighting_of_ref": "indicator--6db1b37e-a128-4a06-9c3f-e0532f246f67", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfc2179-e5e9-4d3f-851d-4c8bd9ab8a5d", "sighting_of_ref": "indicator--6db1b37e-a128-4a06-9c3f-e0532f246f67", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad705828-f31f-40e9-b047-dea87eb7b43a", "sighting_of_ref": "indicator--6db1b37e-a128-4a06-9c3f-e0532f246f67", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b222519-48cb-4eab-b5f9-428b28c62aa8", "sighting_of_ref": "indicator--4f59abcd-6cd2-44c0-a6b9-ffece8e33c44", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50dd18c-3687-4663-8a8e-84c82b3f45bd", "sighting_of_ref": "indicator--4f59abcd-6cd2-44c0-a6b9-ffece8e33c44", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd08922f-da45-4cde-b387-61b318cbadf7", "sighting_of_ref": "indicator--39df7430-b98c-4c53-b616-ae0ef71b0245", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa0ca36-1e27-4ff4-a0bb-382addfdf944", "sighting_of_ref": "indicator--39df7430-b98c-4c53-b616-ae0ef71b0245", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5c3812-5663-467c-baff-8c1069bd538c", "sighting_of_ref": "indicator--87846008-1379-41fc-8a6a-e984c137b697", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd1c927-cc4a-4266-96ac-7c3643894203", "sighting_of_ref": "indicator--87846008-1379-41fc-8a6a-e984c137b697", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19dbd39-0c41-4213-8475-7b95413871b8", "sighting_of_ref": "indicator--fdd28e85-1035-4793-858c-869908221f3f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a38eb72-9691-49fb-b008-f61e6c9997eb", "sighting_of_ref": "indicator--fdd28e85-1035-4793-858c-869908221f3f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef99985-ae2a-4fa7-91b1-04c3ec76fe46", "sighting_of_ref": "indicator--8c87b8f1-3b6e-4d8f-8a46-ca71733e1a70", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca24a8d-63d2-4e4b-8317-241eb17cae19", "sighting_of_ref": "indicator--8c87b8f1-3b6e-4d8f-8a46-ca71733e1a70", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4779003-fe90-42e8-9cf7-5b5a3b48893a", "sighting_of_ref": "indicator--a6e4700a-4bf8-4dac-a607-5d2e7a6947b3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f61c0b7-f9b6-45a3-947b-9ae87fb94389", "sighting_of_ref": "indicator--c6a839df-38e1-4dda-b702-20f23fca1d6f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7215df-f2f9-4231-b093-e43e48ee7cb5", "sighting_of_ref": "indicator--c6a839df-38e1-4dda-b702-20f23fca1d6f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84f0d83-2dfe-4d9a-a42c-7c3bddd8a124", "sighting_of_ref": "indicator--c6a839df-38e1-4dda-b702-20f23fca1d6f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0468983e-82b6-4927-ab72-ec3658a55b29", "sighting_of_ref": "indicator--92949e7f-f495-4698-9d9a-dd4bd64ff415", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937c1772-af42-44ae-b0aa-4589dee6fcd6", "sighting_of_ref": "indicator--754e29e1-396f-4b63-9d80-a25628524927", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5af26a1-fa3b-4906-b9c5-2954467b960c", "sighting_of_ref": "indicator--7af83842-5c67-4832-bcfc-5a8cdfd0ca5d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa02ba12-9d9e-447a-bcfe-e833acea267b", "sighting_of_ref": "indicator--7af83842-5c67-4832-bcfc-5a8cdfd0ca5d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d284311-a7f0-4edc-8094-455130a95d07", "sighting_of_ref": "indicator--7af83842-5c67-4832-bcfc-5a8cdfd0ca5d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea66996-e00a-45b1-b1b3-ba7e36ac7e86", "sighting_of_ref": "indicator--e835dad7-e0d5-448e-9e0d-1ec77db4bfc6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ed5ead-5486-4c1d-9595-34d15253e3c1", "sighting_of_ref": "indicator--e835dad7-e0d5-448e-9e0d-1ec77db4bfc6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492f535d-895b-4edd-b887-ce474e3a1631", "sighting_of_ref": "indicator--1ae829df-4756-4f18-996e-65247b7d5655", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8bd578-5a5e-4439-bd55-a8cc6b8e5d69", "sighting_of_ref": "indicator--1ae829df-4756-4f18-996e-65247b7d5655", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1a2414-9e4e-42b4-9c2f-2675cea119f3", "sighting_of_ref": "indicator--1ae829df-4756-4f18-996e-65247b7d5655", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826d5c99-1244-4400-8d7a-d96221ab355d", "sighting_of_ref": "indicator--3f4149bb-e394-4fdf-96be-074bf2ee122a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574ed8e3-5cde-4e56-9c03-83c5516cec7f", "sighting_of_ref": "indicator--c3e75fc5-d35d-4334-9489-9f95c6673298", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c958ce52-c711-4c76-bb79-89f4f0ef088e", "sighting_of_ref": "indicator--7dfbf17a-24e5-4c86-9512-137a58b10514", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16909360-d510-415d-abb1-c42c7015ccba", "sighting_of_ref": "indicator--11563bc1-a526-48d6-9bd5-fdccd11a5a1c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4ed7aa-498c-4864-8687-89512fc63a15", "sighting_of_ref": "indicator--02946dc0-3617-4ae0-940b-2a62ecbe8c95", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a279781-15ac-4770-813b-45c31e014bea", "sighting_of_ref": "indicator--02946dc0-3617-4ae0-940b-2a62ecbe8c95", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f6ded5-fb63-4ff2-a115-d550ea322a42", "sighting_of_ref": "indicator--dcf74125-46bc-4b39-b900-08b81788ead9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51652760-50bc-48e9-92b4-7abef034c0b8", "sighting_of_ref": "indicator--dcf74125-46bc-4b39-b900-08b81788ead9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ea9ae7-5e71-4b5e-aa1e-703f13cfad36", "sighting_of_ref": "indicator--482f1c7d-a422-4c78-a673-9fe0803fb552", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5293bd61-fcf1-4dfb-a495-8f1708e197a8", "sighting_of_ref": "indicator--6adb32ae-fe94-4f8a-93d3-f5c9010f4469", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b71896-30f9-45cc-9e53-135e6829e4e4", "sighting_of_ref": "indicator--520209a8-e8e2-4881-b6c1-c34264b8d5c1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f324a698-01fe-4ebb-a511-65ce3ba251bf", "sighting_of_ref": "indicator--aa824d36-b1ba-4859-8c65-9e6bc923dced", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ca26de-b35b-46a9-ad4b-7371b00534ef", "sighting_of_ref": "indicator--5ea0b81a-2251-4c23-98c4-1f0c320ce9cb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97e0e65-9315-4be3-89f9-255957399631", "sighting_of_ref": "indicator--5ea0b81a-2251-4c23-98c4-1f0c320ce9cb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4c98ac-4a16-40c2-9ea6-7ee5fec8ad57", "sighting_of_ref": "indicator--5ea0b81a-2251-4c23-98c4-1f0c320ce9cb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff5b78f-e2fd-4ce7-a1d4-93c415c71a89", "sighting_of_ref": "indicator--08f54f93-5631-46ce-b48b-53be6347ae3f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d707af53-4a13-426e-82bb-be188ad3e50c", "sighting_of_ref": "indicator--828974e8-9aab-40f5-b218-25beb34d0739", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdf2b40-ea03-41ce-bebf-c182ea7912d1", "sighting_of_ref": "indicator--94c4b9c6-638f-4695-a10b-b46cf75beee0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2933a3f-584a-43c8-8ae7-c809701d0b37", "sighting_of_ref": "indicator--94c4b9c6-638f-4695-a10b-b46cf75beee0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24dbaeac-23e1-4b57-b734-825c8b8b8529", "sighting_of_ref": "indicator--8c8ff909-3460-47cd-9e7a-30beb3914fe0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b72596c-903c-4217-8d69-20af6d319734", "sighting_of_ref": "indicator--fb470ed5-c06a-47e3-9c47-1571e199ae1d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3f7ec2-8a77-49e4-93e8-824e8c2b8075", "sighting_of_ref": "indicator--fb470ed5-c06a-47e3-9c47-1571e199ae1d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceabf35d-fa8b-42d5-92a1-76e15b2383a6", "sighting_of_ref": "indicator--fb470ed5-c06a-47e3-9c47-1571e199ae1d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6585db46-3807-472e-bcb8-bb77555a5297", "sighting_of_ref": "indicator--a4c3527c-0c57-4ed8-897a-8f9274af54ed", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ebcdf2-1f3e-4926-9363-370645b257df", "sighting_of_ref": "indicator--a4c3527c-0c57-4ed8-897a-8f9274af54ed", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486f88c4-9a9f-4c12-beae-e46c9a91c945", "sighting_of_ref": "indicator--a4c3527c-0c57-4ed8-897a-8f9274af54ed", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7735e4fd-1a5c-4a9c-b570-d41d6cd3c8c7", "sighting_of_ref": "indicator--7bc1d43b-2d28-4493-aad0-2d4ae8821b7f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5486b730-7177-4ce7-ae1e-6780a045da1d", "sighting_of_ref": "indicator--18743c91-90ae-42ab-b5f9-5f7b03057a03", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f4efa8-9a8b-442c-a531-649736f27b7d", "sighting_of_ref": "indicator--18743c91-90ae-42ab-b5f9-5f7b03057a03", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f85a3e4-df81-4eec-ab2a-7c26d6a2124e", "sighting_of_ref": "indicator--18743c91-90ae-42ab-b5f9-5f7b03057a03", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb45e6b-0b68-47b9-bc0e-df52d42d3757", "sighting_of_ref": "indicator--9cb0f700-99e8-41a8-895d-97f121fd2811", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0680100c-804c-49c3-bfc2-a3aa8c69658d", "sighting_of_ref": "indicator--094f2995-52d3-4d23-85f7-f40becfa3380", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d176aef-3caa-42f4-b6fb-9f7d47334aef", "sighting_of_ref": "indicator--094f2995-52d3-4d23-85f7-f40becfa3380", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a17dde1-0cc6-4f6e-aa4a-c0d148f1f5f4", "sighting_of_ref": "indicator--e0e1d8ac-da9d-4b0b-a961-0d6b91a8315b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15102579-8b8c-4080-95a6-f1d7517f5e45", "sighting_of_ref": "indicator--e0e1d8ac-da9d-4b0b-a961-0d6b91a8315b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117fb624-cc15-4e0a-a19f-322cef8e60bf", "sighting_of_ref": "indicator--e0e1d8ac-da9d-4b0b-a961-0d6b91a8315b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2834c889-4a6e-4dd3-aa72-641a45d92acf", "sighting_of_ref": "indicator--dde1f791-2a0a-40d0-84ac-23f3d099ee9b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b569d98-1609-4291-93be-9c13b06c1091", "sighting_of_ref": "indicator--5856c028-ad72-4b3d-a844-e10512d48a37", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ba0157-91cf-4d19-899c-48068bad1984", "sighting_of_ref": "indicator--5856c028-ad72-4b3d-a844-e10512d48a37", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501f92f8-4a43-4c41-b287-e2f6b2bfe10b", "sighting_of_ref": "indicator--4d0cfcc9-822f-4ee9-906d-0ee2d0d4de82", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46557ce8-cec1-47ae-944d-50dce12e3477", "sighting_of_ref": "indicator--4d0cfcc9-822f-4ee9-906d-0ee2d0d4de82", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b80b38-ea27-494e-829a-4d0897344cd3", "sighting_of_ref": "indicator--c2217683-25a7-4f88-b8b7-b27e5f3e48c8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f00ee0-d8a3-4e98-baee-36c1731aef94", "sighting_of_ref": "indicator--c2217683-25a7-4f88-b8b7-b27e5f3e48c8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbcd5aa-f215-4c6c-8ba6-c9650fedecb9", "sighting_of_ref": "indicator--e146d3d4-1650-44a5-b15c-5d8ca8b77523", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73ec55b-6776-4a76-980e-5d4c2309ab85", "sighting_of_ref": "indicator--2b40d302-6202-492d-9f02-7324e7322a43", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e210c4ed-0dbc-4805-8493-b19218bd641c", "sighting_of_ref": "indicator--2b40d302-6202-492d-9f02-7324e7322a43", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b49bc47-1654-436a-8312-e29833949b03", "sighting_of_ref": "indicator--3661a7ba-5e89-4898-ae9a-8e48541e3c85", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8b9232-ceef-4f54-908e-99b5f402f4a6", "sighting_of_ref": "indicator--94c4362e-8a1f-4b5b-b4d9-cd2cf3e8b419", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab52b8a3-12b0-430a-9a86-c2b9b4bf740b", "sighting_of_ref": "indicator--5df7c94e-b872-4b9c-b86d-79271e4d3297", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9c9412-6aea-4f2a-b626-b2b60f4b8903", "sighting_of_ref": "indicator--a237fd14-5111-46a0-8aa9-716f4b5402dc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068c3e1c-27ef-453d-9d00-04c9529142e0", "sighting_of_ref": "indicator--a237fd14-5111-46a0-8aa9-716f4b5402dc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9cca17-d5d2-4f74-8821-834098296df9", "sighting_of_ref": "indicator--37e84851-3857-4795-8706-f5407223c32a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7615c2e4-4440-4fbf-b3bf-7abdcf776f98", "sighting_of_ref": "indicator--0bd29c91-6806-4a1d-87eb-871256138f58", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fd8b4d-07ab-4d4a-a693-1f026037da88", "sighting_of_ref": "indicator--0bd29c91-6806-4a1d-87eb-871256138f58", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ae7f67-87a1-4e65-b2fc-86275513cdbc", "sighting_of_ref": "indicator--0bd29c91-6806-4a1d-87eb-871256138f58", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbe8df1-65f3-4b9d-97a1-beb3e22f23f5", "sighting_of_ref": "indicator--498c5f0d-cb96-4946-9ab8-05632b7e1bab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e72bec-0172-4a54-8499-d4ad76b9a3dc", "sighting_of_ref": "indicator--9d53fb02-dff9-4d12-9b39-2c750a9a6224", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545928d4-1dbd-4fbb-8051-af93e9dec63a", "sighting_of_ref": "indicator--9d53fb02-dff9-4d12-9b39-2c750a9a6224", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a040ac-0382-423a-a475-3b16d4cf737f", "sighting_of_ref": "indicator--9d53fb02-dff9-4d12-9b39-2c750a9a6224", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef241102-2bfd-42df-b7ad-f33a491e991e", "sighting_of_ref": "indicator--67a88eda-731d-4c6d-93b1-9e13384ee919", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3258a196-06f8-401f-9818-92869b47227c", "sighting_of_ref": "indicator--67a88eda-731d-4c6d-93b1-9e13384ee919", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a338fd8-5a66-42c7-ac03-b069fb4b4780", "sighting_of_ref": "indicator--8189ea3e-b136-4571-99fb-c9de6aa26d1e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c25daa-9fb6-4d60-9665-53a213d8b8a0", "sighting_of_ref": "indicator--62b59cd9-389e-4a4b-9f5c-d8a1d21c642c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63498c49-776e-4554-b17c-86042680a1d8", "sighting_of_ref": "indicator--6e844612-5ee5-478b-98cb-2905761e14f9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a128975-292b-4bd7-8d7b-75642ada0b46", "sighting_of_ref": "indicator--64c2b6be-ad05-4490-b083-b7676a73bdd2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fad4cb1-7890-4d09-b7c6-515c60a0a88e", "sighting_of_ref": "indicator--e01e52c5-fd21-4663-b4b8-d75601af84bd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b525dba-f09d-4fc6-a327-8bef69381fdd", "sighting_of_ref": "indicator--e01e52c5-fd21-4663-b4b8-d75601af84bd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bceffb-4c90-4a9d-a142-171a407cba5f", "sighting_of_ref": "indicator--8c63b3dd-926f-43c4-9823-102d96ddc67a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adaadcfe-1bd1-4812-86f5-32a728440452", "sighting_of_ref": "indicator--033c2326-5ef7-459b-834c-fde692af66ea", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a80f977-bab9-4ea4-b8eb-26a4ddb7f020", "sighting_of_ref": "indicator--152ba5c9-d7ef-4720-80f6-d4ea57c60eff", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569e61c3-3825-40ef-8178-c9b58874061f", "sighting_of_ref": "indicator--152ba5c9-d7ef-4720-80f6-d4ea57c60eff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa818af6-3367-4c78-9779-d963f120967e", "sighting_of_ref": "indicator--152ba5c9-d7ef-4720-80f6-d4ea57c60eff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de6e8a4-829e-4380-b41a-277d479556e0", "sighting_of_ref": "indicator--3c06bc5b-2ff7-4c18-99e9-86b6346f785c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a5eaa5-435e-418e-b04d-f51c21b7d787", "sighting_of_ref": "indicator--3c06bc5b-2ff7-4c18-99e9-86b6346f785c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b4b62b-4bab-40c5-bcd4-07e06f92eb2a", "sighting_of_ref": "indicator--3ab88e68-b455-4da1-85a9-e32b2113883f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f8e60b-4a40-4a6b-afdd-33b273bc84d7", "sighting_of_ref": "indicator--4904b811-9a10-469b-bf24-9675f61b5273", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995a6725-ac40-456c-a882-7ad8707ec78c", "sighting_of_ref": "indicator--4904b811-9a10-469b-bf24-9675f61b5273", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5e82c5-3ee6-42c4-91b4-af1735c05b74", "sighting_of_ref": "indicator--312e5b3e-58a0-4282-b34a-0f81848803fd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b791252-233c-410d-a95c-f780f92f0614", "sighting_of_ref": "indicator--be72fa9c-daf7-4eff-89f9-48d72da2eba5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0988b1d-d278-4c31-928d-a49f45f723a3", "sighting_of_ref": "indicator--be72fa9c-daf7-4eff-89f9-48d72da2eba5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e281f8-00df-4b0d-9f53-80851ec4cbd5", "sighting_of_ref": "indicator--b7a4f8ce-64da-4c1b-9d90-8c50b3bfcaa7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613d48fc-ae74-4330-a488-2c25457bba50", "sighting_of_ref": "indicator--b7a4f8ce-64da-4c1b-9d90-8c50b3bfcaa7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e24d06-d0dd-475c-8f03-2ddc20ef4b97", "sighting_of_ref": "indicator--74f5f9a3-0b43-4e1b-b727-7f46a8fadb69", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41188ce8-c9cc-47fc-884e-42ea55126a57", "sighting_of_ref": "indicator--262267d8-82cd-402f-8977-509bbe30eb85", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7f723c-5a96-4f3a-b5e1-6f754f269f37", "sighting_of_ref": "indicator--262267d8-82cd-402f-8977-509bbe30eb85", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b9b774-9ce0-4477-a191-2e4972ff31a7", "sighting_of_ref": "indicator--871f9b3c-5d56-4920-8517-38060d43957a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b24bc78-6963-4171-8b90-90cbb7926ef2", "sighting_of_ref": "indicator--871f9b3c-5d56-4920-8517-38060d43957a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f071e22a-729f-4004-80b0-8d6e99d319bd", "sighting_of_ref": "indicator--871f9b3c-5d56-4920-8517-38060d43957a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3b02ae-64a3-459a-8070-58c21ae39110", "sighting_of_ref": "indicator--fd0cf66c-0439-472e-b302-911907bd8ecf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5557f9d1-3f0c-46ac-b592-734c7414028c", "sighting_of_ref": "indicator--fd0cf66c-0439-472e-b302-911907bd8ecf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb38ece-fcb9-42b6-9ec1-635785f1ff8e", "sighting_of_ref": "indicator--fe38d009-9922-4834-846c-140b3f359e8b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b76e1e-12f0-4a9b-8205-5aa55d31b074", "sighting_of_ref": "indicator--fe38d009-9922-4834-846c-140b3f359e8b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4fad4b-085a-4349-843d-df96ca882b75", "sighting_of_ref": "indicator--961606bb-e72d-45d6-ae97-95b6cb6aca84", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d65fa3f-637f-43ae-89da-c4f9ffc16cf9", "sighting_of_ref": "indicator--961606bb-e72d-45d6-ae97-95b6cb6aca84", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a580c2e2-24f8-46ef-935c-85afd99c2be8", "sighting_of_ref": "indicator--961606bb-e72d-45d6-ae97-95b6cb6aca84", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92eeb85-372d-4c98-b5f0-4c5b86e9285a", "sighting_of_ref": "indicator--7306ce8f-a062-4ec1-8f2c-e5d92d2f61e0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100959de-d3b6-485a-acea-89fd845a3e7e", "sighting_of_ref": "indicator--144e8bc5-514f-49ea-aee2-040214ae251c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab667940-6488-4e1b-a2f6-35a96ba6035f", "sighting_of_ref": "indicator--fe2ecac3-405c-4aca-8cb3-da52033a208b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b096672b-a3bf-4ab2-9bd1-ec6a83cf9f2b", "sighting_of_ref": "indicator--787ee569-c424-49fc-8c1a-f1696df4bdb1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329c137b-4a04-4440-95ef-c84e0000a36b", "sighting_of_ref": "indicator--cbe634d6-ff7b-4435-baff-4aac36539be1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48601acd-8000-472b-8e27-5f21bc122df1", "sighting_of_ref": "indicator--cbe634d6-ff7b-4435-baff-4aac36539be1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8479a5c5-f660-4410-82a6-d421628d3d65", "sighting_of_ref": "indicator--c0d60ce0-ab0b-4ff6-b42c-5fb9facc5d8c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700adaa5-93b8-4c78-8e67-060fddd4b76f", "sighting_of_ref": "indicator--c0d60ce0-ab0b-4ff6-b42c-5fb9facc5d8c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a633f1f3-724d-46bf-bffb-0c655ef8daca", "sighting_of_ref": "indicator--c0d60ce0-ab0b-4ff6-b42c-5fb9facc5d8c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff4319e-ec24-40f8-921e-f72bd0160348", "sighting_of_ref": "indicator--de5838d1-e35c-4499-8bdf-f6875f5229c7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7398b8bf-d384-4753-a351-267c6b04400f", "sighting_of_ref": "indicator--de5838d1-e35c-4499-8bdf-f6875f5229c7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded4a202-d56a-4750-ba6f-cb2059b45294", "sighting_of_ref": "indicator--c35c8537-3648-448c-ae8f-0c4a410afea4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93043e2-2647-4939-90a3-77d3e4e57303", "sighting_of_ref": "indicator--c35c8537-3648-448c-ae8f-0c4a410afea4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5214f42b-396b-49d8-afeb-37a4039ba2d1", "sighting_of_ref": "indicator--c35c8537-3648-448c-ae8f-0c4a410afea4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7346f7a1-8c92-4fb9-b3f6-8e44772bf721", "sighting_of_ref": "indicator--6c38d74a-05b1-4491-8b5f-b794eb5beb92", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1edcc5c-40ca-4e26-b6b0-76903bfe5fc3", "sighting_of_ref": "indicator--6c38d74a-05b1-4491-8b5f-b794eb5beb92", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a907e27-a141-4714-ac3b-5f2c4de41adc", "sighting_of_ref": "indicator--6f163863-335b-4021-9211-7fd83b374c0e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4659f868-0f1a-464c-b266-584afa570dbd", "sighting_of_ref": "indicator--6f163863-335b-4021-9211-7fd83b374c0e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03cb5e2-7a61-4769-9aef-5f7adf9edab2", "sighting_of_ref": "indicator--6f163863-335b-4021-9211-7fd83b374c0e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed30de5-d189-4a4a-965f-e0f1fd7c37be", "sighting_of_ref": "indicator--1826e596-3559-48f2-86dd-ce357a06280b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d851bdf0-cd29-4d57-9757-2dc497091f4e", "sighting_of_ref": "indicator--64a4b81a-44bc-4a11-88d3-07992a18116e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7770086f-9dba-48ed-a481-3ef9c9d24680", "sighting_of_ref": "indicator--64a4b81a-44bc-4a11-88d3-07992a18116e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918be340-81bf-4517-87f8-490cdeaf8657", "sighting_of_ref": "indicator--64a4b81a-44bc-4a11-88d3-07992a18116e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41dba9af-da0c-4e4d-ad94-ab25c2ee4ed1", "sighting_of_ref": "indicator--ed6d540c-cbf2-4a19-950c-fab3570c1f21", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87e7b27-7bc4-4a9e-a8f3-47ec116dc9d7", "sighting_of_ref": "indicator--ed6d540c-cbf2-4a19-950c-fab3570c1f21", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b0910d-241c-4843-bf19-fe7f73a3fd22", "sighting_of_ref": "indicator--ed6d540c-cbf2-4a19-950c-fab3570c1f21", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361c439f-3b76-4d7d-9394-e43faecad831", "sighting_of_ref": "indicator--beccfb41-1540-4a10-8b04-888352564f3a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e28271-bb09-42dd-8588-ac14ba7cdc05", "sighting_of_ref": "indicator--44dd457f-a782-4604-a4d4-c19ce4531a0f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd10546-cd30-4a14-85fe-c11560715c75", "sighting_of_ref": "indicator--bf7c014d-0199-424e-944d-72e8d735e474", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54aec0f-04b1-43c1-94a0-86dae7d6018a", "sighting_of_ref": "indicator--fe134ecf-50ec-44af-8d79-b022e8ac06be", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70c7358-2a3f-4456-951a-f9623a985060", "sighting_of_ref": "indicator--fe134ecf-50ec-44af-8d79-b022e8ac06be", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b31a848-91c6-4414-b86f-98bb40b89896", "sighting_of_ref": "indicator--fe134ecf-50ec-44af-8d79-b022e8ac06be", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed98f66-b73c-4fb4-b4c4-129eecb4fdd0", "sighting_of_ref": "indicator--e4a19111-7ed0-4db4-a0f0-89a6c6051e64", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb722a6-ff3f-43f5-b6d7-d5ea5af479ae", "sighting_of_ref": "indicator--e4a19111-7ed0-4db4-a0f0-89a6c6051e64", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f4dcc0-6712-44e2-9db3-8a1bd582316a", "sighting_of_ref": "indicator--38ece642-00b5-449f-a45a-cc8c17975ac4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2152c2-6dc1-4a0b-9f5f-b51fad128888", "sighting_of_ref": "indicator--38ece642-00b5-449f-a45a-cc8c17975ac4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7804ae25-cc5b-4b62-9b00-67d6049da568", "sighting_of_ref": "indicator--38ece642-00b5-449f-a45a-cc8c17975ac4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebe19d3-6d87-4bd9-89ff-3e9ce84f4c7e", "sighting_of_ref": "indicator--266f4aca-f7de-477a-bdd4-ce1905eb0c4a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34b54db-abef-4f30-b0ce-b2605a129dcf", "sighting_of_ref": "indicator--4d88aefa-7dc9-4b80-b05e-d329298cb107", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2608f530-a907-4486-9436-8fc212efdd41", "sighting_of_ref": "indicator--4d88aefa-7dc9-4b80-b05e-d329298cb107", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f7755d-69f2-4db7-bd1b-12b563ac2b9b", "sighting_of_ref": "indicator--ed779e4d-b2e4-4cf0-86e0-50b6ffa1751e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1790d15-500e-45e9-ad01-fd9aa1eca5c0", "sighting_of_ref": "indicator--02544515-2617-42ff-b2b2-653f3c933700", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477e6ef3-eab1-46bc-bb8a-5b7acdd092f8", "sighting_of_ref": "indicator--afe54632-40f4-49f5-bdaa-2fd438e2134e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79032ce7-eec5-46d1-a221-51b5fd3d9b7d", "sighting_of_ref": "indicator--0894104f-c05d-4044-ad00-835beb868832", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cc379f-f85c-4d14-b30e-b729227019ba", "sighting_of_ref": "indicator--2f7ba998-57db-4f6c-8da1-a2809a74d4bb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce295272-7a32-4372-b1e3-ad234b8ad6fb", "sighting_of_ref": "indicator--2f7ba998-57db-4f6c-8da1-a2809a74d4bb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0d7572-0252-440d-babe-fbcfdf39d005", "sighting_of_ref": "indicator--cbded124-a72c-4ac4-a177-0fb39d169da8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf1d90e-bb8c-4a7f-ae83-5f47c065bf8d", "sighting_of_ref": "indicator--55e7bdd0-2167-45c8-a88f-f4bbace7a1e7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381871f9-be0a-4c9c-be36-43ffec93a5a4", "sighting_of_ref": "indicator--d37baa0d-be3f-47a6-bb9d-0e40443089b7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16dd3411-0e23-4ead-ae4f-8fbbf0507403", "sighting_of_ref": "indicator--8122344e-5abe-4656-aaf2-58e17ed88d7a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a322e680-692a-454f-9c46-6205884b5fe5", "sighting_of_ref": "indicator--ab327130-eff4-4cbd-aff6-5aa9d6c25033", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20a4550-68a2-4747-a299-65c01b485dbb", "sighting_of_ref": "indicator--ab327130-eff4-4cbd-aff6-5aa9d6c25033", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22990469-193d-46a0-ada4-3f0231b528f7", "sighting_of_ref": "indicator--ab327130-eff4-4cbd-aff6-5aa9d6c25033", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06e95fb-5e39-45a9-91b5-e29f7eef6b9a", "sighting_of_ref": "indicator--ef6b0a35-f7b1-4e1e-9cbc-8329825bf904", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd17b1a-1531-4c00-9640-cdf5e057235d", "sighting_of_ref": "indicator--717bc3f7-8d02-449a-85de-33f4bb0119d5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290bde55-c41d-4788-8e07-fb0f044851de", "sighting_of_ref": "indicator--717bc3f7-8d02-449a-85de-33f4bb0119d5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64ccdb7-2327-4f04-ac46-1fbfd1ed1b79", "sighting_of_ref": "indicator--ec69102f-920b-4413-ac19-531bb3c1583b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97101f90-3e4c-4413-8c41-bf6971407446", "sighting_of_ref": "indicator--ec69102f-920b-4413-ac19-531bb3c1583b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65329d63-18a3-4972-9483-ab91bdf9150e", "sighting_of_ref": "indicator--ec69102f-920b-4413-ac19-531bb3c1583b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2765b1-203e-4f45-9f4a-094daef5f86b", "sighting_of_ref": "indicator--c8b77f63-811c-4f41-9cf3-60c2586c03b4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8e4880-9b46-4440-b357-79970dbccdde", "sighting_of_ref": "indicator--cbd5fec8-e7b1-41a4-9aa3-c439ebc4092d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab575d71-b0b6-4e5c-861e-4f59d51ea0a2", "sighting_of_ref": "indicator--c7521fd4-3f3d-497e-b68b-78bb63451a38", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ab3ae4-bfb5-4b99-ab14-d6304a8568a3", "sighting_of_ref": "indicator--c7521fd4-3f3d-497e-b68b-78bb63451a38", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8030a8fd-994e-4ca3-8d8d-67c57d918faf", "sighting_of_ref": "indicator--0c39fb11-fa07-4349-9cb5-7988a352818d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3586f6-91c8-4c4b-bd49-c37021fa03d2", "sighting_of_ref": "indicator--1f9c72f7-ab3d-4eb1-9d08-d966a11305e8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda13fa2-bcf1-4c96-81ae-16d48f13a378", "sighting_of_ref": "indicator--1f9c72f7-ab3d-4eb1-9d08-d966a11305e8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680b168b-a300-4cba-bef1-db12ecd5a60c", "sighting_of_ref": "indicator--1e0ea68b-fc4d-4a8e-a8ad-4f2463dae7fa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f36d50-fc51-46c3-ade2-053ba0a2665d", "sighting_of_ref": "indicator--112f09f6-edb8-43a5-b2d3-fb5eb0938be7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eebd51c-fb0f-4a1b-a793-0535cc27dde5", "sighting_of_ref": "indicator--65a407fd-9bda-4063-8ba4-1e068bf0e765", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbd262b-453d-4e69-97d8-23227d309c15", "sighting_of_ref": "indicator--65a407fd-9bda-4063-8ba4-1e068bf0e765", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d1bcff-0ef0-418f-9674-e390e5e98b4c", "sighting_of_ref": "indicator--1d8138ba-0a9f-49a7-b669-17a6f534c2ea", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb798a0-564d-49ec-a4ea-d0facc672592", "sighting_of_ref": "indicator--ba34ce83-2e0b-4b2a-99d7-479447ed451a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8216d622-a3ae-4fd6-aa4b-96f1c90cffa1", "sighting_of_ref": "indicator--ba34ce83-2e0b-4b2a-99d7-479447ed451a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c830c369-a71f-4697-b1d6-a0cb927ef423", "sighting_of_ref": "indicator--ce0fe4ba-e307-4e76-983f-6c9bd98df163", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593dbdd5-bc20-4ca3-859c-30c9ecbfc505", "sighting_of_ref": "indicator--ce0fe4ba-e307-4e76-983f-6c9bd98df163", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04affdd6-16a8-446e-aad5-552347be4d6d", "sighting_of_ref": "indicator--a2c0513d-71a0-403e-88fd-f4f2a7648dfa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6179e6a-e889-435d-8a7f-bbd54bb88720", "sighting_of_ref": "indicator--820bda4e-c53a-4710-b3e9-4fc709feefda", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6936d24e-8f3b-4d12-9ffc-f4281b10a3f3", "sighting_of_ref": "indicator--aedbca55-892d-46b0-9cea-ef210dea1b9d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9344342f-268d-41e9-96f2-a49bfc22af52", "sighting_of_ref": "indicator--c3b2566e-47da-4b29-9fd8-cd28903141e8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5155317e-783b-400e-b0e3-0d635a779ef0", "sighting_of_ref": "indicator--5e53cff5-dc0d-42ae-98e7-f21e9f8738fa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938a84cb-db4a-49ec-bfb0-9f237d8412bb", "sighting_of_ref": "indicator--5e53cff5-dc0d-42ae-98e7-f21e9f8738fa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a065fcc1-069c-46d3-a2c9-dce3d6cee8f5", "sighting_of_ref": "indicator--fe931c86-8882-4429-bfaf-704973d738b3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c738b8-6bb9-4599-9052-1abe513f94bd", "sighting_of_ref": "indicator--bfa07270-7ea7-4684-947d-0f43585c48b8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e671c23-2584-439b-97c1-e2fb87fbf6e6", "sighting_of_ref": "indicator--bfa07270-7ea7-4684-947d-0f43585c48b8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4167dca3-f310-41f1-a7cb-70516b79475c", "sighting_of_ref": "indicator--bfa07270-7ea7-4684-947d-0f43585c48b8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04959562-6ef9-4ac8-b307-10f97b24350e", "sighting_of_ref": "indicator--70157c34-9d9e-4159-b540-6e5bcdcd60d0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5775bf9f-7ff0-4839-8385-ddc9e93c0a68", "sighting_of_ref": "indicator--70157c34-9d9e-4159-b540-6e5bcdcd60d0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f028752-4d00-4aff-9229-81d37080e4e3", "sighting_of_ref": "indicator--39d3b977-1a7a-4fb4-9f48-b07e47594e4b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f586317-2c21-491f-bb11-4dd7766f2943", "sighting_of_ref": "indicator--cc154020-5d13-40a3-a7bc-f770b0812bb0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96041bf9-3658-4781-a9c2-2db2b7dc3c98", "sighting_of_ref": "indicator--cc154020-5d13-40a3-a7bc-f770b0812bb0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a048aba-ca6e-42bf-ade1-a50d488a13ff", "sighting_of_ref": "indicator--cc154020-5d13-40a3-a7bc-f770b0812bb0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25555e47-4f56-4c86-902a-0d71d6ae69f2", "sighting_of_ref": "indicator--6964d148-db7f-46fc-b456-4cc0819c9528", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a44ff9-cae4-411f-9904-2a5ae2d9b259", "sighting_of_ref": "indicator--6964d148-db7f-46fc-b456-4cc0819c9528", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d1e01b-db62-481f-8b9c-270db74db1cb", "sighting_of_ref": "indicator--3b5be259-2281-4b63-9f23-6688d4af56e3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e887610b-10ee-4d51-a8d2-70fdd68330bd", "sighting_of_ref": "indicator--112d15f4-a634-4e6a-a424-a4d8a3b51449", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c73436-1184-446d-b013-475f7bcad65a", "sighting_of_ref": "indicator--112d15f4-a634-4e6a-a424-a4d8a3b51449", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ed6938-6707-4cd8-95e1-19b19cbc6a45", "sighting_of_ref": "indicator--112d15f4-a634-4e6a-a424-a4d8a3b51449", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06f9587-8d72-4a96-8a33-bd426a52d17a", "sighting_of_ref": "indicator--b0eae3ce-ee80-4034-9324-48946bc66dd6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6fce47-3c17-4fd3-8eb6-cf4bb45ac559", "sighting_of_ref": "indicator--0b23c6cc-cdd0-45e7-b482-9dbd987a568b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf4496a-932c-4005-8f49-285d7c37f695", "sighting_of_ref": "indicator--0e2e9c00-8a16-428a-94bc-5cb3b19f522a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4810300a-5c7b-4544-90b9-3ee2a59bb7e6", "sighting_of_ref": "indicator--46ec9301-8c47-41c9-b135-4539c6039d3c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378727f5-7ca0-48e0-b5f0-4c26397f528d", "sighting_of_ref": "indicator--9d3ade7e-82d2-4135-ad73-55ec061f59f4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999cfed9-e382-4134-ab80-33d0e65d1921", "sighting_of_ref": "indicator--5255241d-a52e-41f6-aef5-864590d0fbe0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003b312b-b840-4103-ad7b-4673206122d2", "sighting_of_ref": "indicator--d4a995de-83f7-4927-aa3b-a547c476619e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64171c80-8868-472b-adcf-aafeb19a4bba", "sighting_of_ref": "indicator--d4a995de-83f7-4927-aa3b-a547c476619e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543fa60d-bb03-479e-9744-0e5cb7ffe0f7", "sighting_of_ref": "indicator--bf467269-d624-4384-af90-10e830110bf8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73d98a5-e55f-41fd-a1fe-f9242069b680", "sighting_of_ref": "indicator--7ec9fd6b-1fd7-462a-a5d0-44a62eb67596", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8e14f4-6736-4e20-8fb3-0657a6d69c93", "sighting_of_ref": "indicator--bf3718dd-9d7e-4dbb-b774-a97b2b49ddd5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8164c283-8a93-4b19-8108-0cd052654ed4", "sighting_of_ref": "indicator--446b4246-b728-40dd-8827-ce51c1307285", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2511472-480e-4d5a-b6ce-0a13809e4658", "sighting_of_ref": "indicator--4ab795ca-588f-491d-b068-e65090d3d9de", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e0c044-1b19-400c-8ea4-3870dbc23e66", "sighting_of_ref": "indicator--a5782101-f882-4d69-b28d-d49d0d6e521c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6ddef5-eb41-4cd8-8bc5-a810d4739ec3", "sighting_of_ref": "indicator--cc701294-55e3-4ef3-a5f1-7b000f8e389f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52119ff9-ded6-4337-a417-bb1f9e57eb62", "sighting_of_ref": "indicator--cc701294-55e3-4ef3-a5f1-7b000f8e389f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2019df67-3931-4511-8315-7689f0087c8a", "sighting_of_ref": "indicator--cc701294-55e3-4ef3-a5f1-7b000f8e389f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464c8cbd-ca03-431d-83a0-6f51ab9bed02", "sighting_of_ref": "indicator--bcdc6bae-9401-4fc8-8eda-263f8c1af4ba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33be4170-aed5-462f-b392-4a97d4d6099e", "sighting_of_ref": "indicator--bc9e28b6-5ec6-4f05-aaad-f41969d5fb24", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24deb50-6048-48a1-800a-a8d079b20e4e", "sighting_of_ref": "indicator--ee85a350-f4f3-454d-99dd-f0680deced38", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82384967-22dc-4ea4-a191-445ccd064b8a", "sighting_of_ref": "indicator--faa8296e-f52b-41da-98c1-3d15abb5aa59", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee57f92f-1abf-46b3-8780-56e4657373d6", "sighting_of_ref": "indicator--90d46954-2df8-49c9-9bb7-52d7fcdaa0d1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a15c9fe-647f-4ef5-b3f3-e64824e759ab", "sighting_of_ref": "indicator--1fff0408-e59f-4bcd-afa8-36cb4860e089", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53517433-33c8-4ac0-b795-9f0db4ea41a5", "sighting_of_ref": "indicator--1fff0408-e59f-4bcd-afa8-36cb4860e089", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8bbb44a-3840-40e0-967d-cedd9424d719", "sighting_of_ref": "indicator--1fff0408-e59f-4bcd-afa8-36cb4860e089", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d13139-5485-4683-9b8f-24c27917a35f", "sighting_of_ref": "indicator--cb992639-3b40-4ed5-b1ca-bfc0a771bb49", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79353e39-a3d1-4061-bff3-ab9ae1f79374", "sighting_of_ref": "indicator--d4f85662-3e2a-4784-879c-a1f0a5d389dc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840b1371-f4d1-4c85-9746-e0b4c19517a9", "sighting_of_ref": "indicator--598bf969-f3ef-499a-a60d-27a635ca1aef", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f45108-9dcc-4658-984d-b15255f6fe84", "sighting_of_ref": "indicator--598bf969-f3ef-499a-a60d-27a635ca1aef", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8a242e-f7cf-4475-8a4a-649d58829e4d", "sighting_of_ref": "indicator--25dad8c3-292a-4ab4-9c5c-63fb46de5a08", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93bff47-2b17-417e-b9e7-9dd3f826455b", "sighting_of_ref": "indicator--25dad8c3-292a-4ab4-9c5c-63fb46de5a08", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0821b4fc-2691-4bbd-aa10-1a99e22124db", "sighting_of_ref": "indicator--74599e50-fdff-486a-81f5-fd6b9cd2a419", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b3c481-0048-4bb9-8708-afb4a928e485", "sighting_of_ref": "indicator--3972832d-5f5b-424e-bab6-3a703c3827e6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbfa1f4-c515-466c-adc8-006a63d67116", "sighting_of_ref": "indicator--9f4120d5-d04a-400f-b395-c284aaeffe3f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74de98c-dd4a-4d9f-adfb-88fb5c6e88c0", "sighting_of_ref": "indicator--62018ad2-386a-4802-8622-9d2a5199381f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02442d0c-fb3b-47f4-a29c-f88823f12217", "sighting_of_ref": "indicator--62018ad2-386a-4802-8622-9d2a5199381f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe07dea-b68d-4393-aed8-62ee28930a6f", "sighting_of_ref": "indicator--f40253f7-95b2-4b5d-8339-b720585f44ec", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf0a522-6d93-4a75-b725-5329177761d7", "sighting_of_ref": "indicator--f7706d62-c09b-4ea4-92e4-36277653e754", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f037500d-d200-4c11-b049-d0afcf4d82e3", "sighting_of_ref": "indicator--40531529-f6e7-4e8e-8002-88f9f6aa4246", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763ed180-4078-4dbe-8cc5-dd11ded8cf9f", "sighting_of_ref": "indicator--40531529-f6e7-4e8e-8002-88f9f6aa4246", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6c8491-63fa-4d34-ac70-ef153fd783fc", "sighting_of_ref": "indicator--0e64a9b8-f8fb-4866-b8c3-605ec3d5c56a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c168480-e985-4934-aa06-ea5976d77965", "sighting_of_ref": "indicator--f90980ee-6c9f-44c9-b75b-452965ed7529", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4b1712-1e90-4ce5-858f-2b81d9479df0", "sighting_of_ref": "indicator--107c7d9a-0d32-4671-98ca-3b2493c24408", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e329c178-04d5-4576-a97c-a2809964d6ef", "sighting_of_ref": "indicator--107c7d9a-0d32-4671-98ca-3b2493c24408", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a3ce7d-ea8f-42e3-a1e1-eab63ff16f98", "sighting_of_ref": "indicator--a48158ae-8bd9-414a-9c18-c1865ebda7b0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63bb8387-972f-4b63-91d2-f06606c70db2", "sighting_of_ref": "indicator--a48158ae-8bd9-414a-9c18-c1865ebda7b0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2d6254-ff06-4b4d-ab86-9f2f675c871b", "sighting_of_ref": "indicator--9900c069-ad38-4ff3-a13d-ef013e706621", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6762ab-9fcb-411e-8467-d5ed75bf9ea8", "sighting_of_ref": "indicator--7b9e8758-d0dd-4add-8c3c-54d98b15cfc7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb52082-1c2c-4762-ac54-0043102fc3e0", "sighting_of_ref": "indicator--645c5e43-4b95-4f2e-9c6f-c92230a1e3cb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72ba6be-c6af-4960-a84f-bfd86930e1fb", "sighting_of_ref": "indicator--4bc9de14-d6cd-4d16-88c1-79d5fdac889f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55921c7a-0f02-4f8f-898e-9d19eaf4c272", "sighting_of_ref": "indicator--4bc9de14-d6cd-4d16-88c1-79d5fdac889f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d92ec09-7b0f-4f77-a6fd-4f8890ef63a3", "sighting_of_ref": "indicator--5e04abde-9fe1-4a13-b145-67a1b25bc9ab", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f16726-c9ce-4aa1-b001-d84c19f0d364", "sighting_of_ref": "indicator--5e04abde-9fe1-4a13-b145-67a1b25bc9ab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb8083b-9257-47d3-a972-a2a0b969cad7", "sighting_of_ref": "indicator--5e04abde-9fe1-4a13-b145-67a1b25bc9ab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15eade8-844d-44ba-b028-f08890e344ab", "sighting_of_ref": "indicator--a82ed710-4b79-42bb-b1b6-a1716dfbed09", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a522ca3c-1703-4c06-b64a-66343eb46821", "sighting_of_ref": "indicator--e637e668-8b78-4b62-b85a-9fd16d5a70bd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8ca32c-5e49-42de-b719-aca816c899f2", "sighting_of_ref": "indicator--b999ece2-9956-40f2-abe5-a87764e60ad4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c20dbe0-9072-40ab-8ebf-77c594b4dab3", "sighting_of_ref": "indicator--b999ece2-9956-40f2-abe5-a87764e60ad4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93971988-0671-443d-83cb-a0c8136c76ac", "sighting_of_ref": "indicator--8d6b7637-72ca-4cce-bbe6-0b561635f205", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95244407-786e-45a0-83a7-b18e73559dc6", "sighting_of_ref": "indicator--f5679c0c-7f09-42eb-ab0a-a13cc8a54106", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d01e9dd-7e3e-45ac-8016-483761189d5f", "sighting_of_ref": "indicator--f5679c0c-7f09-42eb-ab0a-a13cc8a54106", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ca3c47-522e-4766-94fd-e6f5ecb818b1", "sighting_of_ref": "indicator--b42d7f68-5810-445f-88b1-1effa3b13ac7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfac0228-59a0-4e5a-a731-7e502f4bbfc3", "sighting_of_ref": "indicator--ed55f8f9-a99f-4827-a187-5fbe0bfe4f5c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b36da62-ac51-4692-aece-48be74607c8a", "sighting_of_ref": "indicator--ed55f8f9-a99f-4827-a187-5fbe0bfe4f5c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34451c31-3a75-4a0e-b7e3-53bae7dada40", "sighting_of_ref": "indicator--7641079a-fc6c-47e1-b9fb-f378392cce1d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e504e0-4ce7-4f27-8ad0-627b4086804f", "sighting_of_ref": "indicator--7641079a-fc6c-47e1-b9fb-f378392cce1d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c80aee-5e7d-4798-b2b7-3817b0c73144", "sighting_of_ref": "indicator--7641079a-fc6c-47e1-b9fb-f378392cce1d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a851af-2693-4b4a-b6fe-6890a883de9d", "sighting_of_ref": "indicator--d517d027-be65-499c-9a11-355004b85ea6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7522c72-8ccd-4328-b824-f3517e0269a9", "sighting_of_ref": "indicator--d517d027-be65-499c-9a11-355004b85ea6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e57cc5-aa92-418c-b9cc-36746bc3ccf8", "sighting_of_ref": "indicator--d517d027-be65-499c-9a11-355004b85ea6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753aa729-e3f9-45ca-b592-2be35e6b0e25", "sighting_of_ref": "indicator--6fe8a020-f55f-4436-aa45-edab99c6686b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0e8795-8c18-4908-b84a-85135983d28a", "sighting_of_ref": "indicator--a351c0c4-c998-43f5-95c7-fcaa0432d994", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45963e9-b2db-40ab-b4cf-c28851b5e368", "sighting_of_ref": "indicator--a351c0c4-c998-43f5-95c7-fcaa0432d994", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a198d2d3-4210-4fe1-af75-b58b1db62028", "sighting_of_ref": "indicator--a351c0c4-c998-43f5-95c7-fcaa0432d994", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed72379-1520-45ef-b479-fcb18bd8d097", "sighting_of_ref": "indicator--e9f68d6f-f582-418b-b647-1fb42f918176", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400c054c-83d7-4059-8295-cdc09f806bae", "sighting_of_ref": "indicator--aba6c3f3-d7f7-4563-bc6e-a0f63e400989", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b31e8d-b3db-4de4-b2b4-dd1e80f6f5fb", "sighting_of_ref": "indicator--aba6c3f3-d7f7-4563-bc6e-a0f63e400989", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5237f222-431f-45f7-9014-1aa81a3a348e", "sighting_of_ref": "indicator--aba6c3f3-d7f7-4563-bc6e-a0f63e400989", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d86627a-5526-48ab-8301-ca43ab642700", "sighting_of_ref": "indicator--f847f0fc-d1f8-4f18-ba39-d02c26e59530", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba936e8e-2ded-41cb-a668-fef8d3955902", "sighting_of_ref": "indicator--f847f0fc-d1f8-4f18-ba39-d02c26e59530", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9a8d38-1ce6-4927-a5d8-e108db19d365", "sighting_of_ref": "indicator--f847f0fc-d1f8-4f18-ba39-d02c26e59530", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ef6038-294f-4a78-a72f-ca6cb92603d7", "sighting_of_ref": "indicator--0dd59f7b-4b67-499f-8c2d-23518741626a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368e0e42-2936-4716-a0d9-d18102cf5175", "sighting_of_ref": "indicator--b26f3ceb-7642-4a17-8a90-d506d99ea7ba", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd384b9-52f6-4777-bbf4-f44f251c3748", "sighting_of_ref": "indicator--b26f3ceb-7642-4a17-8a90-d506d99ea7ba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7a1d0b-eb77-4e7b-b4fe-d1dee0c65986", "sighting_of_ref": "indicator--fcbac93a-d97a-49ea-a36f-fb9066068be6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5143aa46-d805-42fd-969d-8fe830a5b49d", "sighting_of_ref": "indicator--c93a18dd-ac8e-42d5-9aca-038bbe55e314", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a707b5ae-9744-47f4-b753-b1eb32781da4", "sighting_of_ref": "indicator--fc7ece43-c884-45c8-8848-c5a6a7ad9310", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8e2cd7-e590-41a5-875a-c56b069baf5b", "sighting_of_ref": "indicator--dfd5cee1-9835-4b31-8bb6-765f80866d22", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0598c6e-5a4b-4f1b-bae2-909f84cffb61", "sighting_of_ref": "indicator--dfd5cee1-9835-4b31-8bb6-765f80866d22", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82648ab-1f32-43ac-b373-1e3d0423d805", "sighting_of_ref": "indicator--ec87c94d-fa1f-4653-8394-4459f7b7b3c4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a3cc83-82cd-4fd7-9e6d-e36b7f7ef9dd", "sighting_of_ref": "indicator--ec87c94d-fa1f-4653-8394-4459f7b7b3c4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9596b3a1-f44b-49b7-881d-f4b815c2e39c", "sighting_of_ref": "indicator--ec87c94d-fa1f-4653-8394-4459f7b7b3c4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570a47a7-dbb5-4957-adfd-73041be51ba1", "sighting_of_ref": "indicator--a0d0d0b9-ef0a-4845-97aa-8f9a9d14758e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03fb5dc0-eab8-4589-97cc-48c655fc5946", "sighting_of_ref": "indicator--865a91d3-22f5-43f4-95bb-00e758528bf8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5579f4-0dce-4377-9e6d-305aa460775f", "sighting_of_ref": "indicator--f3075a9b-3c4f-4746-a994-3d8276c5ff72", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0b5597-8a37-40ef-b506-199c88a89438", "sighting_of_ref": "indicator--ae2b4927-8366-4ba3-9a9b-bf2f5b9d6d46", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623b41b4-af3b-49f2-b071-95ad5da15ab3", "sighting_of_ref": "indicator--ae2b4927-8366-4ba3-9a9b-bf2f5b9d6d46", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab466559-edd7-4054-8b2d-d696afe46e15", "sighting_of_ref": "indicator--ae2b4927-8366-4ba3-9a9b-bf2f5b9d6d46", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7574a53f-ed0c-49e1-b326-ee7e63f873ff", "sighting_of_ref": "indicator--8fb1f7f4-faa0-4f3f-b2e2-29deb20d5d20", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de9ba59-7aec-4e82-9664-539784f29dc0", "sighting_of_ref": "indicator--8fb1f7f4-faa0-4f3f-b2e2-29deb20d5d20", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188e26ac-fa24-47ce-b862-c4233ed1d80d", "sighting_of_ref": "indicator--8fb1f7f4-faa0-4f3f-b2e2-29deb20d5d20", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460da461-edb0-456c-aab4-8fbb13e6ba28", "sighting_of_ref": "indicator--767792c5-16c3-470d-8d56-2224933d9f9c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3957c12-ba76-4833-9414-6ea02eec65b8", "sighting_of_ref": "indicator--93ed8adb-7488-4b46-b0ba-4190057d407b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ae4eb0-9de6-47bf-a3e4-742e01f91cbd", "sighting_of_ref": "indicator--93ed8adb-7488-4b46-b0ba-4190057d407b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f68768c-f6da-475c-a714-ebe97a1abee4", "sighting_of_ref": "indicator--14517fee-61da-42af-8e30-3088910c508f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b130ea34-2245-4647-b430-251eb2645431", "sighting_of_ref": "indicator--14517fee-61da-42af-8e30-3088910c508f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adaeeea4-3a9c-4c65-b396-9f4baa906f77", "sighting_of_ref": "indicator--35b941f1-af2a-4d68-bfdc-10d4e8535ca0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a788d8a-7f18-4db2-956d-c2ec262cf619", "sighting_of_ref": "indicator--9b34c89a-fc4e-4211-a2fc-e96d5c548011", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47cd689-92ee-4cf3-8779-41c3916458ed", "sighting_of_ref": "indicator--9553facc-61ca-4afa-8ae3-19b04c5a6830", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911d1f0c-802d-4287-8153-4cbba7ce87fb", "sighting_of_ref": "indicator--9553facc-61ca-4afa-8ae3-19b04c5a6830", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0ba50d-6316-4927-ac0b-ce813adfc289", "sighting_of_ref": "indicator--f0c67752-bede-4ee0-8915-b855f52ed21f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec322fcf-87b1-4081-aa5c-419558895329", "sighting_of_ref": "indicator--dbfa963c-7ec2-4691-b173-1a3caf811db1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f57a69f-c4f4-4a3e-8cb6-f4c2a73a38e2", "sighting_of_ref": "indicator--e2e84a1f-aaad-4ec9-8cea-9aafd79dd9be", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96dfe31-7d2d-49dc-a1a5-dfb9c7918695", "sighting_of_ref": "indicator--e2e84a1f-aaad-4ec9-8cea-9aafd79dd9be", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f40a684-648c-4d4a-91eb-7fb3e6cef370", "sighting_of_ref": "indicator--67f92491-9448-4782-8a69-2a3d03f1042e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c73ebb-987b-46b2-b0ec-3c7e9058514b", "sighting_of_ref": "indicator--67f92491-9448-4782-8a69-2a3d03f1042e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49cfed09-8c4b-4bfc-b865-a91279233968", "sighting_of_ref": "indicator--abaec167-0f14-452e-b232-1bd41d7abd37", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabd9b40-3b24-427f-84ef-824e9a92443b", "sighting_of_ref": "indicator--abaec167-0f14-452e-b232-1bd41d7abd37", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8857b18d-497a-478f-82fd-628c5e15dae4", "sighting_of_ref": "indicator--beda9b4b-eb4b-4b9d-aec8-46a3469131fa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ec4d8e-b826-403b-a6af-555c54f94851", "sighting_of_ref": "indicator--beda9b4b-eb4b-4b9d-aec8-46a3469131fa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cccb8f7-9e81-4259-87b0-b40eef74d371", "sighting_of_ref": "indicator--a0a49d18-fdae-41d1-abbc-97b13d2c1e90", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9dd03c4-7d4e-4413-a7d1-60cdbd6fbb0c", "sighting_of_ref": "indicator--d8cf0a55-7ba8-4fb9-8d57-e1695832fd52", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f81334d-e70d-4e9e-a635-c7ffcff9c049", "sighting_of_ref": "indicator--ed5147ff-5e90-4c77-b2cc-d11f58d8296f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362cd888-9b18-4e89-b1f4-864c00d603fd", "sighting_of_ref": "indicator--ed5147ff-5e90-4c77-b2cc-d11f58d8296f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8c313e-6b4a-4878-9c08-061cf2b2dac1", "sighting_of_ref": "indicator--b0840743-c0a1-4bc8-a927-116d901d6616", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f397d2-1678-479f-af79-cce4bb16bd66", "sighting_of_ref": "indicator--b0840743-c0a1-4bc8-a927-116d901d6616", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffea9d16-1e77-477a-87ba-d4e53efb5cfd", "sighting_of_ref": "indicator--4b6b784e-2e64-43bf-8b55-a2324e21331b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6353fb-6718-42ba-b1a7-bcaa96a52e73", "sighting_of_ref": "indicator--4b6b784e-2e64-43bf-8b55-a2324e21331b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf9565b-f553-4f96-b107-353f57bf4355", "sighting_of_ref": "indicator--2ad278cc-7557-4a34-988f-f42d3a741e31", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d029a2f-a753-42d8-93c9-4c08dba75c7f", "sighting_of_ref": "indicator--2ad278cc-7557-4a34-988f-f42d3a741e31", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0594290f-6d0f-4d09-b970-a1ce54949a3e", "sighting_of_ref": "indicator--2ad278cc-7557-4a34-988f-f42d3a741e31", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165ee723-4663-4d98-bcad-efc4a4c60fa0", "sighting_of_ref": "indicator--3d40dbe4-7f39-4b8e-b0ff-f1db5f09f024", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7443220e-aeb8-4abe-b53a-2e474cb7b9d5", "sighting_of_ref": "indicator--5c447447-7837-498b-b2f9-413143846043", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259bca45-ed10-46d5-8a37-ac38894ee841", "sighting_of_ref": "indicator--5c447447-7837-498b-b2f9-413143846043", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471fcab5-3b18-4a5e-9bd5-d5f5e4637dd8", "sighting_of_ref": "indicator--95998c66-ee88-45b7-8ecb-0ffe32f2657d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c254122-4b33-47b7-894e-78b393618a28", "sighting_of_ref": "indicator--95998c66-ee88-45b7-8ecb-0ffe32f2657d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70650e5-d14b-4ff7-bfda-7156ddff0880", "sighting_of_ref": "indicator--5bdabcd7-0ee7-4374-808f-7fe3472836b3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9153e7-f4a2-4f8a-bcd3-a9df08bba011", "sighting_of_ref": "indicator--5bdabcd7-0ee7-4374-808f-7fe3472836b3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deee68ad-7b2f-4bfb-8b1c-1d83dff2422a", "sighting_of_ref": "indicator--ae6b91b3-2f2b-4e0a-a6b1-a03fae7e2eb7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6630a23f-a4ca-4c99-9f29-14d1204a8a20", "sighting_of_ref": "indicator--eb2779c7-9a9e-4f66-bc9c-a83cc9c43ed1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880d86e0-517c-4464-b220-af74a39aa7de", "sighting_of_ref": "indicator--86a7f232-4ae4-49cf-a5d4-c1c6609db61f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29c99b4-c40e-4acd-ac14-2d531a39eb88", "sighting_of_ref": "indicator--86a7f232-4ae4-49cf-a5d4-c1c6609db61f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f025ae-c73c-4faf-8a72-f859283a6d8e", "sighting_of_ref": "indicator--86a7f232-4ae4-49cf-a5d4-c1c6609db61f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9186f23-4eb4-43f9-a7f3-0f5a8a5c3393", "sighting_of_ref": "indicator--3adff496-6539-411a-9800-ed3da68c60dd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e45bc3-39d9-44fc-a710-8465be0e26a5", "sighting_of_ref": "indicator--3adff496-6539-411a-9800-ed3da68c60dd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ccfc5d-4f10-4ca1-aa41-83663f360471", "sighting_of_ref": "indicator--3adff496-6539-411a-9800-ed3da68c60dd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159e2e8c-8163-4017-b67f-9bce7e4a0864", "sighting_of_ref": "indicator--5a948038-3342-4508-a6f9-d113dc6b023b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6cbd34-7f86-44c1-b300-d5c9c087e199", "sighting_of_ref": "indicator--79b27f8e-e3c5-463c-b495-b7b8042764d8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548ec72b-8d51-48bd-8855-a00c88697b86", "sighting_of_ref": "indicator--79b27f8e-e3c5-463c-b495-b7b8042764d8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb8841f-aefd-4c53-b308-29a2e5b1e6cd", "sighting_of_ref": "indicator--0535c70e-1e0d-4e42-ba0f-adac0499e140", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6fc1926-966b-42c7-96a8-88244d111023", "sighting_of_ref": "indicator--50d96728-a3dc-416c-839c-11d7d0cd982d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f20aced-60c7-49ea-8370-46beaf434cae", "sighting_of_ref": "indicator--50d96728-a3dc-416c-839c-11d7d0cd982d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a594811c-6482-4f13-8dc4-3763b250f070", "sighting_of_ref": "indicator--2848e89c-b27c-4f39-89fc-a91778ada50c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f721d1-2dfd-4582-bee7-f93a00225e76", "sighting_of_ref": "indicator--0321150f-761d-494c-ac00-c393c25648c0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d49d252-4cc3-4579-ae9a-e9f6b9374ca3", "sighting_of_ref": "indicator--f8d8f96d-3a99-416a-8078-b53931252296", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8332fa23-838e-4341-9bd6-d148a2bf17f2", "sighting_of_ref": "indicator--faeab41e-855b-47fb-b617-4e18e20260c7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60e5bec-2379-439c-9760-d9c593283eb1", "sighting_of_ref": "indicator--faeab41e-855b-47fb-b617-4e18e20260c7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667004ac-a671-46b7-9af2-f4388c0702af", "sighting_of_ref": "indicator--faeab41e-855b-47fb-b617-4e18e20260c7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40997c0-57e3-4560-956f-529ee8b242b1", "sighting_of_ref": "indicator--ad5a1897-1ce9-447e-8926-c0b370460570", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5dfbc1f-8ea3-4f08-97ae-404b9b1bba6f", "sighting_of_ref": "indicator--2f833f3c-5f30-4e95-8e13-7addca3ef8a4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b211a79b-c875-4e8e-a8d6-814460731fd7", "sighting_of_ref": "indicator--af6a934f-06fd-45a2-8188-a62c93db0aac", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea54f82f-c3c7-4316-9e2e-63ab54344e19", "sighting_of_ref": "indicator--de02b305-05e4-49e3-9650-34afdee851b5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7d19ad-1457-4cfd-aae8-574b6e242348", "sighting_of_ref": "indicator--4e324f79-1e25-4992-87ef-8e04783680f0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d5b347-c946-4f39-8634-2ea712dda680", "sighting_of_ref": "indicator--62aca7a7-ee14-447f-b592-4b610533ff8b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f49fdf-8e52-429d-bed3-9b09361484bf", "sighting_of_ref": "indicator--62aca7a7-ee14-447f-b592-4b610533ff8b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf905b91-242c-47de-8a60-0df55aa02c9d", "sighting_of_ref": "indicator--62aca7a7-ee14-447f-b592-4b610533ff8b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc88e3e1-2e22-4094-a4cd-e0b2a147be84", "sighting_of_ref": "indicator--b3635e31-a23c-4fb3-8ecb-8a50574a9322", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f95502-6dcf-4ff5-906d-bc4152d526a1", "sighting_of_ref": "indicator--b4b8b17e-a5f9-4388-bbb1-18ffcb7da7ac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16cc8f9a-9a0d-47b8-9a41-ad09e68a9fb5", "sighting_of_ref": "indicator--973d1c22-950e-4f1b-a697-7e534f98ca1f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810f12e8-2034-422a-97d0-19521fadcd3e", "sighting_of_ref": "indicator--c7686d93-fde3-4694-bd2c-a3e6e386a329", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1012bb0-072b-4da2-b659-ed5054b88501", "sighting_of_ref": "indicator--c7686d93-fde3-4694-bd2c-a3e6e386a329", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fe5991-a136-44e7-a610-af3f4fd222ac", "sighting_of_ref": "indicator--c7686d93-fde3-4694-bd2c-a3e6e386a329", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332b77fb-e1ed-495c-8be6-69c718f5f5c9", "sighting_of_ref": "indicator--549477bc-1d8d-4dee-91c2-4916e8380e05", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec44df0-7335-4977-bdcc-dfc76cbeb599", "sighting_of_ref": "indicator--549477bc-1d8d-4dee-91c2-4916e8380e05", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc6e568-0819-4081-a3d0-90d487e6679b", "sighting_of_ref": "indicator--a5e993fc-b52e-435a-8722-f7abddbfdb7f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4de74d-fd41-478c-bcf6-38ff657d5c0e", "sighting_of_ref": "indicator--fd510e91-54c9-4b1f-8190-8e50ca24b521", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7801b4dc-2021-4ef9-ad5a-cff9b7417f7a", "sighting_of_ref": "indicator--310d26a5-932e-4134-9e64-98d09e3796aa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb5fbeb-2223-4c15-ac3f-1987c30f10f3", "sighting_of_ref": "indicator--22781175-3c65-46a7-b2b8-490713bc4ed5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe73440-c1c2-4b5e-ac86-d290d13162be", "sighting_of_ref": "indicator--ca6ed8ab-838e-47a7-8c3a-228c7558342e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ba0219-2042-447d-9b6f-20890e327a8d", "sighting_of_ref": "indicator--ca6ed8ab-838e-47a7-8c3a-228c7558342e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2fbf41-bf69-4b19-98e7-bb038941ba07", "sighting_of_ref": "indicator--ca6ed8ab-838e-47a7-8c3a-228c7558342e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ac72e6-5f78-4e51-8cf7-8bb1e37d0b2c", "sighting_of_ref": "indicator--83e5122c-a483-4169-bf3c-1d53707a3b8a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7088791-4ca6-45ce-b539-07e4e3d16022", "sighting_of_ref": "indicator--3bdb9cbb-e9ae-4b32-aa28-8fef953b7f8b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0abe6b-7d60-4d02-9672-d7bcae2a40b2", "sighting_of_ref": "indicator--3bdb9cbb-e9ae-4b32-aa28-8fef953b7f8b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b248890-c48f-4a8e-bf06-2b8a5cc81db7", "sighting_of_ref": "indicator--a5127365-8cc2-42c6-bdb0-f6030e717eba", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd11534-8675-427b-bfc5-c9ddd54b9df0", "sighting_of_ref": "indicator--a5127365-8cc2-42c6-bdb0-f6030e717eba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705766d9-cc11-4d44-93f4-7033e1c3d57c", "sighting_of_ref": "indicator--2562dd68-0dec-4478-8357-4ffcd0ad7e61", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1020885-2b99-4ac8-aa00-2c137c7e3571", "sighting_of_ref": "indicator--bddc9582-14ba-43fc-9867-4f2dfc5aa795", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47fc0018-7215-4576-98f9-1d8fdd8a75bc", "sighting_of_ref": "indicator--405a41d0-69e8-47e3-bdff-0303d8e2b71a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff35bb17-be21-4261-990e-7bce9d013205", "sighting_of_ref": "indicator--bae87c7a-dd64-4662-8268-68ff6eacf845", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9ab4a5-f934-4b79-96c7-15a1cc66c680", "sighting_of_ref": "indicator--85e31c7a-17f9-49b2-9fb9-436da0d0c29a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7358256-ab7c-42f3-a888-d9b190ad92ae", "sighting_of_ref": "indicator--cf405cac-a4e2-45bd-afde-8feb922a6bd4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb48a04-73e9-40ce-a998-93f401265728", "sighting_of_ref": "indicator--279acb62-f8d5-4bbd-aae3-f6ea8e928b54", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76985f41-662f-4fe7-bb06-3d60673f68c0", "sighting_of_ref": "indicator--33f29a19-b26d-4375-b7cf-8e6963ac59b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482688a0-dc67-4c05-94da-955cd35383e3", "sighting_of_ref": "indicator--9ec574ee-da13-48d0-b6d8-b7ff83c52cff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a758b2dc-d35e-4f3b-bf3c-930bbf9c6da6", "sighting_of_ref": "indicator--7e82e1c0-83ff-46d0-9b8f-0d9dbfc41b0b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08046b34-7987-4596-a82a-ff519a1d9560", "sighting_of_ref": "indicator--56cebc6d-603a-45e5-9095-cdebbb7a9f09", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ee0609-63df-4a36-a4a4-67ca6c5a48a0", "sighting_of_ref": "indicator--56cebc6d-603a-45e5-9095-cdebbb7a9f09", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c23881e-2f3e-4845-94fa-2003449bfc0c", "sighting_of_ref": "indicator--c78f92bf-28e9-4454-a58a-dc8c95d58cc5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe285201-fc76-401b-99b8-bb814def3759", "sighting_of_ref": "indicator--c78f92bf-28e9-4454-a58a-dc8c95d58cc5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db03e53c-15fb-42a0-9b79-d79c52753104", "sighting_of_ref": "indicator--230b1b89-4788-448b-b2fe-fccdaedf018a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d2450e-9a15-4d99-bc78-ccffc8b8ea9a", "sighting_of_ref": "indicator--60fc4d69-1cc8-45d6-a8f5-88f67c7fb01a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c81201-6ed8-40d2-8f57-149e980677ec", "sighting_of_ref": "indicator--93409960-3904-4c14-a057-cb4a0f896f22", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93035301-fabe-4d76-aa5d-ec42e2ec762a", "sighting_of_ref": "indicator--93409960-3904-4c14-a057-cb4a0f896f22", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d3272f-14f2-4102-89f1-5bc100d3e5da", "sighting_of_ref": "indicator--ee75b6c1-b235-4bd3-a8a3-b2ebafbc6935", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e889f03-1ef2-49be-a176-adad3451345f", "sighting_of_ref": "indicator--458f7683-5606-4dea-adef-37fc548d4376", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523d0bfa-34cc-4407-b14d-35b96c58e1cc", "sighting_of_ref": "indicator--950d9f00-253c-4c30-9702-3cb543c070c1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4118ab2e-9976-43b1-9eea-4745e86a8960", "sighting_of_ref": "indicator--36f89dd8-0da1-44b1-8d5d-89dbace60672", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7491ad50-b737-4913-9b56-fe89141d4a4e", "sighting_of_ref": "indicator--36f89dd8-0da1-44b1-8d5d-89dbace60672", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640e6791-cf91-40e7-b51a-6a40bb5b35e0", "sighting_of_ref": "indicator--ef6f0906-de5b-4b01-878c-1da05f3549f6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955286bf-42d1-4212-8f3e-35fe604c8745", "sighting_of_ref": "indicator--ef6f0906-de5b-4b01-878c-1da05f3549f6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89ee4fe-4607-42b4-bcc6-e3f6c0b5d10a", "sighting_of_ref": "indicator--ef6f0906-de5b-4b01-878c-1da05f3549f6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1fd7a9-eac8-4dd8-b94c-fed4993ee67e", "sighting_of_ref": "indicator--f76ef397-7e65-4a3c-91d4-619b782b14b2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f985a1-3124-4598-91f8-33dc0fcea462", "sighting_of_ref": "indicator--df4db11a-433a-4f24-b6f5-b6fe60a523f8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38dd79c2-5d66-4289-b446-1476bfe8c0a9", "sighting_of_ref": "indicator--40cca623-8902-4988-8809-c02b1d4188df", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c56d96-e4c4-4fb4-9f55-147bf8da7b11", "sighting_of_ref": "indicator--727cc58a-7dae-4116-ac1d-25c2f61ffe0c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe5395a-2c30-4b71-86ee-35c1b00eacc5", "sighting_of_ref": "indicator--727cc58a-7dae-4116-ac1d-25c2f61ffe0c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f0290c-5521-4a8a-bf72-0b0b6c38af4e", "sighting_of_ref": "indicator--727cc58a-7dae-4116-ac1d-25c2f61ffe0c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55331ca4-5582-473d-9b4a-e93d5232bbc1", "sighting_of_ref": "indicator--da9b6a34-3cb0-49ee-8862-7ff700dc95cf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566e1068-1a14-411c-9552-37f3744ee0a8", "sighting_of_ref": "indicator--da9b6a34-3cb0-49ee-8862-7ff700dc95cf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9844d386-55e2-41a4-8c59-1e1f3b3e32e7", "sighting_of_ref": "indicator--da9b6a34-3cb0-49ee-8862-7ff700dc95cf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7dd25a-db8b-4e02-b2a1-a0b9b4780f23", "sighting_of_ref": "indicator--b918e328-eaa5-485e-b65c-2fe30effa52b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b81d214-c833-468f-94c4-5b94ece02c8c", "sighting_of_ref": "indicator--ba90149d-664a-42d0-8b16-09e29d42f318", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d6859b-8c73-4e39-851a-4f7160c5ce1f", "sighting_of_ref": "indicator--23e482cd-6ca3-45d1-ad9a-125eae56842b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2725a862-1bcb-4c05-93c3-ad5d6af2643b", "sighting_of_ref": "indicator--23e482cd-6ca3-45d1-ad9a-125eae56842b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ea0639-10f4-4610-9885-40055a9addcc", "sighting_of_ref": "indicator--ab5946d4-ccab-4af6-9695-f52fb3e15386", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7876c03f-7d92-4fe8-accf-2d829b3be5b2", "sighting_of_ref": "indicator--ab5946d4-ccab-4af6-9695-f52fb3e15386", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d7757b-e0d7-4ee9-8c55-6ab8da9a5a95", "sighting_of_ref": "indicator--07dc4c44-7d79-4676-a945-2b430d5c6ca4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2071f768-164b-4b61-8515-af1ccd453b87", "sighting_of_ref": "indicator--a8dbed3b-0990-4bc0-993d-065cca6c03b0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee20ab1-1c4e-4f4a-b6bf-578cbdcc4e7b", "sighting_of_ref": "indicator--3b6f56a9-174c-4a7f-9c6d-c686d0c572a0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607e7cf6-f93e-4de7-bb94-caaa120b6246", "sighting_of_ref": "indicator--241900e0-0824-439d-9d4c-82250e3c9fc1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fa9753-8de3-4e8c-b74d-8e9c459b3db4", "sighting_of_ref": "indicator--241900e0-0824-439d-9d4c-82250e3c9fc1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad5deed-6b93-4645-a2e1-c720956c0c39", "sighting_of_ref": "indicator--c55e17c0-270f-41d7-95a7-bc67e53d8f3e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e4ea90-48c5-4674-b304-f7e2ff4ca501", "sighting_of_ref": "indicator--c55e17c0-270f-41d7-95a7-bc67e53d8f3e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d368e05-8aec-4695-a6e5-c4edc5ce4a90", "sighting_of_ref": "indicator--c55e17c0-270f-41d7-95a7-bc67e53d8f3e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f8221b-53e1-49c5-b9eb-7cc47d01bce6", "sighting_of_ref": "indicator--d6ca3c89-e512-43f8-a992-ffbbe2d21b84", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448aa581-f983-4256-9ec3-61896f3e0740", "sighting_of_ref": "indicator--d6ca3c89-e512-43f8-a992-ffbbe2d21b84", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95a9b4c-e195-4027-8981-2a99a7c530ed", "sighting_of_ref": "indicator--02796c4c-cae5-4907-9949-e2dc53531bec", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582b128d-0c5e-42a0-a97c-a6fcc84cf346", "sighting_of_ref": "indicator--02796c4c-cae5-4907-9949-e2dc53531bec", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa04b626-84d4-44ab-8a51-c51c1b120014", "sighting_of_ref": "indicator--b034d23f-d5d0-4ffc-bac5-cbccef4fb7e6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3b7ef9-8ac7-4fc6-b0cd-7af1d82266df", "sighting_of_ref": "indicator--b034d23f-d5d0-4ffc-bac5-cbccef4fb7e6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db6c836-1616-484b-a651-bb99afd50106", "sighting_of_ref": "indicator--b034d23f-d5d0-4ffc-bac5-cbccef4fb7e6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa4e73e-a446-4f89-87cf-aeae56ebf2e2", "sighting_of_ref": "indicator--6e8feed0-e602-4372-858b-2fe52f0bc897", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7158998-dda0-4c6c-8285-1819ab364c84", "sighting_of_ref": "indicator--6e8feed0-e602-4372-858b-2fe52f0bc897", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7507d122-d71c-46d8-9243-e47fa21a0284", "sighting_of_ref": "indicator--6e8feed0-e602-4372-858b-2fe52f0bc897", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db6b9f9-85c2-45b5-b6fb-f2fb151cbba0", "sighting_of_ref": "indicator--ff964ec9-b966-42d4-8ff0-a638db6554ed", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2071485c-64f0-48a4-9379-a92d30c8a9cc", "sighting_of_ref": "indicator--ff964ec9-b966-42d4-8ff0-a638db6554ed", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af5f49f-d1d3-4d7a-83b8-08eb16d9c5ff", "sighting_of_ref": "indicator--8ae20c9b-ddbd-4f26-ae72-923d2b618678", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56c853c-2147-4efb-938a-389b3cd06898", "sighting_of_ref": "indicator--8ae20c9b-ddbd-4f26-ae72-923d2b618678", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ced456d-cba8-451f-bf2c-03a995857a01", "sighting_of_ref": "indicator--8ae20c9b-ddbd-4f26-ae72-923d2b618678", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f215905b-eadf-40eb-8664-ff7963188f73", "sighting_of_ref": "indicator--2326a86b-a7cf-439d-9820-5783dc4c5144", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c304e1-7e45-48a9-a5a9-d067d821042f", "sighting_of_ref": "indicator--2326a86b-a7cf-439d-9820-5783dc4c5144", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6c4ea5-7e62-4273-a0f0-8d31d4d383b8", "sighting_of_ref": "indicator--2326a86b-a7cf-439d-9820-5783dc4c5144", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc719760-6f3e-47c3-83b8-a301a1b9f187", "sighting_of_ref": "indicator--b5629610-7ce4-46eb-ac0a-7374f0dd74a5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f78ea4-f7db-41e5-bf4b-45a49716f009", "sighting_of_ref": "indicator--b5629610-7ce4-46eb-ac0a-7374f0dd74a5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d28e64e-9d4e-4207-a5d2-0548234c744b", "sighting_of_ref": "indicator--08c592fe-e662-4800-9208-cae4962247ab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b44bd8-af8b-4ee0-a48f-9fbab1f4af08", "sighting_of_ref": "indicator--08c592fe-e662-4800-9208-cae4962247ab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcf3504-7472-4c69-a0e0-0e5040d7fea9", "sighting_of_ref": "indicator--b9457365-7418-428c-8bc1-e5a2ff8ae67e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f785f5ab-13d1-4ceb-8394-94b7ab276e1f", "sighting_of_ref": "indicator--b9457365-7418-428c-8bc1-e5a2ff8ae67e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6807202f-60d0-482b-8f90-0c6ab4e91204", "sighting_of_ref": "indicator--b9457365-7418-428c-8bc1-e5a2ff8ae67e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d6857a-18c6-4605-af98-60818daaffb1", "sighting_of_ref": "indicator--5c4af7e8-aacf-4a47-80d4-626cc03cd351", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708cca08-fcac-453c-b96e-45c61833603c", "sighting_of_ref": "indicator--5c4af7e8-aacf-4a47-80d4-626cc03cd351", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905f22d3-f2fb-4cb2-adda-8ae88bc7694f", "sighting_of_ref": "indicator--5c4af7e8-aacf-4a47-80d4-626cc03cd351", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf46b064-8764-4019-8cb3-8f837ca06d62", "sighting_of_ref": "indicator--b5520c87-a22b-414e-8c40-a891dae2ec36", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186f8bb7-51f9-48d3-9d7a-1b35ef6f57e6", "sighting_of_ref": "indicator--b5520c87-a22b-414e-8c40-a891dae2ec36", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4184f8-c5fa-40a9-be2c-d93399972d78", "sighting_of_ref": "indicator--b5520c87-a22b-414e-8c40-a891dae2ec36", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8741442d-0c52-45c8-81fe-30f077b23894", "sighting_of_ref": "indicator--0e2d679c-49fe-4ba0-8705-527600c86538", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fe31b0-d2c4-4a38-b64f-724f0444575b", "sighting_of_ref": "indicator--0e2d679c-49fe-4ba0-8705-527600c86538", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb368c79-5cf0-40fb-9f0c-5f4edad7de60", "sighting_of_ref": "indicator--0e2d679c-49fe-4ba0-8705-527600c86538", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf6a853-5463-43f1-ab5c-1bd5f5c622c8", "sighting_of_ref": "indicator--54f3bfd6-7766-4f16-b6ae-79a5daff5bbd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85621d80-aa9a-4480-9b6d-d731bb97965b", "sighting_of_ref": "indicator--54f3bfd6-7766-4f16-b6ae-79a5daff5bbd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ba07af-f69a-47ba-bff5-b9d048965e6c", "sighting_of_ref": "indicator--54f3bfd6-7766-4f16-b6ae-79a5daff5bbd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43198d73-10be-4493-abc1-4751e15a9ea1", "sighting_of_ref": "indicator--6dd0b106-0720-4cda-a73a-07fe68c5efc7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25675a4-6f12-46d4-8801-205ff31eb36f", "sighting_of_ref": "indicator--7ca250fe-8868-47d3-b1a8-294a9af89b35", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9df6ea-3167-4fa6-8d9b-ed70d93f28ae", "sighting_of_ref": "indicator--d98fb992-e877-407c-b0d3-3ebda8ca4f76", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde26f0b-4e74-454a-affd-4f1e1c0bfc4b", "sighting_of_ref": "indicator--6f63657d-4b85-42a3-8ce3-169b9b784e52", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea870f3b-4be3-4a75-80da-ce4f1bede9de", "sighting_of_ref": "indicator--b1338a55-7b98-413c-b8e0-0ca6131647bd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0feecf6-3c62-4f94-a53d-87a4fb4b083f", "sighting_of_ref": "indicator--5f01897b-0d25-42cb-97ee-72b718051aaa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae198c4-d909-4f62-a77c-5bbdeab8cd4c", "sighting_of_ref": "indicator--a57fbccc-76cf-4f5a-8f07-9412891dafce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55d7c74-1006-4f42-aaee-2bcc58926307", "sighting_of_ref": "indicator--657149aa-25f0-4623-b7e3-ca2e4fb713dc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0a663b-948d-4f23-9708-2ff183857a10", "sighting_of_ref": "indicator--e5ba67e4-bf0c-457c-a33a-1e8213b07014", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cde184-1bff-4002-8cb3-c76384451982", "sighting_of_ref": "indicator--a89dbc84-1db3-4462-a210-524002af3965", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a021aa7-7258-44e6-aa00-43b55308ea72", "sighting_of_ref": "indicator--59f0f06f-eb71-43f5-bbea-a630ad881740", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59c6d19-40b8-40fe-bb3b-22da15def4eb", "sighting_of_ref": "indicator--911253a4-880d-4d59-9383-c4b3d2adeded", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7c68f3-cb19-4b89-bf0c-616bc46193bb", "sighting_of_ref": "indicator--9d84999d-cffa-4e54-9225-8a2b6a466997", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97901a6-aacf-4496-8a62-fc9e25ec829b", "sighting_of_ref": "indicator--1654863d-cbf3-4e39-bbf8-815b799a643a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78be9dc4-accb-4ccf-8df5-675411f75e72", "sighting_of_ref": "indicator--d7f7a5a2-3b69-418c-bd8e-0b2d7ad349e1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6363343c-fae5-4b62-b1e3-77fd09774009", "sighting_of_ref": "indicator--abfcd762-0609-4c8b-96b3-46f841480ab4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec56b12-4497-4d8e-981c-fe1a2219bda6", "sighting_of_ref": "indicator--9f68a48a-9efb-4e32-a01d-b97ddd6a4869", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff238417-7da8-4e20-a172-60696f511885", "sighting_of_ref": "indicator--9f68a48a-9efb-4e32-a01d-b97ddd6a4869", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696a4ab1-6d35-41fd-ae1d-f2e13601c87b", "sighting_of_ref": "indicator--bf7ac76e-2628-45c9-882b-f48c8633f6af", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850cf76d-d92d-49f0-a0e6-f0dbf29d850e", "sighting_of_ref": "indicator--4d0501d8-4cde-41ec-ab37-7ffbf8128fa5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41967a0-c9d2-4643-9b2f-14897a4cf60c", "sighting_of_ref": "indicator--351a1d15-cac9-4796-ba5c-2db3b9fca361", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65647c9b-b24a-4929-a7ff-452b36606040", "sighting_of_ref": "indicator--f216e224-f7b4-4280-8fa3-a022afaa2673", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002ef499-5806-4b8f-bc10-225a7ad266c2", "sighting_of_ref": "indicator--b57e7114-45fd-480c-8fa1-e9eb7cd59923", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e5f9e8-02b6-42cc-a66e-23580886fcd4", "sighting_of_ref": "indicator--0c3c1ca0-29c0-4f5d-907f-3fd2f2c311b3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5ad8d3-60f2-43ab-9df1-7ce6ead88702", "sighting_of_ref": "indicator--0c3c1ca0-29c0-4f5d-907f-3fd2f2c311b3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ef6173-6299-4f64-8f6c-a51fe05af54f", "sighting_of_ref": "indicator--65820731-332c-4f83-b302-49184fe8d172", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d76162c-9a37-4930-9168-6994a5f9cb9e", "sighting_of_ref": "indicator--136c967f-ff66-45d9-806c-3f63abe98205", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a078cd21-f58d-408e-8acb-decb705cb510", "sighting_of_ref": "indicator--1430add4-14c1-4858-8942-0065801276c5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990f18f0-f0aa-4342-adac-399c6aa90ec5", "sighting_of_ref": "indicator--1430add4-14c1-4858-8942-0065801276c5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--223c2295-38fa-4572-b26c-5891191048b2", "sighting_of_ref": "indicator--0a498240-b6d6-4fff-ae91-bd6bdb15a54d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35602405-016e-42d8-97c1-3ee2f839fa9e", "sighting_of_ref": "indicator--34165d76-d340-459b-9099-9ca3c47be911", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b6f8ec-650d-441d-aa3f-da7a6959b624", "sighting_of_ref": "indicator--956c7fee-96ae-445a-91ef-281649192887", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ec3264-68f7-4cb3-a54f-4204aa6bba3c", "sighting_of_ref": "indicator--956c7fee-96ae-445a-91ef-281649192887", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e22d23f-05f9-48bf-9b53-40daa052a995", "sighting_of_ref": "indicator--41c686e6-1c83-4183-8c17-e0912c26d755", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c515cd32-4936-4482-9c09-9cb4ee36552a", "sighting_of_ref": "indicator--d8bfa09a-2f59-4b3e-b4fd-bcf656dc98c3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e09236-f20f-4af1-8e8e-f372ffbb7262", "sighting_of_ref": "indicator--d8bfa09a-2f59-4b3e-b4fd-bcf656dc98c3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31797b9-2a8c-41ce-af3c-042a4789325f", "sighting_of_ref": "indicator--d8bfa09a-2f59-4b3e-b4fd-bcf656dc98c3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5793d2-d2cd-45a8-991f-16eeaca8947c", "sighting_of_ref": "indicator--531cf591-ed3d-4b3c-8eb9-fc57958c61b9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fbb57d-95ed-4003-b0d0-60a67c91800d", "sighting_of_ref": "indicator--531cf591-ed3d-4b3c-8eb9-fc57958c61b9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8285cc38-9733-41f1-bc2b-3d02921dc21d", "sighting_of_ref": "indicator--e357c852-e4e4-4fe7-9812-faaa4414e33c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e266ab-388c-4694-b3a5-ab4f28bab4a8", "sighting_of_ref": "indicator--e357c852-e4e4-4fe7-9812-faaa4414e33c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0bb6e5-8b20-41c0-9156-8741483fb5c8", "sighting_of_ref": "indicator--c07fce67-cccf-4e7e-9a91-69f4ecffe9af", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584b55a9-7b54-42d0-99a3-99cabf229c67", "sighting_of_ref": "indicator--c07fce67-cccf-4e7e-9a91-69f4ecffe9af", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1319f72a-4e82-4e66-b094-931ee6b9e7a2", "sighting_of_ref": "indicator--61dc078a-1758-43d1-84d2-4bd561dc4d95", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1519f95-24f1-4d8b-bd56-ee0acfea5c91", "sighting_of_ref": "indicator--61dc078a-1758-43d1-84d2-4bd561dc4d95", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b38978-7d85-4df1-a755-4644b79c1605", "sighting_of_ref": "indicator--649d5520-ddc8-4e2b-bb2e-70ba32d4a0a7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5842f8-197f-4d98-ab72-54357861ed75", "sighting_of_ref": "indicator--ea98652b-7a11-418e-ac18-640444271854", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b200d139-7e26-46f7-ae68-3a4c0e1f4726", "sighting_of_ref": "indicator--ea98652b-7a11-418e-ac18-640444271854", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58a073e-c978-40c2-a507-9ba5d778026c", "sighting_of_ref": "indicator--35021cf9-ae3a-4458-ac81-b6fd1f1687e2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e93bdd-0c15-41ea-8a9f-c9c041acec2a", "sighting_of_ref": "indicator--35021cf9-ae3a-4458-ac81-b6fd1f1687e2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de2eccd-962c-4cfa-93de-e7709b9fadc5", "sighting_of_ref": "indicator--a10e11cf-f8b8-4587-afb1-d85809cc3d8d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23b070a-0375-4148-a810-6647d46b7f8b", "sighting_of_ref": "indicator--a10e11cf-f8b8-4587-afb1-d85809cc3d8d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879b00d5-f38c-49e1-b980-8a91cb261e33", "sighting_of_ref": "indicator--37337f9b-6dde-4250-a7bf-08c16c564541", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4244ec21-d5e0-4523-91f1-e91eff3994bc", "sighting_of_ref": "indicator--ad057276-0e39-4b01-b4d6-6731ccc87bda", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9475be-7005-496f-a8cf-0a80ffbf537b", "sighting_of_ref": "indicator--bd443b18-8acd-47b3-8d5a-cffea57037ad", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9778f10c-f54d-472f-ab10-4cc450df04e0", "sighting_of_ref": "indicator--bd443b18-8acd-47b3-8d5a-cffea57037ad", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3940b437-c519-41dc-90d7-23da2573640a", "sighting_of_ref": "indicator--bd443b18-8acd-47b3-8d5a-cffea57037ad", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512ac4b9-4ee2-4df1-a65f-30056b376d09", "sighting_of_ref": "indicator--ad234997-416b-4fb1-88b7-ef950ec49ef4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bd990b-cbe0-4609-b02a-f9692f9c8bad", "sighting_of_ref": "indicator--96ceaa95-44b2-44ef-aee3-791dc344d7ae", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2331ff-e4ee-4bc9-bc4a-7e24caeea3a4", "sighting_of_ref": "indicator--7896de1b-e0a0-485a-91aa-86d22e85e391", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67150854-61c6-4bf5-beb3-3da31185d050", "sighting_of_ref": "indicator--cdab0bc8-1337-445b-baac-aa26b159a2cc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ca4236-64d4-4131-95d3-1418e9ef47f7", "sighting_of_ref": "indicator--cafc3386-7a3b-4337-9f38-25e9f42e8b70", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc55a11a-f950-4eaa-af09-9159fc85465e", "sighting_of_ref": "indicator--cafc3386-7a3b-4337-9f38-25e9f42e8b70", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6bb2f6-82f3-488e-82ec-1376e7037cdf", "sighting_of_ref": "indicator--cafc3386-7a3b-4337-9f38-25e9f42e8b70", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3da02a-3b5d-473a-bbd1-5c9165736776", "sighting_of_ref": "indicator--173a6eb7-102e-4c85-9cea-29d5c4d03084", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc720f83-344a-4dd9-bd67-46d451818602", "sighting_of_ref": "indicator--173a6eb7-102e-4c85-9cea-29d5c4d03084", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1499f66-4a94-438d-b180-2015f8451114", "sighting_of_ref": "indicator--334661bb-9879-48a9-86a7-2953ae129eee", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37faf4f2-4acb-4b79-9ef1-429baf60d77b", "sighting_of_ref": "indicator--0eb31c45-d792-4ae2-af08-860a460f6104", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa71419d-2b6f-40a9-937e-ded4307fbec7", "sighting_of_ref": "indicator--880cc01f-8b67-43b1-abd1-583c8179b13d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24456d7-08bb-4285-9f55-b44a5adfac84", "sighting_of_ref": "indicator--d6776e35-ed7b-4fac-9646-03c79835012d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1cbf724-244c-4653-a993-075f998997b6", "sighting_of_ref": "indicator--3e4b1e73-5ba8-4bf9-b3ff-b72d9cfb693a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910fa8b9-311c-4250-854a-37a52b155c24", "sighting_of_ref": "indicator--0b85ee3b-4f79-4691-96ea-7360dd7e2992", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff881b74-d3c6-4c9c-b946-33015c60e9d4", "sighting_of_ref": "indicator--0b85ee3b-4f79-4691-96ea-7360dd7e2992", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22837e08-94b1-4fb7-95fa-ad64228b3079", "sighting_of_ref": "indicator--2b972ef9-5c49-4569-bede-45d7a2992488", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b88fe14-2ec3-4629-9ca4-3ec11f5812e6", "sighting_of_ref": "indicator--2b972ef9-5c49-4569-bede-45d7a2992488", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68e81b9-1e89-4215-92f3-40bd1edec20d", "sighting_of_ref": "indicator--baafdf53-0e4b-408a-8677-6578737148d9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63175546-3d88-4168-89b9-840041a9dcfe", "sighting_of_ref": "indicator--baafdf53-0e4b-408a-8677-6578737148d9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--359e102f-5825-4058-ab1d-f2d0d7952d04", "sighting_of_ref": "indicator--baafdf53-0e4b-408a-8677-6578737148d9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c55f425-8e07-48c1-bed0-3608de0d9f40", "sighting_of_ref": "indicator--cd6bc011-f1dc-4a60-a81d-908150c8a1aa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb63a20-5690-4233-84fc-3c1162bfd68d", "sighting_of_ref": "indicator--b5eb60fc-c5eb-43f7-b8d6-b8821f43cf0a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989a2026-df30-4138-8b3a-f2e73ba2bc70", "sighting_of_ref": "indicator--d7dfd555-acfd-4759-84d6-1b70202bf52f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db06c43-caad-48c0-8d6b-4d972321d2a1", "sighting_of_ref": "indicator--9972121e-b073-4216-85de-7dcbf41544f3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0621ac1c-77c4-4f45-a3f9-70819c8678fa", "sighting_of_ref": "indicator--8201e770-d1c6-4daf-9818-f5d9bfcfc277", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e7672b-9527-46d8-8000-c2e2495865fb", "sighting_of_ref": "indicator--80ad7839-89b3-44b3-a306-132802a7a889", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf6dc18-38ed-46f0-9706-901107d672de", "sighting_of_ref": "indicator--80ad7839-89b3-44b3-a306-132802a7a889", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb9c476-9940-427f-b9c2-2707921d029a", "sighting_of_ref": "indicator--80ad7839-89b3-44b3-a306-132802a7a889", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481e54ac-461a-45e3-a5f8-f101351a2d55", "sighting_of_ref": "indicator--47ccacd8-cce9-4a87-936c-a989a197066e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2347dc6a-df2c-41c0-9812-f62919dba4d1", "sighting_of_ref": "indicator--47ccacd8-cce9-4a87-936c-a989a197066e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa56ba1e-39eb-4d0f-95e4-94bdfa656413", "sighting_of_ref": "indicator--47ccacd8-cce9-4a87-936c-a989a197066e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c597f8-9246-4a8d-9a8a-c72a7b552b47", "sighting_of_ref": "indicator--d3aabfae-e5af-4045-9b38-5097587923e2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b4c65d-cc78-499b-be28-d5a7984c982b", "sighting_of_ref": "indicator--1d958d84-bd40-4b02-82f8-de9a21d2f189", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16d404e-816b-4173-8096-6c374ce929e6", "sighting_of_ref": "indicator--36a9257f-a783-411e-b34e-7c24cb609793", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ec4460-cd13-473c-bea6-f3dc084962e8", "sighting_of_ref": "indicator--73169ce6-bcc7-4baf-ae1b-ee7b7ac4567e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9e32ba-e80e-471f-97a5-c62f80bed879", "sighting_of_ref": "indicator--c489e9ad-e00f-4b8b-9a14-646e59debfde", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef41d9a-1ae6-4823-9d1e-f305f2e8297a", "sighting_of_ref": "indicator--c2e18076-4269-4c24-bea7-a9923110fdae", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ef97cd-17fc-47f2-b18b-53554abe8295", "sighting_of_ref": "indicator--c2e18076-4269-4c24-bea7-a9923110fdae", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17700849-8474-49e0-ad4c-65bbca2a8496", "sighting_of_ref": "indicator--c2e18076-4269-4c24-bea7-a9923110fdae", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6dcde7-6675-43c0-b5a4-f0a346c33745", "sighting_of_ref": "indicator--d5a9041d-f56c-4234-9cf7-b3dc12a34a06", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d50337-9a6f-4dcf-8e6a-aab1d8884999", "sighting_of_ref": "indicator--d5a9041d-f56c-4234-9cf7-b3dc12a34a06", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021aaf9a-aa60-4ac9-8c3f-2cd668099ee5", "sighting_of_ref": "indicator--d5a9041d-f56c-4234-9cf7-b3dc12a34a06", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2c15af-78d1-45e3-9760-7c055de4ad8e", "sighting_of_ref": "indicator--d95a0799-bca8-445b-aada-f07437a9c445", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fb9578-36a7-402e-ab42-ca50d3ebb852", "sighting_of_ref": "indicator--d95a0799-bca8-445b-aada-f07437a9c445", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38006c6f-e0c3-48b6-addf-328fbaf0e26a", "sighting_of_ref": "indicator--d95a0799-bca8-445b-aada-f07437a9c445", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595691b0-57d9-4bcc-8a86-5c98353fb42e", "sighting_of_ref": "indicator--ea226b53-dad0-49fa-8c40-4326cfa3c77c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4aada1c-1f96-4640-939b-3f9de5f96e98", "sighting_of_ref": "indicator--ea226b53-dad0-49fa-8c40-4326cfa3c77c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3707b3b1-7f66-4807-964d-26a4e6189621", "sighting_of_ref": "indicator--ea226b53-dad0-49fa-8c40-4326cfa3c77c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc445d1c-f0e0-458d-925c-0461a477d989", "sighting_of_ref": "indicator--6dfe02e0-68cf-42c2-bca6-575759c82ecf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291be91a-471b-493c-80e4-4600a778ee40", "sighting_of_ref": "indicator--6dfe02e0-68cf-42c2-bca6-575759c82ecf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a82ce86-a925-499c-a40c-b23432b08ca3", "sighting_of_ref": "indicator--6dfe02e0-68cf-42c2-bca6-575759c82ecf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7282ae28-1802-4ef8-967f-755367d6debc", "sighting_of_ref": "indicator--4a589e2a-2655-487f-8132-c355d7f0e966", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e292a8-a279-4039-be13-216cf97c9f41", "sighting_of_ref": "indicator--4a589e2a-2655-487f-8132-c355d7f0e966", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09d55fd-c220-4f78-86eb-da6917f1ec7e", "sighting_of_ref": "indicator--4a589e2a-2655-487f-8132-c355d7f0e966", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56b1794-5ce8-4105-8e69-9627b6dbada1", "sighting_of_ref": "indicator--7ebb9fe9-0616-4fa0-846b-e8ce2750effc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c17217-3fe9-4afe-b9eb-63b6a1fc5059", "sighting_of_ref": "indicator--7ebb9fe9-0616-4fa0-846b-e8ce2750effc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3371a4d8-b48a-4bf7-acff-54153385de81", "sighting_of_ref": "indicator--7ebb9fe9-0616-4fa0-846b-e8ce2750effc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d24cc25-aba3-4d06-b589-acd0c4048570", "sighting_of_ref": "indicator--43c6b287-c769-43df-b577-0eb048d6a818", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b36fd5b-2d23-49c6-9723-2b927c03d21d", "sighting_of_ref": "indicator--43c6b287-c769-43df-b577-0eb048d6a818", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb8386a-a481-4955-ab93-4a27b437d30f", "sighting_of_ref": "indicator--43c6b287-c769-43df-b577-0eb048d6a818", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f0d656-d04b-4c05-932c-80afb8cae8f8", "sighting_of_ref": "indicator--e18887ba-6c9d-4033-ae9c-a66e703e8403", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9e5920-7b32-43c0-b865-e5e50a9a771f", "sighting_of_ref": "indicator--7c4d9d4f-203c-4d59-9519-85d32ee66ec8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298105c0-5cf4-4784-b9bb-5893520dacc9", "sighting_of_ref": "indicator--7c4d9d4f-203c-4d59-9519-85d32ee66ec8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdd38a1-e342-4448-831d-07eff72778ea", "sighting_of_ref": "indicator--044ce97f-b8ac-45fe-9b6c-02b1158df97e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8960a24e-8b67-47e1-be34-2a2e130300ef", "sighting_of_ref": "indicator--9dd8bd8f-e58c-4ece-9714-7689e63782a8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2f8883-40b9-4a21-a97f-1df7e9a26238", "sighting_of_ref": "indicator--33238350-e5cf-4752-bbaa-57141d5a96d1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394381a6-b5d2-4a67-97e6-f8d794f5d380", "sighting_of_ref": "indicator--62181abb-37f8-4913-86b2-5e68a75e4b99", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f146c37e-590b-44d2-bb31-d0fea1ace806", "sighting_of_ref": "indicator--882c5c4e-7525-4d6b-9d37-d925463bc33d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99a01b0-e3e1-407b-a024-eccd2bf33f21", "sighting_of_ref": "indicator--b7d6400d-6902-4f7b-afe8-f139909d093c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ded956-47a7-4ab9-819a-f24d0021a91d", "sighting_of_ref": "indicator--3762907c-9ffa-4e7f-aa9b-8491bcae9d44", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a82104f-3c7c-4f28-9c71-36b7a201564e", "sighting_of_ref": "indicator--31f9b1cd-8d6d-41ca-993c-a7e7c55f5f7e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cace46d-3dcb-4a24-9e4c-635a80bf5fed", "sighting_of_ref": "indicator--f9a12b29-c82b-480a-beec-795ae60e56f5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd399649-f7e5-42b5-b088-f99e1c2653ee", "sighting_of_ref": "indicator--a2a284b1-b6fd-4327-8050-d97de1851ad0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a42c2d-1fab-48dc-93cb-fc7801c2fe80", "sighting_of_ref": "indicator--93e47b6f-a9ab-4a9f-856b-1c5b92032cf3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52760f2-f38f-4eb7-b872-e9d26331095a", "sighting_of_ref": "indicator--aba25ead-71eb-481a-9c0a-e9a613ccbfad", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda84839-ed5c-489d-9c0d-d06f3d098f3f", "sighting_of_ref": "indicator--d042c27b-2875-418b-bffb-224623040d26", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5a6751-1581-4d34-bdc0-30d08bcf5909", "sighting_of_ref": "indicator--1c4a5457-2845-4146-9c95-bbe2879e75b0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87af384a-d5dd-4806-9243-3e92198acb0b", "sighting_of_ref": "indicator--4d93aced-2daa-4e86-ad44-ad5726d478b6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b456bfc-2a67-457f-905d-dc6dc9f46ce6", "sighting_of_ref": "indicator--8a5e2f7d-2587-4ef0-bf01-ccc3ef133a75", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c62b20-91e7-4e33-a061-58d08f14ba6c", "sighting_of_ref": "indicator--8a5e2f7d-2587-4ef0-bf01-ccc3ef133a75", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f15be1-02c1-420b-8147-706fb82e25eb", "sighting_of_ref": "indicator--1be2cc5b-b162-43f0-96b2-ee5ba50f7d4b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa68ad52-ac5f-4bd0-9965-14619ff9de60", "sighting_of_ref": "indicator--1df7f8c0-8d1f-4aac-94d2-53e8c8f3c89a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111b6605-02c1-4e5c-93f3-ca17a5c00992", "sighting_of_ref": "indicator--1df7f8c0-8d1f-4aac-94d2-53e8c8f3c89a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab27ca70-14d0-41c1-b164-8e6625ef23bf", "sighting_of_ref": "indicator--e7bd6ae5-7298-4ade-850a-e74746379f52", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f63e7f-d557-4614-b245-b3fbca8ab7a1", "sighting_of_ref": "indicator--af0d19f4-874a-4e2c-8cab-d888baa731d4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b958c6-e74a-4ee5-92e4-f492a7b87ccb", "sighting_of_ref": "indicator--84775b0f-dce8-40ca-9e5c-71e225192e46", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a82d54-f66e-4bb0-86dd-2b87f28c9a1b", "sighting_of_ref": "indicator--5a62bc02-3f08-40d5-82ef-3950ab4a8dbc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e44c9a5-3b92-4843-a099-7981d870274f", "sighting_of_ref": "indicator--5a62bc02-3f08-40d5-82ef-3950ab4a8dbc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754ca372-7af4-412f-89a8-2fb04c77a5c2", "sighting_of_ref": "indicator--5a62bc02-3f08-40d5-82ef-3950ab4a8dbc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a22d34f-1298-4a9d-9b98-4610e9435587", "sighting_of_ref": "indicator--38259894-90ca-43cc-aedd-0896013f9a77", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b0af5a-3d4f-42ac-83cc-81f63d9314db", "sighting_of_ref": "indicator--6181409b-84e2-4597-ae7a-2a6d3e431b4c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fce85c-0405-47e6-a5d0-91483e7761c7", "sighting_of_ref": "indicator--9489bf2e-642d-4c6e-a102-3098ba6144a9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b57545-4ad7-465c-90b9-0707a5f59631", "sighting_of_ref": "indicator--9489bf2e-642d-4c6e-a102-3098ba6144a9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fec5c6-dea2-4cba-a132-256e21695dba", "sighting_of_ref": "indicator--9f9aceb1-d517-45a3-9b46-eaeedf7b1901", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7f44ff-8029-4f4a-9c6e-7d7bfb3de228", "sighting_of_ref": "indicator--6958d527-aa04-4ac9-b2c2-c54a17b1dc93", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b706c6-7edb-43b6-b2a2-6bece4e46074", "sighting_of_ref": "indicator--6d1c85f3-ea7b-4920-bbe8-8f82ab6b44f2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deeed491-0013-4a7c-9013-9a0388459327", "sighting_of_ref": "indicator--6d1c85f3-ea7b-4920-bbe8-8f82ab6b44f2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff422d00-095e-4e12-9d12-c12952ab78e0", "sighting_of_ref": "indicator--f8baacb5-506e-4b00-a6e6-f3b8e7bd7120", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c816195d-dce4-435e-961f-f5c1ebb76566", "sighting_of_ref": "indicator--4926f1ac-1e4c-4c38-aa62-78337acd890f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c638cb81-acd9-42f0-a8ef-ee8d5897a882", "sighting_of_ref": "indicator--faf6cea2-179c-4b42-93f0-ec2145e43ecb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e24086-3850-47df-8d9b-4729710f2981", "sighting_of_ref": "indicator--f523fa93-7602-48a1-80de-8d0f73326af5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c06d9f-0dcf-409e-8641-66c627354de0", "sighting_of_ref": "indicator--5433f0d3-4a40-40bd-ab36-d60bb27b032c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33f42d3-db84-4019-8fc6-b4869f6c1b26", "sighting_of_ref": "indicator--5433f0d3-4a40-40bd-ab36-d60bb27b032c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c7f9c6-cbb0-42e1-bef7-ab8051224c79", "sighting_of_ref": "indicator--e54093a0-3465-4b3f-80d2-a4fe1148a1cd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0d558a-2471-4ad6-a8ed-71bd9b47a1b6", "sighting_of_ref": "indicator--ef862640-6fc7-442d-9f79-11c03bda2c7e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20a62ab-3fae-4ba8-ad59-bce948df723a", "sighting_of_ref": "indicator--0e4daede-54f5-4755-92fa-27d1066a1898", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59d7a79-731f-44f7-8c5c-c6fe5c5102e1", "sighting_of_ref": "indicator--d9aaf3f0-da4f-4537-a079-253bfca56fc1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03b74ed-45b5-43f5-8386-ac29261d7049", "sighting_of_ref": "indicator--a3142c92-4f91-4860-8d6c-4410b4d745bb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea59920-af42-49bb-82ea-91fdf86901af", "sighting_of_ref": "indicator--a3142c92-4f91-4860-8d6c-4410b4d745bb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021ab411-5917-488b-9fa2-4b0de1d685f2", "sighting_of_ref": "indicator--6d0c1347-4b4d-4a39-a72e-d0fc3cb4a096", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5898bd-9646-4700-addb-901b5e6dfc0a", "sighting_of_ref": "indicator--577236b4-6576-4355-9dfe-83b02ff7f07f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc21613-5adf-4cf0-9880-bf58cb50349d", "sighting_of_ref": "indicator--e07c4f35-df6b-4a35-bfc3-214dcd90a85c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1d4ff9-9794-483e-a232-a3cdab24ba38", "sighting_of_ref": "indicator--8a3478ca-f04f-404b-ac4b-774035409794", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa1c575-0498-4a13-9da3-029ae1529e91", "sighting_of_ref": "indicator--4043c9e7-ceef-49ba-b425-04e51e2d0c7d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd25948-6aec-4b85-b0e9-f63bc52dd549", "sighting_of_ref": "indicator--0f323e83-a4bd-4bf5-8b5c-51fc67608776", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21dd85da-14bb-4991-a045-3d36818884d4", "sighting_of_ref": "indicator--8ce7b4b0-e7b4-41d6-91c6-0166b4b81b64", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf8a79b-5452-4cfa-bae4-8e4eca440148", "sighting_of_ref": "indicator--a8b6b39f-3c5a-4a41-aa1a-8d633ca0cc81", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f422df-1b90-4720-b920-562fdfe78bc9", "sighting_of_ref": "indicator--67819122-bc98-4393-abe1-823bb82de29c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454cf1ac-9e77-4d5b-828b-3dc5aa6216c2", "sighting_of_ref": "indicator--0ca6065c-098b-4321-86c5-66805279bac9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbedaae2-f378-428f-a5bd-883975396d44", "sighting_of_ref": "indicator--5d7deb39-6d7c-4af7-afe2-8304b97d6f79", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe070c2a-5cc0-40a0-9485-976a0a4bae5e", "sighting_of_ref": "indicator--5d7deb39-6d7c-4af7-afe2-8304b97d6f79", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae7e398-ab05-437a-9013-ba8bd22a0cc2", "sighting_of_ref": "indicator--5d7deb39-6d7c-4af7-afe2-8304b97d6f79", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b66151-8718-4885-80ff-e43aaa33dc3d", "sighting_of_ref": "indicator--e27ea846-2ce6-4ca6-ace0-89cc57cd488a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae6aaa5-94f8-4ef1-96ec-366e7e67bdb3", "sighting_of_ref": "indicator--29fee7e7-74c2-45e2-9d83-431a458d3169", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c815dd-73d1-45dd-964a-03260bd68236", "sighting_of_ref": "indicator--29fee7e7-74c2-45e2-9d83-431a458d3169", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5870c899-fd58-4029-b9f7-fd8f222d13f8", "sighting_of_ref": "indicator--de0b1a81-b84c-482a-a4b1-f3630a5e050a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f4d17b-0c08-4af3-abce-35f864ed5476", "sighting_of_ref": "indicator--4c3328a3-5e09-40ad-8c9e-0cd6d9737aa5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170b1ff2-59d0-48ae-bf09-697964ff8464", "sighting_of_ref": "indicator--afee74ce-be4c-4fd9-a8b7-113d27c668bd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ef7e32-d190-43b6-8682-b1b9064bd7eb", "sighting_of_ref": "indicator--afee74ce-be4c-4fd9-a8b7-113d27c668bd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6fd570-32ed-4a10-a2fe-014d109d2b2c", "sighting_of_ref": "indicator--096094e7-8f5f-4053-9a0c-b43988f49279", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8063a9bc-c54c-485c-95be-b9896355bb38", "sighting_of_ref": "indicator--4513ee4d-3934-4cf9-b083-63a90e44864c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995dbfaa-69c4-4217-8880-c02bb26acfbc", "sighting_of_ref": "indicator--6d0942e6-a34e-47f0-9f03-bc95cf987b5f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a425e4-e4dc-4519-b029-a4bd212c08cf", "sighting_of_ref": "indicator--b47447f8-5fe0-4d76-a27c-0acca48672ed", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b11f63-6928-489c-806e-1d33879321bf", "sighting_of_ref": "indicator--b47447f8-5fe0-4d76-a27c-0acca48672ed", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980b926d-75bb-4722-ac81-d47553f37656", "sighting_of_ref": "indicator--56a38b89-bd4c-4375-9c2c-e3d23d31f962", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774ae043-eae5-4dfe-b114-4e09a7d8428f", "sighting_of_ref": "indicator--56a38b89-bd4c-4375-9c2c-e3d23d31f962", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234089a4-519c-43ee-826d-0bec1606b9ce", "sighting_of_ref": "indicator--56a38b89-bd4c-4375-9c2c-e3d23d31f962", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d16b9e1-513b-473b-bfb4-30dee95504b5", "sighting_of_ref": "indicator--3bad3f04-b3bf-4df5-94dc-21270bc53a04", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397fd0e6-a44b-4c6d-96b2-1fbc339b2b42", "sighting_of_ref": "indicator--3bad3f04-b3bf-4df5-94dc-21270bc53a04", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b197285-27b5-43f1-ae37-04b0ebb1c4d9", "sighting_of_ref": "indicator--6eb83743-7055-4bd4-b0d2-4f3e1b8dbe74", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af00cbd5-e42f-42f0-a145-ec366b4c786f", "sighting_of_ref": "indicator--42f9851f-d0b9-48e2-a9e3-208640854526", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee1c00e-7f34-4eee-9e8b-6b8d936d7705", "sighting_of_ref": "indicator--037215a9-7880-4bf4-ad54-3cd3dae3fbeb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd28dff-5298-41e5-81ff-196e96b11bf7", "sighting_of_ref": "indicator--f1046399-666a-4209-9f23-d925cccfac65", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca555522-d17d-4763-8ec8-63a7c6f8fa9f", "sighting_of_ref": "indicator--f1046399-666a-4209-9f23-d925cccfac65", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3c289a-f470-4866-92ec-76e78abd6376", "sighting_of_ref": "indicator--f81c914a-b321-43b5-bef5-3baa4f577852", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdfac45-a51f-4092-b57d-31f82ed9bbc7", "sighting_of_ref": "indicator--2c0057b5-8381-4b19-84d2-0d1c5c357b39", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c16e96-5837-4427-a63a-09822abc56fd", "sighting_of_ref": "indicator--f336f209-4fc1-4ca9-b399-93df82175659", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d0b46f-91b8-4964-9759-83a2b0cab8be", "sighting_of_ref": "indicator--f336f209-4fc1-4ca9-b399-93df82175659", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64da0250-5a66-46b6-9447-8760deeacb81", "sighting_of_ref": "indicator--6813704a-5779-48bc-b4db-fb96c89f6d17", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba7fd56-bc38-4139-a8a4-7d1f1f0c5b39", "sighting_of_ref": "indicator--8db42c39-69c2-4a9e-a4a7-023223074980", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4026676-ee4f-4fd0-bad1-0be5e4098f91", "sighting_of_ref": "indicator--860fef79-4d2a-4144-827c-2bacbf4febee", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2fcc38c-807f-4e13-925f-e86ec35f09a1", "sighting_of_ref": "indicator--934f2e21-b1a8-4b88-8542-bff507d01024", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e17d0e-b194-4e0d-a02b-c74840ad7d77", "sighting_of_ref": "indicator--934f2e21-b1a8-4b88-8542-bff507d01024", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfadf6b8-b24c-4d08-9c74-9aece085227c", "sighting_of_ref": "indicator--d001466d-1f18-40f3-8bea-ffbdffb2ab36", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71949e1b-8e4c-4de4-a686-5ec3a4685fe8", "sighting_of_ref": "indicator--ab11ff1c-80bd-4328-9580-c0ccc05f8660", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf48e65e-2626-4e91-bf90-9b523eb927af", "sighting_of_ref": "indicator--25369246-e996-472f-a449-ce3890f068a7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39333dfb-7ab7-4098-8b5a-078476b05cfd", "sighting_of_ref": "indicator--25369246-e996-472f-a449-ce3890f068a7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c45f9a-9931-4072-af2b-278504099f08", "sighting_of_ref": "indicator--9a64b9a1-3f66-45ec-9a23-38619de8b834", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8984e20-4b70-446d-8df4-a8c4febdeb43", "sighting_of_ref": "indicator--39725a64-245f-4a0a-90b7-3e2b9c3672fe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a5508e-3e24-4936-a567-ad5fc67dab35", "sighting_of_ref": "indicator--713e1ea6-743d-4592-ac35-ffb3083ed5fb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2ff662-7f7d-4d9e-9175-2acfea74985b", "sighting_of_ref": "indicator--eca0d1b6-435c-4f0b-a1be-79689e5d3cce", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8c864a-846d-4962-866b-6dd0ac0f2dcd", "sighting_of_ref": "indicator--dbde302b-6af4-4471-bee3-d77711b4da7c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a1eb65-97d7-4e9d-8f1a-a4412abb49e2", "sighting_of_ref": "indicator--199c91cb-fbf4-4c37-a18f-48e39abc1671", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4d50cb-8516-4d3d-afb6-866f7fd08aa3", "sighting_of_ref": "indicator--199c91cb-fbf4-4c37-a18f-48e39abc1671", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ebf0c6-3e0b-4818-8b59-2e9a7eb2fb9a", "sighting_of_ref": "indicator--199c91cb-fbf4-4c37-a18f-48e39abc1671", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d3f43b-9d8b-4631-81bd-5b100052996b", "sighting_of_ref": "indicator--06f6c07b-3868-4173-b1c0-1d22372c91c4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983bfe0e-1b98-47e7-b79b-2e1f5e9cd732", "sighting_of_ref": "indicator--388e2671-668e-400e-8db8-5e42c5c09935", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62633e7a-6501-4050-b0c0-e7cc13eb1713", "sighting_of_ref": "indicator--99ff001c-e838-4486-984f-0289420608b9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f2cf97-a30f-44e4-b137-f6c0ccdf1b6a", "sighting_of_ref": "indicator--f71dd7d0-ee1e-4323-bff6-c5e0acd0bf38", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6452bd77-645c-40ff-b6bc-78a6ceb31c02", "sighting_of_ref": "indicator--299772f9-2c6d-48d2-88d5-e79a6538a8b8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9ace76-8534-4f49-a4d0-29d693c80c82", "sighting_of_ref": "indicator--f6c4281b-9514-463b-a0ac-fa7640e709b9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1095eadf-c519-464e-b3d5-40199672c09c", "sighting_of_ref": "indicator--529affff-8b6b-43e9-a446-f6509af932ab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170b5b21-2e9a-410f-a4da-795c967d2591", "sighting_of_ref": "indicator--8de4c039-99fb-4ac3-8d2f-796f6ed68a57", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7374ee-5ec5-423b-b841-4f81db91996b", "sighting_of_ref": "indicator--8de4c039-99fb-4ac3-8d2f-796f6ed68a57", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49cbf952-542b-4205-af4e-a591c4961852", "sighting_of_ref": "indicator--dd25bd98-67b1-4b89-a45a-267db0a0ba06", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a572266-8805-4028-9bc3-8120db461287", "sighting_of_ref": "indicator--164a9829-05f8-4103-abd7-15cb5f3ef562", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b038e9cd-7240-4391-8625-4ae8f43506d9", "sighting_of_ref": "indicator--cb9ec874-3580-4a73-a907-7584c2de010a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e025f7a-a60e-4371-ac31-f13682bb5b6f", "sighting_of_ref": "indicator--4fddcc5e-718b-4e3d-8f28-2e722dd62adf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668d945e-7886-46c3-ba74-646e14d580eb", "sighting_of_ref": "indicator--60870f7e-f2e0-462f-88aa-313a379a0351", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2196b396-244c-47fc-a6b5-dfefc99855ce", "sighting_of_ref": "indicator--686f1176-1d51-4a95-88ea-87d4b3b9f90b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a815a2a-db93-4269-85c4-6f9b73b10646", "sighting_of_ref": "indicator--cb30a863-43cc-4233-a824-9313cb227c6a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adfeccc-c5c0-42fb-9d45-e5cc0ff96f40", "sighting_of_ref": "indicator--291caaba-de0c-4e80-a285-a5b8a1a2ef75", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de0fce7-480f-4bf4-9d3a-227182b37eb8", "sighting_of_ref": "indicator--9c0d1b6b-6455-45d3-819f-3a4e81cd5ed3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921dae62-4c60-44cb-b94a-17a0467053b7", "sighting_of_ref": "indicator--816c2e77-2f62-4714-8621-50e9e87a88cc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03557bed-e118-428d-accb-51d38ee906e5", "sighting_of_ref": "indicator--1437bf51-ca35-404e-8080-6fc2bc15f61d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07add3cf-dcbe-4d81-b268-5090436e7dd0", "sighting_of_ref": "indicator--afe5bfa8-1a03-465f-ad6c-f1ba37df8793", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1100d52e-f2f0-4b0b-aaf8-3bafac303c49", "sighting_of_ref": "indicator--f5f44c5a-e484-4a80-ab29-a29eabe39596", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5579a0d4-75c8-4284-9278-0b679c9b6af3", "sighting_of_ref": "indicator--4f7b02a5-b831-4a93-93e4-9e0c65a74d52", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50919e5f-7ba9-4609-ade8-a46b08ac7762", "sighting_of_ref": "indicator--d6cde08c-b263-44e3-82d2-8de1b1ac20ee", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d85f7c-4e94-4502-aceb-83550c707978", "sighting_of_ref": "indicator--f1b178e4-1e8f-45b4-a929-23135649eb3d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bbe177-f5ac-4e23-8428-41c7c6563b7a", "sighting_of_ref": "indicator--f1b178e4-1e8f-45b4-a929-23135649eb3d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fde25c4-5cb9-478e-bf16-5f13357ea1ba", "sighting_of_ref": "indicator--e0a3ef9c-0881-4c2e-82cd-9e25b4e77f13", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20bdbb5-38bd-4df8-9f8c-98d6c57df960", "sighting_of_ref": "indicator--2988621e-7cfd-46f2-9dc5-bfdd393422a6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9883778d-c787-4c51-99d5-58d8d2bec8cd", "sighting_of_ref": "indicator--79838fbc-b847-4a33-b37a-38478b5a9046", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42849716-eb75-40d8-907b-cf9d78f6c453", "sighting_of_ref": "indicator--4b26f643-54aa-4fd6-89b2-3c79e6f1cdc0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4f9a1b-9019-4634-9177-18e3fccd7f5d", "sighting_of_ref": "indicator--10002d3e-7b8f-4dcd-8f72-1b52d51533ec", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4620da5-5beb-4176-8bcd-d20c25ef88c2", "sighting_of_ref": "indicator--10002d3e-7b8f-4dcd-8f72-1b52d51533ec", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b961cdaf-a82c-4bad-84d6-dceb1dd5de93", "sighting_of_ref": "indicator--b9ad6740-beac-4b0f-a948-6234b7337b94", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae13eb9b-40c8-44c2-b0e5-0f31fbe9446b", "sighting_of_ref": "indicator--b9ad6740-beac-4b0f-a948-6234b7337b94", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706b104c-acd7-4527-9eb7-341cd923b17e", "sighting_of_ref": "indicator--b9ad6740-beac-4b0f-a948-6234b7337b94", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c90e172-3e91-4ca8-8124-c03f9825b2f3", "sighting_of_ref": "indicator--48d05904-4bd2-44de-b740-486bcc0bba26", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362da451-1cd7-4d83-ac47-ce9539e8822b", "sighting_of_ref": "indicator--48d05904-4bd2-44de-b740-486bcc0bba26", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129a5161-c46c-4476-a529-fa23daa468f6", "sighting_of_ref": "indicator--48d05904-4bd2-44de-b740-486bcc0bba26", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6176d7ee-9d2d-4a14-b4cf-6d5141e92893", "sighting_of_ref": "indicator--d07b12a1-93c0-4b08-b372-bc081197fec5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5dbb8a9-ea16-4180-a941-b6fd086378fb", "sighting_of_ref": "indicator--d07b12a1-93c0-4b08-b372-bc081197fec5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ebb00d-2596-4db3-8c8d-249140936d30", "sighting_of_ref": "indicator--d07b12a1-93c0-4b08-b372-bc081197fec5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcfd92b-3e0e-4cc1-9b1b-0a1100e4041d", "sighting_of_ref": "indicator--c514eeea-4945-4676-9794-56da8d71d40b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416c3fa4-d5a1-4964-9d61-1530c969ce74", "sighting_of_ref": "indicator--c514eeea-4945-4676-9794-56da8d71d40b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a33cdc-ce74-4bd6-9e85-b02c663882f4", "sighting_of_ref": "indicator--c514eeea-4945-4676-9794-56da8d71d40b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1daa440-9b8d-4eae-8dc7-4a592c4a7598", "sighting_of_ref": "indicator--108a90c9-be3c-40ed-8bda-c83e54008e6a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1629f36d-877d-4b1f-93b4-d102eb060c85", "sighting_of_ref": "indicator--108a90c9-be3c-40ed-8bda-c83e54008e6a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed57a50d-67ba-464e-bf17-d4b37283b231", "sighting_of_ref": "indicator--108a90c9-be3c-40ed-8bda-c83e54008e6a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034f5fad-6ba6-4125-8a91-58e48e1511db", "sighting_of_ref": "indicator--ee3264b8-83d4-4917-b1b0-dd147288ac4b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fb1350-591c-4a13-8afe-ba9b618873eb", "sighting_of_ref": "indicator--ee3264b8-83d4-4917-b1b0-dd147288ac4b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f114d8fd-2a52-4796-895c-50f5b7db2757", "sighting_of_ref": "indicator--ee3264b8-83d4-4917-b1b0-dd147288ac4b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123f5307-835f-41fc-9f45-c8ee60701370", "sighting_of_ref": "indicator--ca78493d-157e-4b64-bbf0-f3064f56139f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93122f9-904b-45bd-9ac5-4395f112fe71", "sighting_of_ref": "indicator--ca78493d-157e-4b64-bbf0-f3064f56139f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30e614f-ad82-4e7a-80e7-0e85edbf766d", "sighting_of_ref": "indicator--ca78493d-157e-4b64-bbf0-f3064f56139f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064c0292-3fb8-44a0-833a-05d161f0edc8", "sighting_of_ref": "indicator--1ec93574-615a-4d19-a21e-fb61e5687a16", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd852bde-13bd-4cad-8b91-29e7b18a7126", "sighting_of_ref": "indicator--1ec93574-615a-4d19-a21e-fb61e5687a16", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0771ebb8-3804-45aa-b079-5bfcae5bf9ed", "sighting_of_ref": "indicator--1ec93574-615a-4d19-a21e-fb61e5687a16", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f15990b-d814-416f-ad36-dd44b5f8fee1", "sighting_of_ref": "indicator--d118817b-321a-4d54-8f37-7b363d34c4f4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78eb6c1b-38a3-462f-a69b-1589b0e8d112", "sighting_of_ref": "indicator--d118817b-321a-4d54-8f37-7b363d34c4f4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e745c3ca-e13b-4e93-9bae-77f9d75d10d7", "sighting_of_ref": "indicator--d118817b-321a-4d54-8f37-7b363d34c4f4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67335cb6-007e-48ad-963e-7616c75d9985", "sighting_of_ref": "indicator--4822dd64-6d98-4faa-bd48-5abd7002913f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45c71c9-4e1c-429f-8c1d-70748baadff6", "sighting_of_ref": "indicator--4822dd64-6d98-4faa-bd48-5abd7002913f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cdb9371-eaf6-4a91-a1f2-560fb50cc3ea", "sighting_of_ref": "indicator--4822dd64-6d98-4faa-bd48-5abd7002913f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63fa5f0-b2b1-4b91-b4b8-1776e2572d32", "sighting_of_ref": "indicator--148bd75c-ff52-4d7c-90fc-286d10b30e60", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55983ff-cb30-4856-9c40-3abbc13b05f3", "sighting_of_ref": "indicator--148bd75c-ff52-4d7c-90fc-286d10b30e60", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed317c36-c174-4cbd-bb23-2c090d711d6d", "sighting_of_ref": "indicator--148bd75c-ff52-4d7c-90fc-286d10b30e60", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75dfb511-df22-4af1-9ba7-b21069489b37", "sighting_of_ref": "indicator--cc855d39-b50e-4324-b917-0c4d88580a1d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ae62b4-7eb6-42ad-abe4-c3dd378aae79", "sighting_of_ref": "indicator--cc855d39-b50e-4324-b917-0c4d88580a1d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace93ab1-832b-47b0-ba3f-43d345d62a52", "sighting_of_ref": "indicator--cc855d39-b50e-4324-b917-0c4d88580a1d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65dd5a24-f98f-43c4-b332-ed4815e2643a", "sighting_of_ref": "indicator--0d55b192-7a5e-4930-a234-c3305e758260", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2274df-ca71-4e7b-b17a-d69ee5153044", "sighting_of_ref": "indicator--0d55b192-7a5e-4930-a234-c3305e758260", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104d9070-afc8-471a-8bdf-f34643c76e6e", "sighting_of_ref": "indicator--0d55b192-7a5e-4930-a234-c3305e758260", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f703372c-300e-48eb-af64-c7a4c14e57ac", "sighting_of_ref": "indicator--cb24c95e-57e3-4dfc-8c79-da2c2e69e061", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5b22da-570e-4a90-a4a7-10e013f151dc", "sighting_of_ref": "indicator--cb24c95e-57e3-4dfc-8c79-da2c2e69e061", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828a96f6-73d4-49b7-b90c-fceddfa4e301", "sighting_of_ref": "indicator--27a3bec2-f453-43a4-bc9d-328188c1e680", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb41793e-2d1b-4cfd-8ed2-4ef97ca39bed", "sighting_of_ref": "indicator--27a3bec2-f453-43a4-bc9d-328188c1e680", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c8289b-304c-4e1c-a1b6-6ce9a91d9e3c", "sighting_of_ref": "indicator--27a3bec2-f453-43a4-bc9d-328188c1e680", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b70124-32a5-458d-8121-813f09681d63", "sighting_of_ref": "indicator--5983431a-1f88-4e6a-941a-9ebed6362146", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6fb338-784b-4abe-a89f-8fa561c8cccd", "sighting_of_ref": "indicator--5983431a-1f88-4e6a-941a-9ebed6362146", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc863c6e-f411-4602-acf3-9a6e8d13f485", "sighting_of_ref": "indicator--5983431a-1f88-4e6a-941a-9ebed6362146", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431f3926-c6ab-495b-9206-b6614d01372a", "sighting_of_ref": "indicator--3186e1b4-8f25-4e4b-bb08-7e66654f855c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc2afc7-0b8a-4374-b4ca-5d227b059c2c", "sighting_of_ref": "indicator--3186e1b4-8f25-4e4b-bb08-7e66654f855c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4571f675-48d5-4e5f-a324-5e3ff07c6d85", "sighting_of_ref": "indicator--3186e1b4-8f25-4e4b-bb08-7e66654f855c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbd9493-b482-4fc7-ae00-d5866a5b1ec2", "sighting_of_ref": "indicator--e07df1e7-54b0-414b-89b5-5bff7211c74d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de03e19-0ea2-423f-b64d-0024f0ffc791", "sighting_of_ref": "indicator--e07df1e7-54b0-414b-89b5-5bff7211c74d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc475d85-841a-4f56-aac0-8fad1aca7048", "sighting_of_ref": "indicator--e07df1e7-54b0-414b-89b5-5bff7211c74d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086446c5-5520-45a6-9107-ab3e1276bb9f", "sighting_of_ref": "indicator--4c088f68-65e7-4e07-b984-793f734a4f1d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82571593-72f6-490c-998e-26ab89619dc1", "sighting_of_ref": "indicator--4c088f68-65e7-4e07-b984-793f734a4f1d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5ce10d-ace9-4d44-a4af-8689d8fa6b2a", "sighting_of_ref": "indicator--4c088f68-65e7-4e07-b984-793f734a4f1d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66ddb41-ea90-40c2-96ea-afd019582ab6", "sighting_of_ref": "indicator--9cc84bd9-5b19-414a-9209-2fab8dd6a914", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3506f328-8d38-4328-bdf2-7156ec491223", "sighting_of_ref": "indicator--9cc84bd9-5b19-414a-9209-2fab8dd6a914", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4ba1c3-4269-4c68-9c45-ba5acc49b9ce", "sighting_of_ref": "indicator--9cc84bd9-5b19-414a-9209-2fab8dd6a914", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bcf1671-af3b-49f6-bb9a-3be24328c439", "sighting_of_ref": "indicator--ae4c0bc0-0eb8-4639-b78c-9815ec58c246", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bafd3fe-7315-48eb-b47b-12a2abd33637", "sighting_of_ref": "indicator--ae4c0bc0-0eb8-4639-b78c-9815ec58c246", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3df651-70de-45bf-84f2-e9c4ce247c43", "sighting_of_ref": "indicator--ae4c0bc0-0eb8-4639-b78c-9815ec58c246", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814e608f-72b6-4217-a01b-0cc0222d0809", "sighting_of_ref": "indicator--88d305c4-06a2-4acc-a882-6657b3e16079", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0a9544-1444-4117-a83a-95052d4895e8", "sighting_of_ref": "indicator--88d305c4-06a2-4acc-a882-6657b3e16079", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdec94e3-4eff-422d-96f2-c76d838bb36b", "sighting_of_ref": "indicator--88d305c4-06a2-4acc-a882-6657b3e16079", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a272ae39-0e90-4fac-b50c-7ac5de08b673", "sighting_of_ref": "indicator--9b8452d0-984d-4e3a-887f-b717dccd11e4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7157bb01-9cfb-4c13-9e0e-32af7079dad1", "sighting_of_ref": "indicator--9b8452d0-984d-4e3a-887f-b717dccd11e4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61889bb4-1d16-41c0-86ba-363adacaf9c1", "sighting_of_ref": "indicator--9b8452d0-984d-4e3a-887f-b717dccd11e4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75fe8b6-2466-4e91-8569-9f4a395934f3", "sighting_of_ref": "indicator--35177333-d5bb-4dbd-9992-eab4ddd9e9bb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51eff8ee-f465-471a-9b7c-96b0cefde554", "sighting_of_ref": "indicator--35177333-d5bb-4dbd-9992-eab4ddd9e9bb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd18c761-8429-4470-b3d0-24c1e007f34f", "sighting_of_ref": "indicator--35177333-d5bb-4dbd-9992-eab4ddd9e9bb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a464cae6-6864-492d-9b6a-3891a7d4f7b5", "sighting_of_ref": "indicator--5921647d-117d-4309-ab24-27db87c24e88", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3775bdc1-595b-42c5-86d3-a965e42eab78", "sighting_of_ref": "indicator--6a49f4a0-7666-45d2-95c5-2abfaabc4cca", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d54170-46e7-4fb0-93fb-211a817e6263", "sighting_of_ref": "indicator--d9eef14a-0d9c-4b70-b92e-9a1ccba3df33", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c556d73-3853-489a-a1d9-1b840f909949", "sighting_of_ref": "indicator--197f8c1a-bd37-4883-bfae-6241e423381c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e052c0-86f4-4afa-abf4-e7508c3388bd", "sighting_of_ref": "indicator--c138e0c8-d11f-478c-a279-dfd2ede3e46c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b1353f-1488-4c39-ab0d-a9a932756a1e", "sighting_of_ref": "indicator--c138e0c8-d11f-478c-a279-dfd2ede3e46c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337b86f1-657b-4663-8835-a8bcde5bb18b", "sighting_of_ref": "indicator--c138e0c8-d11f-478c-a279-dfd2ede3e46c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ed1f08-01b1-4e85-af91-4977dadcf18e", "sighting_of_ref": "indicator--5caed475-7d2a-4762-8e2b-9b718905e24b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edfd7e9-0d25-4c7d-a2e2-f79ea1164ef9", "sighting_of_ref": "indicator--5caed475-7d2a-4762-8e2b-9b718905e24b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf0e2f9-ef14-4e64-b3c4-1a525a1075e3", "sighting_of_ref": "indicator--5caed475-7d2a-4762-8e2b-9b718905e24b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22d9e10-42e3-43d8-b105-9812765e12ad", "sighting_of_ref": "indicator--4833f5e2-b4d1-471c-afc3-2a9dc4fce07d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91866a66-26c2-4f5f-92dd-a120d15fca1e", "sighting_of_ref": "indicator--4833f5e2-b4d1-471c-afc3-2a9dc4fce07d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b13104-a1e5-4faf-a004-6a18376c8dfb", "sighting_of_ref": "indicator--4833f5e2-b4d1-471c-afc3-2a9dc4fce07d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839f52b0-5661-4569-87bb-2b8c04965ced", "sighting_of_ref": "indicator--67236a86-7d65-493a-bf5d-121653e07bea", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a12a45-d85f-4ee4-aead-aa3f87977856", "sighting_of_ref": "indicator--67236a86-7d65-493a-bf5d-121653e07bea", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16aa272-4a6d-4b0c-a431-0ea2294caf81", "sighting_of_ref": "indicator--67236a86-7d65-493a-bf5d-121653e07bea", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37b09b5-2cba-4825-b179-d026c4fbd0ef", "sighting_of_ref": "indicator--314ccf59-3db0-4ee8-bd78-24b0ccc29275", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36481e51-6835-4cca-9cd6-00b87c42ccc5", "sighting_of_ref": "indicator--314ccf59-3db0-4ee8-bd78-24b0ccc29275", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea28813e-aa48-43a1-bc95-555d816ab43e", "sighting_of_ref": "indicator--314ccf59-3db0-4ee8-bd78-24b0ccc29275", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14e6df8-03fa-4ce9-941c-6202c32764d1", "sighting_of_ref": "indicator--d3c0f2f6-0e3f-4790-9c30-d131abcd7af3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db153e35-1b68-45a0-84da-e320b993dcd7", "sighting_of_ref": "indicator--b0881201-b156-4d4d-bc4f-f4aa373b79e7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea624ff-7f78-4786-84fe-b377c8feedde", "sighting_of_ref": "indicator--b0881201-b156-4d4d-bc4f-f4aa373b79e7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937f2aec-ea9e-45dc-972a-8ac40ea572cc", "sighting_of_ref": "indicator--b0881201-b156-4d4d-bc4f-f4aa373b79e7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94079672-5c33-463b-822f-188a06bb6432", "sighting_of_ref": "indicator--c198f584-17b3-43c7-ae76-a8ab22c0a520", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a893c0e3-c529-44d6-923e-fb1d0b3590b3", "sighting_of_ref": "indicator--c198f584-17b3-43c7-ae76-a8ab22c0a520", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90dd7597-1fde-49ae-be88-7bed12db660a", "sighting_of_ref": "indicator--c198f584-17b3-43c7-ae76-a8ab22c0a520", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2736460a-51ec-44bc-a2ab-848a05a54d52", "sighting_of_ref": "indicator--d69806eb-e4a5-4c44-8f89-07938d29d722", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e4ae10-f861-45f0-a018-7a9c1030e849", "sighting_of_ref": "indicator--d69806eb-e4a5-4c44-8f89-07938d29d722", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96004509-ef56-4178-ba13-0ff1915bebc2", "sighting_of_ref": "indicator--d69806eb-e4a5-4c44-8f89-07938d29d722", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea87e9b-5a49-45ba-a6bb-aa325407a7c0", "sighting_of_ref": "indicator--2e54397d-8d74-41b6-8196-7942512fbfc4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61bf235-d2d8-4eeb-a7a3-a9ccdc70bf68", "sighting_of_ref": "indicator--2e54397d-8d74-41b6-8196-7942512fbfc4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa35d9a-cc4a-49e2-9e0b-aa15a276f66f", "sighting_of_ref": "indicator--8009b908-f1f4-484f-9057-fc03c1f0bac8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc62d510-c0b3-474e-9e92-7b0768cd25b6", "sighting_of_ref": "indicator--84d2e4da-d7c3-4bd2-9ab3-d86d4d65e9f4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe183480-5b30-4773-929a-4d479e3c732d", "sighting_of_ref": "indicator--84d2e4da-d7c3-4bd2-9ab3-d86d4d65e9f4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a2b8f1-0ac7-4e82-bfb7-754bc1225431", "sighting_of_ref": "indicator--674bcdd7-4868-413b-95b8-c1baa68b4820", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8087089-aae4-494a-a8bf-05d59188652d", "sighting_of_ref": "indicator--d61f0f05-4dae-4d80-9550-71b162afe4d3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9c4393-27fe-4d6d-b542-ac58d267de2c", "sighting_of_ref": "indicator--c7caaef8-17ac-4699-a84b-5cf85f1e237d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed543db-3c83-44cf-ad00-eb5bae9578e5", "sighting_of_ref": "indicator--528b2b2f-cc9c-4066-938a-453a23e7b8d2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4d0ea2-7f0a-4286-90cf-f14f3c4d3221", "sighting_of_ref": "indicator--487aedf7-063b-48d9-af2d-0a7e879ea86c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61be745-e1e0-4019-9bd7-f6e7d6dd0e6c", "sighting_of_ref": "indicator--57fd3c71-a236-4dcb-aacd-bbc2248cca09", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747b434b-776a-4d96-8f1d-9d6da7493b81", "sighting_of_ref": "indicator--57fd3c71-a236-4dcb-aacd-bbc2248cca09", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ec190c-18b9-4886-ad00-a5809bf18746", "sighting_of_ref": "indicator--cd68a694-f630-4b32-bb48-64257cc69af8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ddd1cb-3773-4ead-a8f6-104edc574d4f", "sighting_of_ref": "indicator--f8108c6a-f488-42b3-848d-0ec08c022ff5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d27841a-53d8-44a2-aa3d-e5f55c1ea462", "sighting_of_ref": "indicator--f8108c6a-f488-42b3-848d-0ec08c022ff5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b6290d-437d-43a8-8321-f0ad40f0e39f", "sighting_of_ref": "indicator--f8108c6a-f488-42b3-848d-0ec08c022ff5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb8820e-8d82-4d61-88f1-5e54a30825ac", "sighting_of_ref": "indicator--03605ab9-6d73-4a0e-8e08-b718e18bd5a0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306293fb-1749-4fde-9ccc-478d7618eb78", "sighting_of_ref": "indicator--03605ab9-6d73-4a0e-8e08-b718e18bd5a0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06fcd61-ebc1-4c53-84a0-542591cfc614", "sighting_of_ref": "indicator--03605ab9-6d73-4a0e-8e08-b718e18bd5a0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26ac3f9-807d-4c3b-8023-6038f0210593", "sighting_of_ref": "indicator--e18e075a-92d1-48cc-a733-acfb4337d693", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab7cd09-9dbd-4c6c-aa13-ea25e1212c92", "sighting_of_ref": "indicator--e18e075a-92d1-48cc-a733-acfb4337d693", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3197dc54-7411-402b-b677-195b487c6ca6", "sighting_of_ref": "indicator--e18e075a-92d1-48cc-a733-acfb4337d693", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bc6b66-2b9c-47bf-bb06-1f32bd6e7f95", "sighting_of_ref": "indicator--f0d3c519-a282-40da-a474-fe1a4b1d8215", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1da40a-aa9c-4a14-8267-dc7c99bda1a6", "sighting_of_ref": "indicator--f0d3c519-a282-40da-a474-fe1a4b1d8215", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89b4a90-4ae0-4e92-ab0a-450bf0856e06", "sighting_of_ref": "indicator--f0d3c519-a282-40da-a474-fe1a4b1d8215", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593c6024-d0af-40f9-9404-6eb232050937", "sighting_of_ref": "indicator--be5f55df-8e77-4499-9030-de4e591f228e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9053886e-c5b8-48da-a5ff-a7f0fc73f82c", "sighting_of_ref": "indicator--be5f55df-8e77-4499-9030-de4e591f228e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c511411c-3bfb-475e-b282-0cc5bc2a527f", "sighting_of_ref": "indicator--be5f55df-8e77-4499-9030-de4e591f228e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334f0b87-b3e1-4abe-888e-f51a116a9421", "sighting_of_ref": "indicator--33eadbfa-d707-4731-a33f-f7c9a932e807", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc4aba7-bbfd-4172-82cf-424dfeb978f8", "sighting_of_ref": "indicator--33eadbfa-d707-4731-a33f-f7c9a932e807", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295beabf-9a4a-4808-9e7f-b59c59067160", "sighting_of_ref": "indicator--33eadbfa-d707-4731-a33f-f7c9a932e807", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9566b7a-36fa-4faa-bae9-2637f15e2345", "sighting_of_ref": "indicator--672db1f6-df38-477b-a956-584edf47389b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2ccfcc-4cb2-4174-856c-99d1545ddc11", "sighting_of_ref": "indicator--672db1f6-df38-477b-a956-584edf47389b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cf24fe-36f7-4768-adf6-cd3b09afc454", "sighting_of_ref": "indicator--672db1f6-df38-477b-a956-584edf47389b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d34622-5591-4cc4-8db7-5aa7e2c382bd", "sighting_of_ref": "indicator--6ebb799c-bba0-4995-ab6e-9ece128c834b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5ca4ba-c8f4-4511-b69a-5c601895e947", "sighting_of_ref": "indicator--6ebb799c-bba0-4995-ab6e-9ece128c834b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdbdb32-1b1b-459c-8647-175a9f9f6ef6", "sighting_of_ref": "indicator--6ebb799c-bba0-4995-ab6e-9ece128c834b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32832644-0d2a-4866-bdf2-e1e6620e88fc", "sighting_of_ref": "indicator--52f73f99-4e28-4948-880d-ffd76ce95628", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0673ac70-074c-47c1-863f-ac55723abca1", "sighting_of_ref": "indicator--52f73f99-4e28-4948-880d-ffd76ce95628", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a58198-fe65-4715-b7f7-cea65eb31ed6", "sighting_of_ref": "indicator--52f73f99-4e28-4948-880d-ffd76ce95628", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83d226f-005c-4a15-b971-a151850a49ed", "sighting_of_ref": "indicator--25a454ee-cacb-42db-aa83-1e9f300e9f21", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ce8608-2ff1-4061-b07e-ef4977c4e801", "sighting_of_ref": "indicator--25a454ee-cacb-42db-aa83-1e9f300e9f21", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b923176-ef31-4909-b209-d22de170ed0a", "sighting_of_ref": "indicator--25a454ee-cacb-42db-aa83-1e9f300e9f21", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29caf6f6-ee5f-48ae-9073-9bc4738cbff7", "sighting_of_ref": "indicator--9e37a3fa-1849-415c-8ed6-e44df4533e44", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e263e3c-2e15-4c80-b310-babec046c2a4", "sighting_of_ref": "indicator--9e37a3fa-1849-415c-8ed6-e44df4533e44", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2aa580-5a50-43d5-8ff6-d4383e8e6cea", "sighting_of_ref": "indicator--9e37a3fa-1849-415c-8ed6-e44df4533e44", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711129f7-4b2b-4102-b57a-78b790380274", "sighting_of_ref": "indicator--40af70f5-81b4-4fcf-84ae-0fe279c87a5d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10b1fc4-a7e7-4f7a-9b49-74111dbd1d8e", "sighting_of_ref": "indicator--40af70f5-81b4-4fcf-84ae-0fe279c87a5d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc59e12f-06b3-4c4d-a7b2-b6dc97b30aff", "sighting_of_ref": "indicator--40af70f5-81b4-4fcf-84ae-0fe279c87a5d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c3243f-6a8e-482e-bb85-10dec57feb25", "sighting_of_ref": "indicator--c26e12b7-e045-45cf-8f5b-222ba64444b6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7fa55b-64df-44ca-953d-38ecc13cec1b", "sighting_of_ref": "indicator--c26e12b7-e045-45cf-8f5b-222ba64444b6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025d46cd-f056-4395-95c4-2b8cfbd60ba5", "sighting_of_ref": "indicator--c26e12b7-e045-45cf-8f5b-222ba64444b6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce99854a-4d3a-4c39-8313-7ad18550ee1c", "sighting_of_ref": "indicator--b5256dfa-afca-4653-a169-c99c42f6044a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39722e14-003b-4542-94b2-68243b089b01", "sighting_of_ref": "indicator--b5256dfa-afca-4653-a169-c99c42f6044a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40af009-dbb7-4f85-84cc-b021fd16e0dc", "sighting_of_ref": "indicator--b5256dfa-afca-4653-a169-c99c42f6044a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168bf318-ebb9-4cfe-92b6-b15619dc7204", "sighting_of_ref": "indicator--7f4bd605-7916-49d3-b36b-04dae18436fc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5993dbb7-4642-49fb-8ed3-b152670f0de9", "sighting_of_ref": "indicator--7f4bd605-7916-49d3-b36b-04dae18436fc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730dd6a3-b298-411a-b0ba-0f027abe9329", "sighting_of_ref": "indicator--7f4bd605-7916-49d3-b36b-04dae18436fc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfda031c-9dcd-43b5-bf2e-367532d31d28", "sighting_of_ref": "indicator--f7db2ec2-e7ac-45a6-ab55-333fd692ae0d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f1d20d-bcb7-4b85-8c0a-4baee4749cc9", "sighting_of_ref": "indicator--f7db2ec2-e7ac-45a6-ab55-333fd692ae0d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2305f98e-2950-4cae-83b9-92f1a49c1717", "sighting_of_ref": "indicator--f7db2ec2-e7ac-45a6-ab55-333fd692ae0d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673bed77-a7a0-4c73-b5b4-c8a8564e9ef5", "sighting_of_ref": "indicator--dd928237-56c7-4b4d-9a33-05052c279b50", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22168992-1e20-49c7-a425-941cb41eaf5b", "sighting_of_ref": "indicator--aed201e6-85f7-4d48-be35-faceccb6bfec", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80eeee59-dadd-432b-9bae-8846c202dee7", "sighting_of_ref": "indicator--aed201e6-85f7-4d48-be35-faceccb6bfec", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd81941-335d-4f1f-9bc4-d68e15869477", "sighting_of_ref": "indicator--e11b567d-af52-4474-ace6-0e2feeb98130", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7030b473-f18d-4774-bccc-190fd73fabd3", "sighting_of_ref": "indicator--7af252e3-1bef-4076-b204-b0b8830d3043", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696103be-73fe-4a67-81b7-a09122a1f069", "sighting_of_ref": "indicator--7af252e3-1bef-4076-b204-b0b8830d3043", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6608c4e4-e7ae-4504-8b3d-3085291b1d62", "sighting_of_ref": "indicator--7bc9608d-71c3-4cbe-a305-9d8e8d62406a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c9da62-b618-4f7a-a077-f687037d8573", "sighting_of_ref": "indicator--484f6550-1ca8-4d9c-ae3b-1972ea45a059", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89555c01-7765-440e-baa9-efb2d96d9df4", "sighting_of_ref": "indicator--a7510215-8d9e-495e-b5e4-20fa7eb0e90e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8c3faa-4b40-4f90-b631-0448bc9fa85c", "sighting_of_ref": "indicator--52e2ea2a-5b86-4e57-b8b0-5a7235ae094e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbd526d-85d4-4e39-a74a-bb7216f5d7fa", "sighting_of_ref": "indicator--b817fe0c-d594-46bb-b8d6-7e6f2f532de5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c448c0-e9b8-460e-bfea-7eee52a3f8e8", "sighting_of_ref": "indicator--05492632-a249-4d8b-a8bd-03f9dbe85f92", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8947c241-7318-4ae3-902f-ac2dcf51143b", "sighting_of_ref": "indicator--acce7796-b655-486e-90f9-a0f0228f5736", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cfcf68-c2bc-4a00-a9bc-0e7ddf34918d", "sighting_of_ref": "indicator--cb61b463-f222-4ca1-a150-44d76b39dd46", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97834b83-3b23-4031-b941-9c9cb7fdf545", "sighting_of_ref": "indicator--055b4de4-7b50-4b02-8d19-908a2b1fb00d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221f3e37-86fd-473e-90a6-395af91a32f5", "sighting_of_ref": "indicator--c948b8f2-54b8-453d-82af-6f835e6ad395", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b749cb-e118-4222-8a31-9b047867e769", "sighting_of_ref": "indicator--028b0f4b-b435-4849-a271-f0c060be5388", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3bd33f-d94a-4a0f-b1b5-870413a0fadf", "sighting_of_ref": "indicator--2b428b6c-3e69-4772-b2db-dda8a62d6b21", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4b4e0e-a18f-4c70-88bb-74716589a7fb", "sighting_of_ref": "indicator--b6100e2b-36f3-4b88-b35a-3c48dcd5c75f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4987a6ff-8e4c-479d-90d7-64d81b49674f", "sighting_of_ref": "indicator--b6100e2b-36f3-4b88-b35a-3c48dcd5c75f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def08b6c-2b24-4bf6-8283-392c47a7a73f", "sighting_of_ref": "indicator--30cf8e4c-231b-4968-b26d-91fd90d3da3d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d25b61d-7076-42af-a4b5-72897a546cc7", "sighting_of_ref": "indicator--30cf8e4c-231b-4968-b26d-91fd90d3da3d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927b19d0-c200-437a-bc33-d76b57a0e0b0", "sighting_of_ref": "indicator--1e0292ad-c337-49d2-b9f3-a8c630fceef4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5a8d65-ae52-40e5-8d85-f3b50711d6d8", "sighting_of_ref": "indicator--1e0292ad-c337-49d2-b9f3-a8c630fceef4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7962a6-d875-4d3a-b292-0bdb3885369d", "sighting_of_ref": "indicator--0974e8b3-427e-4cc9-8820-ea9ca95cd35e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a6cc6b-3f02-4593-a9ec-fbc27197b1f0", "sighting_of_ref": "indicator--bb2cff4a-eda0-488e-a8ca-a997e27093a8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007cf612-d14a-4f6f-bce9-1bd29c07eb39", "sighting_of_ref": "indicator--bb2cff4a-eda0-488e-a8ca-a997e27093a8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2aa970-de5b-46b9-9ab3-16becc21ac81", "sighting_of_ref": "indicator--bb2cff4a-eda0-488e-a8ca-a997e27093a8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf023f7d-6f10-4ab0-9ee4-f2e9a182fec8", "sighting_of_ref": "indicator--aa93a21a-ea8f-47b1-b2a5-a05962f6ab79", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6323e8-5178-4794-b1ed-ca7ebfb354dc", "sighting_of_ref": "indicator--25764a31-c966-41a9-814e-97e17d0e4af1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8be271-7445-4c33-9ae0-75d10bbcfeae", "sighting_of_ref": "indicator--dc51811f-cf9d-49b2-9680-6f6eed7cc261", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eec6a2a-79e6-4ac8-8094-15ed33b92205", "sighting_of_ref": "indicator--aca799f5-1309-4f62-8634-d2276a354197", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acaeb3a1-9cb1-41d8-b997-debb7d70c7bf", "sighting_of_ref": "indicator--66fe2e03-9253-44ff-afd2-7c5f2f567034", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3044a2ab-1c04-4dfb-b4e2-129773f23098", "sighting_of_ref": "indicator--704a9300-f7a5-4fb7-b5f9-2278bcf76bd3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63d787e-6b79-492c-b27a-ef933f0dc6ef", "sighting_of_ref": "indicator--6adf3cce-deb3-43d2-8c43-348c6222cb66", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aaba222-7b4e-4e6b-a515-84f4ca74f697", "sighting_of_ref": "indicator--c6942f65-2d56-4104-a2df-cbeeff1519cd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcd9652-9534-4e3f-a0e1-ac19a39bf9a2", "sighting_of_ref": "indicator--4f0586c4-dec9-4e47-9a6f-aababcaa32a3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3181aec8-6846-4bee-aa03-80051d8d2a07", "sighting_of_ref": "indicator--fcabcab6-bc4e-4910-97b5-82924ab6283f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f232fc-a961-492f-bf02-b7ef95c9fc06", "sighting_of_ref": "indicator--6da4a83c-7901-45dd-9aa4-84d3305b18d8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c42e57-9bff-460a-8257-0acf873db1b6", "sighting_of_ref": "indicator--f74890f4-99d9-4124-b34f-543e8bd568c7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5ba04e-e49e-48f5-a955-ce2931dfb6c8", "sighting_of_ref": "indicator--671c7e45-99c4-4c80-8005-467b8c4223f4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c108cf-dc7b-40b0-8151-6fecf8dfe93f", "sighting_of_ref": "indicator--052a7818-6a40-4334-bc2e-bbd62614f5fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9ea948-bd61-4603-b611-326c879c5a8a", "sighting_of_ref": "indicator--6ff4b0ac-43da-4503-b5ba-7e6d6d490edd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28fbee77-2795-4830-821f-3cebbc5bc968", "sighting_of_ref": "indicator--6ff4b0ac-43da-4503-b5ba-7e6d6d490edd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521e7007-1dae-44b6-8bf1-690c52ce81b3", "sighting_of_ref": "indicator--a93409e0-a201-4d49-a26b-71d32381b857", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4954be4b-c1ce-470b-84e4-ee10dd7788c6", "sighting_of_ref": "indicator--a93409e0-a201-4d49-a26b-71d32381b857", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e81434c-3931-407a-8c18-b0ed0adedc7b", "sighting_of_ref": "indicator--8067cee3-f5ff-4cb8-8456-b40f669bce74", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ca9e07-15be-4cd8-a566-7138bd9db987", "sighting_of_ref": "indicator--8067cee3-f5ff-4cb8-8456-b40f669bce74", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9154262-1ecd-4398-9953-232f50dbe37b", "sighting_of_ref": "indicator--2d102188-0fa6-4db5-930a-5f1173ee2326", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7302a68-4f10-4ec4-ac24-c0655bbc3dd3", "sighting_of_ref": "indicator--eb9a9b0b-d0b3-4f99-bf3f-c81d9124174e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488bec50-ee78-417f-afc4-268a7fc903af", "sighting_of_ref": "indicator--eb9a9b0b-d0b3-4f99-bf3f-c81d9124174e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537f9259-b1da-4969-bebf-cf1d3892360f", "sighting_of_ref": "indicator--6ee6c182-2d2a-414d-bcdd-ce07d10da37a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e3525e-31ab-49bf-a262-c4608ab63383", "sighting_of_ref": "indicator--6ee6c182-2d2a-414d-bcdd-ce07d10da37a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946f6423-bb42-4ca5-84ae-b08e7ee786bc", "sighting_of_ref": "indicator--6ee6c182-2d2a-414d-bcdd-ce07d10da37a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc32d67-e5f6-447f-9e71-3816935abd8b", "sighting_of_ref": "indicator--81ab69a7-1097-48e3-b7cb-66754c70999c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f444ea-c3ec-4f40-9857-7235c5d07ef9", "sighting_of_ref": "indicator--d61cba58-72fa-4a6f-a8b7-21404a37374b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbd03ce-1256-4599-adb3-3aba3baa1fff", "sighting_of_ref": "indicator--842fa80c-5195-496f-ac2b-37b1c157a5bf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a36c7ad-3668-4680-91b3-2b16cd8b4acd", "sighting_of_ref": "indicator--0e406a34-775e-480a-8b1b-6a9620eff8c4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebc17f3-2d1e-4663-bc7c-7d9a19b5dd29", "sighting_of_ref": "indicator--bdc60d77-e15b-4bb9-89b0-b8672212e2fb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca114c4-7035-4519-87d7-911091e82ad8", "sighting_of_ref": "indicator--bdc60d77-e15b-4bb9-89b0-b8672212e2fb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5bbda9-a783-484a-a0fc-561d255dc721", "sighting_of_ref": "indicator--bdc60d77-e15b-4bb9-89b0-b8672212e2fb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf502dd-3f23-4672-9372-c921d8a0567f", "sighting_of_ref": "indicator--26f46375-d424-4217-9876-2e54cf911683", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c482bb8-6af2-4fcf-ba54-a6b9f29f5f82", "sighting_of_ref": "indicator--26f46375-d424-4217-9876-2e54cf911683", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1925caee-a069-4c6c-baf8-c72d2518e07f", "sighting_of_ref": "indicator--26f46375-d424-4217-9876-2e54cf911683", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c10aa7-4cd7-4ea0-89e6-6c18d1d07630", "sighting_of_ref": "indicator--79d5043b-d317-4a01-81a1-3d8243702619", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6057b166-d6e7-48d7-8ca6-336b8d70affb", "sighting_of_ref": "indicator--79d5043b-d317-4a01-81a1-3d8243702619", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2660961-161b-458b-b116-98b61af15c40", "sighting_of_ref": "indicator--bc05f90d-236d-4b1b-84bf-0f9cff1964b5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7cf8f5f-ba7c-49c5-921e-a9740f59b737", "sighting_of_ref": "indicator--bc05f90d-236d-4b1b-84bf-0f9cff1964b5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b78db84-ddd6-4889-b6f9-899b72d61614", "sighting_of_ref": "indicator--b35e313b-a219-49f8-8fea-10c1235abc00", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56852263-13ec-473c-a126-d9d69456d06b", "sighting_of_ref": "indicator--b35e313b-a219-49f8-8fea-10c1235abc00", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0fe29b0-4b2e-4de1-aee6-eef683e48d4f", "sighting_of_ref": "indicator--b35e313b-a219-49f8-8fea-10c1235abc00", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52bbae5-ad18-4bc2-a75d-de612e2b7d6e", "sighting_of_ref": "indicator--a0460bd0-7a82-45f9-9a40-942788fa1ee6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354bef64-b73e-44a3-a275-7186f0b725af", "sighting_of_ref": "indicator--a0460bd0-7a82-45f9-9a40-942788fa1ee6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2434bb4-2f95-4f74-a710-b561e5cab76d", "sighting_of_ref": "indicator--a0460bd0-7a82-45f9-9a40-942788fa1ee6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9d9075-3b3d-4f3b-8899-7201c3f2af76", "sighting_of_ref": "indicator--24e02a31-fbf5-497e-844a-d596ec836dd9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8611af2-a51f-4e78-9425-5dbb9cab9fba", "sighting_of_ref": "indicator--24e02a31-fbf5-497e-844a-d596ec836dd9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5438f441-f295-4e82-9f05-5e73605b88c5", "sighting_of_ref": "indicator--24e02a31-fbf5-497e-844a-d596ec836dd9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec8bd00-ed16-44e0-9aa4-d3ff19453589", "sighting_of_ref": "indicator--8902d236-2a7c-46e7-8e88-5b743733c995", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186484ed-d776-4077-8d54-c62fcdd3dd45", "sighting_of_ref": "indicator--8902d236-2a7c-46e7-8e88-5b743733c995", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b5aa7c-744e-4c7f-a30a-f5bda431a59b", "sighting_of_ref": "indicator--8902d236-2a7c-46e7-8e88-5b743733c995", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0859e9-9cf3-482e-bc41-abaab43cd6be", "sighting_of_ref": "indicator--668d9ea5-807b-4113-9a42-ded4b095a270", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e554d05a-8b6f-401e-a6d9-f56d8e6b9772", "sighting_of_ref": "indicator--668d9ea5-807b-4113-9a42-ded4b095a270", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0600bf-54c0-4287-b609-9b1331354f9c", "sighting_of_ref": "indicator--668d9ea5-807b-4113-9a42-ded4b095a270", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d231ab55-cbd6-4cf6-92d4-3884324f414a", "sighting_of_ref": "indicator--2e894594-19fb-4dc1-a9d3-4fb4bcffa59d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866d228a-c4d9-4142-badb-01d1f1e0143a", "sighting_of_ref": "indicator--2e894594-19fb-4dc1-a9d3-4fb4bcffa59d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f11519-8d93-4945-8288-98391bfb4e6e", "sighting_of_ref": "indicator--2e894594-19fb-4dc1-a9d3-4fb4bcffa59d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a69876d-bc28-4af4-b3fa-6484536a6b0d", "sighting_of_ref": "indicator--ffbbfe5b-c586-4b6a-88d2-ff8a1c0b9493", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ec2f44-1365-435e-b710-062e43d2ea3e", "sighting_of_ref": "indicator--ffbbfe5b-c586-4b6a-88d2-ff8a1c0b9493", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2377b860-af06-4146-825b-d2d23be90ad7", "sighting_of_ref": "indicator--ffbbfe5b-c586-4b6a-88d2-ff8a1c0b9493", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b60aa1-9a30-43b9-83b6-fe894ba9b08a", "sighting_of_ref": "indicator--125b07d1-435e-4c2c-b056-a08c0dbbc97d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dab368a-904f-4eb2-b42a-4563bae46987", "sighting_of_ref": "indicator--125b07d1-435e-4c2c-b056-a08c0dbbc97d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd97901-3f1d-480c-bbc8-d27d9e8799fc", "sighting_of_ref": "indicator--125b07d1-435e-4c2c-b056-a08c0dbbc97d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a4893b-fa99-48bc-8a3e-df96006a8a1e", "sighting_of_ref": "indicator--e8cd9555-2ce5-4ef4-9622-94d8580dc10d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec3df06-eefd-4217-91e1-055a74bdb079", "sighting_of_ref": "indicator--e8cd9555-2ce5-4ef4-9622-94d8580dc10d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcca76c-075d-4627-83c0-23c753654c48", "sighting_of_ref": "indicator--e8cd9555-2ce5-4ef4-9622-94d8580dc10d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5ba2fd-c49c-43b3-ab3c-3ad4d1f40ead", "sighting_of_ref": "indicator--2e04c2e4-a1b6-4331-b4a9-c19a3b641cbc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d023eb8b-9538-4f24-ae44-7bf8098154be", "sighting_of_ref": "indicator--2e04c2e4-a1b6-4331-b4a9-c19a3b641cbc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05b3f74-67fb-49c3-a933-760942dfad84", "sighting_of_ref": "indicator--2e04c2e4-a1b6-4331-b4a9-c19a3b641cbc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a94672d-6a0b-4ceb-a306-4d5a35e24d13", "sighting_of_ref": "indicator--d5debc57-e6fd-4fb4-8984-0307bb1dcf34", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c171461-87bc-45ec-a008-8248bfcfea3d", "sighting_of_ref": "indicator--76b8ced4-0dc9-455d-9ec3-a00379a982fb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360ae773-362f-4e62-ae0e-f89826cd64cf", "sighting_of_ref": "indicator--76b8ced4-0dc9-455d-9ec3-a00379a982fb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd78e1f-5030-4fba-a771-3fe5a8ef77d6", "sighting_of_ref": "indicator--338ecf91-f6aa-4fbc-96da-1845346dbed8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbd9c44-b8cf-4dfd-acda-241cb61f7cf9", "sighting_of_ref": "indicator--a6a24c0a-441e-45fa-be4f-aabbef2175bf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fbc1b5-012f-400a-8d39-5e22d6c497de", "sighting_of_ref": "indicator--9651fd24-a815-462d-9009-e82748c739e2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c5765d-399b-4d2b-a5e3-7523f349bd41", "sighting_of_ref": "indicator--2e59c5d6-61ac-4cf3-84c6-15d8eb65e4ad", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcf95c8-ae61-4bab-883d-3f499a44f7a4", "sighting_of_ref": "indicator--2e59c5d6-61ac-4cf3-84c6-15d8eb65e4ad", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bbf5c4-5843-473a-976d-e80ccc144410", "sighting_of_ref": "indicator--2e59c5d6-61ac-4cf3-84c6-15d8eb65e4ad", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec2a13c-b525-4046-a520-d9ca4aa10f86", "sighting_of_ref": "indicator--377532c2-afa8-4438-8d7f-e25bd55ac176", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e8ed3a-56d9-4528-9c82-0407c50523ef", "sighting_of_ref": "indicator--377532c2-afa8-4438-8d7f-e25bd55ac176", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87549e09-f9c3-48f9-8b82-32107594fc3d", "sighting_of_ref": "indicator--377532c2-afa8-4438-8d7f-e25bd55ac176", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50bdcf64-1290-4bba-95c8-197f61aa35fd", "sighting_of_ref": "indicator--f2be2f3a-6776-4ee3-a94f-64e8bb07cd89", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1459b777-f00b-48f6-bb92-aefc11f484be", "sighting_of_ref": "indicator--40c3ad00-0dcf-480f-83a7-2be16690f01c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6445435-e5d4-42f5-b02c-9caf83c89ca2", "sighting_of_ref": "indicator--95b3d731-a16e-4a92-9d07-11c3502059e3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8afadcd-b328-4735-a6c1-d96226a03e21", "sighting_of_ref": "indicator--1a530e05-881e-4311-9179-585b65d1232d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66099806-c8fa-4285-8e6b-5ac92b736c98", "sighting_of_ref": "indicator--78a0ebdf-4151-47ba-be0e-b2303a5943e9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6511592-679d-4b32-97ca-06e2c1adce70", "sighting_of_ref": "indicator--78a0ebdf-4151-47ba-be0e-b2303a5943e9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ade0844-378e-4dfd-aff1-fae0fd034c67", "sighting_of_ref": "indicator--5cbe7083-1ed7-468a-a418-33eec036dd29", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0be995b-a409-4e05-92e7-c6986ff557da", "sighting_of_ref": "indicator--c3f7a886-80fe-489a-baef-ab2300dfe089", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff9392f-8345-4069-8be3-756ce564418b", "sighting_of_ref": "indicator--ba60702b-b12b-41b1-b7af-bade1aea1fa4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b29aa3e-fbb7-4780-b0e8-024448f9bf92", "sighting_of_ref": "indicator--f7b87af5-8353-4ab5-b2f0-d8d45d245880", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929256c7-b546-4d35-bf43-1f892d776390", "sighting_of_ref": "indicator--3e0d8eab-680c-48ba-a9a7-322e5f56cb0b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43b947f-0d6f-4671-8f1a-1632186df740", "sighting_of_ref": "indicator--3e0d8eab-680c-48ba-a9a7-322e5f56cb0b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501b1174-c6a2-4d49-872a-01ef64d56650", "sighting_of_ref": "indicator--19ef190e-0d93-4676-a878-400ef6a26889", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb7a2ab-383e-47c5-8f50-7ee9d6df0098", "sighting_of_ref": "indicator--68c6272e-1e21-4928-84c7-585933b0c250", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721abe43-e779-425a-8a60-146659c8e589", "sighting_of_ref": "indicator--f5a71c07-2ac0-4420-80a0-7d069ab7501a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9881ff3-3131-4a57-823f-104f8e0319c0", "sighting_of_ref": "indicator--f5a71c07-2ac0-4420-80a0-7d069ab7501a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c5b9b5-f651-4142-858a-1711617118f4", "sighting_of_ref": "indicator--864a69a3-6055-46d0-a5ed-9e45b642cd84", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420c9e1b-1528-46b4-a6e7-04bccd423599", "sighting_of_ref": "indicator--a71cef75-7e08-48b2-aba0-033ade08c257", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e26aad-c278-4917-a439-df03ffa62896", "sighting_of_ref": "indicator--40d1d031-3218-45b8-8502-87aefeb9f95e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8be5230-c31e-4bf0-91f7-e4a360a668fe", "sighting_of_ref": "indicator--b5c0baec-814c-4541-8bba-1a7dc036ee88", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfb6366-8209-4d0d-9d73-c751a0ab74e0", "sighting_of_ref": "indicator--fe5827af-f97f-4c0f-ba2d-79b87a45c99e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7530d1e9-fce8-43cb-84db-e21deb98b359", "sighting_of_ref": "indicator--fe5827af-f97f-4c0f-ba2d-79b87a45c99e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3eea7a5-6f57-4aa1-b4f8-2fc740b803fd", "sighting_of_ref": "indicator--fe5827af-f97f-4c0f-ba2d-79b87a45c99e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd52d7a3-7770-4161-8716-44fa715308e1", "sighting_of_ref": "indicator--0041ecfe-bd40-44f1-99f6-a867f221335e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc2350b-b737-45e9-906a-dc22bab4e7bf", "sighting_of_ref": "indicator--0041ecfe-bd40-44f1-99f6-a867f221335e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bed410-9646-4f1d-a70d-a7af84de247f", "sighting_of_ref": "indicator--1e494f59-8c65-472e-a0fc-612a9f6aae6f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1bab25-f869-49fc-8fae-78fe61373b21", "sighting_of_ref": "indicator--1e494f59-8c65-472e-a0fc-612a9f6aae6f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7955011e-c7f4-4e2a-af44-97e707f395bd", "sighting_of_ref": "indicator--1e494f59-8c65-472e-a0fc-612a9f6aae6f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4aa7ba8-b9e4-4179-8c41-1f763eea6457", "sighting_of_ref": "indicator--d8c15caf-b75e-40a7-85b8-ea89337de38e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1616b35e-0207-41ea-a529-65c24a4ed99b", "sighting_of_ref": "indicator--4f60afb5-6474-4c40-b6a2-bcc6e4a04a72", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a17bd5-d77f-4782-b09b-6dafc9c4cbcd", "sighting_of_ref": "indicator--50c334bd-9ed2-4b3b-ac3b-f6755ab9cc2b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0792c478-efae-4b44-81d4-4f5a4ce44da8", "sighting_of_ref": "indicator--50c334bd-9ed2-4b3b-ac3b-f6755ab9cc2b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c6b533-5160-4076-ac82-483c5cdbd7d5", "sighting_of_ref": "indicator--50c334bd-9ed2-4b3b-ac3b-f6755ab9cc2b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2ede3b-9aec-4eb9-b162-cf319ea209ed", "sighting_of_ref": "indicator--954e717a-4167-4366-adbd-2e89ec693594", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3fe579-007f-4a97-9954-c5c3c0e227e0", "sighting_of_ref": "indicator--954e717a-4167-4366-adbd-2e89ec693594", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40b7dd8-4151-42ae-831c-dad8c31fc49a", "sighting_of_ref": "indicator--cc183784-a0e4-4f43-b8fd-ea8f8dc03f97", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de4a52a-5d0d-437c-aa77-1949e920b410", "sighting_of_ref": "indicator--5c95e355-313a-4d4e-8e01-a7eaed3ab4fa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec014f76-89e5-4826-9400-75e250f1e35b", "sighting_of_ref": "indicator--5a1b6827-9f7b-4f28-9517-14aa042ccaad", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa60e5b-8617-4835-8bc5-768247d24e8e", "sighting_of_ref": "indicator--3bd31ebe-2ccc-44ca-9e32-fb267d842e44", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af275bce-74fe-4bbe-9692-2276d42e005a", "sighting_of_ref": "indicator--28bb9f78-53e8-4b65-be6c-cda293f43b46", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa36591-9e32-4ec9-8cb2-043bb178eb34", "sighting_of_ref": "indicator--7bf4d333-4e46-4503-8fdd-c204ae971ab3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a9e6bb-0f2a-48a9-a9c1-77f1663d1f32", "sighting_of_ref": "indicator--fc3b5e32-bb01-4e03-9beb-95c417c158b9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b227719-c3e1-4554-9eba-94030d3d2adf", "sighting_of_ref": "indicator--8eeae703-3eda-4ddc-9b97-11cbbcc0f016", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe168b7-bbde-447a-8ecf-a926fad5e656", "sighting_of_ref": "indicator--d87e29ac-a53c-42a4-a8bc-b637fa132755", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a6f4f2-330b-4093-bf79-a3b4476490dc", "sighting_of_ref": "indicator--d87e29ac-a53c-42a4-a8bc-b637fa132755", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265ee719-9927-4ca9-9aa0-6f06f4d67239", "sighting_of_ref": "indicator--d87e29ac-a53c-42a4-a8bc-b637fa132755", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4432798-d1a1-4b9b-b6de-e313686a6d61", "sighting_of_ref": "indicator--b4f0f620-550b-4f67-8035-bab971b9141d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2ae0a0-fbd1-4349-90f6-73b9411be249", "sighting_of_ref": "indicator--b4f0f620-550b-4f67-8035-bab971b9141d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84476b8d-17e0-476b-aa22-a2a5481fc5ed", "sighting_of_ref": "indicator--b1572fe6-fc21-4e2b-9d31-1ae99972f347", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f48689-028c-469d-ade2-f45d60dacec1", "sighting_of_ref": "indicator--b1572fe6-fc21-4e2b-9d31-1ae99972f347", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29dc36e8-eb37-4305-bec8-837f322021ce", "sighting_of_ref": "indicator--b1572fe6-fc21-4e2b-9d31-1ae99972f347", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382e0601-0f4f-4403-8427-5a68f34b105e", "sighting_of_ref": "indicator--5a535cba-7834-4154-b3d5-ad468ce0ba27", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d091ec7-78c1-44f5-b555-a38a0845180c", "sighting_of_ref": "indicator--5a535cba-7834-4154-b3d5-ad468ce0ba27", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2729e24d-0690-4463-b0b5-050e0c0ae379", "sighting_of_ref": "indicator--5a535cba-7834-4154-b3d5-ad468ce0ba27", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28cce96-2472-4491-b85e-df8c745803eb", "sighting_of_ref": "indicator--8892ee20-86cb-4f7e-87c4-af3b26d1d394", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903c90d0-4b49-46fe-8322-25305dc303b0", "sighting_of_ref": "indicator--8892ee20-86cb-4f7e-87c4-af3b26d1d394", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85697f0-d8eb-4a52-bf8f-daf49aecd814", "sighting_of_ref": "indicator--8892ee20-86cb-4f7e-87c4-af3b26d1d394", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e3ad9b-14fb-4c31-9411-6cc4c2493eab", "sighting_of_ref": "indicator--8892ee20-86cb-4f7e-87c4-af3b26d1d394", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8252b3-07e2-43dc-956c-9af60097d1a7", "sighting_of_ref": "indicator--8fb374e0-a879-4ffd-9c0a-23010e0a3cce", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d7ae23-55f5-4e85-a29a-30350df585f1", "sighting_of_ref": "indicator--56e00d9c-f07b-4498-937e-3c0ef82cd990", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd216f0-65ee-4551-be98-40fd2b6d5e33", "sighting_of_ref": "indicator--56e00d9c-f07b-4498-937e-3c0ef82cd990", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2909176b-844d-4adf-ae41-ad87d966e547", "sighting_of_ref": "indicator--670bc9e3-9ce9-41ab-a1a5-fb21a094f06b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fa2626-f1b1-4975-92bf-fedc31d916cc", "sighting_of_ref": "indicator--670bc9e3-9ce9-41ab-a1a5-fb21a094f06b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db299a50-f2e5-4878-ad80-800fea8e2dad", "sighting_of_ref": "indicator--670bc9e3-9ce9-41ab-a1a5-fb21a094f06b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee19b64e-b8f6-4ce7-b366-bf138de08a0d", "sighting_of_ref": "indicator--050c81c6-5312-4ec9-b967-517a56df1b60", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39296063-2b81-4a73-a549-bbb0833c9da6", "sighting_of_ref": "indicator--050c81c6-5312-4ec9-b967-517a56df1b60", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00fb55d-6113-464c-898e-9807c764fd89", "sighting_of_ref": "indicator--050c81c6-5312-4ec9-b967-517a56df1b60", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471f43ba-14e8-438c-90d6-3df4935454d2", "sighting_of_ref": "indicator--b55f0fbb-fe9a-41c5-8dfa-eafde0599178", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155dc8f5-90e4-430d-aa1f-f966311ceb14", "sighting_of_ref": "indicator--b55f0fbb-fe9a-41c5-8dfa-eafde0599178", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92421bb-5db5-4487-821b-fadb4fa87ac4", "sighting_of_ref": "indicator--0d96533b-4a40-4ad3-add7-0d5f716f73ac", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3bffc5-643f-4de4-abf7-b27754678f98", "sighting_of_ref": "indicator--6d52e638-5297-49bf-8711-ca342abd1169", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f55fc16-6cce-4abb-948a-6023ec43cba2", "sighting_of_ref": "indicator--6d52e638-5297-49bf-8711-ca342abd1169", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68867a66-024f-493c-903d-f9304521df28", "sighting_of_ref": "indicator--6d52e638-5297-49bf-8711-ca342abd1169", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a0d2aa-5909-4f61-8091-43772797d15a", "sighting_of_ref": "indicator--c79f04b5-7cc9-4c21-b780-0dbcb807a213", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de7ad1a-c5c0-4586-9708-6265410a1b7d", "sighting_of_ref": "indicator--a50d29db-221a-4979-8e21-4656a2ade442", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a41191e-cc4f-432a-921d-02b9468ed516", "sighting_of_ref": "indicator--a50d29db-221a-4979-8e21-4656a2ade442", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aee32c6-f39e-4920-b417-d87e21ad6550", "sighting_of_ref": "indicator--495186ce-f578-42c9-9854-ffa8e6d8b046", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb9e5f0-5244-4d9d-b1f7-8fa3e72326e6", "sighting_of_ref": "indicator--495186ce-f578-42c9-9854-ffa8e6d8b046", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ad059d-df3c-4efc-89a4-ae63abe16c49", "sighting_of_ref": "indicator--495186ce-f578-42c9-9854-ffa8e6d8b046", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7d880d-3bf0-477c-8327-eb8960174bfa", "sighting_of_ref": "indicator--80556c90-da12-42c1-ad7d-7d448b4ef085", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9433eff7-7408-4b53-a46f-bcb0ce7be3b9", "sighting_of_ref": "indicator--b426d28f-06e9-4005-9408-cbb230242fda", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2ba711-25e0-4db9-a0b3-ca56c0441b4f", "sighting_of_ref": "indicator--d2ebdf4c-6c4a-448d-a987-3352deb1abfe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d07973-6a07-4fdb-8f50-e8185c1a2be0", "sighting_of_ref": "indicator--d2ebdf4c-6c4a-448d-a987-3352deb1abfe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0320b7-efb3-4239-81ad-a7abc027f4a7", "sighting_of_ref": "indicator--d2ebdf4c-6c4a-448d-a987-3352deb1abfe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a9a613-9331-40da-9720-02cdc7181bf1", "sighting_of_ref": "indicator--0e86ff00-d21f-4ae1-8151-d33af1a85094", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e89d0e-e366-4dab-b43e-b632e37a09b9", "sighting_of_ref": "indicator--0e86ff00-d21f-4ae1-8151-d33af1a85094", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21f1f65-33f9-4892-9f6d-5ec74affc194", "sighting_of_ref": "indicator--0e86ff00-d21f-4ae1-8151-d33af1a85094", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04134a27-2934-4013-b72c-ad123e29f8e8", "sighting_of_ref": "indicator--43ca4549-a960-4c27-bc05-06cee1a6ca2d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627b1d09-5969-454d-ac32-c81429a08c2e", "sighting_of_ref": "indicator--43ca4549-a960-4c27-bc05-06cee1a6ca2d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e3cf7e-a510-4718-b0bd-af9df5908326", "sighting_of_ref": "indicator--43ca4549-a960-4c27-bc05-06cee1a6ca2d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f366bb30-ea0a-4802-b9cf-1c6c4110e9c7", "sighting_of_ref": "indicator--c5be9d38-4b89-4ec8-9637-091412eee562", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc71fec-fd53-4a49-8ea8-3c5e3694afe4", "sighting_of_ref": "indicator--bfa8d5ea-7920-4c2f-b5ad-66b18684e3a4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac72c54e-d35d-4e30-9cf4-50ffc1f81f39", "sighting_of_ref": "indicator--bfa8d5ea-7920-4c2f-b5ad-66b18684e3a4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e44690f-1b36-4461-abeb-7459cf9d2f40", "sighting_of_ref": "indicator--bfa8d5ea-7920-4c2f-b5ad-66b18684e3a4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2820b32-0d32-4b43-9649-dcee6c071eb5", "sighting_of_ref": "indicator--f08f8d95-cd70-46c4-aff0-e2702387b4c4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad360fc5-6785-4df9-bf35-16d33d870fb2", "sighting_of_ref": "indicator--f08f8d95-cd70-46c4-aff0-e2702387b4c4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4aeb63c-fd44-4257-842f-e3546ab7d456", "sighting_of_ref": "indicator--f08f8d95-cd70-46c4-aff0-e2702387b4c4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46dafb2-0bb2-4e74-8599-d57cca4e9fef", "sighting_of_ref": "indicator--8a126538-e6e0-43e2-9e01-4d4c3fc8eb2a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea972aa-424c-419e-8b19-8e75baee00ad", "sighting_of_ref": "indicator--8a126538-e6e0-43e2-9e01-4d4c3fc8eb2a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab7865c-d221-4dae-9b2d-31341fdf1f14", "sighting_of_ref": "indicator--8a126538-e6e0-43e2-9e01-4d4c3fc8eb2a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a900a6d5-b1a8-4591-ae99-adb2726737c1", "sighting_of_ref": "indicator--3d24c361-46e1-4071-b1f1-5db8354f0780", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf2bb0d-0c68-455a-b6d5-ae1487322ce9", "sighting_of_ref": "indicator--3d24c361-46e1-4071-b1f1-5db8354f0780", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3632e11-fb53-43e5-9947-7c90c0a1c39b", "sighting_of_ref": "indicator--3d24c361-46e1-4071-b1f1-5db8354f0780", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8ccee1-451a-400d-85dc-3b002f3ce734", "sighting_of_ref": "indicator--7a8f1630-9c6b-4fe2-adbe-e4bd17227673", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad9e184-dbbe-4b26-9bdd-a01d564eceb9", "sighting_of_ref": "indicator--7a8f1630-9c6b-4fe2-adbe-e4bd17227673", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32630522-af21-445c-b9e8-df2b85449c74", "sighting_of_ref": "indicator--40357ec6-60d7-4ff3-b262-e30fad9b72fd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0ecfd6-10ad-47dd-9acd-e81a5ae5100d", "sighting_of_ref": "indicator--40357ec6-60d7-4ff3-b262-e30fad9b72fd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4d1ac7-00b5-4d22-ae26-3b5bba5f80ed", "sighting_of_ref": "indicator--b949d978-93c1-40ad-b9b4-421331fb95d9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1832a08-2bfe-4dbe-8709-9c81240fe5ce", "sighting_of_ref": "indicator--b949d978-93c1-40ad-b9b4-421331fb95d9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c18e9d5-e7c8-486d-93e6-96ad98d7626a", "sighting_of_ref": "indicator--b949d978-93c1-40ad-b9b4-421331fb95d9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a0b876-20c9-4341-bd0b-d83f50bc25e6", "sighting_of_ref": "indicator--4a7fb3dd-85a9-4aa7-871d-4b24cc367ad2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b3daa1-a78d-46a4-b758-538be56d5420", "sighting_of_ref": "indicator--4a7fb3dd-85a9-4aa7-871d-4b24cc367ad2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b89c9c0-7dea-404c-a327-96f19ee2615d", "sighting_of_ref": "indicator--304a55ca-6c99-4b12-aba7-69d8ece4acea", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e49df6-e076-4b70-a37d-634bf076e45b", "sighting_of_ref": "indicator--304a55ca-6c99-4b12-aba7-69d8ece4acea", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ce9357-ab19-433f-bc71-edc1ce318628", "sighting_of_ref": "indicator--304a55ca-6c99-4b12-aba7-69d8ece4acea", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1c81e6-2b77-41fc-8953-25fceec2fdbf", "sighting_of_ref": "indicator--4c5e7144-8821-4bbe-8c93-e702eec0da9d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851f9fdc-c54c-4236-913a-224e0bbb7ed4", "sighting_of_ref": "indicator--4c5e7144-8821-4bbe-8c93-e702eec0da9d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af815dc-8d8f-484a-8ecd-f72b110872a4", "sighting_of_ref": "indicator--c006c726-bc16-4a87-86c7-1cd7e965b176", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1af99bb-78ec-4009-8c36-79a871428064", "sighting_of_ref": "indicator--c006c726-bc16-4a87-86c7-1cd7e965b176", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7250c62c-1928-4b7b-bc55-f52d2e23b394", "sighting_of_ref": "indicator--c006c726-bc16-4a87-86c7-1cd7e965b176", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13080ac5-f0a2-4604-ae07-15c3193f4397", "sighting_of_ref": "indicator--ec6ff8c3-019f-43f4-8fbe-40b53f7c93b8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4623d990-94c0-4932-9428-b431ba27d47f", "sighting_of_ref": "indicator--ec6ff8c3-019f-43f4-8fbe-40b53f7c93b8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a09429-7d00-4394-bdbb-78ae3827aadb", "sighting_of_ref": "indicator--ec6ff8c3-019f-43f4-8fbe-40b53f7c93b8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98626bbe-2125-43f4-909e-ee5eac31b831", "sighting_of_ref": "indicator--7c956417-66c6-46ad-b03e-2f080335efd8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff038fe-48a0-4250-90cd-a994185296b2", "sighting_of_ref": "indicator--7c956417-66c6-46ad-b03e-2f080335efd8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b54517b-afce-4ed1-aa76-b3e9f1d17d39", "sighting_of_ref": "indicator--7c956417-66c6-46ad-b03e-2f080335efd8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10148ac0-892a-4495-b921-ca2a4351e11d", "sighting_of_ref": "indicator--8039b99c-2d12-4c71-a4f2-60de5338c2f2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87270e97-37c8-47a2-93b3-c2a1cce405e3", "sighting_of_ref": "indicator--8039b99c-2d12-4c71-a4f2-60de5338c2f2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27303e6d-b5f1-4d1e-9fe0-e68287053d08", "sighting_of_ref": "indicator--8039b99c-2d12-4c71-a4f2-60de5338c2f2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a2ce58-ffc8-4e89-bef8-2e35f27cd4ec", "sighting_of_ref": "indicator--7762fa7d-2f8f-47c7-8346-c2cd1e6c706c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3ee804-341c-4736-b920-668dc97f8429", "sighting_of_ref": "indicator--7762fa7d-2f8f-47c7-8346-c2cd1e6c706c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6899e84-2d1c-43c0-8add-f45a35de1bd7", "sighting_of_ref": "indicator--7762fa7d-2f8f-47c7-8346-c2cd1e6c706c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f81e32-e24b-4a79-8875-22b939b91725", "sighting_of_ref": "indicator--708722eb-5077-4c3b-8114-1c9a3c930b6d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211fa6c4-031c-45fc-b936-e2b8428fb842", "sighting_of_ref": "indicator--708722eb-5077-4c3b-8114-1c9a3c930b6d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c643271-fef1-4ae7-bd1c-46b546d5cdc2", "sighting_of_ref": "indicator--3dc5295d-77f4-4d0e-b763-4d52f0677f77", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158e369d-363f-4a9c-a00c-eca2007d0d7f", "sighting_of_ref": "indicator--3dc5295d-77f4-4d0e-b763-4d52f0677f77", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8643edc1-68da-45df-a3e4-59d1351529aa", "sighting_of_ref": "indicator--b27298a2-cad9-4adf-bd5a-ffc376414a18", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf1bdb1-09fa-4108-8f28-603e99dbec2a", "sighting_of_ref": "indicator--b27298a2-cad9-4adf-bd5a-ffc376414a18", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba028af-b9d2-4a51-88f9-d071be273a2c", "sighting_of_ref": "indicator--b27298a2-cad9-4adf-bd5a-ffc376414a18", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d44577-98dd-4aec-94c3-3c2699c5ae46", "sighting_of_ref": "indicator--bb98c9cd-81f5-4fc0-b61a-defb2aad9ce3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ff33c7-f9db-484d-bc1a-176568375f85", "sighting_of_ref": "indicator--953360d8-09a0-432b-94f4-590c0e59f553", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a35122-3aa4-425e-9aba-7a27f090e5e5", "sighting_of_ref": "indicator--f26a9316-9eca-4f1a-bba0-6c4766167da3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f6914a-3979-4bfe-8ed2-13a9e3c86bd2", "sighting_of_ref": "indicator--f26a9316-9eca-4f1a-bba0-6c4766167da3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c0f71e-808a-458c-bc77-54945d43455c", "sighting_of_ref": "indicator--73a13933-3e82-45a3-a253-d9a6f3585df6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e174eb-7edb-43af-9a71-6eedf142d482", "sighting_of_ref": "indicator--73a13933-3e82-45a3-a253-d9a6f3585df6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea476d3-699f-4157-9b96-3b5b4cb7b474", "sighting_of_ref": "indicator--73a13933-3e82-45a3-a253-d9a6f3585df6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a020719f-719d-41ab-88ab-c83eb1312315", "sighting_of_ref": "indicator--0bbd486a-3ead-4b4b-9a4c-5ec5558674df", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4d5bde-c73e-47b2-a449-f2385f35f3e5", "sighting_of_ref": "indicator--d6d6d61a-a646-430b-83d6-914578a18318", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadb2e78-fd37-4868-ae33-4ba28e450fbd", "sighting_of_ref": "indicator--d6d6d61a-a646-430b-83d6-914578a18318", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27111a73-eaf1-45e3-a982-7d1ee8138411", "sighting_of_ref": "indicator--d6d6d61a-a646-430b-83d6-914578a18318", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1e683f-75a7-4b46-9d62-2eccbb8e8ec8", "sighting_of_ref": "indicator--bf577016-3676-4673-8360-41d1114ebeef", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78517ad4-615b-4eda-8360-51fad5cd8d8f", "sighting_of_ref": "indicator--bf577016-3676-4673-8360-41d1114ebeef", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d366d4b-5255-4261-80d6-72306216fe6c", "sighting_of_ref": "indicator--bf577016-3676-4673-8360-41d1114ebeef", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1680601b-99ff-4e6e-8ae8-f226ed0b5474", "sighting_of_ref": "indicator--3633788b-5a05-4608-b1fb-6c3f0b0d18b7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b264823-cf02-453b-9881-0c7329151147", "sighting_of_ref": "indicator--3633788b-5a05-4608-b1fb-6c3f0b0d18b7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bea5847-d5fa-4532-9427-42a93b0f21af", "sighting_of_ref": "indicator--3633788b-5a05-4608-b1fb-6c3f0b0d18b7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e8457a-fcbc-4d88-8467-6d889b0830b6", "sighting_of_ref": "indicator--c8272b6f-bcb2-43f3-b173-9f27714ff53c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ed7acd-f78c-4d87-b28a-75d49f2d9ed6", "sighting_of_ref": "indicator--c8272b6f-bcb2-43f3-b173-9f27714ff53c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c5acce-53d3-4f7b-8097-4528cb3364e2", "sighting_of_ref": "indicator--c8272b6f-bcb2-43f3-b173-9f27714ff53c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afc40a7-67d4-49c1-ad3b-9eea715dca51", "sighting_of_ref": "indicator--c63c5c49-db4d-4e76-bc19-2d2cc41f5b44", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87345e7a-1e58-4f0f-93a6-b82602d71091", "sighting_of_ref": "indicator--c63c5c49-db4d-4e76-bc19-2d2cc41f5b44", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b4966e-06cc-485e-87a1-c18ece31be96", "sighting_of_ref": "indicator--c63c5c49-db4d-4e76-bc19-2d2cc41f5b44", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ebf9f0-82a4-420c-9b56-6b7b5f7b94b5", "sighting_of_ref": "indicator--2465fe19-3ef3-4ab7-a0b9-ce2235fb7ffe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e46ce6e-0ac2-4696-9f30-2fe04125b6f5", "sighting_of_ref": "indicator--6fb31195-705f-47d1-83b0-dbd4d4ee5b8b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589b7537-cd5f-4b99-86eb-7717c4e12cbf", "sighting_of_ref": "indicator--22023531-f8a7-4e00-a22e-65eae63f9478", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992bfd81-db56-461d-92eb-4eeba4145621", "sighting_of_ref": "indicator--8a986d51-c830-49f5-9749-184718c32626", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba29a63-557c-4914-920f-19658d432cc8", "sighting_of_ref": "indicator--8a986d51-c830-49f5-9749-184718c32626", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00ed9c2-fdb9-4129-bb62-282148d9502f", "sighting_of_ref": "indicator--82e01e0c-6538-4aaa-9b74-67351953e512", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4faad8f1-ee7c-4354-8883-5eb206793ca4", "sighting_of_ref": "indicator--dbde248b-bf3a-4ae7-8a64-59e44e2553a6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddaddcd5-ee39-43d4-ad37-2ebd421b1a1b", "sighting_of_ref": "indicator--4b20edee-c408-4c36-a41b-0382b1aecc05", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e0e895-29e8-4dc7-b701-68fd1bd1d5aa", "sighting_of_ref": "indicator--4b20edee-c408-4c36-a41b-0382b1aecc05", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aee727f-05a0-4c58-a3a2-94f311f84ddf", "sighting_of_ref": "indicator--d45ec42d-62d1-4bae-b4bf-441894567438", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41388253-48c7-438e-aa60-a8a1b7f294c6", "sighting_of_ref": "indicator--361f2749-6e04-4850-bb36-89888bc0e537", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac24335-4592-4339-9b7e-37b69441acbd", "sighting_of_ref": "indicator--e68eeb65-39af-478b-ad26-b82ceaabeba3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81404c19-039f-4480-bdf8-3ec23de31c15", "sighting_of_ref": "indicator--ede07fdc-b2d7-4844-a75a-2cc36af33ed8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629ea744-a02e-4391-b8e7-979a55d02d1f", "sighting_of_ref": "indicator--487332d4-07ca-4aec-a151-7753eacd5bab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5e9d76-0929-44ff-88e8-638ac5fd95ff", "sighting_of_ref": "indicator--fe2bac53-5082-43bf-8833-cfad5f2c4300", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d8bc08-7e4b-403e-b277-cf85a9424568", "sighting_of_ref": "indicator--3ff86539-b9b7-4728-939f-a285a59c2071", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04faf77a-9837-40f9-9e50-13e67415cfe9", "sighting_of_ref": "indicator--d18c05b7-6b8d-4c76-8aa5-131c0188500d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de24de7c-1e48-4d64-a28b-f484f3ed25b0", "sighting_of_ref": "indicator--d18c05b7-6b8d-4c76-8aa5-131c0188500d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a9f209-80e2-41c7-ad04-bff001b7e059", "sighting_of_ref": "indicator--00c7c33c-7372-445d-9d33-568f3151372b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b11b30e-03de-45f8-9e33-4c5ffbec44b2", "sighting_of_ref": "indicator--b45d3822-36ca-4004-be00-83b2cae05201", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5c20a4-6ce0-4b89-b0fb-ecd4f574bf95", "sighting_of_ref": "indicator--126a4615-f2cd-43a5-9476-a5a1ea520805", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fea26f3-46bf-43e6-b021-72cb4319ae52", "sighting_of_ref": "indicator--1f41ec95-baad-444f-8f46-c533c1fcf6f2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c67f32-6509-47e2-b46e-c651e6635d57", "sighting_of_ref": "indicator--1f41ec95-baad-444f-8f46-c533c1fcf6f2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6a119d-c09a-499b-a542-6dfcd49588fc", "sighting_of_ref": "indicator--4edf91a8-d87c-4f2b-9ff7-6db42a792174", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8747d6ed-da12-4e38-b7d9-ded6c944bf98", "sighting_of_ref": "indicator--4edf91a8-d87c-4f2b-9ff7-6db42a792174", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3a85a3-26e6-429a-b9cb-34cd4eb2ab0b", "sighting_of_ref": "indicator--d100ebda-1460-46ef-85ad-e6088ecd91bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfb6b3a-dfb2-477c-b262-6dbe5864a2b7", "sighting_of_ref": "indicator--6d4c02d1-9a05-47da-8b55-0fa8fd88a01f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a69de71-d3f8-4d9e-ac19-8045aa87312a", "sighting_of_ref": "indicator--82b81c5e-852c-4cc4-ad0b-bb54b9ce4670", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b938c5-1e75-40a0-b14c-03eda2acf2c0", "sighting_of_ref": "indicator--f946df23-ad45-4192-873c-20a6308346fa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6d2333-c378-4595-a202-5b2d2cdcabb4", "sighting_of_ref": "indicator--89aef7a8-fb01-4ebe-b49f-94ef5bdc5731", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6287abd5-af16-42e2-9fac-4a023d5171bb", "sighting_of_ref": "indicator--6cbaad29-1aae-4629-8236-178998e93134", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cb2821-e5c2-40ae-93b4-a4158d6066f1", "sighting_of_ref": "indicator--fad2b426-1479-40eb-a8f7-dfaa833fffb4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec873ecd-0238-4b19-977a-5a8f0720ac2f", "sighting_of_ref": "indicator--fad2b426-1479-40eb-a8f7-dfaa833fffb4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14dcc12-fb02-41cb-bf2e-138a6f506404", "sighting_of_ref": "indicator--fad2b426-1479-40eb-a8f7-dfaa833fffb4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a6fe59-8bb0-4ae5-9d42-4803f668e3b6", "sighting_of_ref": "indicator--560e0ea9-3bfb-4fe5-86d7-4403a23780b3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a15a35-3265-49d1-bd8a-580334e40c72", "sighting_of_ref": "indicator--560e0ea9-3bfb-4fe5-86d7-4403a23780b3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3adf298b-1418-4772-9b32-2690d2157814", "sighting_of_ref": "indicator--560e0ea9-3bfb-4fe5-86d7-4403a23780b3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b33ade6-cbf2-4b13-b62f-105286109c28", "sighting_of_ref": "indicator--cc58b7cf-589c-4ba9-8c47-5e3fffe88d5a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de9535a-a976-49ae-92eb-806c485814db", "sighting_of_ref": "indicator--cc58b7cf-589c-4ba9-8c47-5e3fffe88d5a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b737e09-ff41-4949-9212-0cec9948bd43", "sighting_of_ref": "indicator--cc58b7cf-589c-4ba9-8c47-5e3fffe88d5a", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73c3350-edd5-4918-a0d6-013967ea0d67", "sighting_of_ref": "indicator--0dbd4fbd-bd38-48c5-bd62-fff3b61124be", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c4d46e-b1df-433a-9fb4-266b2c30ad3e", "sighting_of_ref": "indicator--d99e1ad9-54eb-4420-a3a6-8dc584a0da2c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e26423-12d6-4dce-904b-7d8b4af2595b", "sighting_of_ref": "indicator--b5740589-407e-4cdf-be5f-91de13d3ac9d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccf3768-45f0-451f-ae98-35698ebe3624", "sighting_of_ref": "indicator--e20dc781-6326-4d96-8e82-1494e6565eb7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a47119e-f332-4d34-adaa-872f5ac7e7b1", "sighting_of_ref": "indicator--e20dc781-6326-4d96-8e82-1494e6565eb7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb8860f-d6f7-4af8-8ac8-8823defc6213", "sighting_of_ref": "indicator--e20dc781-6326-4d96-8e82-1494e6565eb7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e720c8-d767-4a8f-b1fd-e62694b5a22e", "sighting_of_ref": "indicator--cc8a0471-bd5f-4fde-acef-a6f7640c0f8f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--accee081-4be8-4502-959e-532b12f17e97", "sighting_of_ref": "indicator--cc8a0471-bd5f-4fde-acef-a6f7640c0f8f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6b631b-fe98-4530-af5a-31d0c68b24a3", "sighting_of_ref": "indicator--55f817b9-0661-40da-a6b1-9ebddcf7bb31", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00bb74c8-78cb-4eec-999d-1cbcc8e60894", "sighting_of_ref": "indicator--15f44cde-ee0e-484f-a3a7-7a8cef0cb4d7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695964be-9812-45f7-9dba-a129a40fce52", "sighting_of_ref": "indicator--d790c746-c5c0-4249-b71b-2b864fddf3e7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817be930-9431-4231-b6f2-950d436bc771", "sighting_of_ref": "indicator--ca077f96-1d60-43c2-8454-ef1f0c6e82ac", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad6569d-4f3b-4a97-ad4f-1af44a092898", "sighting_of_ref": "indicator--9218e228-e0ad-48db-baca-01df8745750c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b899f1-5658-41ec-b3a9-d6966b0f451a", "sighting_of_ref": "indicator--9218e228-e0ad-48db-baca-01df8745750c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4902e3b-c720-48cd-8b62-f804c589f380", "sighting_of_ref": "indicator--b0576fb3-f1ea-42f7-84e5-61e1407868fb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6859a67d-364b-4d71-a89c-988fb8eb5966", "sighting_of_ref": "indicator--b0576fb3-f1ea-42f7-84e5-61e1407868fb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0369287-edea-491f-934a-44ae016c5297", "sighting_of_ref": "indicator--b0576fb3-f1ea-42f7-84e5-61e1407868fb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cc41fe-9797-4d7b-93c7-82ce79f3fb23", "sighting_of_ref": "indicator--20c0c6d9-7d2a-4f45-8f72-c7d1cae9e37c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576512f9-cd82-41bd-b5be-556799524659", "sighting_of_ref": "indicator--e17996a3-0deb-4cdb-9e61-20e6062d4254", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0cd1d5e-6461-4a82-9bbc-9af7f96c5b67", "sighting_of_ref": "indicator--e17996a3-0deb-4cdb-9e61-20e6062d4254", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30c5c10-b139-433f-9869-1a7fac355ce8", "sighting_of_ref": "indicator--e17996a3-0deb-4cdb-9e61-20e6062d4254", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d812605-37f3-4dea-8e8b-d0f46c16f12f", "sighting_of_ref": "indicator--3a785e18-31f9-4806-854f-8a5f501a25a1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a294201e-4b8f-4338-8661-ce3d435f2a6a", "sighting_of_ref": "indicator--b6cab8e2-3c9c-403e-b54b-00d4c75aa7ec", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbacb75-9d7a-4b5c-aad4-d6833b92f799", "sighting_of_ref": "indicator--29b2fa9a-d520-48af-ae12-cdb970958769", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8503645b-a9e9-4002-a27e-ee65be0b5097", "sighting_of_ref": "indicator--29b2fa9a-d520-48af-ae12-cdb970958769", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5680b98-a516-4fb0-b8dc-44e721e44949", "sighting_of_ref": "indicator--29b2fa9a-d520-48af-ae12-cdb970958769", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ddc943-59a1-48b5-a52b-b014ba552c9b", "sighting_of_ref": "indicator--4443db08-269a-4ad3-8055-5a98d3a977f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8cf40c-e532-4083-ad6a-ff82b4ac5a9d", "sighting_of_ref": "indicator--4a8a249e-5bae-4939-b12d-3a9efb5b80de", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11c44fc-a5bc-46d7-8c7d-bc710feccacd", "sighting_of_ref": "indicator--4a8a249e-5bae-4939-b12d-3a9efb5b80de", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e62ac8-e9f9-46b8-89e1-93bbcb6937ca", "sighting_of_ref": "indicator--def1195a-7a77-4ef3-9a4f-e549464341c6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3d3676-6e34-4da9-835f-ad33c738cbf7", "sighting_of_ref": "indicator--f2258aa1-578e-46ee-9d09-62a327c2cecf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5366b1a5-c6f2-4035-bfb1-9b0281c9d76c", "sighting_of_ref": "indicator--a102ad20-f8d2-4ce6-b8ea-1326f94c2de4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b2c3c8-4380-424e-a9d4-54283c9d67a8", "sighting_of_ref": "indicator--8b67436c-c983-4a61-90ea-97ef74d10854", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f11256-4309-45f8-b217-26ccc852d0c8", "sighting_of_ref": "indicator--8b67436c-c983-4a61-90ea-97ef74d10854", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce15216-4a47-4340-a28f-4a0e9d0e3d62", "sighting_of_ref": "indicator--8b67436c-c983-4a61-90ea-97ef74d10854", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659187e0-464a-4531-b51c-b9cfd3b8b2a4", "sighting_of_ref": "indicator--283296d5-89ee-4894-8db9-d4e759144e9f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1645cc-2813-46a7-bd88-41b2123128fb", "sighting_of_ref": "indicator--283296d5-89ee-4894-8db9-d4e759144e9f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b623c6e4-be09-477c-9cac-d7938607cc88", "sighting_of_ref": "indicator--283296d5-89ee-4894-8db9-d4e759144e9f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40fda4e-932e-4c91-a334-672a5bf6d3ac", "sighting_of_ref": "indicator--a8c70840-be27-4054-8454-284a75649b44", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0990b2b9-b521-42af-a10b-20e90063701a", "sighting_of_ref": "indicator--7c94f6d5-97b1-41bb-8608-8bb086d4627f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dafb94f-ce94-4838-ad6e-11832b4baaf5", "sighting_of_ref": "indicator--8e89079b-0992-441f-b6f4-0b8fdd4d7a83", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f069dccb-a45d-470b-b96b-cf30e13a95b0", "sighting_of_ref": "indicator--6034c240-2369-48a3-b458-e30bd9694aca", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049b6163-9878-400f-94ad-ed9ba5585872", "sighting_of_ref": "indicator--2abdb463-6034-4164-8727-8456f0c7f368", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0e18c4-0c36-4868-b19c-2309821f55bd", "sighting_of_ref": "indicator--7da29c36-35d4-49f7-a94b-a128dd224835", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5d9358-9ea3-4ffe-9686-f872126bcbda", "sighting_of_ref": "indicator--edee2822-cc28-4ba8-8d3e-c41abdf538d1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c07d08f-c4c6-4b8e-b0a3-8a115f6cc6bd", "sighting_of_ref": "indicator--d2c95d0c-c6c6-4161-9665-36006d0df09e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fe1114-cc55-4017-a1e1-aca5bdb863db", "sighting_of_ref": "indicator--cff16123-ecbe-4b57-9d25-d3c78829e580", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7173751e-38a8-45eb-9259-3177ad2bfede", "sighting_of_ref": "indicator--fc31481e-2073-45c8-9e60-73e7d79f3e98", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd68c02d-f5c9-43bf-ad33-9f275ae736c9", "sighting_of_ref": "indicator--9a22a07e-a027-456d-a63b-dd3e8c64318f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312ef163-57ea-4730-bba7-50f3eb0fa8c1", "sighting_of_ref": "indicator--41bc3c9a-b79a-4dc1-a236-c5f09bf2e03d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498d5846-09a2-4efe-82cd-49290587aff5", "sighting_of_ref": "indicator--41bc3c9a-b79a-4dc1-a236-c5f09bf2e03d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ce46c8-9fe6-472b-805c-4c15c3bca852", "sighting_of_ref": "indicator--41bc3c9a-b79a-4dc1-a236-c5f09bf2e03d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79376bb-7a1b-4bb3-abc9-32ead28de94c", "sighting_of_ref": "indicator--054c65bb-027d-4af8-aff8-f312e3f14ee6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492c5797-b99c-4ae8-af45-403f7967590b", "sighting_of_ref": "indicator--440d7d1d-7f88-4d11-b0db-644dac6fb4f3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af4ef2e-a7c6-48e9-9878-cefcb5a20e14", "sighting_of_ref": "indicator--440d7d1d-7f88-4d11-b0db-644dac6fb4f3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66564fa0-34fc-4537-aeb7-14aa06405f8c", "sighting_of_ref": "indicator--440d7d1d-7f88-4d11-b0db-644dac6fb4f3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c9cd20-6758-4112-9608-ef8d84da1de8", "sighting_of_ref": "indicator--381c03fc-db83-429f-9ae8-6c7ee8a043be", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179accb0-a770-4c83-9a5d-4fa36824499c", "sighting_of_ref": "indicator--6a4ba3e5-ffb3-4d72-921b-0356b214137c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193af870-3916-4dfa-9f17-11275526a8dc", "sighting_of_ref": "indicator--6a4ba3e5-ffb3-4d72-921b-0356b214137c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64223dbd-1ecb-4f0e-b9cc-2e84e8f11f91", "sighting_of_ref": "indicator--6a4ba3e5-ffb3-4d72-921b-0356b214137c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4135db-98d1-40cd-9f1f-061344b79b72", "sighting_of_ref": "indicator--441932b2-8176-4598-b29b-9bcd633dae4d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04df6648-61c2-4230-b9f6-1861ced1fc12", "sighting_of_ref": "indicator--3abb107f-f550-4753-8779-fa7a9c77a1c2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62045469-79b6-40bd-aed4-c9adc0ff3f1c", "sighting_of_ref": "indicator--1e446adf-83eb-4ccf-b2b2-8df27c097e1e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec4bd53-d360-49f2-bc07-11d44b3068bb", "sighting_of_ref": "indicator--05772613-09f5-4dc4-bac4-bde3cb41789e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b556791e-7098-4c02-8697-5dd399e4ef58", "sighting_of_ref": "indicator--c4bb817b-3df0-468b-afaf-2b923e5b9eb2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a537efb5-49ea-49c6-852b-28e6cf1a9d2c", "sighting_of_ref": "indicator--9f71595d-ff78-47a0-b777-b9e6d65a6c76", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fd465f-8ebe-4185-86bd-2138d8c89d9d", "sighting_of_ref": "indicator--47102932-b02b-4be1-a2f6-f9a19bab331b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b3fa62-8b2c-4b82-8345-b36c4b1420ff", "sighting_of_ref": "indicator--b299e035-cbcb-498d-a9cb-76d5084193b3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abae2f6-8aec-46bf-bfb8-8df1df74401a", "sighting_of_ref": "indicator--b299e035-cbcb-498d-a9cb-76d5084193b3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f66743e-c1bc-4154-a233-ca88427b4312", "sighting_of_ref": "indicator--b299e035-cbcb-498d-a9cb-76d5084193b3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffacc0a-e495-4da0-b578-b775d5de9fc1", "sighting_of_ref": "indicator--4eae45ed-6b03-4c1b-a922-6e1c789612d5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b36045-c53b-4f14-8560-9b7cae3e252e", "sighting_of_ref": "indicator--a133671e-7a7b-44f6-a8c0-2d38cb20a00c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d817c3da-b8ee-4cfe-a610-c71450f8e51a", "sighting_of_ref": "indicator--d7634a37-7eff-4dca-b6ad-bf7a6c14fc6c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2ec91e-4b48-4385-9073-4b65ef10da0e", "sighting_of_ref": "indicator--29f53631-5798-471c-ba32-27989f3df5e5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81a9fb4-f978-402f-9312-dbc049de7237", "sighting_of_ref": "indicator--29f53631-5798-471c-ba32-27989f3df5e5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffac627-c689-42e2-a6a5-bd06b1fcaf0f", "sighting_of_ref": "indicator--29f53631-5798-471c-ba32-27989f3df5e5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c738fc01-95e3-41a4-8610-009310fcc5ed", "sighting_of_ref": "indicator--33b63257-4fe6-481c-a968-3ff28df26622", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e893c1-2b4b-41ea-b4a8-53b68cec30e2", "sighting_of_ref": "indicator--33b63257-4fe6-481c-a968-3ff28df26622", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568a7017-3e5e-4d43-8fff-1be5db0bf21d", "sighting_of_ref": "indicator--33b63257-4fe6-481c-a968-3ff28df26622", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a380765-b625-44d4-bc94-4906d85799bb", "sighting_of_ref": "indicator--6028b2e4-60dc-4837-81f5-27b93b75df7b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d319079-0af0-452b-86cb-a0ba04bfe89a", "sighting_of_ref": "indicator--0aedf474-76bc-4bc4-a445-127cfb9fff4e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd7bf1d-41f8-4c36-975c-484582fe794b", "sighting_of_ref": "indicator--53f0615c-289a-4503-8fb1-f4c6d1987882", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0571ec4d-7202-4765-8206-51b8ffb6f7dd", "sighting_of_ref": "indicator--aef05b02-3dc7-4b7d-99bd-96f0efc2c63b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a598a75-e7d7-4981-97c0-87441383019c", "sighting_of_ref": "indicator--aef05b02-3dc7-4b7d-99bd-96f0efc2c63b", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53f3f72-d5d3-4eda-b602-af6c760e31ed", "sighting_of_ref": "indicator--a354d453-b0bd-4fbd-97f0-5f77ab2aab0d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152e1a03-5029-4c4d-812f-e79d625065e6", "sighting_of_ref": "indicator--48e4290c-ed3a-4854-9491-8f425739784f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ca88e5-b115-432b-ad2e-336129f46136", "sighting_of_ref": "indicator--286e4659-1b08-43a9-ae88-637f12f4df4e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5962d7-db07-4bf9-b261-21176727bc1e", "sighting_of_ref": "indicator--59b56d5b-25c7-4e73-a6da-e7e2a7bd4355", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e7eeb0-eb31-46d6-9770-ee2926e1b028", "sighting_of_ref": "indicator--f38be212-2b7e-4da9-9a8c-2e9962cacb44", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49eb39f1-226c-4dfd-a58c-31e21ab17caf", "sighting_of_ref": "indicator--3f00edeb-9eed-45f9-a4c6-7b97e40478c9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bcee21-f0fb-47f3-a0c7-85bab1d69268", "sighting_of_ref": "indicator--001dfb45-96bd-4612-a945-c50085617f4f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219ee831-b97f-46c0-9ca1-2133c1c2f66f", "sighting_of_ref": "indicator--d8d40081-5792-4209-b65e-3e69d5374b57", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9caf5928-0959-4714-a21e-d50e2bda84f3", "sighting_of_ref": "indicator--d8d40081-5792-4209-b65e-3e69d5374b57", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795b937a-62b4-479a-a0bc-59420e2d0bc5", "sighting_of_ref": "indicator--ddf71b96-f39e-4e44-b8fe-6351a81f65a0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c052e110-cfd3-4e9d-ae7f-a6354219ec76", "sighting_of_ref": "indicator--ddf71b96-f39e-4e44-b8fe-6351a81f65a0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f882769-c367-4426-874a-b526a176c5e0", "sighting_of_ref": "indicator--ddf71b96-f39e-4e44-b8fe-6351a81f65a0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8440003e-54e6-4b1c-93d2-5286299e6275", "sighting_of_ref": "indicator--2666e215-cf79-4cdd-84d3-e87ec2729cc6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdc884d-4ebc-48a0-971b-50f407dfc1c7", "sighting_of_ref": "indicator--21262431-12ef-4eca-9078-a3226ad5c270", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b427b55e-db84-4946-8745-13f18c70c590", "sighting_of_ref": "indicator--d0f82dd6-c275-4d98-8d11-fe7eb7dc2928", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e770acdc-d37c-4ce8-bdda-4d53b93b3cbd", "sighting_of_ref": "indicator--c4f3e700-6608-417d-bbb7-769aa94a4be8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e8b2dc-2839-43ac-b02f-3cbd115c73ba", "sighting_of_ref": "indicator--ce9492fa-464a-42a5-9afd-26721ef6b1c5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd273b53-468d-44c3-bd9c-aef560213e95", "sighting_of_ref": "indicator--37e1ef9d-46b4-4416-8421-cc3454d2c1e0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c279e5-d682-4a4b-93a8-8211288f91b4", "sighting_of_ref": "indicator--0feab117-4f87-49d3-9f09-e4bb204fe4de", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24af706d-f27b-4180-b7d6-6b627ea84a88", "sighting_of_ref": "indicator--649aee13-61b3-4100-858f-9bdd960d25f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6d3e80-430a-4ffe-8c2b-a4a7a3e929d7", "sighting_of_ref": "indicator--3718aec8-0eb0-4880-aa66-db3e7115f9c4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a972f6ba-5dc5-48f1-9a6e-2dd472c014b7", "sighting_of_ref": "indicator--119bfc1f-8ac2-45c5-ae2b-f4aeadddba42", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b6ea4f-0f13-4e12-a568-e476e7f80db9", "sighting_of_ref": "indicator--2cd77e85-655d-4f2d-8a0d-4ed595adf353", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b419f8-c834-4183-a176-ce98c1d18918", "sighting_of_ref": "indicator--1cd78ed5-79b6-4005-b150-9796554ad58c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b15b93-4e59-468c-bc04-65fddd4faa3f", "sighting_of_ref": "indicator--0b574818-4f10-46f4-a396-d457ae7ab88f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19de375f-1f07-4675-8069-1d2c38f3291b", "sighting_of_ref": "indicator--738c3560-5e0c-4b9b-b740-47bec9ed6475", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c604f460-8e3a-4447-917c-c1fe33695189", "sighting_of_ref": "indicator--0b73b436-78e6-47d1-bd3b-5786445d3d80", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8395bdac-8db9-4cf3-b840-c5505588dccd", "sighting_of_ref": "indicator--a8668816-63c2-4aeb-a74c-9c2f45cc4ee5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26faec87-0536-4829-8c0e-d11ceef18c44", "sighting_of_ref": "indicator--0e577df2-3821-4040-83b0-01d6bb76823d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044d3c59-3153-4051-a46b-e92181b6346d", "sighting_of_ref": "indicator--08e3cfc5-d22b-42b5-971d-2947c2f08280", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15f3676-bd20-4ab2-83b7-0715a58c9c0a", "sighting_of_ref": "indicator--70453a2c-bde6-4412-ba15-c09ee67a190f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696b9b10-a294-47e3-81a7-31754a58d4bc", "sighting_of_ref": "indicator--2fac8506-0fe2-4b12-b20e-460a899ed4a8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525947ab-d0e0-4501-9a1c-a31a0769fb5f", "sighting_of_ref": "indicator--56202d9b-b1ec-4d67-aee9-f4bd9fd35f81", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fa38fb-133b-43f4-9d40-98757af20c7f", "sighting_of_ref": "indicator--a84f1329-5c0b-46ca-8472-36aa3c73ae74", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0471c04b-cdbb-4bf3-828c-37afee12b0a9", "sighting_of_ref": "indicator--a84f1329-5c0b-46ca-8472-36aa3c73ae74", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1eb6442-b44b-4f67-8226-bf34f6e57c31", "sighting_of_ref": "indicator--a84f1329-5c0b-46ca-8472-36aa3c73ae74", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54771463-aaa5-4b01-9ed2-b84a02c7ecb8", "sighting_of_ref": "indicator--3ba46229-247b-476e-8096-20796365e3c7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef14a7b-525a-4951-ad8d-5b3d2845bd3d", "sighting_of_ref": "indicator--3ba46229-247b-476e-8096-20796365e3c7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27969be8-07c8-407c-863a-ac10fe4e2440", "sighting_of_ref": "indicator--3df66658-3bdc-4744-b2b4-bf07fb906246", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e157a310-8349-493e-951c-030806582527", "sighting_of_ref": "indicator--fd5f2226-0e3b-4209-af3a-fffa08afc00a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23fe5050-e7e1-421f-a346-544196622c48", "sighting_of_ref": "indicator--1a1ccc83-a66d-4e67-b677-c84c8220ab5b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7087da8-6795-4f99-bb0c-f8ae3dc6e9da", "sighting_of_ref": "indicator--66e77a28-a79e-435e-ba72-27bc697e65b6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4367a8-de8a-42d9-aa77-1e02ca496c23", "sighting_of_ref": "indicator--6e827ed8-ee83-4ee1-873c-4bb6a508fddd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dfd8db-92bc-403a-b123-af85ea96476a", "sighting_of_ref": "indicator--94294fd1-ac9b-43ad-baba-dd30e60cfe7d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436d0841-9584-49e7-8281-438f9461483b", "sighting_of_ref": "indicator--94294fd1-ac9b-43ad-baba-dd30e60cfe7d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db2b620-a0e5-4bda-95f1-f6fc1b30503f", "sighting_of_ref": "indicator--2e48d064-e128-4bba-a137-d5629d5ae75e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfe0cef-52c5-4bff-9772-b54191a5b6ed", "sighting_of_ref": "indicator--eb1cdbfb-2635-4086-985f-10f00f714436", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33982dde-284a-439d-b5c3-9644e5a0277a", "sighting_of_ref": "indicator--1da52e06-d5c2-47f0-bde9-351ad41e6f89", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9949e17-0abf-4a4b-b199-2b615e065808", "sighting_of_ref": "indicator--f550002d-f580-4583-897d-92a747bc37c0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ff21be-a349-4e98-ba4a-cb0926dbc5c5", "sighting_of_ref": "indicator--960ca4e7-09f4-4455-83de-15223de91287", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a7d75d-d11e-4bcb-a54f-300146ce3abe", "sighting_of_ref": "indicator--946cec89-8184-4cd0-87d7-8a60fb904887", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d45ee60-c6b5-48f1-b84a-cf1f466f2574", "sighting_of_ref": "indicator--946cec89-8184-4cd0-87d7-8a60fb904887", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445290bc-df6b-45f3-a051-9166dec4be2b", "sighting_of_ref": "indicator--fd718767-6000-4047-8fe4-1f608bc1f42b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00dd02eb-dc4e-475c-a542-4854c18d461c", "sighting_of_ref": "indicator--dd3e73e3-7088-4d1f-8448-670d853f40bd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1e790f-ea90-4eac-95d7-5df212afcc25", "sighting_of_ref": "indicator--55830657-ef30-4f80-8e31-345f1069e861", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680715f6-d0fd-41b3-a0f3-bc6a8979b406", "sighting_of_ref": "indicator--1828784d-5e04-412e-a7f3-9f7a89b67e36", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13eafc0-f1c7-4c03-9dc0-a800807526bd", "sighting_of_ref": "indicator--5a45b252-78f6-4212-859f-fcd7fcdc89df", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36df4434-558b-41c6-a11f-aa831481ae8b", "sighting_of_ref": "indicator--53c0226a-c329-4507-9d16-bbd5a3545ff2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7812cd65-e144-45d5-8527-8e3a297b59c9", "sighting_of_ref": "indicator--aa3735a3-1270-49f7-9c89-27241f34fed8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c9a61b-44d3-4276-b349-eb773c86aa62", "sighting_of_ref": "indicator--a3375a8f-914c-406f-9fad-be75e69eca2e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eedc6187-69a3-4e7e-9774-cb05c0690baf", "sighting_of_ref": "indicator--3d0d08bb-03fb-441e-8b0d-7f0f23434dba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5c0a77-709c-42bc-920a-02a2c3b31d1f", "sighting_of_ref": "indicator--17bed51a-e3d7-49da-8cc5-98c6a96dd9aa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83dabe1-4cfb-4e01-9473-8a75e75a0948", "sighting_of_ref": "indicator--a87b6e42-0355-4306-beab-50061050e5eb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926377b6-7423-4ccc-9d72-46c10a3a8d18", "sighting_of_ref": "indicator--513acf26-4a80-4e91-8f74-829fc3b69474", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e82b2d-a11b-4e33-b08f-c41708b645b6", "sighting_of_ref": "indicator--5a260de6-886c-467f-bdbc-1a71c8a08aec", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32309f78-1ebb-4dae-9202-5f5ff9b6c961", "sighting_of_ref": "indicator--9a68bffb-d2ae-478b-a4c6-09048a765f18", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4b5b2e-5252-4df1-b33e-a159a34ee7ca", "sighting_of_ref": "indicator--9a68bffb-d2ae-478b-a4c6-09048a765f18", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bd8198-c108-49f7-bb48-af413ac8be33", "sighting_of_ref": "indicator--eab0e66d-8f96-4c7f-9e1e-1dd5bd08f50a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2023bbb6-89e1-4d55-8af1-46fab1fe97e7", "sighting_of_ref": "indicator--9df8b2c4-2ad5-4f0c-981f-f0a90f710b00", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1898cada-2867-489a-8b1b-4bec46618add", "sighting_of_ref": "indicator--9df8b2c4-2ad5-4f0c-981f-f0a90f710b00", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0e342d-0c2e-4acc-85d0-69d40ee15e16", "sighting_of_ref": "indicator--04d2726a-7e11-439b-a008-0b062a98d5f9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7e2aaf-3eef-43e4-b6e8-9d14aeb4e3ac", "sighting_of_ref": "indicator--6349b040-5a7e-4e7a-8773-82ef241ddf1c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d6a60a-d51b-4e0a-aa86-542707685bfe", "sighting_of_ref": "indicator--865b1b86-b254-433d-9968-52a834ba7a07", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9cc1a5f-e3b2-47cd-baa9-1088be3475f4", "sighting_of_ref": "indicator--865b1b86-b254-433d-9968-52a834ba7a07", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4d3fd9-9585-4395-85ca-d16b3b0fd206", "sighting_of_ref": "indicator--8bb3fd04-b32f-4f32-bfba-b6cfec30b41a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2d5900-1ac5-40aa-b114-af23821c8ae8", "sighting_of_ref": "indicator--8bb3fd04-b32f-4f32-bfba-b6cfec30b41a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067a59d7-6060-4a0e-b619-85ff8d0c49b6", "sighting_of_ref": "indicator--ab4073cb-f084-4cb5-a5e7-b8d405ade669", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1ffac5-c0cb-4bea-9723-d02aa1869792", "sighting_of_ref": "indicator--ab4073cb-f084-4cb5-a5e7-b8d405ade669", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2ce4df-9b23-449d-b8d4-ed54d52991ac", "sighting_of_ref": "indicator--b5c16d6a-63dc-4f76-96c9-3fbdf5f2219a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64105583-c475-4d93-b060-819290a94d85", "sighting_of_ref": "indicator--149e80f8-ece8-43ab-a4df-79a07459946a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ce2982-5101-41c6-a4e7-6e855b739410", "sighting_of_ref": "indicator--149e80f8-ece8-43ab-a4df-79a07459946a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c8fe1d-c0c4-4e8c-902c-d24e78bfaa98", "sighting_of_ref": "indicator--149e80f8-ece8-43ab-a4df-79a07459946a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796a77d6-4fae-4a29-b766-393e56b718ed", "sighting_of_ref": "indicator--d2d18155-cdcf-4a83-b23b-8d144f616813", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7629f773-4f56-4b5f-ac76-0f86196b7f5d", "sighting_of_ref": "indicator--65cca725-fd7e-49b2-9ff3-85d788283822", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b865c2f-70fb-478b-b01b-5ebd291ff3e7", "sighting_of_ref": "indicator--65cca725-fd7e-49b2-9ff3-85d788283822", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92fc7912-f440-487e-9918-2d411cfb57fe", "sighting_of_ref": "indicator--65cca725-fd7e-49b2-9ff3-85d788283822", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c10c69-fbd7-4ba9-8d3c-77e3629c3e2c", "sighting_of_ref": "indicator--1dc62a4c-5b86-4ff4-b013-70d3ce91f5a4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b90717-aa90-4a90-8795-3c20fd7d71a0", "sighting_of_ref": "indicator--1dc62a4c-5b86-4ff4-b013-70d3ce91f5a4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68009b98-2088-4525-a903-02aa3617b3bc", "sighting_of_ref": "indicator--1dc62a4c-5b86-4ff4-b013-70d3ce91f5a4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae063e17-394a-49ab-845b-13fa5ca7174e", "sighting_of_ref": "indicator--e957581f-fc28-4267-88dc-12ab649d5c48", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9591714b-46f2-4cf6-8e5e-6a0a1d26d3b4", "sighting_of_ref": "indicator--e957581f-fc28-4267-88dc-12ab649d5c48", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18cf3cd-158b-469a-9011-53996742ef61", "sighting_of_ref": "indicator--99d106b5-cff3-4455-98ae-8310631cced7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250d7a3d-3b88-42c4-a00d-42531043ddcc", "sighting_of_ref": "indicator--d95827f4-d335-4210-934c-8f8f8176ac92", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc78f06-d856-4696-8b0d-5f634b178f36", "sighting_of_ref": "indicator--ee173a06-f6e2-47d8-91f0-a81abebd23c0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81e183e-de51-45d7-8e43-81e2629d25c5", "sighting_of_ref": "indicator--5ff7b056-4d40-44b4-8d2e-ae88f179851a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a1d097-0d2b-4a7e-bd2c-30d237202a9a", "sighting_of_ref": "indicator--ccba06d6-ab86-4c9f-8ce7-cfa2e66c3b08", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e34f5f-c28a-4c7b-91fe-bb48a7db9e4d", "sighting_of_ref": "indicator--df856c01-c5e8-4914-be58-c7517f094305", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577d2be9-518e-46fc-be1f-ec5357ba8924", "sighting_of_ref": "indicator--ee3f222c-5089-48be-9ca7-a3a3bb27fb03", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff4ef88-77e7-4003-9cc9-bbc01464d28a", "sighting_of_ref": "indicator--ee3f222c-5089-48be-9ca7-a3a3bb27fb03", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a9a818-7671-4246-9505-c145b49dba07", "sighting_of_ref": "indicator--2f605c17-1a60-43de-8df5-2b0f7378399e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d43388-5830-4ae2-bbdf-4f4af25e5b0e", "sighting_of_ref": "indicator--2f605c17-1a60-43de-8df5-2b0f7378399e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc6ff02-aba7-471d-8c92-68179bc786c7", "sighting_of_ref": "indicator--2f605c17-1a60-43de-8df5-2b0f7378399e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe0c814-c269-43d0-9b93-c0002cab106d", "sighting_of_ref": "indicator--912d410a-92b0-408d-b242-93f486e7adc7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9123fe-233f-4815-95a7-921107535423", "sighting_of_ref": "indicator--f411dc94-b08f-484a-bb35-09c477c3eb5c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2995df17-b334-4177-8f2e-27f4f37b0c61", "sighting_of_ref": "indicator--d726a5c9-aa57-4850-8b45-51761a6f7794", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd827be-6375-462d-b7bc-01be2b5212d8", "sighting_of_ref": "indicator--98ab6632-0564-458b-982e-37f6ecbec293", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f00d485-c1b1-4416-9190-1719650654cc", "sighting_of_ref": "indicator--1ff8cb3c-7495-45dc-9131-c26d133f08c3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9171ef22-185a-4d91-aac6-85e9f8539952", "sighting_of_ref": "indicator--1ff8cb3c-7495-45dc-9131-c26d133f08c3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310ca5bc-e2b3-4382-99dc-5108eeda556e", "sighting_of_ref": "indicator--700b3676-27c5-4a20-bb42-3b62de32069c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42eb294f-b435-490b-a718-904101e1b626", "sighting_of_ref": "indicator--d5f6f909-ea96-4f64-905e-17de439dd646", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63832e98-9e53-4b81-95de-4ea7b40d19aa", "sighting_of_ref": "indicator--679b9b07-0eb2-4ef6-a632-c4e0103029fd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9d77d7-c5bf-438a-b629-3fdff06e8349", "sighting_of_ref": "indicator--163f88d4-3f62-4b83-8b46-abd9a268135b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a1c6f0-533b-4f1f-ab9c-15cc41aad426", "sighting_of_ref": "indicator--163f88d4-3f62-4b83-8b46-abd9a268135b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8757b200-2741-4734-9067-042571313568", "sighting_of_ref": "indicator--c667b72f-c657-4bf2-989b-59dbe8f38304", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d4a260-98a7-47bd-9b27-d14de6ee6760", "sighting_of_ref": "indicator--d78db79e-4f9f-4b70-a1cb-9a9ef827052a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10277a65-d758-4940-b535-4ede9e27da5d", "sighting_of_ref": "indicator--d78db79e-4f9f-4b70-a1cb-9a9ef827052a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e4065e-2b44-4912-bef2-d76a48b6e12c", "sighting_of_ref": "indicator--077e44d4-a553-47b5-8b56-56409790369a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140bc996-7eb3-433d-ba61-7ae5979d9f74", "sighting_of_ref": "indicator--e2f82122-0332-44a0-9d9e-30b8840a2988", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab7f5ca-f123-4f19-b9fb-d557b070ea14", "sighting_of_ref": "indicator--e2f82122-0332-44a0-9d9e-30b8840a2988", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7dacb8-7385-4ce7-907b-06a99a61c2b0", "sighting_of_ref": "indicator--0bd8caf9-e989-43ff-bcb1-66d42342f649", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede37c53-dbb2-4126-ac73-43056b314b65", "sighting_of_ref": "indicator--0bd8caf9-e989-43ff-bcb1-66d42342f649", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4114ef-ad80-49a3-b500-2454f87c8da6", "sighting_of_ref": "indicator--0bd8caf9-e989-43ff-bcb1-66d42342f649", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201ce272-5299-43ab-9bd9-d9d56c47970c", "sighting_of_ref": "indicator--e0355dfd-04e5-4ce7-bd35-c2ceddc2017f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb6b165-b54b-4dc4-9cf4-e9d236823434", "sighting_of_ref": "indicator--ea00102b-54da-4fef-8675-334824f385c5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99e9ef5-394e-4633-adb8-1125da75ff7b", "sighting_of_ref": "indicator--ea00102b-54da-4fef-8675-334824f385c5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79bc62d-2af9-4dc4-91fe-6da0bf27b5d1", "sighting_of_ref": "indicator--e419c061-18fe-473d-9896-e65c0fc84467", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bbeddc-c685-4d33-933e-70b82ed691cd", "sighting_of_ref": "indicator--90710ad4-06f9-4032-94de-c1bc7904d200", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce7b17f-26a7-49f7-b983-69b234b5aea1", "sighting_of_ref": "indicator--90710ad4-06f9-4032-94de-c1bc7904d200", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea8183f-bafe-4c51-8441-e5f8d5e22360", "sighting_of_ref": "indicator--71ae5579-bbbd-4fac-a8ac-443dcae58214", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbd7e57-6e59-4ecf-8d9f-60ff20bebac6", "sighting_of_ref": "indicator--71ae5579-bbbd-4fac-a8ac-443dcae58214", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc26e43-87e5-4488-a280-b105e5c86f5c", "sighting_of_ref": "indicator--3803f7e7-e93d-4d05-985b-92849aa8f68e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6897b87-8246-470f-93b8-1b0f9be139c8", "sighting_of_ref": "indicator--4f58a8d7-195a-4afb-a33c-0491dbade736", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c176c854-046d-4833-bd4f-2dfb6ec07fad", "sighting_of_ref": "indicator--1542e451-e1b8-4e4b-9d89-9a54298eee94", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7112e5-1857-4aca-b7af-fad92ebbf135", "sighting_of_ref": "indicator--1542e451-e1b8-4e4b-9d89-9a54298eee94", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027c6fe3-1c40-493b-a2fa-c1b6ee23d00c", "sighting_of_ref": "indicator--1542e451-e1b8-4e4b-9d89-9a54298eee94", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27577845-af74-488d-a92a-5c0dbac9bc36", "sighting_of_ref": "indicator--7caccefe-7e72-44a4-b6bd-b9866f70989b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7750f6-722b-40a8-bf45-32dcc9cc111e", "sighting_of_ref": "indicator--7caccefe-7e72-44a4-b6bd-b9866f70989b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc6f09c-ace1-4755-bc59-9db2857f6c1d", "sighting_of_ref": "indicator--7caccefe-7e72-44a4-b6bd-b9866f70989b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ceb4b5-35bb-41c9-8832-a927d1581dfd", "sighting_of_ref": "indicator--d2984bfa-e91e-438c-bbcb-952198597c43", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9282e38a-c8a7-45cf-be72-0654965e3c2a", "sighting_of_ref": "indicator--064a5d35-5638-45b4-bad3-43e80ad2162a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9fb3cd6-1052-4459-9793-ddc2884c5334", "sighting_of_ref": "indicator--550e5461-0011-4ddf-aa89-c23471674f74", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c547289-246e-4af6-8fab-87c16375c025", "sighting_of_ref": "indicator--5936287a-4b0c-4db7-9c28-976c9c0f3897", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2dc1ff-de06-4dd8-8a3d-22f3c5b3ef4a", "sighting_of_ref": "indicator--5936287a-4b0c-4db7-9c28-976c9c0f3897", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9cd8fdd-7a0e-4e4b-842d-a70580e3b362", "sighting_of_ref": "indicator--5936287a-4b0c-4db7-9c28-976c9c0f3897", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49fd629-e3e3-4791-b980-91a2757ac157", "sighting_of_ref": "indicator--6f1b9a8d-c87a-477c-88fc-2ba940296bd0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1059321-f21f-40b4-a806-c67f5e91e444", "sighting_of_ref": "indicator--6f1b9a8d-c87a-477c-88fc-2ba940296bd0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a35a28-710e-4d36-8639-7768c21d7a1b", "sighting_of_ref": "indicator--6f1b9a8d-c87a-477c-88fc-2ba940296bd0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48eb97a9-109e-42ae-8fa2-e564365c0566", "sighting_of_ref": "indicator--4c2c389d-d3a7-4a91-b126-b793a6ab50b2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbf3266-3114-44be-babd-104903fd1524", "sighting_of_ref": "indicator--4c2c389d-d3a7-4a91-b126-b793a6ab50b2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b4e69b-e7e3-45d5-b179-25ce0593c9da", "sighting_of_ref": "indicator--4c2c389d-d3a7-4a91-b126-b793a6ab50b2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a5376a-94b9-4a16-80a1-0f984725968f", "sighting_of_ref": "indicator--5963105e-8fc9-474a-b964-fea2d103948c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adc12ba-5dcc-4aa8-914e-c79bdfa2c2e4", "sighting_of_ref": "indicator--1ef252d6-71f0-4f7e-ac61-34d570cfeea6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef7591d-2888-40df-92e9-4fa6ab5c4804", "sighting_of_ref": "indicator--ed15b51f-e16b-40b4-a511-469f460fd225", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5961215a-ac6b-4684-be52-d550b7bb134b", "sighting_of_ref": "indicator--263ca908-5eea-48bc-aa16-a0fa57e59f55", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8300a3-4239-4cb9-adcd-9368f0263c60", "sighting_of_ref": "indicator--8c9d464a-8ad9-4a7c-a0e0-9e5aec02e652", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a982cc-78c5-48ca-80f3-4e503fa30b3a", "sighting_of_ref": "indicator--fd9009f5-58c4-4d6c-9f87-97932cbb7c03", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bcbc489-399b-4080-bdbb-770a9794e980", "sighting_of_ref": "indicator--3176a963-27ac-4cfd-9a0f-643f6cf0b8f8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f9fc09-0f6f-4b01-ae2e-f2b9aee73eff", "sighting_of_ref": "indicator--3176a963-27ac-4cfd-9a0f-643f6cf0b8f8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918e16fe-34df-45d3-9991-2222840af366", "sighting_of_ref": "indicator--3176a963-27ac-4cfd-9a0f-643f6cf0b8f8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb739b6-5ded-4719-93ef-e8a14ecd0806", "sighting_of_ref": "indicator--525325e5-6d15-410f-8b52-1d77542222b2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eeaa495-99da-4ed5-96f0-20b34b462398", "sighting_of_ref": "indicator--525325e5-6d15-410f-8b52-1d77542222b2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb908e2f-0343-42b5-9f69-416d4d9d8f71", "sighting_of_ref": "indicator--525325e5-6d15-410f-8b52-1d77542222b2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3af716-c14c-420e-82ec-557fb005e1fb", "sighting_of_ref": "indicator--c9f8c3c0-9048-40df-aa58-78e204ede7cb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a8a526-cf66-4ddf-9e57-643200b85c80", "sighting_of_ref": "indicator--c9f8c3c0-9048-40df-aa58-78e204ede7cb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbe69dc-0aa8-416f-a7fd-3e10a1491ec9", "sighting_of_ref": "indicator--c9f8c3c0-9048-40df-aa58-78e204ede7cb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72832ec6-a87c-4f62-a9b6-83d12d8a76b2", "sighting_of_ref": "indicator--3aaf27dd-5aa0-4d40-8b99-6a611a76fb17", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5d3711-25f0-4947-a065-ce513ccb9d81", "sighting_of_ref": "indicator--3aaf27dd-5aa0-4d40-8b99-6a611a76fb17", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d836305-69cd-4589-869d-09a487e83594", "sighting_of_ref": "indicator--3aaf27dd-5aa0-4d40-8b99-6a611a76fb17", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74bb981-c4a4-422e-982c-b234e55c7532", "sighting_of_ref": "indicator--26165ab0-24ba-4dc0-aac6-c516eb7716eb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38cf042-992c-43ec-acdc-2c549e248cbb", "sighting_of_ref": "indicator--aebc50dc-a2d4-490f-8ac9-55a9a28a22cb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62abf36f-3bec-477b-9eb2-e5ae7b139da1", "sighting_of_ref": "indicator--357a821f-c96b-4125-abcc-da0682c54248", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809c8cbe-6677-4dd1-80ce-dac4ebeb1ceb", "sighting_of_ref": "indicator--357a821f-c96b-4125-abcc-da0682c54248", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706aca3c-db24-4abe-a6b6-4b2a4f5d61fd", "sighting_of_ref": "indicator--bdb3de5d-abfa-4f8b-bdae-77bed5a6a02e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fac5113-ca30-4196-ac2d-f1be654dd0e6", "sighting_of_ref": "indicator--bdb3de5d-abfa-4f8b-bdae-77bed5a6a02e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c511cdb4-140c-4d74-9411-af003787d245", "sighting_of_ref": "indicator--bdb3de5d-abfa-4f8b-bdae-77bed5a6a02e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbeb43b-2144-4c20-ae76-a6a1a6de6a31", "sighting_of_ref": "indicator--b2261759-7b10-4fa1-80cc-e8d9b183f566", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468e6891-aa32-473f-8936-2d2a090d8e24", "sighting_of_ref": "indicator--b2261759-7b10-4fa1-80cc-e8d9b183f566", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad0518e-798b-419d-bcd4-918080c20537", "sighting_of_ref": "indicator--b2261759-7b10-4fa1-80cc-e8d9b183f566", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f06a1f8-0e4e-4e28-8001-e428ed730e34", "sighting_of_ref": "indicator--b2261759-7b10-4fa1-80cc-e8d9b183f566", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9543045-8d17-4d19-a4c8-91960df39039", "sighting_of_ref": "indicator--ec5f9960-76f4-4f95-84f6-811bbdb63018", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91edc58-f399-4348-a402-5b185ff5c74b", "sighting_of_ref": "indicator--1e057a5b-bc46-4ee6-b2eb-9a419f284f38", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93d87e7-cb53-432d-9af8-5fe987bc5e30", "sighting_of_ref": "indicator--5533418c-0fc0-4827-afae-5019cf9d0db2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dee583e-1caa-480a-a2d8-ffb59891711f", "sighting_of_ref": "indicator--cccd3dd4-1323-4de5-a6ba-c882bd014434", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d32724-4e77-4df8-a9c7-7270a8bda28f", "sighting_of_ref": "indicator--c01fc0ce-330f-45ae-977c-b0251be90bb6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0052e033-5b95-4352-865d-c8d66e5df3b1", "sighting_of_ref": "indicator--4e632650-fd35-4f2a-9d3f-fe363c59dc56", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0138cb2-b070-435e-b449-e67fc2b53e70", "sighting_of_ref": "indicator--ee11b1ca-42cc-480c-bc2b-fdfc0aab6ea3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3eb232-359f-4aad-af37-bbd25209965a", "sighting_of_ref": "indicator--5f946f79-c679-4f18-9ad0-f5f047c898fc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211819de-6fcc-4756-952d-7777f6811b90", "sighting_of_ref": "indicator--5f946f79-c679-4f18-9ad0-f5f047c898fc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f442261b-ddf5-4221-86ad-574cda8ef230", "sighting_of_ref": "indicator--57d2969d-c904-4d64-b635-8485460f39fe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88607525-8c29-4249-bd84-7b73b92bf9ad", "sighting_of_ref": "indicator--57d2969d-c904-4d64-b635-8485460f39fe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3956dbfb-6328-4a7c-9483-23a0ecb40c80", "sighting_of_ref": "indicator--4903c554-012e-45c5-8fc1-68012cdcb714", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9c7c3e-bcf4-4bef-87ac-b24e936af8f7", "sighting_of_ref": "indicator--4903c554-012e-45c5-8fc1-68012cdcb714", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15741169-608f-4b9b-ac17-940e693b152e", "sighting_of_ref": "indicator--4903c554-012e-45c5-8fc1-68012cdcb714", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce277c95-6f0a-4028-ad29-49c0ea9b9228", "sighting_of_ref": "indicator--5b42b4c3-535e-480b-82ee-3b6277dba1d5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061cb02c-6d17-4195-bb40-9008a83df7b5", "sighting_of_ref": "indicator--5b42b4c3-535e-480b-82ee-3b6277dba1d5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1029e3-a1a8-4293-b38e-dbded5ca4604", "sighting_of_ref": "indicator--5b42b4c3-535e-480b-82ee-3b6277dba1d5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a87e4e-4435-48c8-96b5-3da263fb5d7b", "sighting_of_ref": "indicator--9bae3209-00c2-4bf0-b192-7ed84e7c1551", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0365c582-d80a-48aa-9d2c-702de4914136", "sighting_of_ref": "indicator--aad568fe-e4ba-41fa-af12-716c24d35027", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e3f55e-95b7-4049-9739-3ca285fdf02a", "sighting_of_ref": "indicator--788a192b-939d-41ef-97ae-471d6c29789b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10267b6-0b07-4d12-a726-f4db06cd2131", "sighting_of_ref": "indicator--73e4e5c6-ef9e-4fc0-b9ba-d05d12d2240d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c00bc9-965f-48a7-9458-cb737b8f6117", "sighting_of_ref": "indicator--053cab03-54bc-4441-a091-f39417faab33", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a21b2bf-d7e5-4e2a-8b40-bb6e7674709c", "sighting_of_ref": "indicator--9d0e92ab-3a5c-46ea-8a91-84395f80baf0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb6a6b3-5790-4a1a-a532-da901cd7f745", "sighting_of_ref": "indicator--4460d022-e359-440c-9193-1f3f075dd14b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5adecaa-1de8-490c-8c51-e6ec02d07c51", "sighting_of_ref": "indicator--d3db840d-ff2e-43a9-b817-7a601e9fb566", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c872873-0f88-4303-bd17-48992742e6b3", "sighting_of_ref": "indicator--354492c4-40e3-460d-a1b0-378f6ec95c53", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f79313-ff6a-412e-b913-2b904a2e642a", "sighting_of_ref": "indicator--84587823-9083-4dbc-92cb-3791dc632533", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a033ce34-155d-4f27-b724-8a858d49f310", "sighting_of_ref": "indicator--3bcddeff-c5aa-419e-944a-9310c2fc5502", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d6851e-a53d-4832-aef7-17cffad47165", "sighting_of_ref": "indicator--7462c01f-f529-4972-ad0b-28595226d79d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5b1813-d6f5-4e36-b57e-a1df16fca449", "sighting_of_ref": "indicator--d4bbf547-d32e-4e7a-b6b7-692754bd0567", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad412687-cbcc-45ab-ae8a-607abf462258", "sighting_of_ref": "indicator--bcd9907a-e363-4cf5-985e-07776f983e44", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518ba90d-e725-4e36-aec0-c8ef1f9aa46e", "sighting_of_ref": "indicator--ab8baf3d-8a1d-4be4-a7f2-b4b893bf5db3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb60cd0-223d-41d0-a0eb-043c68dacc32", "sighting_of_ref": "indicator--819e9f35-dbc9-4395-a3b0-c1f349306d04", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98863af-f659-42cd-a2cc-45b0c59ac8d2", "sighting_of_ref": "indicator--7cfa003f-83af-44a7-bdcb-0974d183b167", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18be3a49-e8fa-468e-94ed-a78876c54768", "sighting_of_ref": "indicator--60cde80c-e09f-470a-85b8-87af3e3b9753", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2a365a-5052-4b17-91f4-9f6f33ba2053", "sighting_of_ref": "indicator--44521e84-30f9-42cb-8f1e-5d0f84603b13", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04a0202-03cc-4d1f-99cb-c36d6a898174", "sighting_of_ref": "indicator--bc37beb4-f585-49b9-8aab-10764f457fce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d7aad3-065b-48e4-a7d0-f3e135592eae", "sighting_of_ref": "indicator--1966f10c-6ec1-41c6-8f45-8afee1a87dee", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38484f82-2dfb-47c7-92de-a99d83ad3809", "sighting_of_ref": "indicator--3157d23b-2cf2-4f93-b224-467ac029738f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c992883-67e5-49c0-9519-6509127d6d07", "sighting_of_ref": "indicator--d0c169c4-17dd-4124-8a41-d3f9bbac0edb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d2cb47-d46e-424a-891c-03043cbc0ef0", "sighting_of_ref": "indicator--d0c169c4-17dd-4124-8a41-d3f9bbac0edb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e8094f-0462-4215-b1f2-9c54a4fc35d0", "sighting_of_ref": "indicator--d0c169c4-17dd-4124-8a41-d3f9bbac0edb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06673bb3-bee9-4b16-909d-d33b5f253d31", "sighting_of_ref": "indicator--9470e865-dea6-4bfa-b853-34c4bb4f1b21", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6684623-ea7e-478d-ac39-1d9529217482", "sighting_of_ref": "indicator--9470e865-dea6-4bfa-b853-34c4bb4f1b21", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2f6923-bbd6-4650-83d7-8b67f1377962", "sighting_of_ref": "indicator--9470e865-dea6-4bfa-b853-34c4bb4f1b21", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71460fa-382c-4c30-a830-604adc7cf708", "sighting_of_ref": "indicator--d61d9139-b672-4a6a-9e59-2e17e5966d8d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459076b8-8895-4fad-a6c9-9bbfef231648", "sighting_of_ref": "indicator--d61d9139-b672-4a6a-9e59-2e17e5966d8d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55d1b94-3c14-4d3c-a18c-4374400890d4", "sighting_of_ref": "indicator--d61d9139-b672-4a6a-9e59-2e17e5966d8d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39fdefb-1fdb-4000-a770-9f637bd7663b", "sighting_of_ref": "indicator--d97c318b-b95d-442b-8c12-fe9ec19f546f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5dacc6-2b42-4da4-ad4f-2bec8e31fa16", "sighting_of_ref": "indicator--d97c318b-b95d-442b-8c12-fe9ec19f546f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9bdc3d-26b7-43bd-8fc4-c30ba18bddd5", "sighting_of_ref": "indicator--d97c318b-b95d-442b-8c12-fe9ec19f546f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25527d4-05fa-43e4-a3c5-823b9bd7e20a", "sighting_of_ref": "indicator--0e8896dd-ecc7-4222-a3bb-5b07867ca1d2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c03d0bf-a979-47ef-842c-e94bb04fb11c", "sighting_of_ref": "indicator--0e8896dd-ecc7-4222-a3bb-5b07867ca1d2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4601bf8-2195-4110-a072-8d90287f3fea", "sighting_of_ref": "indicator--0e8896dd-ecc7-4222-a3bb-5b07867ca1d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322facfd-05f2-4257-a9d5-11acfda7de22", "sighting_of_ref": "indicator--dcd7528b-ef64-4ac6-9708-479342931fb0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcdc0ab6-52e9-46e1-b6fb-e25e2b3950b9", "sighting_of_ref": "indicator--dcd7528b-ef64-4ac6-9708-479342931fb0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a0aaba-6136-4fc3-9ce9-0a2212fe4a07", "sighting_of_ref": "indicator--dcd7528b-ef64-4ac6-9708-479342931fb0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1910b359-255e-454e-aafc-84cc75de5843", "sighting_of_ref": "indicator--4f0fcb05-b95c-4f46-a44a-68a5f0510796", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c51b676a-3235-497b-b83f-0179cc4b4e3c", "sighting_of_ref": "indicator--4f0fcb05-b95c-4f46-a44a-68a5f0510796", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77870ba-5c51-47e5-9a5c-78dc074da16d", "sighting_of_ref": "indicator--2d8650ae-d49f-4779-b5ea-64fff9c4fefa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c04189-3b31-4f0a-8dcc-08204a43ead8", "sighting_of_ref": "indicator--2d8650ae-d49f-4779-b5ea-64fff9c4fefa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c90824a-73ae-4c29-8019-36ced0c5dbe1", "sighting_of_ref": "indicator--2d8650ae-d49f-4779-b5ea-64fff9c4fefa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf628ab-773f-4a05-bb53-878443d08384", "sighting_of_ref": "indicator--718cbc9a-4cf0-469a-b324-cac6466546fe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab53aad4-0ccb-445c-83ca-2cab007a2208", "sighting_of_ref": "indicator--718cbc9a-4cf0-469a-b324-cac6466546fe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42cd785-1d84-437a-a182-20977472cdcf", "sighting_of_ref": "indicator--718cbc9a-4cf0-469a-b324-cac6466546fe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cab28ab-35e1-4c92-a644-272e629edb99", "sighting_of_ref": "indicator--eba2beaa-0a27-4ac6-9dec-4bfcdc1503b9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d3ab1b-23d1-4dcc-991e-fdd6ae801bf9", "sighting_of_ref": "indicator--eba2beaa-0a27-4ac6-9dec-4bfcdc1503b9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706463df-a7f6-4597-b477-4ee4c25ac77f", "sighting_of_ref": "indicator--eba2beaa-0a27-4ac6-9dec-4bfcdc1503b9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70864747-bedf-44df-a9b5-0faea8c3d00b", "sighting_of_ref": "indicator--1645b6ad-3af1-4367-8840-968099ab1d6b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd06607-e3f8-4ad8-b778-c5586ede484b", "sighting_of_ref": "indicator--1645b6ad-3af1-4367-8840-968099ab1d6b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d10382-3138-40cb-8572-dc3de5668af5", "sighting_of_ref": "indicator--1645b6ad-3af1-4367-8840-968099ab1d6b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37ff85d-0a46-4bcc-81c2-8ca9a301b951", "sighting_of_ref": "indicator--ceab8d5a-6c7e-4bff-9309-02fcf627d717", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05aff1e-de97-49fa-8436-681201f49515", "sighting_of_ref": "indicator--ceab8d5a-6c7e-4bff-9309-02fcf627d717", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8cba3d-af01-4010-983f-f14e26b467d4", "sighting_of_ref": "indicator--ceab8d5a-6c7e-4bff-9309-02fcf627d717", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27797747-517d-44f6-ba58-19e37df138d0", "sighting_of_ref": "indicator--f8e76267-b81f-4ee0-bc6e-622cbfbbc935", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b76d5a-3e2a-4328-9c62-55008b80a77f", "sighting_of_ref": "indicator--f8e76267-b81f-4ee0-bc6e-622cbfbbc935", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110cb288-c950-4423-b401-03115ddde885", "sighting_of_ref": "indicator--f8e76267-b81f-4ee0-bc6e-622cbfbbc935", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4cb7f5-2998-44df-a7c3-9caf601249e4", "sighting_of_ref": "indicator--154650d2-e770-417c-94b0-a0b7ce4ea064", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4044a8-9a72-454d-9bbf-8a4a4c2ab4b5", "sighting_of_ref": "indicator--154650d2-e770-417c-94b0-a0b7ce4ea064", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a921ef-2b35-4f73-a7c4-72c1ba863e37", "sighting_of_ref": "indicator--154650d2-e770-417c-94b0-a0b7ce4ea064", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78689e50-d0bd-4cea-8bec-b6d8680a299d", "sighting_of_ref": "indicator--6a32dbd0-4dbc-40b9-8769-f0f84a65e9d2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa25dea-ab3b-49cb-9e8c-5fd561f9a75b", "sighting_of_ref": "indicator--6a32dbd0-4dbc-40b9-8769-f0f84a65e9d2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b2ff96-ea91-4433-908d-fad6df94fe93", "sighting_of_ref": "indicator--6a32dbd0-4dbc-40b9-8769-f0f84a65e9d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6115b5-b5b8-4330-a242-7134d1258e74", "sighting_of_ref": "indicator--78ff848d-f178-450c-b5da-cb04b45c906c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc473fe7-6756-4e7c-933e-ef9cda8ba405", "sighting_of_ref": "indicator--78ff848d-f178-450c-b5da-cb04b45c906c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4773c7d7-9a4c-44f8-96ea-6b91726ebc38", "sighting_of_ref": "indicator--78ff848d-f178-450c-b5da-cb04b45c906c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f21122-2cb5-4bb2-b7ef-78405fb4902e", "sighting_of_ref": "indicator--82581327-34cb-46ca-b179-07316c5498bd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36afe46-672e-4fd8-8e14-2eb3eece5b49", "sighting_of_ref": "indicator--82581327-34cb-46ca-b179-07316c5498bd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a79ee1-d700-41be-8000-3ed445977d58", "sighting_of_ref": "indicator--82581327-34cb-46ca-b179-07316c5498bd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52be6aea-9e5c-49ac-8871-7128d4393931", "sighting_of_ref": "indicator--5aa1d6e7-9a01-4136-8bfa-d51520cb0115", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3c7f85-4c13-4003-9bd5-6966e93fbc8a", "sighting_of_ref": "indicator--5aa1d6e7-9a01-4136-8bfa-d51520cb0115", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28513a14-42bb-449c-9154-0d454a88b979", "sighting_of_ref": "indicator--6d918cc6-013e-426c-9f84-1eb7fe4809bf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdb45bc-8f1f-4940-a72d-de8356fe2926", "sighting_of_ref": "indicator--6d918cc6-013e-426c-9f84-1eb7fe4809bf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05771c36-ea3d-4404-b547-ae5b85d25699", "sighting_of_ref": "indicator--6d918cc6-013e-426c-9f84-1eb7fe4809bf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8eb8e87-c31c-408e-bd27-a81a507e4ba1", "sighting_of_ref": "indicator--bf02d456-d8ef-46b1-9e21-dfcc33c704fa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fd5d1d-d98d-4fd2-8a6b-984e32d632cb", "sighting_of_ref": "indicator--bf02d456-d8ef-46b1-9e21-dfcc33c704fa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3666a18e-99b7-4176-9352-8f45a3e9634a", "sighting_of_ref": "indicator--bf02d456-d8ef-46b1-9e21-dfcc33c704fa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da1345a-9a9e-41f9-887f-eb217ff21488", "sighting_of_ref": "indicator--6fede4da-6b3e-4167-8138-faae1405422e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d32b093-3b40-4765-9409-e6f2d054244f", "sighting_of_ref": "indicator--6fede4da-6b3e-4167-8138-faae1405422e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9edf5e-3f35-4fc5-b63a-dceb7e214ee4", "sighting_of_ref": "indicator--82fe60c5-031b-4879-8ebe-cadcab0e76f2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b500700c-ef2c-433a-91eb-e7b613a5ef33", "sighting_of_ref": "indicator--d67b8a97-1d09-4e9e-90c7-24b2dd00202b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9587dae7-5bcf-4bdf-a1f2-f3ddc7730070", "sighting_of_ref": "indicator--d67b8a97-1d09-4e9e-90c7-24b2dd00202b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82130d03-1960-4659-9eb4-c3294f95d134", "sighting_of_ref": "indicator--1ff1da0e-476e-46d1-86b8-24b15efb0475", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11374ea7-4b0a-4dff-af87-fb922b213701", "sighting_of_ref": "indicator--946d3e2e-ac20-4297-9f7e-d660c56200e3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43975a9-d698-4185-8461-5ca4bddf0eae", "sighting_of_ref": "indicator--946d3e2e-ac20-4297-9f7e-d660c56200e3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4275b1f2-82a9-4464-81d5-0df0a28ab6f4", "sighting_of_ref": "indicator--946d3e2e-ac20-4297-9f7e-d660c56200e3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795b338e-69db-48ad-866f-207f08b6eaed", "sighting_of_ref": "indicator--7afea2bb-b1e0-4728-ad66-af65f25dbd55", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43151a58-c271-448c-8158-a23588775505", "sighting_of_ref": "indicator--7afea2bb-b1e0-4728-ad66-af65f25dbd55", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0377a9-2aa5-4f23-b981-da2ce773fccf", "sighting_of_ref": "indicator--c91a129d-059e-4cdc-ae74-58024203ebb0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5121d325-0f79-4cad-9573-3fef8e51aad6", "sighting_of_ref": "indicator--725a59cd-1b03-4bca-8547-b845bb268171", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc21ba4-b60f-4a54-83c1-fde79768b6e1", "sighting_of_ref": "indicator--ac021a14-0fad-4b2c-b761-686e37527b7e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d3bd7e-cc77-4515-ba0d-6687aa5720c1", "sighting_of_ref": "indicator--c1842753-2a13-4b25-a5b6-8170d43e9b36", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11bdf174-d2c6-4cf0-80ef-caca4c346737", "sighting_of_ref": "indicator--c1842753-2a13-4b25-a5b6-8170d43e9b36", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96227380-f754-4fbf-832d-c6ea1f86578b", "sighting_of_ref": "indicator--c1842753-2a13-4b25-a5b6-8170d43e9b36", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d618cb-3ec7-485f-9d49-d5b521cef93d", "sighting_of_ref": "indicator--58902586-348e-401c-bbb2-85821bcf4fe7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37cf350-7e78-44e5-a6d5-6f5173370abd", "sighting_of_ref": "indicator--58902586-348e-401c-bbb2-85821bcf4fe7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4e0646-fdbe-4d27-bc03-378bab28aa80", "sighting_of_ref": "indicator--d4126c5e-1a3b-43cf-bebf-8dd07462efce", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d85febc-484a-4dcf-b24a-d47f5b7dc8a4", "sighting_of_ref": "indicator--d4126c5e-1a3b-43cf-bebf-8dd07462efce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649184c7-2cc3-40b1-bbc7-b6f056c2c406", "sighting_of_ref": "indicator--d4126c5e-1a3b-43cf-bebf-8dd07462efce", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6503164-2636-4340-9427-d87830b023c9", "sighting_of_ref": "indicator--5927f06c-c89b-41b6-8733-9e20f575f6e3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92de67fc-edae-4db2-869f-d1c66e8d80c0", "sighting_of_ref": "indicator--5927f06c-c89b-41b6-8733-9e20f575f6e3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d513019d-344a-4345-a2ee-c2295f59b460", "sighting_of_ref": "indicator--5927f06c-c89b-41b6-8733-9e20f575f6e3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ff7ec2-f739-46da-9d60-c448f4f69b5e", "sighting_of_ref": "indicator--c8156db1-1203-4d93-95c9-d4d6cc011d96", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf42e2e6-4e20-48be-809c-fba9b87c228b", "sighting_of_ref": "indicator--22727245-0436-4fbb-9bcf-64a730e60602", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5b0440-6c7b-4844-a874-e3439458fd92", "sighting_of_ref": "indicator--22727245-0436-4fbb-9bcf-64a730e60602", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9f9f52-5704-4390-bd94-5cd740cbb148", "sighting_of_ref": "indicator--16abdb33-1941-4a32-9062-4eda95848efa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea6b0f5-5c0c-417b-8bf7-115985bc6607", "sighting_of_ref": "indicator--87a5379c-d77e-4dcc-9361-6d60121391d2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90cc918-15c1-4897-bbc9-3e946c2680a4", "sighting_of_ref": "indicator--22b9dad5-04b4-4a61-b71e-a49e9517dfc1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6c37d6-1df9-498b-87e6-b465b49211a7", "sighting_of_ref": "indicator--f0f406c9-4993-4fc4-9fc0-707e0a685b09", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3cfbb2e-112e-4033-a6f6-607b9db9e2c9", "sighting_of_ref": "indicator--f0f406c9-4993-4fc4-9fc0-707e0a685b09", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30900c22-e5c0-4d23-91ef-0ab3f47d8968", "sighting_of_ref": "indicator--45987643-0fcc-4ba9-bf87-7ff05f6e6929", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f111c2a-af79-4276-9715-9538ceecca65", "sighting_of_ref": "indicator--cef3908d-c427-4e0b-abbe-7d2425a1e67b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d95c42-ade0-4a0d-9814-83cf19f71061", "sighting_of_ref": "indicator--cef3908d-c427-4e0b-abbe-7d2425a1e67b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa0e12d-1c0b-437f-b2e9-edfcc43f149e", "sighting_of_ref": "indicator--049b81d7-879e-4d76-96ac-8e8450d2ab2c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6b20ed-5481-4012-bd5b-5d3229ce3893", "sighting_of_ref": "indicator--907fe458-2bdf-4c3a-9159-6e893aefae90", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f244d6-554f-4383-8000-6ed4ccc951f5", "sighting_of_ref": "indicator--8d7fbd38-f822-42aa-8cb1-0e0ea8e4064c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a625bb2-8da9-439a-8216-fde1ac6b2160", "sighting_of_ref": "indicator--b700c27e-70ae-4344-948c-21bccc1b6197", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81bae64-2c69-4ed6-bedd-22f8f7c75871", "sighting_of_ref": "indicator--e2971ae7-9689-4de0-afbd-aa6431906325", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9b6e26-094d-4d1d-9f0f-2f8d4caa42a9", "sighting_of_ref": "indicator--1a6a2188-b946-4d96-ba3d-04a5547288a1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03fa19c4-e051-4e7a-955f-b1cbceaeee45", "sighting_of_ref": "indicator--1a6a2188-b946-4d96-ba3d-04a5547288a1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b90d9cb-ffce-4be3-87e4-90ef7f7fdf37", "sighting_of_ref": "indicator--fd7b71d8-bb62-4963-a810-a73efd7e96af", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14000ce5-73ff-49a0-a088-66614213798c", "sighting_of_ref": "indicator--56c8403e-163d-421e-b64e-bf84767337f3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e40a30e-320b-437e-8577-5cf2e96f8027", "sighting_of_ref": "indicator--ea7f8534-9a05-4e8d-bc65-dfe115553358", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f3f854-29d3-4998-8d2d-6bbff066d2a6", "sighting_of_ref": "indicator--ea7f8534-9a05-4e8d-bc65-dfe115553358", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24640f4-3f30-469a-bbc0-7d9fa9a9f3ea", "sighting_of_ref": "indicator--50d028ff-9d56-49ea-b157-9a0698643ccf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f781e03d-eb2d-4754-9969-35653e53a15a", "sighting_of_ref": "indicator--3b5e4ed3-aaf3-4df7-b9b4-70967f2dfc29", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044c256a-0d0c-41c3-91ad-e8035e3b2ca6", "sighting_of_ref": "indicator--3b5e4ed3-aaf3-4df7-b9b4-70967f2dfc29", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a8dcfb-8372-406f-a05e-e69f78be1899", "sighting_of_ref": "indicator--0a4d8690-64a7-42e9-9e6c-d179824d8261", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26e69d0-335d-4c5f-88e3-5b565a01b95d", "sighting_of_ref": "indicator--67703a61-abf3-4c30-8408-d884c1f3f80a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7d8227-19eb-421d-ad29-6b70d43d5cb2", "sighting_of_ref": "indicator--3cab8d24-f66f-4ff0-ac4d-11582a9612fa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173a91a6-aef9-46d7-a028-82268c459cce", "sighting_of_ref": "indicator--3cab8d24-f66f-4ff0-ac4d-11582a9612fa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb6e56b-ba40-4167-b720-bc3a4ad59017", "sighting_of_ref": "indicator--d536345d-c188-43ef-8c45-4dedf914ffcf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9aa55e7-3914-4caa-8818-b74a6e8f7771", "sighting_of_ref": "indicator--af56af23-eec0-4c50-bb39-27055de12ae2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f04ce6-9e80-4f69-8833-6334d7d816f7", "sighting_of_ref": "indicator--e64d8cef-0b4d-4d90-a77d-e848f3d71454", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9be0b8d-beb9-4ccb-99a1-a53724b92a75", "sighting_of_ref": "indicator--0f085ef5-1c48-437b-96e8-414d29fbc877", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a864299d-ba3f-485a-9eab-42eb7d65c3ef", "sighting_of_ref": "indicator--ce8b6645-7531-426f-b900-f0d91273be56", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4079afd-d52e-4e20-8b54-f9ad6654965b", "sighting_of_ref": "indicator--1eef21b8-980f-488c-b90d-f9215d7d9b97", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccd7f44-fb49-4c89-86ff-56322eae4809", "sighting_of_ref": "indicator--bc753b67-9ed8-4abb-916a-1f8407b3e565", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f7fa74-2be0-40b1-8be7-97e2ab30d4c5", "sighting_of_ref": "indicator--efd00ba6-cac7-41af-a70b-4d1ec065ab96", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85af5098-31c0-4d7d-9491-1bd5ebaec1fd", "sighting_of_ref": "indicator--2100f03d-76fd-427b-8129-bbea7123d68c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1b3ec7-be4d-4fd9-aac5-03b14a729037", "sighting_of_ref": "indicator--aafc6fda-dcda-4f7c-82ea-16435924a9e0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea9c9de-27be-4969-b436-ac6aecb7aafe", "sighting_of_ref": "indicator--aafc6fda-dcda-4f7c-82ea-16435924a9e0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b5987c-3e8d-4a1b-a877-c87c80fa04d9", "sighting_of_ref": "indicator--84289371-ddbe-4043-8c6d-eee69c875244", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c64a2d4-8ec7-4fe0-af07-b0854ec13535", "sighting_of_ref": "indicator--06031e00-472b-4d52-a1a0-6769782d8f2e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556af9d2-0a18-4437-9dda-e5c34dfc18dd", "sighting_of_ref": "indicator--9d6f8833-841e-4548-8297-06930e0eefe2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6a3e15-73f1-4db3-9467-e57df267b87c", "sighting_of_ref": "indicator--d5fa5cce-6d01-48e9-bc3a-d967f0d0c213", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a177443-0349-4238-906a-d24380b81958", "sighting_of_ref": "indicator--df01512c-a902-4e8b-ab26-74676d6716f7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf24c92-b1d3-487b-a9a8-ab80b91b201b", "sighting_of_ref": "indicator--df01512c-a902-4e8b-ab26-74676d6716f7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4fc8b5-38fc-4960-bb66-1a765e513489", "sighting_of_ref": "indicator--316e7ba6-3111-4ee0-8d51-009fe703905c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7368f0-4089-4fb2-980f-1f5662c79c11", "sighting_of_ref": "indicator--9053e8ca-d130-4b98-b56c-266fd8c7bd91", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a8acbb-33e5-41bc-8a85-a5528ca3c77e", "sighting_of_ref": "indicator--9053e8ca-d130-4b98-b56c-266fd8c7bd91", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfa648c-f954-43bf-8eca-355109e61e7b", "sighting_of_ref": "indicator--9053e8ca-d130-4b98-b56c-266fd8c7bd91", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f83740-1c0c-489c-a757-dbcddf22a965", "sighting_of_ref": "indicator--a3b33088-4907-4a88-a0f6-3a6aeed0d1e5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983babbe-13a5-42ab-8766-29aead8e3f9c", "sighting_of_ref": "indicator--d9d34fc1-44b7-4ff4-8658-1f87e954463e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2da1e5-09bf-44ce-aa56-7152f64fc8a7", "sighting_of_ref": "indicator--e1ee3ecf-0dfd-4801-8017-6eeac1991fa9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709e8730-e98e-45ca-a405-32a54019794e", "sighting_of_ref": "indicator--773541cb-a982-43d7-bf19-332bcb0237ce", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530c7a56-4eb2-44ca-99a8-e3d939255e22", "sighting_of_ref": "indicator--b77cb0f0-e80f-4485-a49a-a62270ebe60e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd03704-e3a4-4bf6-bd3d-65246804653e", "sighting_of_ref": "indicator--529d85cd-d349-47d9-b3e0-009303ebea31", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571f2ad0-9c32-47e2-a7f3-7339bf7a1da7", "sighting_of_ref": "indicator--57cdf113-0058-4b5f-8d36-ec8540fa378a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf601be9-cf17-4ab5-ba81-9ce4d0da838c", "sighting_of_ref": "indicator--34084e62-d069-4964-9a3c-7166a27cf471", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec68d53a-3f3a-4b2c-ae79-85221e834fad", "sighting_of_ref": "indicator--34084e62-d069-4964-9a3c-7166a27cf471", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6363b4d8-4f3f-47b6-8c67-723c9d5a5d60", "sighting_of_ref": "indicator--34084e62-d069-4964-9a3c-7166a27cf471", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d612da-ae9c-4ee3-83d8-45af51be5199", "sighting_of_ref": "indicator--475ab29d-30ee-49ea-91f6-220e3b269923", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e62fbd-07d7-492a-90de-1657741e4315", "sighting_of_ref": "indicator--d34b5d2a-54ef-4532-8cbf-5048d2fa36ef", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacdcd05-0875-4c75-ba13-5d8a53ca71b5", "sighting_of_ref": "indicator--d34b5d2a-54ef-4532-8cbf-5048d2fa36ef", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e46ad2c-60da-4185-96ad-fed0c5fbd3ad", "sighting_of_ref": "indicator--d34b5d2a-54ef-4532-8cbf-5048d2fa36ef", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e959ef-ee42-46a5-9f35-9845b9959af0", "sighting_of_ref": "indicator--03bb6fbb-6612-4497-b821-39f0486c8f40", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce52407-d1e2-425c-95c0-d48692299e6f", "sighting_of_ref": "indicator--03bb6fbb-6612-4497-b821-39f0486c8f40", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f976cc2b-a4e4-4117-b8f9-7f0e5889708f", "sighting_of_ref": "indicator--d65b1ab7-a67c-45b9-803f-dc82c29c3b1c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2a1d0c-106a-46d9-9ecc-1b24acfc704c", "sighting_of_ref": "indicator--82b240af-2cc0-4ff9-a8c3-bb6d8e10a1f2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f485cc-b45b-4b68-b98f-24476e45cd79", "sighting_of_ref": "indicator--82b240af-2cc0-4ff9-a8c3-bb6d8e10a1f2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ee2ced-074a-4732-85b1-0811ff0e6773", "sighting_of_ref": "indicator--d8353c25-4679-443c-99b5-5d62c9920465", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864d8b6d-75f5-4b95-84cc-0c3fffdbc252", "sighting_of_ref": "indicator--4a72363b-135b-4fe2-86c3-aa4f2133aa64", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe3973f-85c3-4660-b9fe-200c4cd54c9d", "sighting_of_ref": "indicator--4a72363b-135b-4fe2-86c3-aa4f2133aa64", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ddc4c14-9f01-45db-ab20-5c5eafaf4be9", "sighting_of_ref": "indicator--4a72363b-135b-4fe2-86c3-aa4f2133aa64", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9693ff06-66ab-4674-8b6c-759aa0497725", "sighting_of_ref": "indicator--3678fe66-8048-40ac-8a03-26f01c96c46f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4d0837-1cff-43a4-9498-12d668913fce", "sighting_of_ref": "indicator--3678fe66-8048-40ac-8a03-26f01c96c46f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8cb549-f464-4129-a337-3d2f8c8bf61d", "sighting_of_ref": "indicator--4087b4ee-7339-4420-8a45-2b4defdd48cd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff9a339-159e-4519-b394-809242d06e38", "sighting_of_ref": "indicator--4087b4ee-7339-4420-8a45-2b4defdd48cd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a2cc95-d16b-4730-b0f4-74b59667f6fe", "sighting_of_ref": "indicator--4087b4ee-7339-4420-8a45-2b4defdd48cd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5875ee12-64da-40c6-9860-eb744f6bb4af", "sighting_of_ref": "indicator--16fd6d8e-0c25-4cfd-83e1-b7401b7d7e3f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278869ee-dc82-441a-9bdc-41d44755b959", "sighting_of_ref": "indicator--9cb64711-dfe9-4983-8f08-c29e603fa935", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3dfd85-5979-425f-ab62-9dcba26c8083", "sighting_of_ref": "indicator--a52439a6-8269-444c-8a4a-4a2edb4c39c7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927f1bb1-cd54-4a4f-82c6-1480428373f5", "sighting_of_ref": "indicator--edb1cafe-06f7-4433-8276-b8f984359adc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d78d3d3-f143-4a30-b90e-3ed19167539d", "sighting_of_ref": "indicator--1281ab61-0835-4a61-8356-f29dac522076", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe7e66d-bfbf-4194-a976-a53c1e917aa4", "sighting_of_ref": "indicator--58b955a0-ae93-4f52-9339-a3e3f48887f2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8cc1d1-23da-4cca-b72e-390ed38048ec", "sighting_of_ref": "indicator--58b955a0-ae93-4f52-9339-a3e3f48887f2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fe8503-ba52-45b8-b587-32e339081187", "sighting_of_ref": "indicator--58b955a0-ae93-4f52-9339-a3e3f48887f2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211bbe3c-f0a4-4183-9ba5-bbc913c2c8fe", "sighting_of_ref": "indicator--bfeb845d-ff7f-4858-8c9d-92948ca5a68e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c41b3d-03c3-429d-8e19-4d3313638790", "sighting_of_ref": "indicator--bb88aa15-51a0-4bbe-9fac-44089f907db9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86e69cf-adc3-4ab8-9f93-ecf07cb2416f", "sighting_of_ref": "indicator--022382bc-0278-4c31-b160-3ddb5df012a3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8feacf-b18a-46b6-b452-90e14b3b1774", "sighting_of_ref": "indicator--022382bc-0278-4c31-b160-3ddb5df012a3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21138879-775d-4e1b-9cd3-7880e6498ee9", "sighting_of_ref": "indicator--99fa0ab4-3ec4-4f16-978e-09c21c889c53", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e43d12c-3abb-4a69-bb78-54b600265693", "sighting_of_ref": "indicator--99980390-41b5-4a5c-b6a1-31cac0b44f06", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8de2471-49c1-4afe-83cd-57e47d6b3c1b", "sighting_of_ref": "indicator--77130c45-3da0-4919-ab64-f3a58c411f3d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e171ebfd-d808-461f-a5b1-d89caa3fffc1", "sighting_of_ref": "indicator--77130c45-3da0-4919-ab64-f3a58c411f3d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1bd528-0f3b-4847-98c6-995994fd6523", "sighting_of_ref": "indicator--e773bdd6-27fc-4677-9941-815b983f2dbb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa53aa2-5e74-48f9-a5f9-7adf99eea295", "sighting_of_ref": "indicator--e773bdd6-27fc-4677-9941-815b983f2dbb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be96420-7f75-48c7-83fd-576992a1bdc9", "sighting_of_ref": "indicator--e773bdd6-27fc-4677-9941-815b983f2dbb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567b2a9f-5abf-4782-866d-6b6dced98d9b", "sighting_of_ref": "indicator--bd2b63b1-3d99-421c-8229-8aabb291d445", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330ecb88-b28b-404b-bc17-4d6277459def", "sighting_of_ref": "indicator--bd2b63b1-3d99-421c-8229-8aabb291d445", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfa8229-c12f-453b-a7d8-0d8b5aa13ff3", "sighting_of_ref": "indicator--328f6e35-343c-4212-808d-feff616777e0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbf57f0-e7e5-4e26-9a44-52c7565bb34a", "sighting_of_ref": "indicator--d5fcf932-1718-4cd8-9d46-f8d9edb1417e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef6637b-7de8-4a77-9e6d-d7c03dabd87e", "sighting_of_ref": "indicator--b1ddd0f3-8fe1-4f22-8670-a78a284971f2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133c65e9-ced9-4e35-8097-59eea9416b11", "sighting_of_ref": "indicator--b1ddd0f3-8fe1-4f22-8670-a78a284971f2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d47f8fa-5de2-4f46-9fc7-befe7adcc75c", "sighting_of_ref": "indicator--0232638e-0dee-4f59-95db-4056a89c88af", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca93ccb-1a95-40e7-800b-e4d934353f3d", "sighting_of_ref": "indicator--0232638e-0dee-4f59-95db-4056a89c88af", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4f609a-9b85-4cd1-8406-080cbc1912a6", "sighting_of_ref": "indicator--0232638e-0dee-4f59-95db-4056a89c88af", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda8d839-4219-4063-a766-6bdea7207af3", "sighting_of_ref": "indicator--a223179f-6af5-46b8-b106-c21fbc9981ea", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e451da-9fe5-44cf-99c3-1ba40bed31b4", "sighting_of_ref": "indicator--a223179f-6af5-46b8-b106-c21fbc9981ea", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c14682-5d88-4e11-a9b1-48876fc6d0a8", "sighting_of_ref": "indicator--a223179f-6af5-46b8-b106-c21fbc9981ea", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79927482-28aa-49f2-852a-a29541d9e59c", "sighting_of_ref": "indicator--64d52d1f-1e61-48e1-932a-d5d30c2eafd1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd990c4b-4987-4a2b-9953-19dae9c0f75b", "sighting_of_ref": "indicator--64d52d1f-1e61-48e1-932a-d5d30c2eafd1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd78649-f0ea-449f-82c8-729d0ace002b", "sighting_of_ref": "indicator--64d52d1f-1e61-48e1-932a-d5d30c2eafd1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af252a0-f663-4c12-bfe5-6e44b4ed1ed7", "sighting_of_ref": "indicator--6b193334-1dce-4250-a9ae-027594b58ab4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89c3bb3-aac9-4314-8199-f4fdeb2dbbf1", "sighting_of_ref": "indicator--6b193334-1dce-4250-a9ae-027594b58ab4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2187e582-5474-436c-b829-ff847bea1a92", "sighting_of_ref": "indicator--6b193334-1dce-4250-a9ae-027594b58ab4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d237e3b-eafc-4232-99f2-f952041b3434", "sighting_of_ref": "indicator--b6902141-7f08-456a-887a-6816c2cb6413", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f681306-07c3-4c85-89a3-6de642770764", "sighting_of_ref": "indicator--afa6a6c1-0511-46e6-b200-0be6b36c4a55", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00135382-67b0-416c-8147-c308ef8954e0", "sighting_of_ref": "indicator--d71e6eb8-df05-455a-be65-e01f7123e352", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c134059-a9db-4848-8e89-cd1d66002e77", "sighting_of_ref": "indicator--aed1af7c-0ed6-472b-b5a1-16f47e8a88b7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f72722-7191-4e3f-9b7d-14ecfe093e30", "sighting_of_ref": "indicator--aed1af7c-0ed6-472b-b5a1-16f47e8a88b7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f595c350-03f3-4c2f-92d0-77e9c9e4f9c3", "sighting_of_ref": "indicator--aed1af7c-0ed6-472b-b5a1-16f47e8a88b7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9a7865-3231-4621-9efd-9ba25960b34d", "sighting_of_ref": "indicator--78611f90-4736-45c1-8264-8a8ed8d3c2e6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095273e1-609f-41c7-84d0-321bd3797496", "sighting_of_ref": "indicator--78611f90-4736-45c1-8264-8a8ed8d3c2e6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa63661-32a3-4519-ac8a-cb6b250e68b7", "sighting_of_ref": "indicator--78611f90-4736-45c1-8264-8a8ed8d3c2e6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf7b790-8a36-44a9-ae00-8a1edea25708", "sighting_of_ref": "indicator--6afadd4a-ca8b-4d4f-a997-c43ff3c722e6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed00d65-f999-47fb-bb6c-77ff8b4c8aa0", "sighting_of_ref": "indicator--859a83db-5ec0-4f4f-aa34-95ea16a4a1a8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcd5afa-1f75-42e1-b981-4480ac9036dc", "sighting_of_ref": "indicator--42b59f1c-bc3c-4fd3-8e54-b0337ac2d08a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f705ce-d3ff-4cb7-815d-fd6d35233e76", "sighting_of_ref": "indicator--222d0b70-b9de-4c54-9bc0-86961baa0bf2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16aaba5f-4a1f-4b66-bd93-02d9fab566aa", "sighting_of_ref": "indicator--ce9803e3-525a-4e8f-a5fa-ddfd3f445c16", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7545d36-6159-4984-88fa-8f1cab046c99", "sighting_of_ref": "indicator--33ae1e40-81d3-4f82-8139-fda208d59766", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e7d87a-5e61-462e-93aa-45e8a916c1ba", "sighting_of_ref": "indicator--aa9267c5-74cc-49de-bb1e-46d4e43142a2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044b7668-eee9-4393-84cc-072254b522a7", "sighting_of_ref": "indicator--63800566-dc36-40ce-b794-78c8856acda2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc40af1-7a02-485d-bfdc-689c1da9373e", "sighting_of_ref": "indicator--cf283ba8-2ede-4107-a0ff-b413d71ab600", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396db0a0-a95a-4f68-9dd5-e366b8ad0598", "sighting_of_ref": "indicator--41e94265-8235-413d-b224-127ae144e9a1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0ed4bb-e45c-4522-9ce9-db72130f8ba9", "sighting_of_ref": "indicator--41e94265-8235-413d-b224-127ae144e9a1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6a9cca-e6a6-469a-b76e-dfb324d68247", "sighting_of_ref": "indicator--1eb16c2d-20cc-4116-b0c6-885dc8120b6b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c260b4e-1e94-4892-a1c3-5b3b44ea2dd5", "sighting_of_ref": "indicator--00ea1610-86e1-49cd-8c05-11e681ac81e8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a8b42f-c1b6-455c-a2c7-2b00ea80dbec", "sighting_of_ref": "indicator--00ea1610-86e1-49cd-8c05-11e681ac81e8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1979b8cc-94a6-4106-b0cf-bf2625e7b75c", "sighting_of_ref": "indicator--00ea1610-86e1-49cd-8c05-11e681ac81e8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3977a5ad-5e86-47aa-a70f-51cc36777496", "sighting_of_ref": "indicator--dd838801-d3d8-4dfe-9f38-55aa22d94376", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e7e7dc-ec7c-40fc-90db-2e4b254ba58e", "sighting_of_ref": "indicator--e1ec23da-3fc2-4be9-b58c-3223079fe723", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53b2221-1293-478a-9d01-499c6d1f5d82", "sighting_of_ref": "indicator--dd234910-df65-45dc-982b-234cd94db409", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6d8bef-0490-427e-bf89-ce950bad64f0", "sighting_of_ref": "indicator--621e24b9-0707-4b9a-9cc8-0df89fd238bc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94ee0b2-1711-42d1-9a7d-9d33a0c33292", "sighting_of_ref": "indicator--0e78580b-3bdb-43d5-b1d4-3339fa27a122", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a26beb9-b058-4439-97a4-c6aeabc09bfe", "sighting_of_ref": "indicator--9f110b44-603c-4423-a539-4b1555afad78", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea58d12-09d0-4cff-87b8-691b7b8a072b", "sighting_of_ref": "indicator--9f110b44-603c-4423-a539-4b1555afad78", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3711bd0c-fcb7-44b5-8e83-88424abcae5d", "sighting_of_ref": "indicator--9f110b44-603c-4423-a539-4b1555afad78", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73405dbe-3053-4b4e-9c10-10f65aabddcb", "sighting_of_ref": "indicator--88fe05e2-0f97-4966-9aba-082c58320a09", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3d50b8-c9d0-41c9-8c77-5bf390692cf4", "sighting_of_ref": "indicator--88fe05e2-0f97-4966-9aba-082c58320a09", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73c97a1-b897-4708-b320-6b38dee44640", "sighting_of_ref": "indicator--88fe05e2-0f97-4966-9aba-082c58320a09", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55617c41-744a-4438-b069-ec7ff597e5ed", "sighting_of_ref": "indicator--b068515f-facd-4a2b-926c-9ed711458c7b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21935cd-0047-4f39-ae56-16e069c05fd2", "sighting_of_ref": "indicator--8419ebc4-d163-4f87-8b42-0e915e1ab328", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a2838f-92c1-41a5-a54c-feecfc8394b1", "sighting_of_ref": "indicator--39044dd0-897e-4659-825a-ca5879dcf092", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be9d600-8215-4cdf-90e7-73ece34626da", "sighting_of_ref": "indicator--1f5c4d4e-ef62-4bf5-a0d1-a29fa8b74d2c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176aef34-e6cd-4036-8259-27a6acf56d57", "sighting_of_ref": "indicator--1f5c4d4e-ef62-4bf5-a0d1-a29fa8b74d2c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948df38b-d2e7-4bb7-80fb-0d57aff2c605", "sighting_of_ref": "indicator--12d16d22-a82b-493f-ba66-a2d42ecf82ee", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d7e962-9b5a-4035-9e0d-ff62a4d75444", "sighting_of_ref": "indicator--a3a9c710-9278-4192-beb2-24461d4c4aa5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4537cc1f-3f43-4dd9-a9da-79ec359f056b", "sighting_of_ref": "indicator--0366f4ef-bc78-46b7-8a12-b5559d84cbcd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68f4e20-24cb-46ee-9f83-420bc6b996e6", "sighting_of_ref": "indicator--eff33a9e-e4ac-483f-bb58-e24142039eeb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b286af-05ef-4237-ad03-a4efc6a8d5c2", "sighting_of_ref": "indicator--9749b079-c865-4cc8-aed8-8f158cdc47e4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee911d6-68fa-49b5-b989-6e9ef3282373", "sighting_of_ref": "indicator--725a5882-6586-4f04-9f11-c3b1e18d139c", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b735eda-7c19-452b-9a83-a018c90cce7e", "sighting_of_ref": "indicator--c1cdef78-4fd7-49b7-a31e-a5e6d6ca4ed3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8010820-90ab-4904-84e8-60c2f3f7e891", "sighting_of_ref": "indicator--c1cdef78-4fd7-49b7-a31e-a5e6d6ca4ed3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffd6571-36f1-445b-8660-3c10245b4d29", "sighting_of_ref": "indicator--85ef6e1b-1e10-4204-9f4a-f45b31dd0d84", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60563182-fe88-42f2-a2b2-7eb134a619b4", "sighting_of_ref": "indicator--85ef6e1b-1e10-4204-9f4a-f45b31dd0d84", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8a8f9a-1af3-469a-803b-d177310b65e4", "sighting_of_ref": "indicator--85ef6e1b-1e10-4204-9f4a-f45b31dd0d84", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6377b9-c92e-4ee4-b1aa-c634d874d1aa", "sighting_of_ref": "indicator--9064e6fb-1fbc-4da1-98d8-42fa29a5ddbc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e7e84e-4b8e-456d-9fe4-46b636a095fa", "sighting_of_ref": "indicator--90a2c41c-03a2-4a01-9ee2-284d6af0298b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1e1c46-c573-49e1-a444-adafbaf7d548", "sighting_of_ref": "indicator--6ccfdb19-1e50-441d-bb26-29560d442254", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f5379a-c165-4476-82d7-a0df7895ac00", "sighting_of_ref": "indicator--caf2523c-eb87-47b7-b8a4-b967a1bc17e6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235652e1-d832-4581-9a84-82a41717fddb", "sighting_of_ref": "indicator--caf2523c-eb87-47b7-b8a4-b967a1bc17e6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc5b8b9-1542-4d0d-a53c-39648c711902", "sighting_of_ref": "indicator--26db7e38-be22-4c4c-9a84-217fb1c79a14", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f4da2e-32cf-46c9-a27d-7aded4206250", "sighting_of_ref": "indicator--85097348-42d5-46d8-8eff-db161054e32b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099c981c-6e66-4e76-9df5-d73bdbb82546", "sighting_of_ref": "indicator--169b5a31-3370-46ef-a9b4-f64d76995dad", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8a00e6-615d-430a-923b-8abb3a3f45bf", "sighting_of_ref": "indicator--169b5a31-3370-46ef-a9b4-f64d76995dad", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4f4789-8427-4519-94ae-2f1d46715e70", "sighting_of_ref": "indicator--baa5265b-89c8-43f6-973f-59fe700cbb2e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc6073a-a37b-4676-917d-b71a443f48b9", "sighting_of_ref": "indicator--baa5265b-89c8-43f6-973f-59fe700cbb2e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90158744-1e2f-4d3d-a55e-f958a8466207", "sighting_of_ref": "indicator--baa5265b-89c8-43f6-973f-59fe700cbb2e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b64ef7-d7ee-43f0-8952-f6e37be59fe1", "sighting_of_ref": "indicator--c25455ae-72b1-40e9-b8fe-202b26b2b601", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd03eb2-ae53-45ae-af2e-7a1f7d203e5b", "sighting_of_ref": "indicator--c25455ae-72b1-40e9-b8fe-202b26b2b601", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704ad6d3-574b-4244-b840-887e6e841fd0", "sighting_of_ref": "indicator--c25455ae-72b1-40e9-b8fe-202b26b2b601", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ca725f-ce4a-4cf0-87e0-0a48d3da1c84", "sighting_of_ref": "indicator--566d5c04-41ac-49f7-a038-8babee4ab685", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deda16dd-fc38-47a6-8751-b1db49779e29", "sighting_of_ref": "indicator--566d5c04-41ac-49f7-a038-8babee4ab685", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e38d8ff-fd85-4e4a-bc51-88c70e3cd6a7", "sighting_of_ref": "indicator--566d5c04-41ac-49f7-a038-8babee4ab685", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41835dc-ac43-4128-898e-27296a87f3bd", "sighting_of_ref": "indicator--ee6e8c49-e55b-4cfb-ba4f-0318d0cdd31d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdc4ddf-487b-4836-a653-a7a89b2c21fd", "sighting_of_ref": "indicator--ee6e8c49-e55b-4cfb-ba4f-0318d0cdd31d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8dd843-cb36-4c31-a7d0-830e808a4d04", "sighting_of_ref": "indicator--ee6e8c49-e55b-4cfb-ba4f-0318d0cdd31d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24016e86-799d-49a5-bc8d-62caefd2427b", "sighting_of_ref": "indicator--c9926a60-f82a-4e6f-9b35-575436505e5d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c94d42-03ab-4c9c-bc24-7fac45afa2a1", "sighting_of_ref": "indicator--c9926a60-f82a-4e6f-9b35-575436505e5d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b594ab-9886-4c39-a175-650deede10d2", "sighting_of_ref": "indicator--c9926a60-f82a-4e6f-9b35-575436505e5d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7797975b-a45b-4cd2-8d8f-4e801b57b885", "sighting_of_ref": "indicator--15694f7a-d865-4e95-a285-e79c34a6d217", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee00aff5-6ba1-49aa-ac3d-8f78e435dd93", "sighting_of_ref": "indicator--0ebd56b6-4066-4f1f-a3f4-a9e711502cb8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb9e7d2-7db9-4599-93fd-86cfc32aaea6", "sighting_of_ref": "indicator--0ebd56b6-4066-4f1f-a3f4-a9e711502cb8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa48244-ecaa-4e25-8789-f625a250cbc7", "sighting_of_ref": "indicator--fada68d9-ea0a-4745-bd94-3210787125c6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc924e3-d643-439f-998d-b9ddd5604e92", "sighting_of_ref": "indicator--b1cea9ae-e31e-4bd0-8e0a-970b498dc152", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c62eeb1-75a5-409e-85f3-2d9114417b21", "sighting_of_ref": "indicator--b1cea9ae-e31e-4bd0-8e0a-970b498dc152", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c68e1b2-c929-489c-b188-10c7b54b930b", "sighting_of_ref": "indicator--b1cea9ae-e31e-4bd0-8e0a-970b498dc152", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08811ad9-6e0f-40a0-9aef-cf31a3fcc11d", "sighting_of_ref": "indicator--e5166991-0399-43c8-a215-96c04d5e675c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb633b5-9cd0-4137-822d-5c3751e2c497", "sighting_of_ref": "indicator--e5166991-0399-43c8-a215-96c04d5e675c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85a7b9c-76bc-41ad-bc23-23cb6ed9e531", "sighting_of_ref": "indicator--7f469ab7-8d7d-4567-aee6-28825cb0e338", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695d58be-dd30-48e1-99d6-73f3e7252613", "sighting_of_ref": "indicator--9da0fd90-33a3-4abd-bfe7-f2e6b913cf21", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32febfc6-ac78-4b67-bd73-58aa96c07cbf", "sighting_of_ref": "indicator--9da0fd90-33a3-4abd-bfe7-f2e6b913cf21", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c575fce-5e3a-4692-afc0-9777e716196b", "sighting_of_ref": "indicator--9da0fd90-33a3-4abd-bfe7-f2e6b913cf21", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f790707c-d0a3-4e05-a486-95514cc134a7", "sighting_of_ref": "indicator--aa55d805-29da-4669-a719-284f680b8248", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d8ef91-d66e-4a68-8ffd-646b3c0ea435", "sighting_of_ref": "indicator--aa55d805-29da-4669-a719-284f680b8248", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f314e7a5-103b-42bc-899d-eeb966414624", "sighting_of_ref": "indicator--2951665e-cd5d-4b19-83e2-52e3edea562a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58f5686-ed6a-4088-8243-692bf9c6a402", "sighting_of_ref": "indicator--2951665e-cd5d-4b19-83e2-52e3edea562a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0781d1-6e70-42c7-98ad-7250b1749d1f", "sighting_of_ref": "indicator--9f91fa95-0aaf-4fe2-8281-a75304fe1261", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3fadd2-9de3-47b8-8c34-d700ffa3b1ad", "sighting_of_ref": "indicator--c4720d19-f5e8-44f4-b901-7b9ace3ced76", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62dc5455-ef1d-4a91-adc1-8b70c3f25acc", "sighting_of_ref": "indicator--6ee15fb7-5fc7-4360-9811-312858a4b42b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a2efe9-17c4-4800-99a9-e4245e7eacd5", "sighting_of_ref": "indicator--87eba706-6541-49e3-9a5d-87557e2ac3e5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117f0edf-34c1-4a7d-8142-d379ad0e6a49", "sighting_of_ref": "indicator--87eba706-6541-49e3-9a5d-87557e2ac3e5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13147711-7c18-424d-9d54-3ed03141cc43", "sighting_of_ref": "indicator--7c496d7a-6a79-450e-8407-90db6f37cd38", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edaf5942-b56c-42cc-93bf-0bf79462c84a", "sighting_of_ref": "indicator--7c496d7a-6a79-450e-8407-90db6f37cd38", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54634f91-993f-4802-a3fa-e21c6c4bdf9c", "sighting_of_ref": "indicator--71cfdf01-f411-4991-9c3f-d14787712e41", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c8be6b-c5a8-40ee-ae70-b1d0eb1426c8", "sighting_of_ref": "indicator--99004f19-fb36-47c8-9f6d-e09ae4a608eb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b56003b-9a40-4296-bcf4-9615e23a04f8", "sighting_of_ref": "indicator--99004f19-fb36-47c8-9f6d-e09ae4a608eb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c05e264-990e-4290-bcfd-844243bbdd92", "sighting_of_ref": "indicator--18b832f0-7f9e-4658-8c37-f327b5319397", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24370666-6053-4f99-90d8-97f61f63a9bc", "sighting_of_ref": "indicator--0cbb0287-8408-45a5-9f89-48ce3ab104dc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8849624f-8480-47fd-8b1a-ac8c346193b9", "sighting_of_ref": "indicator--0cbb0287-8408-45a5-9f89-48ce3ab104dc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d7889d-eb90-4531-8c0c-e55a0386cb6f", "sighting_of_ref": "indicator--0cbb0287-8408-45a5-9f89-48ce3ab104dc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937304fb-220a-4b28-8990-2f08da5e78ef", "sighting_of_ref": "indicator--cb5170cc-5459-4dfe-827c-27bd7ba26f2a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ddadaca-63ec-4995-8528-4ce33e1d7825", "sighting_of_ref": "indicator--cb5170cc-5459-4dfe-827c-27bd7ba26f2a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bdaeefc-093c-472b-80e6-71e49e1876b2", "sighting_of_ref": "indicator--4a161ea3-b18d-444b-a839-8f195eabb43d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e72f01a-1e75-485a-9642-bba14dfff9a8", "sighting_of_ref": "indicator--4a161ea3-b18d-444b-a839-8f195eabb43d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b684148-b179-41db-967b-f4962ca3a48b", "sighting_of_ref": "indicator--26036638-8adb-4750-b677-1e5c66c9aaef", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3698e4-724e-4215-9c43-c9acdb53e0ea", "sighting_of_ref": "indicator--26036638-8adb-4750-b677-1e5c66c9aaef", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab57101-4303-476e-babf-d8f432edd83a", "sighting_of_ref": "indicator--5fe27a1f-546f-4535-ae76-1ce2ced869fc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d737e18-a9d6-47e7-a5f6-2a64be0dba36", "sighting_of_ref": "indicator--5fe27a1f-546f-4535-ae76-1ce2ced869fc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13cbfd6a-fc32-41f1-8c34-d9dbce0d643a", "sighting_of_ref": "indicator--5fe27a1f-546f-4535-ae76-1ce2ced869fc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360e1b54-65e6-42f3-954b-71aa08606925", "sighting_of_ref": "indicator--a1cbe035-4ef4-427b-85d8-e2c6ba93d3f7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec90c96-aec6-4379-b961-43476bd94091", "sighting_of_ref": "indicator--dc8bfaf8-2645-4567-af14-dad8a3624906", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025912f4-1ff8-4f8b-9bf6-6d678d422853", "sighting_of_ref": "indicator--2de7e2b8-c85f-42eb-981e-e08b9bd38109", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fb2e04-8959-4957-915f-4a7a0399f9a0", "sighting_of_ref": "indicator--28dbce70-4be8-4f54-9548-1633d84e88d7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20a3d00-df59-473b-a4fd-5a445e10f883", "sighting_of_ref": "indicator--33566ab1-7a76-44c8-b9a7-a54cb40f72da", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585846cd-7c78-4ecc-9f5b-a45abe0583ef", "sighting_of_ref": "indicator--641978ef-7d1c-4060-abba-4d12ec38ebaf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5effadfd-3760-47bd-85ce-c22976abbe7c", "sighting_of_ref": "indicator--dd302b81-2eb8-4f26-ab0d-5fabfb72cefb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ff898e-01df-4435-afe5-cec3282279bf", "sighting_of_ref": "indicator--dd302b81-2eb8-4f26-ab0d-5fabfb72cefb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b482946-2f07-4be6-84b8-1bd3d19b169a", "sighting_of_ref": "indicator--dd302b81-2eb8-4f26-ab0d-5fabfb72cefb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81295cce-bc15-4fdc-9d34-9ca85f5078e1", "sighting_of_ref": "indicator--ed7eb8f6-0c9a-4dd6-9eed-87efe8af295f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a475450-c0c9-4abb-8079-7a02c2302d34", "sighting_of_ref": "indicator--2a7fedd8-1506-4bec-9c87-3ce8035a8a3d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef268c7-bfa8-4e5c-9da6-6ae520cb4f1c", "sighting_of_ref": "indicator--9505eda4-3abb-461c-850d-88ea5c79bdf2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77f0ed2-299d-452f-b0bf-e5793c327f43", "sighting_of_ref": "indicator--1051e67c-77d0-422d-b76b-3c1833b47991", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20e9e08-2b40-4a8c-97f4-1229ceb3f8a1", "sighting_of_ref": "indicator--5f3af4e8-5579-42bd-b37e-9d14fc0ad745", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22d7638-a32a-4991-ab24-164dfd013c4c", "sighting_of_ref": "indicator--20f9660c-3f04-4a81-b8c3-548d219e7e2d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c891ed27-b053-4a69-b182-7784fc94dc66", "sighting_of_ref": "indicator--d5183cb2-9eb2-4628-a41e-fcfe4826b5df", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1e1fc9-82b0-4e57-8a40-37f87ec35ed5", "sighting_of_ref": "indicator--5468acd5-6882-4954-9623-3f395e5aa70b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56991710-e1f9-4db4-a863-0f7f1c8159b4", "sighting_of_ref": "indicator--33537df0-ef73-4acf-b0df-17fbc75d37bb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbee23e1-0adb-4a47-bce1-d084a742a9ea", "sighting_of_ref": "indicator--5fc91470-2a70-443c-a0e0-3664b37c9c38", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0c7b2c-006a-4b75-bf89-0fe30e91635e", "sighting_of_ref": "indicator--fd46fe73-8547-459f-a719-f798554bbf20", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077e947b-eec0-407c-a40e-a86953ac495c", "sighting_of_ref": "indicator--594bdea9-a08c-42f8-89a2-e2c3e7d8300c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93cd49d3-6dd9-4dee-8b37-0fef257c8c52", "sighting_of_ref": "indicator--594bdea9-a08c-42f8-89a2-e2c3e7d8300c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afaa0891-dfe6-4312-b71b-da348915bc0c", "sighting_of_ref": "indicator--c82e48e0-0ef5-46fb-95c4-39876f25e7f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2462c15a-d163-422a-815f-82b3cad0e264", "sighting_of_ref": "indicator--07a60d98-1a97-4b9b-8ef9-c964a2865069", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a65e1ee-68b6-45a3-b76e-96c83b422a70", "sighting_of_ref": "indicator--2db29443-88fe-45fc-b84c-0c9237c65d6f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb08183-0b1d-4658-9172-11fc015d8ce3", "sighting_of_ref": "indicator--a9d900c7-1718-4cd9-908f-397059b93e3f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4969b035-86bb-4203-8a74-6820736f2faf", "sighting_of_ref": "indicator--0eb3250f-86d9-4596-8c31-a088acc007dd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad27b0ae-1053-4592-864f-d6b01d293f11", "sighting_of_ref": "indicator--fe40591c-3643-42dd-8c02-2e8f7c9305f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1d6b9b-0f8c-496d-8ae1-acef4c98dbce", "sighting_of_ref": "indicator--c2922f32-67a3-47fc-b836-dc4ea1dfe163", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbc4be7-84a2-40b2-8f8f-600b64af4408", "sighting_of_ref": "indicator--c2922f32-67a3-47fc-b836-dc4ea1dfe163", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b275e8-d127-4143-8228-bde5e22fc4b3", "sighting_of_ref": "indicator--7c5b4f1e-c21b-42ee-8400-4d839fa414e7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ddfb07-ddd4-48ad-9cf8-26efe5fcdff1", "sighting_of_ref": "indicator--9240bb55-5667-4caa-b2c3-68dbef9d764e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3957eed3-46d8-4ddc-8b80-7bc417b058f3", "sighting_of_ref": "indicator--9240bb55-5667-4caa-b2c3-68dbef9d764e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec81ab5-92ea-43dd-b40a-7b937a2839a6", "sighting_of_ref": "indicator--9240bb55-5667-4caa-b2c3-68dbef9d764e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b61865-8621-4aa4-bd9e-43a0e89a5f9b", "sighting_of_ref": "indicator--e45819ca-e330-4790-8566-502afaac6b22", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb41569-a34c-483f-b9df-5cba2b5c9112", "sighting_of_ref": "indicator--e45819ca-e330-4790-8566-502afaac6b22", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d1cb5e-35c1-474d-a067-e398907a5cb3", "sighting_of_ref": "indicator--c4f625ea-d409-4f62-8706-41c4d1023d39", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fcab4d-e3d6-4811-a176-1d2dc2c524eb", "sighting_of_ref": "indicator--52bd52e2-eed1-46a0-9172-d22c66c1c990", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0120375d-d34a-467d-9deb-fefcbdef740c", "sighting_of_ref": "indicator--ef8aa6b5-a312-4aa5-aa05-24c5863ee37a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdcdb7b6-430f-482a-b84f-b1ab58426948", "sighting_of_ref": "indicator--ef8aa6b5-a312-4aa5-aa05-24c5863ee37a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f78738-5c30-41cd-9b2c-025f6287ec0c", "sighting_of_ref": "indicator--ef8aa6b5-a312-4aa5-aa05-24c5863ee37a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3768ff7-21a6-44a9-99d3-a8fbf1ef486b", "sighting_of_ref": "indicator--798098fb-3922-4c28-b0bb-497c8d2cd378", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e60c96-21f3-4bf0-a92f-1f1e2002328a", "sighting_of_ref": "indicator--798098fb-3922-4c28-b0bb-497c8d2cd378", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11ee32e-79ff-4c76-98ce-6a7718d7b019", "sighting_of_ref": "indicator--798098fb-3922-4c28-b0bb-497c8d2cd378", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89ee548-6504-46c8-b8b9-523638c6d04d", "sighting_of_ref": "indicator--94f55741-7585-4579-885d-1ab5b3f22557", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397df412-1c63-43fa-90b7-13c57e1eed99", "sighting_of_ref": "indicator--26c13e8b-daae-48ef-89a6-8ac493eb9253", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5df9216-6c3f-40fc-b29c-902793cc974d", "sighting_of_ref": "indicator--26c13e8b-daae-48ef-89a6-8ac493eb9253", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f907788-5b7d-4bca-87ca-3c57956e6f89", "sighting_of_ref": "indicator--26c13e8b-daae-48ef-89a6-8ac493eb9253", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e6ee8b-67cf-4a52-9e6a-e69db9578cb3", "sighting_of_ref": "indicator--7ab71e7a-ba7f-457b-a74b-8f5016de466a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e7b399-dfb1-4343-8f15-577f2703ed8e", "sighting_of_ref": "indicator--7ab71e7a-ba7f-457b-a74b-8f5016de466a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fdf265-dc0a-42c9-9ce6-fae5b94efb60", "sighting_of_ref": "indicator--1ea4f740-7d64-4733-8470-8f75f508d529", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7ca9a8-b5cd-462f-959b-1d15fe6fd211", "sighting_of_ref": "indicator--e284e67a-b0b0-470c-889a-0e8e44821514", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c562add1-b431-4cc6-9984-fea60c57da3f", "sighting_of_ref": "indicator--f31cb243-67b7-44a4-81c6-752e91aad2f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f5d5f5-2ddb-41d2-a08f-625503fcda03", "sighting_of_ref": "indicator--f31cb243-67b7-44a4-81c6-752e91aad2f0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef73b4d-f58b-4e75-aeed-3f137ac744e8", "sighting_of_ref": "indicator--f31cb243-67b7-44a4-81c6-752e91aad2f0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4a13f0-3bc4-4d0e-9a87-1be14b815a14", "sighting_of_ref": "indicator--3f0e098c-f65d-4f54-8add-22504e9f0901", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8257215-f845-472e-8c38-9d0dc943570c", "sighting_of_ref": "indicator--3f0e098c-f65d-4f54-8add-22504e9f0901", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9526f453-9f7d-4cba-931e-467085aa7cd5", "sighting_of_ref": "indicator--3f0e098c-f65d-4f54-8add-22504e9f0901", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b950d046-27e6-41dd-8ca0-eb5bdb82b2fe", "sighting_of_ref": "indicator--8d302117-8801-4b57-a0d0-a207029b2979", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--223d58d3-a665-468f-8cf9-bb93dddc3be7", "sighting_of_ref": "indicator--a1014b69-cd54-405d-bbe0-fa2e30e19ecd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21579358-0c84-4fc3-a57e-9ceadebcae12", "sighting_of_ref": "indicator--c3193ec2-5f0e-4f2a-acfa-8d992542b246", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d44e2c-c472-48e1-8b1f-297b9aac86cb", "sighting_of_ref": "indicator--04b78d70-0525-4a63-958e-b16eddeb6e72", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8989aed-3a13-4b91-ab82-868dea1e0280", "sighting_of_ref": "indicator--6e2ee8ef-8b4d-4d37-a159-21574b7e21e4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687dfcd7-07a3-4de5-986b-4a617a3dd911", "sighting_of_ref": "indicator--e92ecce8-cff6-44e9-9d3b-3ffc0b353020", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c63c94-a1b1-46c9-a4ef-5783b7a47945", "sighting_of_ref": "indicator--ae0dca31-c1ee-452d-baa1-9f43f11c7fbf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39be67bb-35f9-483d-a311-6b8d728e3ee1", "sighting_of_ref": "indicator--ae0dca31-c1ee-452d-baa1-9f43f11c7fbf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8f3f4a-dc47-49c1-9336-9a0b62dfdff5", "sighting_of_ref": "indicator--ae0dca31-c1ee-452d-baa1-9f43f11c7fbf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4941df-d5d2-4d09-934a-d596355edd92", "sighting_of_ref": "indicator--7fc23728-a587-4d78-9b70-cab38b96e899", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a04225-68b3-4261-938b-f4e89b64a641", "sighting_of_ref": "indicator--baf6270a-1ee6-4d07-a1fa-27423e852014", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9bc2a72-29be-45e3-93d7-bcf948ae3e12", "sighting_of_ref": "indicator--70f422f3-24c7-492a-bfb7-78d093274ebb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c1bd1f-ec15-403d-bc4e-a248eee2df01", "sighting_of_ref": "indicator--70f422f3-24c7-492a-bfb7-78d093274ebb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01dce653-19c6-4b51-9e49-450561d281ec", "sighting_of_ref": "indicator--70f422f3-24c7-492a-bfb7-78d093274ebb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7395c25-6073-415b-a234-a09c1cdb59c8", "sighting_of_ref": "indicator--7daef8da-0a02-4547-8372-478b411f8306", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c5803f-459d-4bee-aa32-5d765363fe0d", "sighting_of_ref": "indicator--7daef8da-0a02-4547-8372-478b411f8306", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233a70f6-8480-4368-892f-6859c2a4a9a6", "sighting_of_ref": "indicator--fdc3088b-4592-43f5-920e-570a8bc1d81a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f2f3f0-91eb-44f3-a782-aabddba37280", "sighting_of_ref": "indicator--f90c7baf-1817-4faf-b7eb-2358cce36e3d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc3f9b5-95c6-4dc2-b88f-e5b8f10e4fe3", "sighting_of_ref": "indicator--f90c7baf-1817-4faf-b7eb-2358cce36e3d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c374ff-1d05-43f0-a3b6-c6e4128e41ee", "sighting_of_ref": "indicator--f90c7baf-1817-4faf-b7eb-2358cce36e3d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c74de1-90fb-4f42-858c-b957847f7b26", "sighting_of_ref": "indicator--8316ef5b-cfaa-4a93-b4ba-81f1d7b906f6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adac3275-6b7e-44da-9983-3ab2806d7315", "sighting_of_ref": "indicator--61b76def-c7a5-47d3-b16b-1be841e8e383", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41699f48-653e-4f90-829f-e131d9a152a9", "sighting_of_ref": "indicator--61b76def-c7a5-47d3-b16b-1be841e8e383", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7e4409-75b9-418c-811e-0dfb7c7dc6dd", "sighting_of_ref": "indicator--771e11ca-2ed5-4846-881f-23a46b4a4011", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ee2118-5f01-4134-9ca6-8d21af3e1782", "sighting_of_ref": "indicator--771e11ca-2ed5-4846-881f-23a46b4a4011", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d014c53b-6cf2-4042-a030-2f5a7174cf2a", "sighting_of_ref": "indicator--ddfe3fba-e1f1-467c-88bd-e4d4867b978e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42dda4e2-bc77-4d85-b2bd-9df9ff29b12f", "sighting_of_ref": "indicator--6a977ae6-fc6b-4d10-ab5d-910bbc041901", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67743a49-5693-48a9-a73c-7211915af5d9", "sighting_of_ref": "indicator--255eebd7-2d8a-48b1-8b7e-1f11e9bcf8fb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8f4508-55a4-4af6-b704-5557e1192a9b", "sighting_of_ref": "indicator--255eebd7-2d8a-48b1-8b7e-1f11e9bcf8fb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150949df-7dc0-42c2-8f43-805300b5a676", "sighting_of_ref": "indicator--86fa81f1-05e3-41c0-b8ee-6a4a9c0bbd3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c981f6ef-af36-47c3-83a4-f24b19e24726", "sighting_of_ref": "indicator--e8a6b8c2-2c17-46a1-9832-effff0b6a13a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28fef597-9ff4-4cb9-b0c5-65214acbe155", "sighting_of_ref": "indicator--e8a6b8c2-2c17-46a1-9832-effff0b6a13a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9ac082-33eb-4187-805f-3ec9dfdcebfe", "sighting_of_ref": "indicator--e8a6b8c2-2c17-46a1-9832-effff0b6a13a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65da605d-f9f5-43ed-93ec-39d56db23fbb", "sighting_of_ref": "indicator--94d1520c-a58d-43e9-aa80-ee0b1f75dc44", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9625cb-5d54-4535-89cf-ced59dd6567b", "sighting_of_ref": "indicator--94d1520c-a58d-43e9-aa80-ee0b1f75dc44", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0de2d61-6222-4b52-b52f-c486d35d8d4c", "sighting_of_ref": "indicator--342b80c0-16f8-414c-930c-7d1b27d7f6d4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055ee1ef-8e74-4afc-a45b-c845c9cd789f", "sighting_of_ref": "indicator--342b80c0-16f8-414c-930c-7d1b27d7f6d4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834116d3-5326-4664-9a31-8b12b0b39098", "sighting_of_ref": "indicator--ef7a78ba-1bb5-47af-ba51-5f90770052f1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031ff324-5449-4a91-889f-07d00632e835", "sighting_of_ref": "indicator--ef7a78ba-1bb5-47af-ba51-5f90770052f1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2a80f4-afb6-43b7-81c6-f74703a73990", "sighting_of_ref": "indicator--2f9849c6-644f-4b9e-8d79-278ed5b5a0a1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368f08f0-4385-46c0-8442-b7e1e72a211b", "sighting_of_ref": "indicator--2f9849c6-644f-4b9e-8d79-278ed5b5a0a1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5f2c00-df86-4166-9fbf-a7df6affbd95", "sighting_of_ref": "indicator--1f7030db-1ec5-48cf-81d8-d32b745f5c45", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e58df3-9899-4607-b184-fdd7a8b82080", "sighting_of_ref": "indicator--ac8d9e7f-7877-411b-89c8-119c10bc94d3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336fe66a-0937-4132-855c-2d642d144861", "sighting_of_ref": "indicator--ac8d9e7f-7877-411b-89c8-119c10bc94d3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c040b9ad-7026-4d7d-971f-003eb6a42d95", "sighting_of_ref": "indicator--8b114449-4f29-439c-8494-8bdedf256b9f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06e24c8-2691-4f49-ac55-7d6dd6f2ac4d", "sighting_of_ref": "indicator--8b114449-4f29-439c-8494-8bdedf256b9f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda5d0f1-2884-4fb0-9a3c-a59f2471494c", "sighting_of_ref": "indicator--bf994709-2b0d-4868-bd1e-ebcd4c7b6f83", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5248c57-a6a2-48cd-82a3-b444000430eb", "sighting_of_ref": "indicator--bf994709-2b0d-4868-bd1e-ebcd4c7b6f83", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a99e4f-8d86-4c57-904f-0f791e963e86", "sighting_of_ref": "indicator--8cb4085f-860c-488c-9a9d-470e6de93cd3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6fd8011-bcd0-49b2-ba02-bd5f67d4360b", "sighting_of_ref": "indicator--8cb4085f-860c-488c-9a9d-470e6de93cd3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef9e035-c393-489e-bc60-eaa43612a0c4", "sighting_of_ref": "indicator--8b48cbb6-4afd-4724-9b44-a8f1c02f7668", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e1fe4b-65b8-45bc-8b8b-8c6f15781c96", "sighting_of_ref": "indicator--8b48cbb6-4afd-4724-9b44-a8f1c02f7668", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87ea443-8734-4249-b18c-5ce19606aa32", "sighting_of_ref": "indicator--ccddc518-fa32-4c28-a988-e6f1f2f93584", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed86dc8-8285-436c-918d-30630d71fdbc", "sighting_of_ref": "indicator--ccddc518-fa32-4c28-a988-e6f1f2f93584", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18a88fb-3b2c-4c12-8caf-64d90cc3dbc9", "sighting_of_ref": "indicator--48120b64-12a0-4701-8181-ca8b4f483148", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04cc5571-063a-4eba-94cf-c652d4e61c7e", "sighting_of_ref": "indicator--48120b64-12a0-4701-8181-ca8b4f483148", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172288fa-d528-4720-95fc-68cebbb0116b", "sighting_of_ref": "indicator--6151f40f-8570-49c6-b280-0512c375e4f5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e202539-b644-4f9d-a948-f07650f03118", "sighting_of_ref": "indicator--6151f40f-8570-49c6-b280-0512c375e4f5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf73acb-9ad9-4b10-87d0-4344d357546f", "sighting_of_ref": "indicator--3078e94b-32d5-431d-98cb-c786f3932844", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7c6b76-0f1e-439a-9d94-1b2189ef6f88", "sighting_of_ref": "indicator--3078e94b-32d5-431d-98cb-c786f3932844", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e62699-1bd0-4833-ba26-93e7d0c83223", "sighting_of_ref": "indicator--cd4f2c28-3dfc-4aaa-9447-22ecede9cf24", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20299926-f263-4260-b69e-62d0e6a5ddb9", "sighting_of_ref": "indicator--cd4f2c28-3dfc-4aaa-9447-22ecede9cf24", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cac28bc-48ac-4a18-b2ed-38b89a3e1f8b", "sighting_of_ref": "indicator--0979d696-a530-4c9e-8090-deabf9ec3c4a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63d77c7-b33d-429f-904c-24821288e05b", "sighting_of_ref": "indicator--0979d696-a530-4c9e-8090-deabf9ec3c4a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd2dac6-16f8-48a2-a120-a1636586f9ab", "sighting_of_ref": "indicator--42174022-6e8f-4570-9729-e929ba055d1a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c255cb64-dacb-4750-8af9-cb305d1e9b29", "sighting_of_ref": "indicator--42174022-6e8f-4570-9729-e929ba055d1a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22f6fb5-9aa2-4ffc-b454-9449105150e3", "sighting_of_ref": "indicator--2de41d31-ed49-4898-a09d-ecc86aebad75", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd3c081-3865-4e72-b95d-5c3520f5719e", "sighting_of_ref": "indicator--2de41d31-ed49-4898-a09d-ecc86aebad75", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb206ba-89a0-49a9-8da0-d6c8f12f054d", "sighting_of_ref": "indicator--a759da60-191a-4f0d-aa14-881a14fb7805", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f2d5a0-e7f1-4786-b516-c80859f870da", "sighting_of_ref": "indicator--a759da60-191a-4f0d-aa14-881a14fb7805", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d320f12-7088-484d-aebd-7e4ac140b253", "sighting_of_ref": "indicator--a759da60-191a-4f0d-aa14-881a14fb7805", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11699c88-91ee-46e5-9220-7e67ee7e884d", "sighting_of_ref": "indicator--3ca43318-7921-4c9f-9a48-ba8f4cfb2c3d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ac2676-8181-4794-99bf-a57f31787aca", "sighting_of_ref": "indicator--3ca43318-7921-4c9f-9a48-ba8f4cfb2c3d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba56b2c0-fc1f-45e0-ac0a-094d4150bb16", "sighting_of_ref": "indicator--da35300f-ae80-439e-bb9b-abef70b4f361", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907e1076-1a22-4d88-b7b1-7a5c9c618a94", "sighting_of_ref": "indicator--da35300f-ae80-439e-bb9b-abef70b4f361", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fe355b-4e34-440b-b9ac-94a48646da7b", "sighting_of_ref": "indicator--7f9465ea-42ba-463e-81ed-a52365d449be", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05be257-fa8e-4d5e-bbe4-5af27d25de14", "sighting_of_ref": "indicator--7f9465ea-42ba-463e-81ed-a52365d449be", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6990e6-ac63-4b48-af10-c120e5789ebc", "sighting_of_ref": "indicator--be7ed167-7ae1-4c9e-a81c-4ce7760274bd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b5fbb3-fbd5-4bed-bffb-cf8578515904", "sighting_of_ref": "indicator--be7ed167-7ae1-4c9e-a81c-4ce7760274bd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ba8bc5-bb51-4726-844d-b6dfed829d1e", "sighting_of_ref": "indicator--2850205d-4326-41dc-9444-87989c1e64db", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1756c35-a739-43fb-80a8-a613a3029926", "sighting_of_ref": "indicator--2850205d-4326-41dc-9444-87989c1e64db", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15687ac-4a62-4ce6-9210-7f8d773e4570", "sighting_of_ref": "indicator--3f0f8125-d372-434c-8771-28dc196469a3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4425eed-1180-4b85-a605-4a9a9e8f3fa8", "sighting_of_ref": "indicator--3f0f8125-d372-434c-8771-28dc196469a3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc656eb-d214-42f7-9f4f-fbc4dbcaf1c4", "sighting_of_ref": "indicator--a9d560f1-f1a0-4c68-b428-d7fc3b143d15", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b3c129-2f9f-49b0-aaa8-5c1c284f81c5", "sighting_of_ref": "indicator--a9d560f1-f1a0-4c68-b428-d7fc3b143d15", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b847af35-cffc-4965-a64e-a68d989491cb", "sighting_of_ref": "indicator--0a1d1eff-44ab-46ca-ab67-566c3bc96bca", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53bb7213-9571-49a9-b546-25935be7895b", "sighting_of_ref": "indicator--0a1d1eff-44ab-46ca-ab67-566c3bc96bca", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515ce086-c932-4e15-ba10-c98ff5677ddb", "sighting_of_ref": "indicator--c2cefe0e-1495-4e39-b7d7-619c197981ed", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563c743d-59ee-4cea-99e8-253b2ea99fe2", "sighting_of_ref": "indicator--c2cefe0e-1495-4e39-b7d7-619c197981ed", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a45ccd-8b49-469b-96c8-d199f0f8a79f", "sighting_of_ref": "indicator--91cb0818-ca8e-4ebc-8d2f-deef9e70cf38", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b975815-234a-4f31-b095-d88c282b5c74", "sighting_of_ref": "indicator--91cb0818-ca8e-4ebc-8d2f-deef9e70cf38", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770a26cc-35b0-4abd-9f1b-1b06783abcc6", "sighting_of_ref": "indicator--378f81ce-44a1-4eb5-90d9-0038b2885f00", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc284a4-c2ea-4730-a743-5566fe899462", "sighting_of_ref": "indicator--378f81ce-44a1-4eb5-90d9-0038b2885f00", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86de0145-9e09-4327-ae83-618bd36b960a", "sighting_of_ref": "indicator--b171e9a9-705e-447d-b890-3c989038781c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e068d9b-16eb-4b80-b134-e538f1d3983b", "sighting_of_ref": "indicator--b171e9a9-705e-447d-b890-3c989038781c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eec5251-3799-474c-b007-2b049eccefbc", "sighting_of_ref": "indicator--13bba950-293f-4347-926b-b37549587bf6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da869352-7809-4c14-9f42-9b198d0ad58d", "sighting_of_ref": "indicator--13bba950-293f-4347-926b-b37549587bf6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770a8238-8691-4c88-afb3-7a1da661de67", "sighting_of_ref": "indicator--cc569e15-cdef-4c41-bb72-154a50988a45", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e48d78-53c1-4db4-b5e7-e7a3116676f1", "sighting_of_ref": "indicator--aa95f584-980e-451e-98ad-68fbd7d63dae", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847127ad-6d31-4117-b4e8-fea2c83d0c95", "sighting_of_ref": "indicator--b183e3cf-90fa-4aa0-b913-a0664ae6db2a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa56e1b-5404-42f1-b87c-9245d37cbad7", "sighting_of_ref": "indicator--b183e3cf-90fa-4aa0-b913-a0664ae6db2a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d96973-1db1-4fad-9a01-c1b6127cb3ba", "sighting_of_ref": "indicator--7380ea6e-f1c6-48cf-bafc-08d58c8adfea", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164257b3-bb33-49e8-b630-33b1b625a7b5", "sighting_of_ref": "indicator--f5c1fe21-d280-4a66-9a13-b3bdd9d912c2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e4ab3d-6154-423c-81a8-17ac9b615b7c", "sighting_of_ref": "indicator--68dc6c9b-bb59-4937-88d5-2b6d1f6a8b23", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1411f1-7dfd-4e6b-9c41-b3229f214aaf", "sighting_of_ref": "indicator--1e9359fc-28a9-4c7d-bae2-3663375b3332", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767ad6a6-8455-459a-a36a-ab9061a0cd8b", "sighting_of_ref": "indicator--dde84c9d-1c69-46bf-b94e-bf5d78ba58e6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7869b1-da7a-4412-96ed-98af1312dd75", "sighting_of_ref": "indicator--eecd03d0-bf8b-45bc-aaf7-85f1109be115", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a2b38d-c697-46bd-a8b5-d6da7ab99d25", "sighting_of_ref": "indicator--c8f0172e-fc69-40d9-bdee-2868a6910e7b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf7122f-18a4-4838-a52f-358d94a55341", "sighting_of_ref": "indicator--2d4f5025-9dcf-4a0c-a2b2-19cc2b689958", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7543c13-0897-4656-8e39-2089fba8e8d0", "sighting_of_ref": "indicator--89d1fe86-937f-4089-916b-3b70dc11fa36", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fd8890-e46e-4a0d-b1f3-4959d32df045", "sighting_of_ref": "indicator--108c40af-d556-43dd-8c18-a315a35ba83a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d70e458-6f3b-4c7b-b0c2-75a0b81d26e8", "sighting_of_ref": "indicator--a256af2e-1b8a-43dd-ab0f-67ebe7c52e07", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e29a10-62a0-453b-9a89-bce348f197c9", "sighting_of_ref": "indicator--a256af2e-1b8a-43dd-ab0f-67ebe7c52e07", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9568ced9-81c8-4b60-b274-29807d0a3e97", "sighting_of_ref": "indicator--bd95bffb-bd63-423f-93b7-5db9e005a4bc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16ea05e-826d-464a-80af-d8f281e6188d", "sighting_of_ref": "indicator--29730f8f-0651-4fac-bdf1-bf1e64ceb349", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37f8a3e-9f57-490b-bd70-dd3c8f8f5e7e", "sighting_of_ref": "indicator--9878ae39-3c5f-408d-acb7-a221e7a0e072", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74ffcd7-8387-4486-a5f5-b68f94a0d56c", "sighting_of_ref": "indicator--6b6ea62f-bed4-454e-a692-f3b42283d97d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f005a46-e7c4-4c91-b492-2addd56f5d27", "sighting_of_ref": "indicator--2edd3eab-25de-4107-ac1e-d5e67a67db3d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c6493d-741e-47d1-84c5-8b847a17eb0d", "sighting_of_ref": "indicator--82e91bb2-8693-4795-915a-3732d140d9d4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59db67a-fe10-4ef0-b3e7-c40a063a1c56", "sighting_of_ref": "indicator--ee84863a-2e8e-4b43-97a7-c955be6a7d8d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cf28f9-98b7-4e55-a47a-843c7183863a", "sighting_of_ref": "indicator--b9041aba-af8f-4ab0-8197-6f00c2ee297d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1cd7ef-9048-473e-b03c-92ec66762de8", "sighting_of_ref": "indicator--2bcac746-1f95-4ca9-b7f5-399c1a2595ca", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f132a0-4926-4430-8988-517a4c7a8631", "sighting_of_ref": "indicator--4795903f-d688-4497-a82b-7d26a8ef81b6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a961d9-65b0-458d-8e44-91506bc73338", "sighting_of_ref": "indicator--67e61d14-66d9-41f0-bf3e-36ceb6a5827d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c1ead8-a61d-461d-98a2-6d635a68cc15", "sighting_of_ref": "indicator--67e61d14-66d9-41f0-bf3e-36ceb6a5827d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4747334d-c394-43e9-aa0c-f2c53c9aa799", "sighting_of_ref": "indicator--ab425492-679d-489d-8ef4-74950019e2f5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8bd7d1-31d4-446e-9cd1-3685aaf435ae", "sighting_of_ref": "indicator--611809ce-26f5-4be8-80a5-3e811fdf2355", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58449dc1-3534-46ee-a922-bbca2fc3fe3c", "sighting_of_ref": "indicator--f856923d-6265-444d-9a76-c6f4d32a5b32", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017041ca-3707-4461-84f6-d51a175e3eb0", "sighting_of_ref": "indicator--a1c4bd7f-b132-4016-a434-7018300fe031", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec302339-9bed-4e50-8374-268ebab14fbe", "sighting_of_ref": "indicator--348e8437-475f-4810-8f9e-f582cdf55dbe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3652a9-37e4-4ed6-adec-f6c5a3d5f9fa", "sighting_of_ref": "indicator--cd9b4421-c4b9-47af-b41c-72f1002461ce", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a40bff7-a6f4-4fc3-96f8-f5d1df56ddb9", "sighting_of_ref": "indicator--a4276b32-ece5-4e17-8119-921411d37215", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c78c4f-8a89-4f02-9fd2-2bfd86299841", "sighting_of_ref": "indicator--37c3eb21-8997-4c0a-92d8-d2b9d4698cbd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f286a2-8a76-40a3-814e-a536b1040fb8", "sighting_of_ref": "indicator--149b6bc5-716c-4e64-8c8d-c00c57f6c12c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c5ab76-d8f7-4a33-8817-9e3985901319", "sighting_of_ref": "indicator--855a04df-8d43-44ab-80fa-402d79e4ec18", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d1c899-6838-43f0-b847-c369aabd1d55", "sighting_of_ref": "indicator--206afcf0-a444-42b3-9867-a2fc6e7d5cb9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4dbf8f-af39-4904-a551-40343bc4279c", "sighting_of_ref": "indicator--206afcf0-a444-42b3-9867-a2fc6e7d5cb9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c617789d-54ed-4b25-9974-e7f233b400d6", "sighting_of_ref": "indicator--6526dfcc-a4bc-441e-af4b-f064dcb653a1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426139e7-741d-4492-9488-0814da9c170a", "sighting_of_ref": "indicator--0aab0e38-678b-45c5-82ad-0610dae3eae3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896e808c-edb8-4671-8275-46fa25ddc359", "sighting_of_ref": "indicator--b69550ea-a54d-4190-8163-9d08febbfb51", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f700cc27-046a-4594-81ca-18af448f6b52", "sighting_of_ref": "indicator--9679ff6c-2178-427f-951d-b36992384b35", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ec978c-91de-441b-880a-be77ca624372", "sighting_of_ref": "indicator--83ee90cb-2dda-460b-a556-c46b15a08678", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa6fb7d-21a5-40ef-bb4a-d58bdb08c375", "sighting_of_ref": "indicator--83ee90cb-2dda-460b-a556-c46b15a08678", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af773cbd-e953-4d9d-8cd7-497832ca9558", "sighting_of_ref": "indicator--4fbb6a08-579b-447a-b71e-e8df76e1ae95", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7dd75b9-639c-45ba-a9dc-3c445b0aebb1", "sighting_of_ref": "indicator--d874191c-b8d4-4185-b880-9f5ac5afc02a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572bff66-4907-4807-a944-dd0c811555e2", "sighting_of_ref": "indicator--d874191c-b8d4-4185-b880-9f5ac5afc02a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc53a0b-508c-4d52-893d-1a7708a3f6b3", "sighting_of_ref": "indicator--53d1afba-e913-4bfc-8081-14f7b87d72c1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31beaddb-edf3-4f9b-bb1e-4de8475d85d3", "sighting_of_ref": "indicator--ef5bcd63-5d49-485d-8333-947d0e9391dc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c26a61-2a3d-4ef0-a635-d4ae11066e1c", "sighting_of_ref": "indicator--ef5bcd63-5d49-485d-8333-947d0e9391dc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df7015a-c2f2-4cc4-b91c-40a9dc2d6e85", "sighting_of_ref": "indicator--ef5bcd63-5d49-485d-8333-947d0e9391dc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4109e3f4-cd2f-4cf2-8e2f-aebd81bd67f0", "sighting_of_ref": "indicator--4b1b7aaf-0adf-4d23-8a71-43b6c1e701e6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5896f4-b5a8-4abe-9ba6-20ee54ccfe53", "sighting_of_ref": "indicator--4b1b7aaf-0adf-4d23-8a71-43b6c1e701e6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b529391e-f7fd-4063-be6b-d9139eab75e3", "sighting_of_ref": "indicator--39d1fe8b-fc84-43e2-b11d-cbdd3583e408", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccad7fe7-6f9c-4654-a31c-e341551f8f8d", "sighting_of_ref": "indicator--39d1fe8b-fc84-43e2-b11d-cbdd3583e408", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7b1d49-f72e-4b17-950e-00dfcefcf982", "sighting_of_ref": "indicator--39d1fe8b-fc84-43e2-b11d-cbdd3583e408", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc295102-547b-42f6-833b-1182defa92d4", "sighting_of_ref": "indicator--f8999ec3-1f93-4887-9d7f-7cd691215ee6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae469bfa-7e41-49c7-a072-3293a4d9b54e", "sighting_of_ref": "indicator--f8999ec3-1f93-4887-9d7f-7cd691215ee6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78c7c25-2c5a-498e-8bce-33c535e383bb", "sighting_of_ref": "indicator--f8999ec3-1f93-4887-9d7f-7cd691215ee6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01fa67d6-344e-4fa2-9258-7af5767779dc", "sighting_of_ref": "indicator--c881fa67-feb5-4c4d-8b1d-e52b637eb38f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256061bd-fe9d-4a63-b721-5fd486e74eec", "sighting_of_ref": "indicator--c881fa67-feb5-4c4d-8b1d-e52b637eb38f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e786bdb6-ab11-4e71-8d1d-2ee3e46ed274", "sighting_of_ref": "indicator--c881fa67-feb5-4c4d-8b1d-e52b637eb38f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ea7b35-e2ad-4233-89cf-e60e1ea67c27", "sighting_of_ref": "indicator--bde6a49c-48d6-4870-89df-5c1894506e8d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff3b1b8-9fc7-405a-bd07-077fc04742d7", "sighting_of_ref": "indicator--bde6a49c-48d6-4870-89df-5c1894506e8d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b63889-7c31-4661-ba34-87aaaa7f303d", "sighting_of_ref": "indicator--bde6a49c-48d6-4870-89df-5c1894506e8d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ccdde28-ed00-47c8-8007-2552e731bca5", "sighting_of_ref": "indicator--74259e7d-28b6-4617-b7a7-4ac61ba35bf2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ea4599-ef86-4ade-b834-eb6bd59d37e9", "sighting_of_ref": "indicator--74259e7d-28b6-4617-b7a7-4ac61ba35bf2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd36138-940e-4c71-876b-9066a961650f", "sighting_of_ref": "indicator--9a65cb28-0f03-4b3f-bc2f-a3e513b79e2e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7165b4-8d4c-44b6-9a81-c0bcc6acb48a", "sighting_of_ref": "indicator--9a65cb28-0f03-4b3f-bc2f-a3e513b79e2e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2635cd-cd6c-4615-83a8-ab8bbe8ea3b5", "sighting_of_ref": "indicator--9a7bb27f-68b3-468e-b59a-727a3ae4f5d2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315f25cc-6aab-49e6-b9ac-a9e3fee76310", "sighting_of_ref": "indicator--9a7bb27f-68b3-468e-b59a-727a3ae4f5d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff00216e-c657-4f24-8244-de4f2293d727", "sighting_of_ref": "indicator--5adb0880-85c8-412e-bfa6-95659b9cb2e9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6159157-f127-4c08-a695-2f4fc3a7a72e", "sighting_of_ref": "indicator--5adb0880-85c8-412e-bfa6-95659b9cb2e9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb337f97-f50d-404a-8e77-8509c2be291b", "sighting_of_ref": "indicator--5adb0880-85c8-412e-bfa6-95659b9cb2e9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2cf1d6a-b1a4-41a4-b560-edf9fac9ce5b", "sighting_of_ref": "indicator--f94bef55-53ef-4c7a-844a-d8d7f4b72cc5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77eb49f-2800-47ae-bfd0-552b29d9f318", "sighting_of_ref": "indicator--f94bef55-53ef-4c7a-844a-d8d7f4b72cc5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8f8e45-dc7a-45b2-b36a-84d4cf72d03e", "sighting_of_ref": "indicator--f94bef55-53ef-4c7a-844a-d8d7f4b72cc5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52be0d02-3893-4221-a89f-dc06bec8add3", "sighting_of_ref": "indicator--c5574b32-d3ea-4bab-89b0-788b33e7200f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae68d59a-0b87-4d36-8a2a-18e11111bdcc", "sighting_of_ref": "indicator--169105f5-ac66-41f5-b76d-3de70c26991b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b965ada-a791-427a-972a-2ccd13a97377", "sighting_of_ref": "indicator--77c5edb3-ca21-48c0-bd54-6c9ff9a5a219", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b924cd-754b-4d83-8bb4-aee02af31b54", "sighting_of_ref": "indicator--77c5edb3-ca21-48c0-bd54-6c9ff9a5a219", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c09ac0-40b6-44ac-91e2-73d24af69b5b", "sighting_of_ref": "indicator--77c5edb3-ca21-48c0-bd54-6c9ff9a5a219", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698b35a4-04b4-4bc1-a32e-4495f778bb73", "sighting_of_ref": "indicator--b61351c1-093c-4587-bcdf-d326ddd70d7a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97779345-8421-456f-b613-5ffa7907c3c9", "sighting_of_ref": "indicator--4349cd08-cf8e-48b3-a26c-020f8a7050ea", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0128bc8-beb0-4380-87db-6dc36e72fdff", "sighting_of_ref": "indicator--e0ff8bf8-9a41-4489-9c1d-aada63292dae", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93017b32-b861-4b77-b84f-73ab24acd36b", "sighting_of_ref": "indicator--e0ff8bf8-9a41-4489-9c1d-aada63292dae", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09b5acf-871a-46f7-a61d-f38ce90fd198", "sighting_of_ref": "indicator--e0ff8bf8-9a41-4489-9c1d-aada63292dae", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc7d615-b429-41ea-a9bc-7af7f1b25c99", "sighting_of_ref": "indicator--dd7bf80e-25b6-408f-a55b-5ec1393ad7a3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54c0a4c-cf64-4b98-81cc-41576010a1e6", "sighting_of_ref": "indicator--dd7bf80e-25b6-408f-a55b-5ec1393ad7a3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0c6da2-f9de-45f2-8877-4475fd267920", "sighting_of_ref": "indicator--dd7bf80e-25b6-408f-a55b-5ec1393ad7a3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3a3334-3a7a-4361-9793-eb3a4d64f244", "sighting_of_ref": "indicator--cb33a25a-1c3c-402b-bec0-85ba1ea91ad8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58497be9-c6aa-4203-837d-0c2e3fa874a2", "sighting_of_ref": "indicator--cb33a25a-1c3c-402b-bec0-85ba1ea91ad8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb548ee-b5bb-4795-ae7a-c4d572bb7910", "sighting_of_ref": "indicator--cb33a25a-1c3c-402b-bec0-85ba1ea91ad8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea733cb5-359f-430a-955b-cd1550ad3de2", "sighting_of_ref": "indicator--b34b6304-9ca4-4d9e-a1fb-8f1554131af7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6a8e11-2447-4fbd-8390-8f16db31e670", "sighting_of_ref": "indicator--b34b6304-9ca4-4d9e-a1fb-8f1554131af7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2763a20-d699-48a2-896e-3caa6b918938", "sighting_of_ref": "indicator--b34b6304-9ca4-4d9e-a1fb-8f1554131af7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db8299a-ad93-4b98-ac5a-a6a918e004f1", "sighting_of_ref": "indicator--dbe8ccba-2d79-4f2e-851b-4809c10d7dfc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f03a18c-b494-4396-8945-469d8bfaad29", "sighting_of_ref": "indicator--3d120983-6386-46a6-83a5-2d0b9e3f0002", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afbc72f-0a75-451c-b7c9-ad3141e8308b", "sighting_of_ref": "indicator--2396102f-9fa7-4460-8bf0-53dfff2548b9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c2d020-d2dd-43e4-84fe-7c119b96e0c5", "sighting_of_ref": "indicator--93574ea9-3742-468d-bbd5-f1d99b3f5e3a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bedc79-cb26-4ba5-a3ac-db64dc4bf802", "sighting_of_ref": "indicator--93574ea9-3742-468d-bbd5-f1d99b3f5e3a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b41967-e90d-4c13-a970-050c8c761601", "sighting_of_ref": "indicator--fe928c05-ac6e-41d5-a624-f9fa3d53246f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c07aa4-9b55-4121-bc04-997ba16b3d40", "sighting_of_ref": "indicator--a2464ce2-b7b8-41fc-81a2-8f1bf3a349ac", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63e5565-7be8-4e21-a687-23b3142a6850", "sighting_of_ref": "indicator--a2464ce2-b7b8-41fc-81a2-8f1bf3a349ac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f7b2a2-3846-450a-8126-af256efc55ba", "sighting_of_ref": "indicator--d8e6ddf5-8d80-4d38-9900-f2c2aa3e5e1c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc8d34a-f0e5-49aa-b5d4-0308d42429fb", "sighting_of_ref": "indicator--b5981627-a652-43b0-a0a7-e9254e2c68d6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07518e8-7dbd-423b-96fb-7fd952a21ba9", "sighting_of_ref": "indicator--21da97f7-a62f-4f17-b7fa-1004a1a54e9b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b875f9-7d43-4729-be63-10f6a486e458", "sighting_of_ref": "indicator--fae24fbb-027c-4905-8c14-4f6cba7c5c4d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb425e73-b02d-4637-b83a-8726843b351d", "sighting_of_ref": "indicator--6ed842eb-a41a-4885-8535-aa1b00fa415a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b81be3-2ea4-43be-854d-da62880efe08", "sighting_of_ref": "indicator--9db75ca3-9225-4cce-9701-50c3fcbd23ed", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3805efb-91a8-4abb-9d6f-747f5b78a8b8", "sighting_of_ref": "indicator--9db75ca3-9225-4cce-9701-50c3fcbd23ed", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6bef47-e244-4c29-a004-e07ee373b302", "sighting_of_ref": "indicator--39da4f28-6b3e-4b7d-a65a-aefd5fd1a48e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d76cfc-0d57-4d4a-8073-e967de847acb", "sighting_of_ref": "indicator--04f2a724-a41c-4cd3-a65e-8d0f481cc8d0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b24d324-2dc7-4f1c-acc9-5a7ecb602109", "sighting_of_ref": "indicator--1fbc6041-3cd9-471a-a884-1184d8d752b3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd83a1d-ce50-49dc-8008-981f7b307f01", "sighting_of_ref": "indicator--9e97f103-bbaa-470f-92fd-01289d716642", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f035c3a8-5068-48c4-80cb-322fc032c3db", "sighting_of_ref": "indicator--e8393bef-9511-4aa4-b2cd-d1dd48fc4c36", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7537d6b2-a489-4847-9f22-336d4bac89f8", "sighting_of_ref": "indicator--72adf55a-aec0-4093-83dd-c27588d736fd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b76962-eca5-4bf9-b96d-cdaeb4d8e06f", "sighting_of_ref": "indicator--72adf55a-aec0-4093-83dd-c27588d736fd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592f9653-8c48-455f-a1fb-632db14a6f9c", "sighting_of_ref": "indicator--991f7d3d-68ed-4d4e-bfd5-89cf1d8bf525", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ce85e4-1692-415f-991e-ae967602c7b8", "sighting_of_ref": "indicator--1f143155-273e-40a5-b6b1-2bdc3f74d242", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3214d9-1ca9-4d3c-b4cb-6c1ea3f4ee43", "sighting_of_ref": "indicator--f7c00a9f-c0c0-4fee-b6c2-f7e7f50b15bc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a92c904-a4f6-44a9-8489-e3fbbf6b606d", "sighting_of_ref": "indicator--e6e46697-c7fa-484b-9967-197fa8bda457", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000cb341-0863-4c11-9afa-5e68cbf58347", "sighting_of_ref": "indicator--e966e945-87fe-4ad3-9f24-14a74d38964f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7fc892-2cbb-4c8b-a11b-0005b632417b", "sighting_of_ref": "indicator--e966e945-87fe-4ad3-9f24-14a74d38964f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ca410f-5cc6-426c-b11c-ccb79cb3fa1e", "sighting_of_ref": "indicator--0d550c09-9fde-4729-941f-abb095bef281", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d22b213-9a68-41bb-84cc-ec7a3019f97c", "sighting_of_ref": "indicator--de398b29-ee2a-418d-8af1-eded642a7306", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2426d8-0c65-483f-a811-bd9cd831e9d5", "sighting_of_ref": "indicator--525653ae-ca94-4b52-a509-5ea56a288eea", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32efb4ef-23a9-4b79-8b1c-d4a7ed8e7314", "sighting_of_ref": "indicator--3e972cde-105e-4471-8702-d53206af0f75", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eba1fac-0ae4-49e5-9da2-d19df2d31372", "sighting_of_ref": "indicator--0e2ff0a9-a593-49e7-93f5-b720944c812c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2546c678-b7f5-420e-8425-0e8239e3e492", "sighting_of_ref": "indicator--21ad78ff-1bf4-46c8-b3f0-318be9d9ebc2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e87c03e-699c-42d4-afe6-a24566e7df40", "sighting_of_ref": "indicator--b8e06386-fdbc-4a68-8b0e-d3d71c506995", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ee549c-85f2-48df-a98e-d29afb6cbd0a", "sighting_of_ref": "indicator--e801ed62-4a6f-421b-bc96-3a2277e13ed7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744e7250-7a9e-4fba-aa0d-7aa3944e1cbe", "sighting_of_ref": "indicator--7575e60b-4b90-47d2-a0cb-ed954f601e30", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f3c9b3-9410-4ddf-8acf-d85cc9b0e4b0", "sighting_of_ref": "indicator--7575e60b-4b90-47d2-a0cb-ed954f601e30", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4d0f97-3c27-4160-8346-6efbacb8ba98", "sighting_of_ref": "indicator--25ab0fed-1349-441b-81f5-00e04591f3f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88969316-6380-4376-818e-91e99e99f69d", "sighting_of_ref": "indicator--25ab0fed-1349-441b-81f5-00e04591f3f0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e647485-ca3f-4f29-aa8f-469224102d07", "sighting_of_ref": "indicator--a37272e3-e086-494e-a468-9895a95f7377", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b12d26-5f4e-45dc-ba82-6ffce3d6a807", "sighting_of_ref": "indicator--c2924432-8d1a-435f-a855-6ca16d430f86", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb9812a-a055-4e27-b96f-4dfc0c5d20e6", "sighting_of_ref": "indicator--c0c8f278-f170-4c7f-86f6-43255a100151", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e9d34b-7bc4-4c0a-bb67-309dcf4603cc", "sighting_of_ref": "indicator--d5c5ac95-da30-416d-885e-5d4b5c089640", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eeef434-fa2c-4f48-8b42-e73d5c6c0edf", "sighting_of_ref": "indicator--d5c5ac95-da30-416d-885e-5d4b5c089640", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a6051f-b409-433f-8b29-513285507a09", "sighting_of_ref": "indicator--23eb59f5-09e1-4734-b107-d69e3cb383c5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e9f18b-d888-4556-9d9d-00968e7e994a", "sighting_of_ref": "indicator--46286a37-92a9-479f-b04c-3db31060eec8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c110f989-f91a-4ee4-ada8-f506a92ccde9", "sighting_of_ref": "indicator--46286a37-92a9-479f-b04c-3db31060eec8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be18f61-bd29-4e4c-a972-824ecdca837b", "sighting_of_ref": "indicator--b97ae90d-d999-4b76-bc56-0dde4dff8afe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db36e40-5c08-4eea-910f-9b771c80fe26", "sighting_of_ref": "indicator--072691d2-85eb-4242-90c7-c212b4fde79d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cda70bd-e34e-40d8-9e7f-764b1ac84c0e", "sighting_of_ref": "indicator--9644c833-300a-48f3-965a-7c0fa1b5c5a6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a22ddfb-df6c-473f-9e26-9291d6e4895a", "sighting_of_ref": "indicator--8df03439-6621-4694-b6d7-40aa12c94de2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3268b559-f204-4688-85c2-0f25eeb6b3de", "sighting_of_ref": "indicator--1f19cbf6-2a78-4e03-b682-cc334b3beb42", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd95a87-dc88-45aa-a22f-6e25d3cc2969", "sighting_of_ref": "indicator--1f19cbf6-2a78-4e03-b682-cc334b3beb42", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3228b9a-9c5d-4b29-b89d-97cadac6f940", "sighting_of_ref": "indicator--1f19cbf6-2a78-4e03-b682-cc334b3beb42", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ff8782-f702-4290-a889-81f5f48fc4c5", "sighting_of_ref": "indicator--19782490-ad7b-4149-b81e-8bb84c0d9575", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6928dbe2-4be1-43c5-9e1b-3a3d18274fa9", "sighting_of_ref": "indicator--cba76dee-8df6-4586-9121-7b7b14391235", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a3c763-2c1e-4300-b493-71652709f1ae", "sighting_of_ref": "indicator--cba76dee-8df6-4586-9121-7b7b14391235", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49e8196-e449-4f90-ab57-e6086f24dfc5", "sighting_of_ref": "indicator--75e76eae-7849-4587-b312-8c9b8f00bd3e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0b59d7-55d4-4833-9392-12440913be97", "sighting_of_ref": "indicator--75e76eae-7849-4587-b312-8c9b8f00bd3e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b092c07-eb7c-4d97-990d-59137b6b76ef", "sighting_of_ref": "indicator--5eca8ecc-067d-4704-b0f7-fe744587ca47", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9dd7ec2-4c42-4470-bbbe-66dfa53e0144", "sighting_of_ref": "indicator--5eca8ecc-067d-4704-b0f7-fe744587ca47", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f256d9fc-53d2-4e13-9fee-6c60e215917f", "sighting_of_ref": "indicator--d9ed61e8-613e-4c2a-90dc-8544c3f244c3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb621742-6712-4430-82f8-cdc30582bd72", "sighting_of_ref": "indicator--18eb6fd0-181b-4715-98c5-ed0812f99c5d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523b9636-6cba-4201-8c30-9664cbb3e79c", "sighting_of_ref": "indicator--18eb6fd0-181b-4715-98c5-ed0812f99c5d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c65588-2c5d-474a-8dee-1d4c2aad274e", "sighting_of_ref": "indicator--18eb6fd0-181b-4715-98c5-ed0812f99c5d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a782b91-2afe-4b2e-962b-68cf410bfa5c", "sighting_of_ref": "indicator--cfd2d2ba-2cfb-4c93-81f3-0390505928f8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3064e36-7172-4fc4-b703-38a0dd102858", "sighting_of_ref": "indicator--6c31a731-c6aa-402d-b76b-1b38b515c863", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af93ad1b-e54c-45a9-a261-0452cbdd7a0e", "sighting_of_ref": "indicator--6c31a731-c6aa-402d-b76b-1b38b515c863", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65d5c2f-8c9f-4d22-93dd-18cde3fb9e00", "sighting_of_ref": "indicator--cb4e81c7-3a26-4fac-b922-eb1e2a505eb5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96ceecc-5b08-4cb1-94ca-887c86faeae6", "sighting_of_ref": "indicator--cb4e81c7-3a26-4fac-b922-eb1e2a505eb5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aaf1633-4e50-4da3-85cf-1facd86e67a7", "sighting_of_ref": "indicator--c06cc833-4e1b-420b-9e85-092a2b9730b2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169a37bd-c2a7-476d-b011-a04e82f5b51a", "sighting_of_ref": "indicator--978c7ab0-2887-4cb3-a86a-c6c9258b5d47", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028dfb73-6b88-47aa-8985-4cfb19f34756", "sighting_of_ref": "indicator--43b6256a-0e99-4d63-a538-1047c5a9d429", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc0b309-7f7e-4be3-8489-a7b33b953384", "sighting_of_ref": "indicator--737c6850-fbd7-4734-870e-6fc5fb704846", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc9a3e5-8b3d-46a4-aeb0-c5b7fd827f66", "sighting_of_ref": "indicator--2e06522b-deb5-4754-ad68-8714f274112c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84c9bcb-0efa-4a51-9128-c7c23af05e08", "sighting_of_ref": "indicator--2e06522b-deb5-4754-ad68-8714f274112c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffb9324-b3c0-47ee-a64e-5fbafc44be64", "sighting_of_ref": "indicator--2e06522b-deb5-4754-ad68-8714f274112c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5b6239-8742-466e-b5c8-8bc837d4613d", "sighting_of_ref": "indicator--7448ab85-feb2-4c2a-b309-2d61893e19c4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8ee99f-027c-4b75-867d-aa93cf6d1853", "sighting_of_ref": "indicator--7448ab85-feb2-4c2a-b309-2d61893e19c4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6a8869-82b5-4579-99ba-8861fb0024cf", "sighting_of_ref": "indicator--7448ab85-feb2-4c2a-b309-2d61893e19c4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2ce27f-4c57-4d69-b073-82771c9ae451", "sighting_of_ref": "indicator--64cd8789-f370-4adc-a9a8-228f858595e3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e67d0b-a0ee-4089-b96f-ae2efddc4661", "sighting_of_ref": "indicator--64cd8789-f370-4adc-a9a8-228f858595e3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d487840-15a2-4b4d-9dcc-3abff065736e", "sighting_of_ref": "indicator--10d1e3ea-6381-45be-b32a-69ecd6569456", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5ba065-186c-4710-a2f9-9b6400925ff4", "sighting_of_ref": "indicator--10d1e3ea-6381-45be-b32a-69ecd6569456", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05cf0674-9673-4f51-abc7-9a7b35b365b3", "sighting_of_ref": "indicator--10d1e3ea-6381-45be-b32a-69ecd6569456", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5d48d1-451b-463e-bfa9-4d74cdf83dce", "sighting_of_ref": "indicator--8ab9d04f-5b23-4025-8b19-4bba73671591", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a772f8d0-2b55-467c-a55a-c409d1fe8efa", "sighting_of_ref": "indicator--8ab9d04f-5b23-4025-8b19-4bba73671591", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22806047-3cfb-4c68-8fa7-c0b3bccb2253", "sighting_of_ref": "indicator--8ab9d04f-5b23-4025-8b19-4bba73671591", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d49dba8-cdeb-4503-a6b7-c9492eb787e6", "sighting_of_ref": "indicator--9c66f687-617c-4631-9aaf-b1dd343bf575", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f18701-fda2-45c6-b1f3-2e28ca2389dd", "sighting_of_ref": "indicator--9c66f687-617c-4631-9aaf-b1dd343bf575", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6047f0d9-13a6-4819-ab84-9f5213412170", "sighting_of_ref": "indicator--9c66f687-617c-4631-9aaf-b1dd343bf575", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf8fa2f-853b-40f5-bce7-3b80d0dd30fa", "sighting_of_ref": "indicator--a545bc6f-0314-4868-ba05-d64bf4f25658", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0d9723-f4da-4e66-8821-89959fb2b7ec", "sighting_of_ref": "indicator--a545bc6f-0314-4868-ba05-d64bf4f25658", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9e4d54-1761-4a58-b4ff-3ddabc474bc6", "sighting_of_ref": "indicator--a545bc6f-0314-4868-ba05-d64bf4f25658", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7d8177-c251-495c-99f0-9b245c8131d2", "sighting_of_ref": "indicator--f7d40857-23b1-492f-8588-05f29262e45a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5a8dba-7b97-4d55-81da-795518786e32", "sighting_of_ref": "indicator--c2427ac2-3b49-4eb9-8cf3-584c552576ff", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a75d843-7da4-45e8-a57d-3491b541c4a7", "sighting_of_ref": "indicator--c2427ac2-3b49-4eb9-8cf3-584c552576ff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bcf0fa1-2bab-4d3a-afb0-74bde2c8ae09", "sighting_of_ref": "indicator--c2427ac2-3b49-4eb9-8cf3-584c552576ff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df681d3-b392-4ca9-b311-03db246ec194", "sighting_of_ref": "indicator--4e1871ae-7619-4e44-997e-8243e3db7924", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37848c4-1b45-4be9-b97c-98c06025ace0", "sighting_of_ref": "indicator--4e1871ae-7619-4e44-997e-8243e3db7924", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b5a20d-2d2e-4af8-81b6-ee004b9a1456", "sighting_of_ref": "indicator--4e1871ae-7619-4e44-997e-8243e3db7924", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475c29bd-cb3d-474f-9ae4-86cd643b6183", "sighting_of_ref": "indicator--5da97779-12df-432a-a3ac-db818aa82111", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f51e1ba-7a7b-49d6-8159-b493e0da83da", "sighting_of_ref": "indicator--5da97779-12df-432a-a3ac-db818aa82111", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf01d70-f411-4233-92d0-8d4fa3553f26", "sighting_of_ref": "indicator--5da97779-12df-432a-a3ac-db818aa82111", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73dabd57-28a6-4ec3-ba2f-9cb07f6147a9", "sighting_of_ref": "indicator--f5aca453-955d-41f0-b904-b8b0cc9fd336", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1cb7a9-056c-4bb9-8a35-5299a2a8e1c9", "sighting_of_ref": "indicator--7482ba22-8a84-4627-bae9-95589d7a6831", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a97c42-df13-4038-8875-751dfe613c2d", "sighting_of_ref": "indicator--146e1e5c-c3af-4a62-acbd-ee56a84fbf51", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8310fb9-dcc8-4061-80fb-a14a99e7d6a2", "sighting_of_ref": "indicator--146e1e5c-c3af-4a62-acbd-ee56a84fbf51", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7fd1377-f73b-499f-9a0d-58fb54bd4599", "sighting_of_ref": "indicator--37114761-56c6-44d1-a8b1-7f5bcce03efd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a470aaf0-d16a-43a6-8a72-dc064c0db699", "sighting_of_ref": "indicator--37114761-56c6-44d1-a8b1-7f5bcce03efd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b50f07-e8f6-44e4-b6d3-b3b64498b376", "sighting_of_ref": "indicator--37114761-56c6-44d1-a8b1-7f5bcce03efd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c27416-501b-4d06-bc57-1e0a17fbf43a", "sighting_of_ref": "indicator--3bbb91f6-077d-414f-a93a-aba860da0669", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db986054-0962-4ba2-8cae-946342b589ab", "sighting_of_ref": "indicator--968b6ddf-f569-45d9-a739-0f93735ea9be", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f000b30f-f4f9-4573-9527-b5ef68e08f7d", "sighting_of_ref": "indicator--4cddbfab-d29b-499f-bf17-942cc1f57a8c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb822f5e-96f6-422a-b8b3-0100853d6ebe", "sighting_of_ref": "indicator--4cddbfab-d29b-499f-bf17-942cc1f57a8c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5a6665-e69b-42b9-8e8a-2b9b3224ef38", "sighting_of_ref": "indicator--eeb75daa-cad1-4067-96ed-524b94803d9c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac47ed5-06a9-4abf-b9a0-80d210ef8646", "sighting_of_ref": "indicator--9840bb50-aafd-43f7-8247-862c60ab85ea", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c7c536-cef8-46ca-acae-53b6948e44ea", "sighting_of_ref": "indicator--9840bb50-aafd-43f7-8247-862c60ab85ea", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340d9018-05ae-4259-9da2-b0abeac8ec9a", "sighting_of_ref": "indicator--841f50cc-3437-4d9a-91c1-484aec947b73", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ec72a8-d16c-46a3-89e9-1e38a310ba5e", "sighting_of_ref": "indicator--841f50cc-3437-4d9a-91c1-484aec947b73", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627a3228-52a4-4f23-9bfa-8cb1e774098f", "sighting_of_ref": "indicator--115630b0-d043-40f9-8f86-630641008bd5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b50f952-e1fb-48a7-b82b-023d281dddb2", "sighting_of_ref": "indicator--115630b0-d043-40f9-8f86-630641008bd5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db402600-183b-4016-81cf-a176bd8e230a", "sighting_of_ref": "indicator--a96bafc6-57a3-4dc5-8708-58df71a7c728", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948e0b4d-dfc8-4b6a-8b61-564c5d4eddea", "sighting_of_ref": "indicator--e232120e-8029-4378-8760-cf20c921360a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5473d661-13da-4be0-ba6b-9a3f1010a62f", "sighting_of_ref": "indicator--0c7c1d35-c697-439c-a15b-78cccb893cb9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b2bd54-671a-4a4f-a9b1-e89fe4fa31ff", "sighting_of_ref": "indicator--0c7c1d35-c697-439c-a15b-78cccb893cb9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92363850-bc3b-40d7-974d-41ed8c76e169", "sighting_of_ref": "indicator--e0e39a78-b33c-46f3-93b3-d5e87137e03e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b82472-374a-4c6a-91c5-661ac095b64e", "sighting_of_ref": "indicator--e0e39a78-b33c-46f3-93b3-d5e87137e03e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e9d3d2-7cca-46fa-8b44-97102111c541", "sighting_of_ref": "indicator--e0e39a78-b33c-46f3-93b3-d5e87137e03e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c811fd-bbfb-4da3-84f3-53639c4fad28", "sighting_of_ref": "indicator--fcb7bb9b-6256-4e12-abbb-11fcac766f37", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070bc360-1911-479a-b0ff-3c5ba0e5a3a9", "sighting_of_ref": "indicator--fcb7bb9b-6256-4e12-abbb-11fcac766f37", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5acec4-e674-4ca4-b684-353240ccbce8", "sighting_of_ref": "indicator--470c7109-0304-4485-be08-d647f4526443", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fbed28-407b-4294-9dd6-08c79dbf39ee", "sighting_of_ref": "indicator--470c7109-0304-4485-be08-d647f4526443", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71116daa-a0e6-405c-85fc-d1c80cca3fac", "sighting_of_ref": "indicator--11750d83-1537-4754-91b1-06420d4acf28", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fcb999-7119-4002-992c-61b7d88d2599", "sighting_of_ref": "indicator--d032c5d3-be42-48ab-8fe1-584bc68d8e22", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e381048-800e-4383-a7af-f62dd03b4290", "sighting_of_ref": "indicator--45ea64f7-7e35-439c-b191-c3f21fdb3e6e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7c378d-d27c-4e86-a8fe-c8ad36587b4d", "sighting_of_ref": "indicator--45ea64f7-7e35-439c-b191-c3f21fdb3e6e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a056c1af-b8d2-4576-a529-02863043929b", "sighting_of_ref": "indicator--45ea64f7-7e35-439c-b191-c3f21fdb3e6e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56387cb5-a638-4590-b89b-e94f111709f0", "sighting_of_ref": "indicator--094545a3-7d00-4f63-bd7a-2d3ca17c0ebf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20f9c5c-9829-4766-b879-3542601ed924", "sighting_of_ref": "indicator--094545a3-7d00-4f63-bd7a-2d3ca17c0ebf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f2232b-6152-4d56-86fd-2d3e81ed0114", "sighting_of_ref": "indicator--094545a3-7d00-4f63-bd7a-2d3ca17c0ebf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae236b6-15bd-46b4-8ca9-2771e98d4246", "sighting_of_ref": "indicator--35caa92b-44ff-4235-ae5b-e7b800e88e89", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcd7973-fc33-4426-a98c-9eb0c576a7ef", "sighting_of_ref": "indicator--35caa92b-44ff-4235-ae5b-e7b800e88e89", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe08bd4-c8e2-4b1b-ad5a-11f7c4d3b26d", "sighting_of_ref": "indicator--db47313d-d7d0-4624-b645-7252aef3cc6c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb784a0-9905-4465-aa70-cca2fa636bdf", "sighting_of_ref": "indicator--db47313d-d7d0-4624-b645-7252aef3cc6c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a53190-d0be-4812-b5c3-d0f2731d99c9", "sighting_of_ref": "indicator--dda03fa4-2139-4907-99dd-1c4469d348a6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935e6ef9-8ee6-4512-8160-2b434960ee55", "sighting_of_ref": "indicator--0693e558-4b6d-4c2a-b2ea-7bbff5afda51", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e096ddf6-fe4f-4bf9-a9e1-84822f039e25", "sighting_of_ref": "indicator--6fab758c-ce47-48c0-a718-d3fe973e8f8b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cafd6a7-9baf-4842-92ef-5fa898177e5f", "sighting_of_ref": "indicator--5a753d69-4cee-4fe3-afce-a2ba3b60df3b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73628dce-73bf-443f-8791-b7a549235fae", "sighting_of_ref": "indicator--d9a501f2-1546-4bef-b2fb-2cbeb4d81a3d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4cab38-09bc-493c-8bd3-e54ba14a9b9f", "sighting_of_ref": "indicator--936c9be7-fc7c-4572-beb2-b4b14c6954e0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b63d2b0-f7af-4b87-b853-4dc04502f7e8", "sighting_of_ref": "indicator--5fe2876c-e03f-45e8-8e65-7d9bf33b5a9d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb466780-978a-494c-aae9-da3a0824c8b0", "sighting_of_ref": "indicator--5fe2876c-e03f-45e8-8e65-7d9bf33b5a9d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f23df2e-6b0c-4b22-96e3-b1fb50f8fbc1", "sighting_of_ref": "indicator--5fe2876c-e03f-45e8-8e65-7d9bf33b5a9d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33896af3-9049-410e-85c7-4bddf27f965e", "sighting_of_ref": "indicator--57952fbc-6902-4493-b25d-780d6c12a51a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b66a0a-1833-4643-89ce-90b2f17386a6", "sighting_of_ref": "indicator--e642e811-a550-4dea-b984-acf2c8bfe710", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5f311e-29fd-4cb0-91ee-d53ab551d357", "sighting_of_ref": "indicator--c9153a20-44e8-4c6a-ade5-5718592e9ac0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82559716-44f7-46dd-aa9e-332836e601f7", "sighting_of_ref": "indicator--57f963d4-8bfd-4829-ab3a-05d80c78f396", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3e23c2-7377-4d4f-bac7-8af8b2604bc6", "sighting_of_ref": "indicator--605270fa-97d5-419b-8bb3-a9360dab643e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce104e69-1867-49a8-a499-96581b8ef750", "sighting_of_ref": "indicator--a4cc4234-27be-43a3-a263-a55d104b5651", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f41c31b-c7cd-403c-bb74-ccc473534a60", "sighting_of_ref": "indicator--63f5d931-ceab-4d2f-8af8-c209c012daf1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8a9613-0c8e-4d72-ab1f-f7e8df3c64f8", "sighting_of_ref": "indicator--eb413138-d3bc-45ba-bfe1-7b085b40068a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43ff834-f489-4790-83c9-fb4179c001a4", "sighting_of_ref": "indicator--941aa49b-bfd3-4679-b4a9-6915fbd67a21", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f0cb5e-2c4c-4204-bc39-2b3d03cbf175", "sighting_of_ref": "indicator--214ba8a3-a3eb-4aca-accd-6354bc559b85", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c5408f-3397-4343-9f5f-28a3799e25d6", "sighting_of_ref": "indicator--3ed2e55c-0faf-4e9e-96cb-a51d2ee139b7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed8590e-1d82-4efd-a924-9ed3748b70d4", "sighting_of_ref": "indicator--749db61f-4f4c-4cfe-96cc-13c21122254c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527a4c65-3147-4b97-abb5-c396df32a2e4", "sighting_of_ref": "indicator--749db61f-4f4c-4cfe-96cc-13c21122254c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069e203f-bdfa-4afc-882e-ecc72588987a", "sighting_of_ref": "indicator--e74cbdce-12cc-433e-a36f-c5ac1482e00a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94310612-a405-4f7e-9447-8ff6533cd3de", "sighting_of_ref": "indicator--e74cbdce-12cc-433e-a36f-c5ac1482e00a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272330dc-ee98-4361-abe2-87707ab94459", "sighting_of_ref": "indicator--47786e10-1d8b-473b-bd3b-e99e20c24fa8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ef85dc-6a64-464e-8157-ac26ecfe2af2", "sighting_of_ref": "indicator--70c399ab-49bc-4446-966d-3f9ded036800", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fb1072-ca42-4583-a6cf-fd066c8dff69", "sighting_of_ref": "indicator--70c399ab-49bc-4446-966d-3f9ded036800", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b865c892-e0f5-4fb4-a901-a99ad50bba09", "sighting_of_ref": "indicator--70c399ab-49bc-4446-966d-3f9ded036800", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fadb365-8b54-483f-9d7b-f272683f1877", "sighting_of_ref": "indicator--e4f5c266-148c-4d4e-9908-00c132892851", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e28ca7-a3ec-4e13-b7f1-97b85936f85e", "sighting_of_ref": "indicator--bad2aa97-e2b8-40a3-b2f7-3f1c8904917a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef88d45-e931-4745-9c4b-fd00aa2755b2", "sighting_of_ref": "indicator--bad2aa97-e2b8-40a3-b2f7-3f1c8904917a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32949ae1-2e5c-43e5-9083-d5b33479009f", "sighting_of_ref": "indicator--bad2aa97-e2b8-40a3-b2f7-3f1c8904917a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5c4697-b5e9-4c9c-aad3-1c55a45f6c23", "sighting_of_ref": "indicator--4e258079-8d5e-4cec-9a81-f686dfd28e2b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89896613-fc39-4223-9a1b-8b6b58e496fa", "sighting_of_ref": "indicator--4e258079-8d5e-4cec-9a81-f686dfd28e2b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d9835e-4249-492f-ad29-a9b7c1fa6663", "sighting_of_ref": "indicator--4e258079-8d5e-4cec-9a81-f686dfd28e2b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc3daa2-fd38-4bb0-95ef-0a913c4cd2fd", "sighting_of_ref": "indicator--41c3f262-f5dd-448b-88db-fdc7ae2e8910", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8911a34-89a9-4d8d-a6ac-3c6981b2dbb6", "sighting_of_ref": "indicator--41c3f262-f5dd-448b-88db-fdc7ae2e8910", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8f2ed8-69ee-422f-9984-a5dbe5bd341c", "sighting_of_ref": "indicator--41c3f262-f5dd-448b-88db-fdc7ae2e8910", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfad7b77-e26f-44d6-a3e6-77a9d8190c6b", "sighting_of_ref": "indicator--24774b6e-6fc0-486e-9a8f-87306f4af92a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507a5e4c-a272-4577-8146-1e9653973a24", "sighting_of_ref": "indicator--55451822-d51f-49ac-8857-a87f75c493a5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e85499-2c8e-45a2-b373-122db9fec690", "sighting_of_ref": "indicator--55451822-d51f-49ac-8857-a87f75c493a5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96692f0f-d53d-4cc7-81f2-9b14581ccab7", "sighting_of_ref": "indicator--55451822-d51f-49ac-8857-a87f75c493a5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87bba21-64cd-4f8b-b55f-85756c8d44f3", "sighting_of_ref": "indicator--845611a6-cd52-4064-aab3-5b883b8c1a3d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a997fcbe-13ce-4cff-9bec-da4c9e3afe17", "sighting_of_ref": "indicator--845611a6-cd52-4064-aab3-5b883b8c1a3d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a44739-96dd-4f19-b567-345de91b11fe", "sighting_of_ref": "indicator--845611a6-cd52-4064-aab3-5b883b8c1a3d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14547a3-d094-4af0-a61d-cd9dba0eb3af", "sighting_of_ref": "indicator--fde35fa0-8581-4b9c-a40d-718b1ef7374a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970a381f-f028-4bd3-a6e5-f732ad9163e0", "sighting_of_ref": "indicator--fde35fa0-8581-4b9c-a40d-718b1ef7374a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c12201-c192-4db0-afa4-2d536ee5cd1a", "sighting_of_ref": "indicator--da0b2afd-18bb-4bc1-af6b-4940797962ff", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4b00a7-dab4-4c41-ad83-7eeb8aee8e06", "sighting_of_ref": "indicator--da0b2afd-18bb-4bc1-af6b-4940797962ff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be8d5b0-2fa8-42c5-9092-250d676af84e", "sighting_of_ref": "indicator--da0b2afd-18bb-4bc1-af6b-4940797962ff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b167e2-297a-45e6-84a5-92db48ef8f65", "sighting_of_ref": "indicator--724a168a-e62a-4a6c-87c6-066aac947457", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e862bd82-2d11-4cc5-ab5b-8a875fb57b62", "sighting_of_ref": "indicator--724a168a-e62a-4a6c-87c6-066aac947457", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2298d0-c5f1-4a34-9a42-e8d90071ec14", "sighting_of_ref": "indicator--724a168a-e62a-4a6c-87c6-066aac947457", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d6077c-9f4f-4e9f-96c7-b7b63c8d5249", "sighting_of_ref": "indicator--59798214-eb7d-4b36-b7d9-61c075fcbb7f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85b8e29-9c27-43c7-b6d0-e3b59fa259e5", "sighting_of_ref": "indicator--8eb7bd81-f8a3-4638-864b-4c9c25cf363e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ceaa30-3b4c-4b0b-9671-530514a38544", "sighting_of_ref": "indicator--df9d59d9-5f8b-417b-8a87-a12243af659b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a70bb7-310e-47b2-8106-30a91755a331", "sighting_of_ref": "indicator--df9d59d9-5f8b-417b-8a87-a12243af659b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ea204d-8d14-4ace-86c3-cc859d67d94d", "sighting_of_ref": "indicator--2b406448-ccbd-4a2a-96d8-9686be909172", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290fc1d3-3238-474c-bca4-1512b5d4ef1d", "sighting_of_ref": "indicator--2b406448-ccbd-4a2a-96d8-9686be909172", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330cfd89-1b45-45f6-8b51-cadf711c7a4a", "sighting_of_ref": "indicator--79cf1f51-6eed-4113-aff4-f214cee0c12d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c846e7-ad3e-4487-a864-b34ce0dbc302", "sighting_of_ref": "indicator--79cf1f51-6eed-4113-aff4-f214cee0c12d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f21c8e1-b098-4ae3-8df6-06a3937475bf", "sighting_of_ref": "indicator--e29de16e-094a-4136-847f-aeca96ad9f25", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cba5506-f68e-425d-b823-d515098ab05b", "sighting_of_ref": "indicator--bc5c9d19-c0b5-4900-920d-92b067cfa5e6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41854c7-6b7d-4fcf-be6c-524357dad35d", "sighting_of_ref": "indicator--bc5c9d19-c0b5-4900-920d-92b067cfa5e6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a082e06f-a64a-4a95-8732-f7839baebe24", "sighting_of_ref": "indicator--82d66fac-b98c-4c91-88cd-604c4275eda1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b1277b-a520-4b65-8c70-3a2d0f01e730", "sighting_of_ref": "indicator--82d66fac-b98c-4c91-88cd-604c4275eda1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974fcdd3-d53e-400c-b23d-6530bcd819e5", "sighting_of_ref": "indicator--93ab7bf0-8ac6-4dde-bed6-789d3c9a1db2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acbe123-486c-4a70-89d0-ba26c74e4da6", "sighting_of_ref": "indicator--93ab7bf0-8ac6-4dde-bed6-789d3c9a1db2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c371283-5d43-4ac9-b7c5-74f55b931263", "sighting_of_ref": "indicator--a77fcd7b-b885-4f91-9100-c1a4b66c644e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d953305e-e2fe-464d-9d61-76e6495f7e95", "sighting_of_ref": "indicator--a77fcd7b-b885-4f91-9100-c1a4b66c644e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd43746f-4d4a-4558-9102-d5e83f489939", "sighting_of_ref": "indicator--6ec299d6-0c37-4e51-b222-b1e9769fe6d5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0721959e-d7a8-4941-b669-57b94884e4bc", "sighting_of_ref": "indicator--6ec299d6-0c37-4e51-b222-b1e9769fe6d5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6374af5-2bbb-424f-b5bb-405c44d06466", "sighting_of_ref": "indicator--0390d395-30f5-4893-a89f-03b04711a6cf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0ebcdf-4d9f-410b-9a60-0656b3c4d2a1", "sighting_of_ref": "indicator--0390d395-30f5-4893-a89f-03b04711a6cf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae34f2e-76f0-4890-bc4e-93ef99e76a3c", "sighting_of_ref": "indicator--0390d395-30f5-4893-a89f-03b04711a6cf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5422d2d-c479-4d11-9d22-3dd069ca48cf", "sighting_of_ref": "indicator--6f033dd6-eb8b-4569-876e-5f7ea084936c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b9d545-eaaf-4925-b47a-2708f58a1c4a", "sighting_of_ref": "indicator--4d733919-1b43-4282-a9a5-410e7a0e2a64", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df741de4-84ea-46e0-a027-3f0f1d661621", "sighting_of_ref": "indicator--4d733919-1b43-4282-a9a5-410e7a0e2a64", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08e0647-573e-4f29-9aa8-3d455b5363b2", "sighting_of_ref": "indicator--0538bbff-6043-45d7-bff7-ad4edc94b9ed", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc6677d-91ce-452a-8c36-603ea3c4fc23", "sighting_of_ref": "indicator--0538bbff-6043-45d7-bff7-ad4edc94b9ed", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1777a798-0571-4a87-82f1-91187c12b685", "sighting_of_ref": "indicator--90bc0cd8-4e2c-4a46-af73-ed459e363957", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bd4077-7c0b-408d-8c11-81862ec5c8b4", "sighting_of_ref": "indicator--90bc0cd8-4e2c-4a46-af73-ed459e363957", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c60e2c9-9a50-4679-a02f-0356356b5b48", "sighting_of_ref": "indicator--90bc0cd8-4e2c-4a46-af73-ed459e363957", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d90e94-f7ed-4626-a409-424b43e7ff10", "sighting_of_ref": "indicator--4ac1b2c5-b103-44a1-b1f5-a9d04715f23b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2c26e2-f20a-47d7-bab6-bff7619d093b", "sighting_of_ref": "indicator--4ac1b2c5-b103-44a1-b1f5-a9d04715f23b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26980cb-2c58-47bc-b6bd-fe69dc617995", "sighting_of_ref": "indicator--e140f8f2-a3c5-4988-8cf7-e2449c413768", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25ccf82-5a9a-4b8e-b56d-ae80197be37e", "sighting_of_ref": "indicator--e140f8f2-a3c5-4988-8cf7-e2449c413768", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4278d0dd-41cb-4398-b1c6-c6533d660757", "sighting_of_ref": "indicator--c5627960-e017-4b7d-a3cb-c928b818c4d5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ddf4729-d8aa-44a2-b6fc-35976b2121ae", "sighting_of_ref": "indicator--c5627960-e017-4b7d-a3cb-c928b818c4d5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f160ce12-6517-4f0f-9326-686220990f20", "sighting_of_ref": "indicator--08df3c10-575a-4b0e-b4f4-bed333a6506d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20431e7f-8f06-4a21-a014-c51a087db311", "sighting_of_ref": "indicator--25359677-0db6-4e11-8d92-a3fe3603b3ce", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f40e95-4905-4691-a42b-51a129db5c91", "sighting_of_ref": "indicator--25359677-0db6-4e11-8d92-a3fe3603b3ce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f7d740-b004-4911-9302-20ba5391b85d", "sighting_of_ref": "indicator--25359677-0db6-4e11-8d92-a3fe3603b3ce", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f003c9e-1fc6-4df7-927f-2217acc9f78b", "sighting_of_ref": "indicator--0eb1292e-f171-4b43-bb75-d8918e553571", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aacb056-6c19-47be-ac6d-2db0fe61c97b", "sighting_of_ref": "indicator--0eb1292e-f171-4b43-bb75-d8918e553571", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ee0472-8b1c-4416-ae29-d679c8e6f795", "sighting_of_ref": "indicator--0eb1292e-f171-4b43-bb75-d8918e553571", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4dc046-e782-4119-9bac-3f8d2ade56cb", "sighting_of_ref": "indicator--1de79b32-6f7c-4713-88e4-4182c91ba6ba", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fe41ae-47f4-48a5-b7f8-1affd5755e9e", "sighting_of_ref": "indicator--1de79b32-6f7c-4713-88e4-4182c91ba6ba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e605702-3744-4912-a7e2-74cfb000a627", "sighting_of_ref": "indicator--528c5715-7d1f-46ca-aefd-1b56d6b7d4f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b53987e-11b4-482c-b0d3-3e4ec983693f", "sighting_of_ref": "indicator--528c5715-7d1f-46ca-aefd-1b56d6b7d4f0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4a03d2-8ab9-4ace-8cef-9172549117cd", "sighting_of_ref": "indicator--528c5715-7d1f-46ca-aefd-1b56d6b7d4f0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73413df4-0c60-48f9-b4af-41a02a9a0719", "sighting_of_ref": "indicator--c278db0b-ec52-4f86-9cbd-e164edefa7b7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6618c63-f47e-435c-a52d-1de549250d34", "sighting_of_ref": "indicator--c278db0b-ec52-4f86-9cbd-e164edefa7b7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2087bc-00a8-45ad-9c4d-9e5cd10f8c6f", "sighting_of_ref": "indicator--c278db0b-ec52-4f86-9cbd-e164edefa7b7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc5ec78-74c1-42d3-b5eb-60384a053b3f", "sighting_of_ref": "indicator--e6600d7f-9e8e-45b2-93f1-b135c305d933", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b0e0e0-0983-49d6-8c22-d46078cbf097", "sighting_of_ref": "indicator--e6600d7f-9e8e-45b2-93f1-b135c305d933", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b0857c-7f6d-4c73-adfe-dadfc5222a92", "sighting_of_ref": "indicator--e6600d7f-9e8e-45b2-93f1-b135c305d933", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f58f188-a555-4ebb-a40f-9b8221b05217", "sighting_of_ref": "indicator--79c9aae6-0db9-4289-b944-55134717a53f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38969d51-013c-418a-a11f-ab0db83e801d", "sighting_of_ref": "indicator--1dde1deb-1f6b-47d0-8c96-3dde6e1e65de", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479c442a-fb0e-4f50-bae2-7cb1e50a28b2", "sighting_of_ref": "indicator--1dde1deb-1f6b-47d0-8c96-3dde6e1e65de", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f24fa2a-82f4-44e8-bd77-a4322099ff25", "sighting_of_ref": "indicator--1dde1deb-1f6b-47d0-8c96-3dde6e1e65de", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4648a56c-7338-4d15-8231-350c37adfd6c", "sighting_of_ref": "indicator--5b2ed40d-830b-433d-bb2b-b7dc3f6a91f7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed42a643-f051-423a-9ae1-3cabe9b7e99d", "sighting_of_ref": "indicator--8e29751d-607b-4ba6-9b94-5365bd9a235a", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce997e66-fc60-40ed-9db2-923da64dda55", "sighting_of_ref": "indicator--2e1d769a-4616-40a0-9a4d-a24c4c7d6a85", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6139bb04-c0d8-48c8-a41f-f82eaf45a66c", "sighting_of_ref": "indicator--184dc6fd-c3d0-4e39-8bfd-a51190a9d6fc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7c4d56-5c47-4a2e-a43d-624a33cb19af", "sighting_of_ref": "indicator--bf40ac77-7abb-404b-af91-2731f86e99cc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39bb344-bc29-4f2a-8989-978834ff7375", "sighting_of_ref": "indicator--509d6ad4-04f9-4f4e-b841-0b86c300b6bc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b5ad0a-3041-4ad1-9361-4b16aebf48d5", "sighting_of_ref": "indicator--509d6ad4-04f9-4f4e-b841-0b86c300b6bc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a886a6e6-165e-43eb-80a7-1c7857697a9f", "sighting_of_ref": "indicator--bd447b3d-5870-48f9-8196-ea60febdc316", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38076cef-1011-4431-b479-69bbc0e842ec", "sighting_of_ref": "indicator--bd447b3d-5870-48f9-8196-ea60febdc316", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abea0cb9-1455-4190-8f1f-c8069196d9e7", "sighting_of_ref": "indicator--2bb85c27-317a-447d-9ec4-28e1a9ededfe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f04aec-0132-47ad-a610-df7ed56c2df4", "sighting_of_ref": "indicator--2bb85c27-317a-447d-9ec4-28e1a9ededfe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952d68b5-3e73-4be1-a6af-ecc27bc91273", "sighting_of_ref": "indicator--c71c3b59-afa5-4750-b514-5759cd1ac6c6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc207f09-8c79-4406-9c19-c5618479faa2", "sighting_of_ref": "indicator--c71c3b59-afa5-4750-b514-5759cd1ac6c6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328f8255-6b1c-4172-a168-81acc7d529ce", "sighting_of_ref": "indicator--1367039a-1990-422e-991f-7738af45d64c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbf48a0-c3b4-4f74-b837-d3802d68fee8", "sighting_of_ref": "indicator--7aa8c341-7567-413f-afaf-812f4b884a37", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f574ab6e-0938-49f3-8452-93c048d6dfba", "sighting_of_ref": "indicator--71eab8c9-0f2c-4281-913f-6bdf023da59b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7846554-5efd-4200-8d20-33cdd2bc7853", "sighting_of_ref": "indicator--71eab8c9-0f2c-4281-913f-6bdf023da59b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9bdbb3-8c17-475b-a751-2e49988e5d9a", "sighting_of_ref": "indicator--1261837f-3ddf-4b69-975b-77372401880f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d28ad5-921b-409a-997a-f51db8210a1e", "sighting_of_ref": "indicator--1261837f-3ddf-4b69-975b-77372401880f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c434e3-a15b-49aa-aace-2b23338f12e9", "sighting_of_ref": "indicator--3d410eba-448e-4922-94f7-3f1d1738d6d6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe1f649-3784-4bfe-9d13-65ad5a1c9271", "sighting_of_ref": "indicator--3d410eba-448e-4922-94f7-3f1d1738d6d6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165a5d0d-c78b-4934-937b-2f0d55c4ffae", "sighting_of_ref": "indicator--d6ad92e4-a638-4c89-b3e1-d4e05df57643", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91125ff0-d88b-4115-a18e-7cb9257ce05f", "sighting_of_ref": "indicator--d6ad92e4-a638-4c89-b3e1-d4e05df57643", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129d589f-5f74-44ad-bf5c-fc0bd3e87fd1", "sighting_of_ref": "indicator--bb69d6c9-5cfb-4191-993f-427f443f62a0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e9b800-3443-4af4-a790-c106c0f89282", "sighting_of_ref": "indicator--bb69d6c9-5cfb-4191-993f-427f443f62a0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf098e6-dcd9-4598-af96-b5cd370d03b5", "sighting_of_ref": "indicator--9db76d96-f411-4543-bf51-29b1950a8f60", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e311560e-e812-4c35-bb61-5e80ceae4fc7", "sighting_of_ref": "indicator--9db76d96-f411-4543-bf51-29b1950a8f60", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff57800-85f1-4773-ac03-0bf9b77d18c7", "sighting_of_ref": "indicator--c2aa0e4c-709a-479c-b636-b89d12ea562c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e6f15c-7130-4c71-ba1a-7d981259d4bd", "sighting_of_ref": "indicator--c2aa0e4c-709a-479c-b636-b89d12ea562c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293e92c1-cdcd-48ba-9d32-05e478ab2024", "sighting_of_ref": "indicator--7f0e5839-b9ed-4aba-b707-f5f2ff7968f6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07ca74f-1fa2-43ac-ac5c-e3c2019b4d0c", "sighting_of_ref": "indicator--7f0e5839-b9ed-4aba-b707-f5f2ff7968f6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747d8353-4782-46e1-af47-a3c78673011e", "sighting_of_ref": "indicator--fb4445aa-6d5b-4ebc-a4df-9691fca53b7a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e9489c-5d60-402e-b373-405a1be7a7b7", "sighting_of_ref": "indicator--8794e331-b70e-4e07-a4fc-c437fc208fd7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcba0de2-398e-496e-a6d4-069bc9ac1774", "sighting_of_ref": "indicator--2454d950-1c55-4338-925b-41a294ff9519", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c29df38-819a-4fb9-a296-b7d119fdd635", "sighting_of_ref": "indicator--2454d950-1c55-4338-925b-41a294ff9519", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1b3031-53be-46af-823d-b9a3f04424c8", "sighting_of_ref": "indicator--352d7fe0-09fd-4534-b2ad-f09de0378efd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4b5e77-c8f8-4b9c-a4d4-55ea9bf60507", "sighting_of_ref": "indicator--352d7fe0-09fd-4534-b2ad-f09de0378efd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64746b57-9801-4f98-9f0f-3460b1923da4", "sighting_of_ref": "indicator--57acb370-f498-4e56-a612-fdd2a6540ae7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32220616-515c-4d99-8621-9cc56ca448db", "sighting_of_ref": "indicator--57acb370-f498-4e56-a612-fdd2a6540ae7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f343605e-c9a9-413b-b770-55d11028d7de", "sighting_of_ref": "indicator--cf7ad773-1a8f-42a2-9a18-255c1f9a0f6c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968e67ef-5826-4693-9295-e8252ee92806", "sighting_of_ref": "indicator--cf7ad773-1a8f-42a2-9a18-255c1f9a0f6c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b015c33-efbf-4a99-aac1-d58b89bd991e", "sighting_of_ref": "indicator--14f455e9-8bf9-4f7d-a1fd-7adfe13c3d98", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b6fab3-7460-411a-803d-6f82a4bf243c", "sighting_of_ref": "indicator--14f455e9-8bf9-4f7d-a1fd-7adfe13c3d98", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5d9650-61f3-4ebb-b7ef-047cc9ff170d", "sighting_of_ref": "indicator--fb84b138-4576-4935-a39e-c7d60cc69343", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bffdd75-2566-4ea7-87c5-ad41941eb25f", "sighting_of_ref": "indicator--fb84b138-4576-4935-a39e-c7d60cc69343", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e69d8a-050d-4195-b6d0-c6a459ad95a6", "sighting_of_ref": "indicator--b85458e3-22aa-47bf-bbd8-bb867681d5dc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2011912-70de-440c-8432-dddf36e5ed14", "sighting_of_ref": "indicator--b85458e3-22aa-47bf-bbd8-bb867681d5dc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11276ba4-4410-4311-9a87-64e4522c110b", "sighting_of_ref": "indicator--943f807f-82e1-45e2-8e98-79d85d4e55c8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1e5be0-b7b7-4766-bf79-1bea5344e9bb", "sighting_of_ref": "indicator--943f807f-82e1-45e2-8e98-79d85d4e55c8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2e8faf-5744-49cb-a530-ac6b6b560189", "sighting_of_ref": "indicator--446b5a51-bd95-4d7a-9a02-e5984a1f08bc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d73de8c-6610-4711-bced-741a336e8b4f", "sighting_of_ref": "indicator--446b5a51-bd95-4d7a-9a02-e5984a1f08bc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc781fe-360e-475b-aa5a-6561f73cce6f", "sighting_of_ref": "indicator--bf680739-fbbf-4439-846e-ff2629018bd8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112cad6e-5d8e-4a94-ad74-67405ced9336", "sighting_of_ref": "indicator--bf680739-fbbf-4439-846e-ff2629018bd8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d85b365-2485-43f7-bd85-2ed2a40bd50e", "sighting_of_ref": "indicator--8f3e3010-1886-4264-bd1b-0a27d4304dbe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3567dab2-2360-42d7-ae29-c1cd482f8b25", "sighting_of_ref": "indicator--8f3e3010-1886-4264-bd1b-0a27d4304dbe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8378881-631e-4ccc-818f-d619546d5a72", "sighting_of_ref": "indicator--546ac15b-2055-4da4-8491-ba56814cc332", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b26bfab-c1dc-40df-8d0f-842096cd06d6", "sighting_of_ref": "indicator--546ac15b-2055-4da4-8491-ba56814cc332", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847d1c85-eb2c-45cb-a46c-dd433746a429", "sighting_of_ref": "indicator--00af0ac9-9bc4-4068-b9bf-813b48cccb23", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da9458d-e0ff-4ad9-a7b4-e9723ef410cd", "sighting_of_ref": "indicator--00af0ac9-9bc4-4068-b9bf-813b48cccb23", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf61e3ef-1a57-4148-876c-cd63becac95c", "sighting_of_ref": "indicator--d5a57340-e393-45cd-93de-2821f33210c0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761ff980-b409-4952-8099-ba80901adb28", "sighting_of_ref": "indicator--d5a57340-e393-45cd-93de-2821f33210c0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25824614-6d81-4b90-a524-dd4c7d20597f", "sighting_of_ref": "indicator--76d3152d-cc91-4c84-af7b-26e949375f08", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9b0cb4-c501-49ab-b6ed-b9ae06c7b632", "sighting_of_ref": "indicator--76d3152d-cc91-4c84-af7b-26e949375f08", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33ef557-18f5-432c-bce5-46fbf64c236d", "sighting_of_ref": "indicator--95b91bf5-6966-47e6-9fe6-84fd64912124", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704a274b-4695-4a74-ae45-a8b59b44ab9b", "sighting_of_ref": "indicator--95b91bf5-6966-47e6-9fe6-84fd64912124", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db60f83-09b3-4a2f-9db1-80c34e7dfa73", "sighting_of_ref": "indicator--75508485-c14d-4d97-8e37-29b672320bf3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89994e3-6ba4-4b1f-a8a2-dc2f0e868c45", "sighting_of_ref": "indicator--75508485-c14d-4d97-8e37-29b672320bf3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86527304-b1d1-47c5-a00e-30f47b476d82", "sighting_of_ref": "indicator--f5739add-7b79-4ec9-823f-05647b358471", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f947967c-4c89-4fe8-b42f-83b220d63836", "sighting_of_ref": "indicator--f5739add-7b79-4ec9-823f-05647b358471", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b15fcb-792d-437f-958a-d25149d79ae0", "sighting_of_ref": "indicator--88a97cc6-2630-4d69-afa2-7289dbbbd04f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db834ea0-0b3a-4da0-9382-73f0243a1c4f", "sighting_of_ref": "indicator--88a97cc6-2630-4d69-afa2-7289dbbbd04f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4e7c51-b4f8-491f-9e73-8c528e2072aa", "sighting_of_ref": "indicator--da4a3efd-4f20-498f-8e7d-88f392003367", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7a5330-3ee4-4de8-abf0-1c5f3a45d079", "sighting_of_ref": "indicator--da4a3efd-4f20-498f-8e7d-88f392003367", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c403371-563e-4170-9f6e-79955ca55930", "sighting_of_ref": "indicator--d6033b1c-5397-44d6-a664-b6fdd682f33a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06666140-8d01-47ed-923f-11d6d3e1cbc6", "sighting_of_ref": "indicator--d6033b1c-5397-44d6-a664-b6fdd682f33a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b69dbc-aed7-491e-88e3-1987a6a132c3", "sighting_of_ref": "indicator--5d4e2c30-57ee-4768-a1bc-1348b1177152", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43053b02-cbe8-443f-bf65-e757dab28a5f", "sighting_of_ref": "indicator--5d4e2c30-57ee-4768-a1bc-1348b1177152", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073f767d-46f6-4096-9242-03d3c3cd7b31", "sighting_of_ref": "indicator--3dca413a-5d4c-4de3-a468-f9394807162e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea6db45-bc1c-4930-a904-b145f238b069", "sighting_of_ref": "indicator--3dca413a-5d4c-4de3-a468-f9394807162e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b434b33d-05fa-4478-8ca4-04e1142123c1", "sighting_of_ref": "indicator--bdd7d66e-9bc6-4f13-955b-850c8796f088", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48253df5-5e04-4e32-b3c3-309fa64a2aa0", "sighting_of_ref": "indicator--bdd7d66e-9bc6-4f13-955b-850c8796f088", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4830ebe5-a4c6-43dd-a087-25cdd34c3e12", "sighting_of_ref": "indicator--29b1b111-0fb1-491c-8eb7-6fafd7599f8e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530a27af-21ba-4d3b-a783-2c06c378d412", "sighting_of_ref": "indicator--29b1b111-0fb1-491c-8eb7-6fafd7599f8e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cda3332-05ec-405a-bd6b-035e125477df", "sighting_of_ref": "indicator--5ac50525-fa47-481a-869a-74b2088dde57", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0cf4ee-0bb0-4420-97e1-84aa2aa1c3de", "sighting_of_ref": "indicator--5ac50525-fa47-481a-869a-74b2088dde57", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7990fd61-a0d2-4764-8538-f8e12532f7d1", "sighting_of_ref": "indicator--9d220100-0494-417c-a87e-d7ae02059257", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f9ef97-2c6e-4240-8a2f-84c1b31a0921", "sighting_of_ref": "indicator--9d220100-0494-417c-a87e-d7ae02059257", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac7d368-7e92-4935-b5e8-caf449652c8a", "sighting_of_ref": "indicator--09f72b9f-0c76-4422-abf6-c96c2fdfb98a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de4eace-f58c-4969-a129-925a173cb4b7", "sighting_of_ref": "indicator--ab946d9b-7b25-4754-bc7b-4309e10c06de", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7d9fe0-75bf-4aba-87f4-0aa4b18cb1d5", "sighting_of_ref": "indicator--9fb3a3de-ff33-4cfa-a7ff-e062038e1813", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d6fc90-c14e-490d-9367-56f87902ee15", "sighting_of_ref": "indicator--9fb3a3de-ff33-4cfa-a7ff-e062038e1813", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5adc477-2062-4c16-931d-46a040fb6d8e", "sighting_of_ref": "indicator--d4c914c8-2474-4c28-87c7-a0a72830e1c0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d57f151-6131-41d1-b8ae-5a00d2da3d1e", "sighting_of_ref": "indicator--7a4fa04f-a671-4b22-afe3-9b43638b112b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce571b96-43b6-421e-a327-ab88ced636d7", "sighting_of_ref": "indicator--d54f3f7a-38a1-4088-8b84-d86d626b36cd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0689e95f-5f8c-460e-9d75-790e5b99a285", "sighting_of_ref": "indicator--d54f3f7a-38a1-4088-8b84-d86d626b36cd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1da5977-01bc-41d1-9f68-43b0c60b4495", "sighting_of_ref": "indicator--ea6d1156-bfb8-45ee-a808-6562d02e8274", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6e75ab-ad3f-4939-91e9-866ed7382a62", "sighting_of_ref": "indicator--ea6d1156-bfb8-45ee-a808-6562d02e8274", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbd6242-fca5-4387-af58-21e62ee2173f", "sighting_of_ref": "indicator--776de050-8482-486e-94a4-6efc3113f7d9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e106003c-f126-4aac-bd3b-c6e8dcd75b9e", "sighting_of_ref": "indicator--776de050-8482-486e-94a4-6efc3113f7d9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59ae078-d5ee-46da-b2c0-6099187dc4ea", "sighting_of_ref": "indicator--6aad87a6-d3a2-46b9-9faa-4dfcffb5b312", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525e0176-3865-4a28-9cf6-b68a67e3c19a", "sighting_of_ref": "indicator--6aad87a6-d3a2-46b9-9faa-4dfcffb5b312", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d1abdd-9905-43dc-bc00-2f9983e4fa7e", "sighting_of_ref": "indicator--cdf31096-e57a-499d-8e7c-d46f506325b6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54700aab-4b59-4087-b700-500b80cf1247", "sighting_of_ref": "indicator--f57fc3c0-606c-4a74-9131-5bc3225f6801", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cb8ac4-b950-441b-bc3e-ac2760e3b3d4", "sighting_of_ref": "indicator--eca4ed3c-9ba2-44c6-adbd-a219dbe07ac7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46ba917-37cc-4dc4-8434-be9dbe4b9393", "sighting_of_ref": "indicator--eca4ed3c-9ba2-44c6-adbd-a219dbe07ac7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b056e07-6e15-4ad6-a101-e5a266748540", "sighting_of_ref": "indicator--cd59afe8-0106-45f8-b62f-fd302bdecfa5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a38359e-81db-41b6-b2fb-1bc62d931025", "sighting_of_ref": "indicator--cd59afe8-0106-45f8-b62f-fd302bdecfa5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce46ef5-e2f4-4c42-acf5-1d2a546cc6d4", "sighting_of_ref": "indicator--e80bb2f0-1eb6-47ec-aa78-e134d38da045", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fbea62-1fd3-44be-a9e4-d25d8c1ba8b7", "sighting_of_ref": "indicator--e80bb2f0-1eb6-47ec-aa78-e134d38da045", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f1d1b6-c4af-4778-82b0-faa9e5d3d482", "sighting_of_ref": "indicator--4f11ebbb-2f57-48b3-8e6b-47b1b8353c87", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320e036d-4ec3-4bc7-8bfa-80e16834a6cd", "sighting_of_ref": "indicator--4f11ebbb-2f57-48b3-8e6b-47b1b8353c87", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f89d9f3-0b74-4551-ab62-d381868a3c9b", "sighting_of_ref": "indicator--dab4ae5c-44c4-48e2-b5fc-a9c719a989a1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfa8c71-7f02-475e-8857-f42487a7cb14", "sighting_of_ref": "indicator--dab4ae5c-44c4-48e2-b5fc-a9c719a989a1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408bef7c-6105-4240-b692-95b340c71fa5", "sighting_of_ref": "indicator--a6b875df-e4e0-4b91-a788-2ea049047dc3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b38747-443f-4ccc-921f-bb731b23591c", "sighting_of_ref": "indicator--a6b875df-e4e0-4b91-a788-2ea049047dc3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55918c8f-48bf-43ce-8ba2-71391d66af8d", "sighting_of_ref": "indicator--ccf71fec-9248-4418-8d32-ea0375f96eb1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896cb25e-ea1f-419c-b517-a859492c6d0e", "sighting_of_ref": "indicator--ccf71fec-9248-4418-8d32-ea0375f96eb1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45911648-1c0d-421b-b536-2d36fff18e90", "sighting_of_ref": "indicator--08d77d91-6256-4dc1-b4dc-47b1dc9a6d5c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781f15da-fc19-4173-8c89-efff4a308022", "sighting_of_ref": "indicator--08d77d91-6256-4dc1-b4dc-47b1dc9a6d5c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7901269-22f9-4715-9ae4-b4413e024fbf", "sighting_of_ref": "indicator--a5c1b77c-2aa0-45d3-aa70-6ad9eca4dbe4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cdc78e-130b-4209-9b71-a742ab5d76d3", "sighting_of_ref": "indicator--5727a357-f782-446f-b72f-71de4e5c4d68", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba4d8d2-1df4-46e5-b438-be1f5a92094a", "sighting_of_ref": "indicator--c70d1900-a08f-432f-8af9-afd3ff96a107", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d533f36-5df0-4b31-b929-fa55341e5f05", "sighting_of_ref": "indicator--a1ce5809-b05e-42d7-9f34-1728542630cc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2847dc03-7af4-4d1c-90bd-a2fc80ac9189", "sighting_of_ref": "indicator--df17f6d1-ff4b-4fc2-80a2-619ba91ae4f2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47569f7-8173-4f4a-8454-86d47205ca0e", "sighting_of_ref": "indicator--df17f6d1-ff4b-4fc2-80a2-619ba91ae4f2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fb2b63-0f52-4ddb-b267-d4d6b4e41a71", "sighting_of_ref": "indicator--33451b59-898e-46c8-afe9-8e9bea9d1dd0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2547bf81-fbbc-4872-a590-0e8d650bd9dd", "sighting_of_ref": "indicator--33451b59-898e-46c8-afe9-8e9bea9d1dd0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d44a0d6-8a5d-4263-957e-feb3c9ad87aa", "sighting_of_ref": "indicator--bfc366c5-1cd6-418a-a4ee-c21f2c306781", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5e0d1c-8f10-4f77-bc0d-8a3e139e8594", "sighting_of_ref": "indicator--bfc366c5-1cd6-418a-a4ee-c21f2c306781", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed516c5-92c4-4faf-b1d3-e40f21b5f95d", "sighting_of_ref": "indicator--59f7cd5c-2b5b-438f-bd71-e8f7af3933bc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad759d9b-9aa5-48d6-8ec6-7bf3392671c6", "sighting_of_ref": "indicator--59f7cd5c-2b5b-438f-bd71-e8f7af3933bc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c3ffa6-a0c9-43f5-995a-2bf8f58fc6fe", "sighting_of_ref": "indicator--491454df-08f8-4b15-8c72-f9c1f3094b8f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4096c1c-fe01-48c5-be60-52fb39a4c8f3", "sighting_of_ref": "indicator--e5189b39-bed1-45b5-a2eb-c3af00309309", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3826e22-2480-45f6-8c5b-a542a871d6c3", "sighting_of_ref": "indicator--e5189b39-bed1-45b5-a2eb-c3af00309309", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2666fd8-d48e-466e-aa73-587c988455e9", "sighting_of_ref": "indicator--3148b5cd-bac5-45f9-9296-01828be63d55", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cee98a-52ec-4344-8f9f-22c57b11ad60", "sighting_of_ref": "indicator--3148b5cd-bac5-45f9-9296-01828be63d55", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02ebc7b-2c8a-484a-a630-4011913730c2", "sighting_of_ref": "indicator--7fc593df-dbdf-458e-a2ae-1bbb40ea0830", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a806b3a-5dcf-4643-8a1a-2f176fc6c7b3", "sighting_of_ref": "indicator--7fc593df-dbdf-458e-a2ae-1bbb40ea0830", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0193a218-713b-4d9c-8faf-ab7c9089a15c", "sighting_of_ref": "indicator--7fc593df-dbdf-458e-a2ae-1bbb40ea0830", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707f9727-dc0f-4f97-8882-b356b0d9727b", "sighting_of_ref": "indicator--a246c5ad-b2d2-4b67-a8e5-e126c47908b8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4074c3-bbab-4902-95fa-9656a0a0f772", "sighting_of_ref": "indicator--042cb9ac-5e35-43b3-8aa4-1dd66f3ec495", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46647ae6-08c5-42ae-8e5b-78878a83eb77", "sighting_of_ref": "indicator--042cb9ac-5e35-43b3-8aa4-1dd66f3ec495", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5158fac1-5170-47d5-abb1-30c6329e5500", "sighting_of_ref": "indicator--042cb9ac-5e35-43b3-8aa4-1dd66f3ec495", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84edebb0-d91b-45c5-a725-c4b0b036bd2d", "sighting_of_ref": "indicator--2ac594fc-cf3e-4808-9e1c-c52a234c52e7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e05de1-5cf7-4220-a453-e23e0c34061a", "sighting_of_ref": "indicator--2ac594fc-cf3e-4808-9e1c-c52a234c52e7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21894fb5-d435-4ff8-8e75-5f4889afebf0", "sighting_of_ref": "indicator--2ac594fc-cf3e-4808-9e1c-c52a234c52e7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fcfa0b-3b82-452b-8ebb-5e3436509b37", "sighting_of_ref": "indicator--a45cc916-9279-40ed-baae-c1be9de79277", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54870bf9-3897-4f59-9076-8084a06374f9", "sighting_of_ref": "indicator--a45cc916-9279-40ed-baae-c1be9de79277", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9895d9d-c0bb-4c06-8eaf-03c196b378f1", "sighting_of_ref": "indicator--a45cc916-9279-40ed-baae-c1be9de79277", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758d9d8d-8e91-499c-8154-830bdaae93f5", "sighting_of_ref": "indicator--c1e41d5c-37f3-4d3f-baf6-0099333e390d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688baf2b-7732-4768-bee1-0ae14996eedf", "sighting_of_ref": "indicator--c1e41d5c-37f3-4d3f-baf6-0099333e390d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add4a51e-b36c-4db4-8f5d-92e50f6fb777", "sighting_of_ref": "indicator--c1e41d5c-37f3-4d3f-baf6-0099333e390d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f0774e-27e9-465f-82e0-a31b791b085b", "sighting_of_ref": "indicator--5940647b-30df-46d4-bd48-29a16a286938", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4fe8a2-f3f9-463e-a10b-b53f97295e54", "sighting_of_ref": "indicator--5940647b-30df-46d4-bd48-29a16a286938", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06cea43-9e83-4950-bffd-306cd1bedf46", "sighting_of_ref": "indicator--5940647b-30df-46d4-bd48-29a16a286938", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9c019b-c609-4b37-938f-f2e13db1da26", "sighting_of_ref": "indicator--1a4d658e-8d45-4a4e-a27b-5c014aacfe41", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe72170-81c5-4618-9424-3ab7fd3d002c", "sighting_of_ref": "indicator--1a4d658e-8d45-4a4e-a27b-5c014aacfe41", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d38a6c2-053c-4125-81a1-4330b0b91bd0", "sighting_of_ref": "indicator--1a4d658e-8d45-4a4e-a27b-5c014aacfe41", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab51300c-a093-4b93-9117-5d69bdc673db", "sighting_of_ref": "indicator--d489cdb1-2082-4e25-97f7-da1dd23f683c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0749ff3a-16b8-4a92-a9da-622e1e1c7de7", "sighting_of_ref": "indicator--d489cdb1-2082-4e25-97f7-da1dd23f683c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ba4c15-8c51-4f13-b549-e579e6007060", "sighting_of_ref": "indicator--d489cdb1-2082-4e25-97f7-da1dd23f683c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77bd3cb-76c8-4ceb-a6bb-63bf575e9279", "sighting_of_ref": "indicator--3a0eb647-43c9-4ea8-936a-eef8fed5bd9b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9d6f15-357a-4414-a864-b79aebd99aa7", "sighting_of_ref": "indicator--3a0eb647-43c9-4ea8-936a-eef8fed5bd9b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0c9e19-4afe-4d44-92f6-13c6246bb36c", "sighting_of_ref": "indicator--358c5d7f-2816-4801-a51f-5cac8a361864", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80336a90-ba33-4f6e-ae29-f96ac0787165", "sighting_of_ref": "indicator--358c5d7f-2816-4801-a51f-5cac8a361864", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4ecd86-e83a-4567-890f-23707b12980c", "sighting_of_ref": "indicator--e8bc20ea-5dcf-4e9d-98c0-647251a0b903", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746f03bf-c2fc-42e3-9cad-cf58ed8164a0", "sighting_of_ref": "indicator--e8bc20ea-5dcf-4e9d-98c0-647251a0b903", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d827d1aa-7ed5-4aff-b111-a3dc00ed8463", "sighting_of_ref": "indicator--e8bc20ea-5dcf-4e9d-98c0-647251a0b903", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad6f94e-2472-4021-a46f-ab2f0013ed81", "sighting_of_ref": "indicator--2c090ade-1526-4f66-a4b7-651c0b2ee439", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62665fa5-adfc-488f-af9a-66789811fe37", "sighting_of_ref": "indicator--68279271-62c4-49e3-95f7-200fc52d397f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6958d3e-b420-4c99-b7ba-3675d1aa0cfc", "sighting_of_ref": "indicator--2a1f0131-0414-46be-9e62-216be1332005", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b52519f-6663-4c5c-8e34-09c488ce3ced", "sighting_of_ref": "indicator--2a1f0131-0414-46be-9e62-216be1332005", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa07a79-3d1a-45bf-878e-f094977ebcb9", "sighting_of_ref": "indicator--2a1f0131-0414-46be-9e62-216be1332005", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8217b9a-d45c-4b04-9176-0fa1da42fa02", "sighting_of_ref": "indicator--269e8d97-e294-4fba-bc94-71385cdea26c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e745a8-1969-4274-ae72-b6b036f36367", "sighting_of_ref": "indicator--269e8d97-e294-4fba-bc94-71385cdea26c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83938963-dc40-4cb2-aa84-67e7ff278f7f", "sighting_of_ref": "indicator--69c4a0ca-d2d8-4f79-9cbf-815aa7f8c171", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2500cf52-1fdb-44db-90b2-51e724bb9f09", "sighting_of_ref": "indicator--69c4a0ca-d2d8-4f79-9cbf-815aa7f8c171", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83d758e-6328-4b46-96bc-563e5de0d7d3", "sighting_of_ref": "indicator--29cdc126-f577-467d-a040-c6065f2e8393", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f912553-8967-4c6d-9dc1-b7b0f0cbcc2c", "sighting_of_ref": "indicator--9240d12b-a221-4b86-950d-90830ed55707", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6aa35f-b41e-4451-aae7-7d189969b563", "sighting_of_ref": "indicator--9240d12b-a221-4b86-950d-90830ed55707", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e17073-98e3-4afc-af8f-8b46f60e7773", "sighting_of_ref": "indicator--9240d12b-a221-4b86-950d-90830ed55707", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e34a87e-ee3c-45c9-bae3-32a69885a931", "sighting_of_ref": "indicator--ae7f3652-0b09-47bc-af28-74f3ce275bbe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2472fa5c-d086-4e5e-a5f8-0beac0fe8046", "sighting_of_ref": "indicator--4551c5a1-06a7-436d-ba88-afef446314ef", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c72e935-2d81-474b-9f5d-1dd7e10bebd4", "sighting_of_ref": "indicator--4551c5a1-06a7-436d-ba88-afef446314ef", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8903e891-d9f3-473a-866a-2d158d2e8953", "sighting_of_ref": "indicator--8fed1a60-52d3-4ecd-9737-007be0ca3dbd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004c2346-4976-494c-bf53-ff3837439f39", "sighting_of_ref": "indicator--8fed1a60-52d3-4ecd-9737-007be0ca3dbd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f64176-2cc0-4626-8de8-f3c7076451bc", "sighting_of_ref": "indicator--7695cc05-c15d-4c50-a6e8-a43217235e3e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd05548-f92f-49d1-a5cc-74653667dee1", "sighting_of_ref": "indicator--e4cb8e64-a49b-47d8-a1d9-4c0e9ef57ce5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1bb5dd7-8099-463b-a784-687552202d0e", "sighting_of_ref": "indicator--e4cb8e64-a49b-47d8-a1d9-4c0e9ef57ce5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce40b14b-50ca-4a4b-8f14-d8f718086470", "sighting_of_ref": "indicator--b4e483a5-f8e5-4431-adad-92fe7461d20d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e659aa-431e-41dc-acee-98690d1ee45e", "sighting_of_ref": "indicator--b4e483a5-f8e5-4431-adad-92fe7461d20d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c036ce0-59e5-49d2-acdb-e18755d12761", "sighting_of_ref": "indicator--d2d94cf3-39f6-442e-9a6a-a721db0a547c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456dc536-57fe-4994-bc07-28d2eaa8c7df", "sighting_of_ref": "indicator--d2d94cf3-39f6-442e-9a6a-a721db0a547c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a64de2f-779d-428e-900f-73f5aaca656c", "sighting_of_ref": "indicator--a298be0f-68ab-40d1-8a9d-2773b204bce2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f9291a-8a3e-4e08-9ca3-26a4439cf421", "sighting_of_ref": "indicator--181af18d-8ecb-4152-bf29-4015ed858ad5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048bbfc7-d490-44a2-ae3c-6bb099c60363", "sighting_of_ref": "indicator--e150bb57-ef97-4859-9473-8201ca2faf6f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78eb7a8-7bc1-4a60-a4a9-cc400fe0411a", "sighting_of_ref": "indicator--e150bb57-ef97-4859-9473-8201ca2faf6f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c34b65-6097-47fe-b25e-782a2cca9cdc", "sighting_of_ref": "indicator--e150bb57-ef97-4859-9473-8201ca2faf6f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99fa86e-c3d0-48ce-a1c5-c592419ceb1d", "sighting_of_ref": "indicator--5fb8ab26-b027-4d5c-b4dd-68673a6b2819", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d701250-f8ee-4d36-9b0f-e8f9acd5455e", "sighting_of_ref": "indicator--7b078cc4-886b-461f-aeb7-0e428aa13811", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f62fc4f-832d-43ac-b7df-a817853d22b0", "sighting_of_ref": "indicator--89c0d677-4854-4bda-a776-6a5b04da23b6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087552cc-213f-4335-ace5-a86267d2bfc1", "sighting_of_ref": "indicator--192de271-c46a-43d5-9f51-5c51877b5219", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f9e2c4-bb28-42b9-ab9a-ea7695743ca5", "sighting_of_ref": "indicator--439838af-3980-4a67-a2f2-185ac55fee92", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50b1346-0cb3-430e-ad89-58305ff69ecd", "sighting_of_ref": "indicator--19e8648f-dc26-4865-9988-ec45101e5186", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eea67c2-96d4-4e1c-a58b-1f751588ba12", "sighting_of_ref": "indicator--c1bd94aa-c3e5-4b89-8308-8a87abbd0a69", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad499b2a-a8bd-4026-b30a-1e981f865ac3", "sighting_of_ref": "indicator--a1810a57-27eb-426b-8d95-61ad78313ef8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b39802c-dbf9-49fb-ba4a-117133abd4c3", "sighting_of_ref": "indicator--6366f72d-9531-46fe-ade6-26cb5bb1ccbb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af273f1b-ce0a-48b9-b33c-7fdda3fa8552", "sighting_of_ref": "indicator--1a86f678-4531-456a-bf69-fa53c7d1fac9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4631be7f-e23a-4d58-8d14-860dbe575970", "sighting_of_ref": "indicator--1a86f678-4531-456a-bf69-fa53c7d1fac9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3da2b8-c352-483d-8ace-59a3e6e74ef8", "sighting_of_ref": "indicator--419dbbc5-ac3a-4721-8771-571ec91207a0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf05f0bc-ffcd-4ed8-a420-ccb64e2e1c5b", "sighting_of_ref": "indicator--5ffb4ec1-60cf-4f53-b18f-624869ec2696", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f90a8df-771a-4a78-83d5-1d15c110fdbd", "sighting_of_ref": "indicator--f0e3bd0f-2fea-4726-b9c9-7f829f9315a1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0c6bfe-cd06-46b1-8ba0-7371492979c1", "sighting_of_ref": "indicator--9b4b2c29-2358-4c0b-acfb-7b45fe3e7a93", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fcb1b8-57e3-4792-b17f-80381ba3de96", "sighting_of_ref": "indicator--68588665-47fe-4fc6-95e6-96c154dd287c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64ab477-b0d0-4937-bed2-b97ea01ea109", "sighting_of_ref": "indicator--da5aceaa-98ef-4049-86a8-c1244bb33e79", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad56eb6e-1092-44ca-b65a-84041ace8f45", "sighting_of_ref": "indicator--4569829d-dfed-4b88-91c1-cb1e4d4a1633", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88538646-33af-48b6-abc7-789ff38650f0", "sighting_of_ref": "indicator--4fbf1b65-dffb-41e6-b5b1-28cdfee42cf8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3da171-d43a-49a4-9694-7a4336b9268b", "sighting_of_ref": "indicator--4434c416-9063-4761-bebc-4c8c24a2ba26", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cd53c1-64cc-42db-aaa9-ce68eba52559", "sighting_of_ref": "indicator--76372bf2-576b-4dbb-8c1a-7c038b73dd05", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d11a3f7-48e0-45f5-96d8-a38055b66809", "sighting_of_ref": "indicator--36624068-27f2-4f96-85f6-7e0ed81cbc3c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bccaae-36f4-417e-9f74-2262cec44c3c", "sighting_of_ref": "indicator--c663056e-a27d-46a6-a5ba-3079d6c77a20", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf2316f-0630-4e90-abfa-630ab3ade6af", "sighting_of_ref": "indicator--92830a9f-4a1b-4af3-b4bf-f409a02c71d3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d40c52f-49ac-4858-804e-ad64c543b95d", "sighting_of_ref": "indicator--69aad3d8-cd9e-49df-818a-f1259fcfdea5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc3aab1-07f1-4413-99c5-8376650cdd72", "sighting_of_ref": "indicator--038f1ae9-a16f-4e6b-8b38-7b1eeb184508", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d31c98-b7da-4a78-ac48-c7840d816cdd", "sighting_of_ref": "indicator--287e2492-6c4d-4410-8ae5-ffc0f3ec38a5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f028baf-a1c4-4296-b59c-8d09a778e224", "sighting_of_ref": "indicator--5f7a01c4-3683-42b2-bb5e-012d952374ae", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8621c0-3457-4fef-9461-f11d683c12f8", "sighting_of_ref": "indicator--4d9674c3-13a7-464b-b2a5-85a30ef8e5b8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdf123e-4ebe-4c43-8fd6-8a885db785f9", "sighting_of_ref": "indicator--a837f620-6d83-4c8f-9414-f90f527b2017", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5460f979-218c-4b71-b3ac-f41beb0d4b0a", "sighting_of_ref": "indicator--a837f620-6d83-4c8f-9414-f90f527b2017", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f752d7-3db0-4ff2-a384-6dc0394a4add", "sighting_of_ref": "indicator--b3cfb4f0-df6a-4bcf-a047-3c701d44a0c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9abb6d-dde9-43b9-8e18-ece1009c847e", "sighting_of_ref": "indicator--092d9623-3593-4f08-be16-b6b83482eb72", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05c32af-3c4a-4eae-bf83-f09e40dabdde", "sighting_of_ref": "indicator--227e4090-bfe7-47d4-a85b-7979cd32e859", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffdb1e9-d1e4-4873-99e0-514ec67bc140", "sighting_of_ref": "indicator--f53ca163-5818-43d2-8dd4-c0f9b1ac24ee", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714cfc75-8f72-4b0b-9464-0b9da16ce21c", "sighting_of_ref": "indicator--8e092f69-5c33-4f99-97b4-3795126f0f15", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0486138-b38c-48ad-aa8b-387614342f99", "sighting_of_ref": "indicator--91228517-c8f7-4e36-b51f-97ceab77901e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094d3178-25ba-4829-85b4-b1bc05dfe7bf", "sighting_of_ref": "indicator--91228517-c8f7-4e36-b51f-97ceab77901e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6bdfb3-3dd9-47b7-9238-727216fc53b3", "sighting_of_ref": "indicator--32c768f9-2dd9-439d-9daa-df735208a71d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f041ca4-9f80-4bd3-8e4b-fc4104aa35e3", "sighting_of_ref": "indicator--cd802907-9b19-46a6-ba49-95637504ef88", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201dc4b8-6c45-44c3-9d46-93a4d44d2097", "sighting_of_ref": "indicator--cd802907-9b19-46a6-ba49-95637504ef88", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec99d589-0357-41bd-a27c-89ff561035ca", "sighting_of_ref": "indicator--19c98fae-d59a-420e-8061-e437a55f944b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33dfb704-9048-47b4-ab2c-632f06b1bda9", "sighting_of_ref": "indicator--19c98fae-d59a-420e-8061-e437a55f944b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da67be3-96a6-4268-96d0-c7f9459cf09d", "sighting_of_ref": "indicator--19c98fae-d59a-420e-8061-e437a55f944b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e75679c-4a2f-4f15-9d1c-fa192073fe5a", "sighting_of_ref": "indicator--45aebf4f-77e5-4ade-9c83-282ab2b121d1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb6d87d-9bce-41aa-9e8a-0615702f332f", "sighting_of_ref": "indicator--45aebf4f-77e5-4ade-9c83-282ab2b121d1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af75a694-bc03-4c9b-8396-947ae9272bda", "sighting_of_ref": "indicator--69df50de-3220-464d-b5cb-f266e1e4ff54", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a464bdfa-2f5f-414b-a8a5-f07793532b33", "sighting_of_ref": "indicator--d0dd4e4c-de5b-4fce-9293-47eb34c889ec", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918cfecc-d4b5-4bc0-8414-5f6b242c43cb", "sighting_of_ref": "indicator--d0dd4e4c-de5b-4fce-9293-47eb34c889ec", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0dba7e-1cda-4c54-9562-23bc6d196a70", "sighting_of_ref": "indicator--2e26b762-7943-46e5-b333-c4a60497ee01", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886fcb3f-cd43-4d2c-bb58-daa497abc267", "sighting_of_ref": "indicator--2e26b762-7943-46e5-b333-c4a60497ee01", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15286420-cecb-48a3-b86c-d0740f06d4f8", "sighting_of_ref": "indicator--9a1c4b20-a552-450d-8201-4de1a0b018a2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a2e5d1-27c1-4bc7-aa25-a8d9a8f3c218", "sighting_of_ref": "indicator--9a1c4b20-a552-450d-8201-4de1a0b018a2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7541551-a7e1-4579-91d6-09ffb0cecc26", "sighting_of_ref": "indicator--ae7269d8-b56c-4336-afbb-1fa8d7478a78", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91649549-9f0d-40c8-8dd9-98018ca58904", "sighting_of_ref": "indicator--ae7269d8-b56c-4336-afbb-1fa8d7478a78", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66dafa0-5f35-4385-899f-b79dac630ec3", "sighting_of_ref": "indicator--d559905e-25dc-4d93-a52f-106572213a9e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2284999c-7142-4a70-a6fe-0d241b329b17", "sighting_of_ref": "indicator--d559905e-25dc-4d93-a52f-106572213a9e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d29d8c-76dc-4ba6-8eea-a69f7fd25d91", "sighting_of_ref": "indicator--e741286b-7abb-481b-aea3-ee50d51ee117", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa7d16d-7667-49cc-ad07-f866ce53af53", "sighting_of_ref": "indicator--e741286b-7abb-481b-aea3-ee50d51ee117", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc1d336-a478-4e62-b286-ccb6f612105a", "sighting_of_ref": "indicator--ffbc231d-1070-4411-a0e3-0713d281f37e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3632432f-5948-4856-a8fe-3cd177c470bb", "sighting_of_ref": "indicator--46f200e5-e6fb-4bc8-9ac5-9c4788e1219f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c677eb8-d7b8-4d9d-8151-4880592e4058", "sighting_of_ref": "indicator--e7fcbae1-a1a6-4c05-b3d0-f39d6662d994", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7b882e-dfca-4d60-8a78-4e0f155cc36b", "sighting_of_ref": "indicator--b6f672e7-8ae0-4305-b624-2a15e9b11e24", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5341706-862d-456a-8cf6-2d907058e34e", "sighting_of_ref": "indicator--b6f672e7-8ae0-4305-b624-2a15e9b11e24", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c934fe5-2730-4c69-a3fc-c85ef28e9375", "sighting_of_ref": "indicator--642cccf6-8975-4b4b-8fc9-8661b1aaa1e9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ee00ee-e64a-45ac-9e5b-c5e01a7ead77", "sighting_of_ref": "indicator--642cccf6-8975-4b4b-8fc9-8661b1aaa1e9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fef88ca-0e3c-4d93-84b0-bdf721da844e", "sighting_of_ref": "indicator--64871ef4-f1e8-4f17-986d-6fb7d9313583", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfe4fb9-548b-48b0-9554-d3ed913f1d65", "sighting_of_ref": "indicator--64871ef4-f1e8-4f17-986d-6fb7d9313583", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5810388-6b12-4f19-a51f-72d87ef6c42c", "sighting_of_ref": "indicator--d9b61eb0-4fec-4d05-9a92-50d653dcd1e7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41baa70e-2a41-4037-87c0-7cdd7fd578aa", "sighting_of_ref": "indicator--45e8ab56-eef5-4084-8886-2b77879faad9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec2c479-01ed-4c99-b486-0872ec802226", "sighting_of_ref": "indicator--45e8ab56-eef5-4084-8886-2b77879faad9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bea7633-f670-46af-ab68-6489a88e15a1", "sighting_of_ref": "indicator--29376f2d-0351-41ac-8f16-e48f8f63bf4a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d98db5a-1bf0-4e5a-b1cb-0a20c9808948", "sighting_of_ref": "indicator--29376f2d-0351-41ac-8f16-e48f8f63bf4a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8aefec2-7e20-4b1b-b905-76d555c8fb00", "sighting_of_ref": "indicator--29c769f3-e83c-466c-9836-ef3bd66ebee3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef719b0-9be5-4a94-bc97-cddb7671c809", "sighting_of_ref": "indicator--29c769f3-e83c-466c-9836-ef3bd66ebee3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad67c360-c70d-4721-9b06-e306d5d91992", "sighting_of_ref": "indicator--0d2e9b32-9e9e-44d1-9895-620f009166d0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a482c31-18f3-4dd2-af8e-2c958904e1f4", "sighting_of_ref": "indicator--0d2e9b32-9e9e-44d1-9895-620f009166d0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb80856-16c4-463a-8022-daa07c36f987", "sighting_of_ref": "indicator--d115523b-ddb5-4e1a-bb9c-fd1a25f38c25", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ada51a-fc09-40ae-8555-125526a268fb", "sighting_of_ref": "indicator--d115523b-ddb5-4e1a-bb9c-fd1a25f38c25", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce80610-b845-4d8b-915d-d89536545fbd", "sighting_of_ref": "indicator--4e43374f-3b25-4f63-9e80-2fb650c27806", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48cb1cf-7b92-4687-a528-cafcc1146bc0", "sighting_of_ref": "indicator--4e43374f-3b25-4f63-9e80-2fb650c27806", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5d3b97-632c-4a90-9790-4e4ca7aab289", "sighting_of_ref": "indicator--2f1602d1-9bcc-4991-ae13-0bfe119d2cd1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723d392c-bfcf-4d7c-923d-bea729ed742e", "sighting_of_ref": "indicator--2f1602d1-9bcc-4991-ae13-0bfe119d2cd1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5fe92e-c171-4639-b8c7-9d4186adad68", "sighting_of_ref": "indicator--4fa52943-21c3-4c22-8ec2-224788a468ab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a744b625-33cc-4955-bcae-1c3e22899f27", "sighting_of_ref": "indicator--4fa52943-21c3-4c22-8ec2-224788a468ab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc42f9c4-dba1-47b1-a6af-c0b1183de882", "sighting_of_ref": "indicator--f71a6a03-baa6-4f1b-bd3e-fa93bcf7b995", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1b65ef-115c-4e41-90bc-acf3dd397593", "sighting_of_ref": "indicator--f71a6a03-baa6-4f1b-bd3e-fa93bcf7b995", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618f2f45-9937-4c51-85cd-8df3ec366e0f", "sighting_of_ref": "indicator--feb11e1b-ccce-4a3b-b9d5-bc5eb001f599", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1096862b-1642-47c6-aca1-f83fafbfb389", "sighting_of_ref": "indicator--feb11e1b-ccce-4a3b-b9d5-bc5eb001f599", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa37fbf-dab8-43ab-bff4-6e23a3d2f484", "sighting_of_ref": "indicator--feb11e1b-ccce-4a3b-b9d5-bc5eb001f599", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9cf06e-967e-4b59-9089-715cbcc73fb4", "sighting_of_ref": "indicator--ea434bc9-367c-4f7b-9c8a-8080a56937e4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb4fece-3c9b-47a3-ba27-eb5acb02d9d7", "sighting_of_ref": "indicator--ea434bc9-367c-4f7b-9c8a-8080a56937e4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53488337-c87e-4106-b50e-53fa48972a9e", "sighting_of_ref": "indicator--befd078c-f7b2-475d-970e-48b5b9a4e267", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e7c6d8-3821-4e5d-88f2-1ca1caa442c0", "sighting_of_ref": "indicator--16cdbfd3-214b-48cd-8406-692155528eda", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7229345a-0d1e-4480-a3a2-738d920d624c", "sighting_of_ref": "indicator--837bcb4e-1c01-46c0-9f1b-5351456cccef", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b09e82-381a-43fb-bfc1-c9d52aedfbab", "sighting_of_ref": "indicator--837bcb4e-1c01-46c0-9f1b-5351456cccef", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3da5119-f7bd-4e86-93b9-0e166192dc35", "sighting_of_ref": "indicator--b3d56fa9-49bd-412e-a809-516459ac8b54", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d3d32b-b47c-4ffc-94f7-d80138e6d279", "sighting_of_ref": "indicator--b3d56fa9-49bd-412e-a809-516459ac8b54", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c588e35e-7cdd-4ac4-9dca-0d2923c5d10b", "sighting_of_ref": "indicator--b3d56fa9-49bd-412e-a809-516459ac8b54", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0da8145-2bd6-4c27-b90f-547d17fc0321", "sighting_of_ref": "indicator--c3284211-be10-4e4d-aecd-fc703bbed3d0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165d7b24-e3d3-4d88-8883-26234c036808", "sighting_of_ref": "indicator--c3284211-be10-4e4d-aecd-fc703bbed3d0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96f72bd-792f-474b-9c4a-759c76aff856", "sighting_of_ref": "indicator--c520d43b-a065-4ad5-8238-79d648dc2b63", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f649cfa6-d7c1-4f06-a87f-9ccd6f5511da", "sighting_of_ref": "indicator--c520d43b-a065-4ad5-8238-79d648dc2b63", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc6143c-3f8b-4f4c-9f96-bb2b876f4a22", "sighting_of_ref": "indicator--25fc244a-bc40-4b80-abb3-2dae2014be35", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08d762c-2596-4e2c-bedf-6976cceb04fc", "sighting_of_ref": "indicator--9e4eaab5-76d2-4cfe-ab90-973929b6460d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb747e3-3bdc-4774-a1af-6723b965cf2f", "sighting_of_ref": "indicator--9e4eaab5-76d2-4cfe-ab90-973929b6460d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c56107c-fa0f-4aa6-8f30-ad508005bf23", "sighting_of_ref": "indicator--3edbc109-0618-4bef-9751-e7c9c1b8c86b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9556a02-4444-48cd-b10b-d8679bb0e670", "sighting_of_ref": "indicator--350777f8-6234-4fac-bcea-bd497fe2b346", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ad9fcc-2b6d-455b-9e88-69d2e7d6de5c", "sighting_of_ref": "indicator--a0f1b263-e325-4e54-89b5-0100e69b34d3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff680625-4e3f-462a-a2b7-753303f3eb1a", "sighting_of_ref": "indicator--ff85364e-2980-4741-899d-6016107a169e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251b1469-cf38-4131-816a-3f7822acaf21", "sighting_of_ref": "indicator--ff85364e-2980-4741-899d-6016107a169e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f463cb-7e9a-477f-9dec-cefb6f42d9ad", "sighting_of_ref": "indicator--f5f3e474-0bb1-4adc-a826-a252f57fb020", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956e27f1-ac2b-4f9c-9b7d-7a7ae16df3f4", "sighting_of_ref": "indicator--f5f3e474-0bb1-4adc-a826-a252f57fb020", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f07f7eb-d6ef-4c3f-b7e8-8baeb848c2be", "sighting_of_ref": "indicator--2b38a442-eb46-41c3-ab60-19714477e166", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49e4083-e1fa-43f4-a322-3560ac0d18a7", "sighting_of_ref": "indicator--2b38a442-eb46-41c3-ab60-19714477e166", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeac50aa-0d3f-4b9a-ada4-f390db31b765", "sighting_of_ref": "indicator--52fbb87e-522e-45a6-a30e-c1e9eb41ba80", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a520aa-de9b-4930-9cb2-49a692f1ad2c", "sighting_of_ref": "indicator--03d0f61d-fa4f-4c99-a3fb-f8cc00e690f4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3025ff2c-65bb-4288-9f27-54abb6caefb8", "sighting_of_ref": "indicator--82977eca-7327-4999-b15e-44607f62ba86", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c0bb12-f78b-4c72-a7dc-29130d8dc9f2", "sighting_of_ref": "indicator--6b076c42-eb8e-4bda-8652-fdd0812c1a8d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e49df4-357c-4dda-bf40-8e0855acbfb3", "sighting_of_ref": "indicator--6b076c42-eb8e-4bda-8652-fdd0812c1a8d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b91d83-681e-4026-894c-addc8346dcd8", "sighting_of_ref": "indicator--6b076c42-eb8e-4bda-8652-fdd0812c1a8d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25298cd-401d-4dea-93cd-6810eea18d20", "sighting_of_ref": "indicator--0f116138-f340-4783-8ad9-71155e02f449", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15665d7e-7978-4e99-97e2-ed1161ff5535", "sighting_of_ref": "indicator--0f116138-f340-4783-8ad9-71155e02f449", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672692c9-db5b-4384-96cc-b833e522538d", "sighting_of_ref": "indicator--ce86d876-3941-4e1b-925b-6cb9e3503caa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208271a9-590e-4c10-b27c-2b43c7631d82", "sighting_of_ref": "indicator--f537c090-7c06-431b-bffb-f1a6c668173e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9865e190-3149-439f-a0b7-d16fed0ee6dd", "sighting_of_ref": "indicator--f537c090-7c06-431b-bffb-f1a6c668173e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75d2ff3-1949-4460-a9af-63668980683b", "sighting_of_ref": "indicator--0768bf4d-f50b-47fb-b1d5-ced3252e93c5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66dd631c-c7a9-42a0-871f-7bafa0c69b6e", "sighting_of_ref": "indicator--0768bf4d-f50b-47fb-b1d5-ced3252e93c5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aadee2f-7de0-4c07-88ca-2e70a64c8f4b", "sighting_of_ref": "indicator--0768bf4d-f50b-47fb-b1d5-ced3252e93c5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad90aef-32e3-409b-961e-f3a442738aed", "sighting_of_ref": "indicator--99080aa4-f113-460d-85ea-49a1623bb637", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e785fb-267c-4b64-bdc3-da377f225ee2", "sighting_of_ref": "indicator--99080aa4-f113-460d-85ea-49a1623bb637", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb3b875-d521-45ab-99c8-64a8aa874d5f", "sighting_of_ref": "indicator--414f3a9a-9fe2-49a9-a964-d5cd427b7912", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9bf438b-17bf-4ac2-8e7b-cf802010cb36", "sighting_of_ref": "indicator--d5377fc5-b5cf-4a4c-bf99-0db3c055b943", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e5cf06-bfba-4550-9279-ebb23c8e5d06", "sighting_of_ref": "indicator--b83ef2d4-b9d3-4846-b7c9-bbd7dace018d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bbe03f-7642-4304-b5d1-cf0bc219a9d7", "sighting_of_ref": "indicator--43102241-b575-4d95-9a23-09ecc8407b47", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d87a5f-86ac-44f0-bf01-6352a04b25c6", "sighting_of_ref": "indicator--228c11d6-61a9-4dcc-afc5-a1c33f95618a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5163ee9d-31bf-4640-b701-728aaff00c3d", "sighting_of_ref": "indicator--fe49be6b-4b98-4b2c-b0f5-d036c0822765", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993bb6b7-e368-4b53-bdbc-a995c46f1c90", "sighting_of_ref": "indicator--fe49be6b-4b98-4b2c-b0f5-d036c0822765", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554736a9-1592-4576-9fca-e72636a9c98f", "sighting_of_ref": "indicator--5a60e369-9bf6-40ae-9f0a-0b29a0c5870a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f435b56-648e-4f93-bd43-b42b44ffe384", "sighting_of_ref": "indicator--cc86f048-4165-4b7c-bace-06b066d9c489", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b821d3-7fd3-42cd-a832-31c3dc36371f", "sighting_of_ref": "indicator--331f92d1-d465-4ffb-98d2-d05c0a4a7129", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26d80b2-4f79-4fc9-b364-57d9e91e22fb", "sighting_of_ref": "indicator--eabf2ca4-7f84-46b4-a847-89909acb95ec", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0c7279-fd0c-49b5-9889-6546ab3f57cc", "sighting_of_ref": "indicator--560c6701-5889-45eb-b5d9-22651702fb0e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7a360d-47fe-4172-860e-50f3e63ffdad", "sighting_of_ref": "indicator--3be0ecc0-2f16-48cd-8e5d-1b2aaf31682b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace1bd5b-45c6-4932-9196-fae32b211015", "sighting_of_ref": "indicator--ed182301-09eb-4f40-a24a-eedc51592494", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9647eeeb-9abb-4e69-abfb-ffc25b3323f4", "sighting_of_ref": "indicator--c65cbf23-e9e0-4a97-802c-66be524b6622", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c8d191-4586-4923-bfa5-2da168796852", "sighting_of_ref": "indicator--c65cbf23-e9e0-4a97-802c-66be524b6622", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb34bc64-721f-4a88-b260-d1ea76c5967d", "sighting_of_ref": "indicator--c65cbf23-e9e0-4a97-802c-66be524b6622", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9ddb03-fe8d-4ad1-a62a-d6b9d9a85dec", "sighting_of_ref": "indicator--f06fded1-2273-4ab3-90bc-ec4ba2dd7d08", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae424bd-dfc0-496a-b4a0-9911b06afcb4", "sighting_of_ref": "indicator--4191a849-a459-4a29-ae0b-8d1dba460ae5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02f3754-b367-412e-bf6c-fc2346383490", "sighting_of_ref": "indicator--4191a849-a459-4a29-ae0b-8d1dba460ae5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0d4137-4757-4b39-ba7d-6651d0660c70", "sighting_of_ref": "indicator--4191a849-a459-4a29-ae0b-8d1dba460ae5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1de132a-3914-4ad1-841e-cc0780fb799f", "sighting_of_ref": "indicator--c26c6cf6-b7b8-4b02-b46e-e7d49a57a90b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ac9784-26be-4928-a542-215c872836b5", "sighting_of_ref": "indicator--574a3d10-d961-4984-bfa7-91afda10d511", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee114b39-7d67-4525-950c-618d45714de1", "sighting_of_ref": "indicator--574a3d10-d961-4984-bfa7-91afda10d511", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada645b2-e954-4ee9-afa8-5141312d5837", "sighting_of_ref": "indicator--a41b17ed-dc25-40e5-8771-aab0ba4afbc9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f058c0-ac90-41d8-8f5a-f009f9b70f2c", "sighting_of_ref": "indicator--a41b17ed-dc25-40e5-8771-aab0ba4afbc9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb64c1f-0924-42e1-bd70-93b96d4aafa3", "sighting_of_ref": "indicator--08003996-b020-4da0-b99b-59611f1ad046", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7d88d6-616a-4a70-8e7c-8ff9372d26ac", "sighting_of_ref": "indicator--08003996-b020-4da0-b99b-59611f1ad046", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469e778a-e468-4514-b425-318ff6247ef6", "sighting_of_ref": "indicator--f3cf0a26-3209-4baf-9200-1cda96ceb163", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71b5c01-be55-4886-9569-12e075769110", "sighting_of_ref": "indicator--9fa674d7-36db-46ea-8280-9eb042f00379", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019523b9-393b-444f-aa0c-1f57175f42ca", "sighting_of_ref": "indicator--c8836252-9851-4733-bc57-4f55e963c128", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ecdeb9-a8a6-4679-b818-604457aa1327", "sighting_of_ref": "indicator--c8836252-9851-4733-bc57-4f55e963c128", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbef4482-e583-4fa4-b2f1-7e0cfea987f7", "sighting_of_ref": "indicator--c8836252-9851-4733-bc57-4f55e963c128", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3352a3-6d82-47ab-836d-afd65e4e58ce", "sighting_of_ref": "indicator--4c0de670-a264-4c83-b942-c1ea750d6330", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3969a2-535f-403c-81d3-b6accbf5c401", "sighting_of_ref": "indicator--9626c040-e232-4f36-8ead-8ba5ec4878a8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e549940-512b-4cb8-84f9-8c100c0e8755", "sighting_of_ref": "indicator--a32b0f0a-d3c3-4d71-8d87-fcd6af9c1efd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0cfcc0d-739f-4909-8b91-badc8213b033", "sighting_of_ref": "indicator--a32b0f0a-d3c3-4d71-8d87-fcd6af9c1efd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9610fb-339d-4d84-8288-5baf7f34510b", "sighting_of_ref": "indicator--81469473-05db-438b-8e6e-0e3d1d0bc9be", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599f5d68-1838-4c69-9ee7-82044d13756a", "sighting_of_ref": "indicator--38921fdb-5db6-4daf-9ce7-903cf7ff2c23", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050cb085-1994-47b0-8434-21e97420a5fc", "sighting_of_ref": "indicator--f07dfeb0-5f03-41b0-bd80-dad73cd1c306", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237eceb9-0ffb-498a-9bbc-d43e0a585cab", "sighting_of_ref": "indicator--24d824c9-667b-4e1e-84c1-daff73600f50", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340677f3-f300-4a01-bc9e-74e81a3519ed", "sighting_of_ref": "indicator--4ef92dff-1678-4d51-a5e5-269d9438ee7c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7061998c-68c6-40b4-b39f-e433b6a82e87", "sighting_of_ref": "indicator--bb63cab4-42d6-44e7-8260-ac52113dae8d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c73c15e-e6c8-4b93-b6ad-f64652fa1138", "sighting_of_ref": "indicator--e45b8cc8-1210-475a-b456-c3189f553ae2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49296454-f446-4b82-b7e1-9588bf91740f", "sighting_of_ref": "indicator--e45b8cc8-1210-475a-b456-c3189f553ae2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7caf336-3848-44f7-ada2-54f028aff20c", "sighting_of_ref": "indicator--d5941efb-2a44-4e06-8846-4d17a3575309", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484780c7-b138-4539-a8bc-059891a28bb7", "sighting_of_ref": "indicator--d5941efb-2a44-4e06-8846-4d17a3575309", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2cf1fb-505a-43e0-b527-4e1ffa9e7900", "sighting_of_ref": "indicator--c0baaf44-e73c-49a3-ac44-55a59b9476ed", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac2c64e-7d57-424e-971e-279283605546", "sighting_of_ref": "indicator--3461811d-961b-4d66-9c20-043f6003f1f2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2908fc30-3118-407f-a899-73e6136d9693", "sighting_of_ref": "indicator--3461811d-961b-4d66-9c20-043f6003f1f2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a631c643-b5ea-427d-914b-9eb45b67b008", "sighting_of_ref": "indicator--1418ce11-82a4-4ad3-90ca-f3facba4556e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1d4b3e-481d-4ee3-acaf-14bd839bb673", "sighting_of_ref": "indicator--1418ce11-82a4-4ad3-90ca-f3facba4556e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f19c581-feda-4c92-bcd1-9d0246154383", "sighting_of_ref": "indicator--e4d579ed-c44e-4de0-94ee-20509baafbcd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877b7da8-127f-4c6e-b079-1dc6a5b0c94f", "sighting_of_ref": "indicator--7e5f64ae-d757-477c-b1cf-92b2179b51fe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f68fb1-3969-4aa5-9f8f-4ccfa5e8cb81", "sighting_of_ref": "indicator--7e5f64ae-d757-477c-b1cf-92b2179b51fe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecff80f1-c35c-4345-9504-f7771735e4a6", "sighting_of_ref": "indicator--7e5f64ae-d757-477c-b1cf-92b2179b51fe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c185a8ba-1933-450e-a24a-a71d61d0119a", "sighting_of_ref": "indicator--b40ab264-6eba-4583-b763-85ed21f4af10", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742817b9-fb37-4765-8dca-0d4d88ce0128", "sighting_of_ref": "indicator--b40ab264-6eba-4583-b763-85ed21f4af10", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4f410d-bb6b-4176-ae51-7877a8b3dab3", "sighting_of_ref": "indicator--41aec433-f8ed-4808-b993-3a750b35e82c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e751e7-b872-48ce-806b-cdb7dad9beb4", "sighting_of_ref": "indicator--41aec433-f8ed-4808-b993-3a750b35e82c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd33fbd7-94f6-4e3d-bc89-8732efc1c365", "sighting_of_ref": "indicator--190b98bc-1035-4946-a298-3fdf702a10c9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c74a923-ed12-44b2-bc78-9a59082319dc", "sighting_of_ref": "indicator--190b98bc-1035-4946-a298-3fdf702a10c9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522aa050-8f41-4399-b5a1-381b05abe5fc", "sighting_of_ref": "indicator--25bf3a34-2f79-4710-852f-dc3f7480c90f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3bfe6b-2eb4-4f67-8c78-22309662e8e0", "sighting_of_ref": "indicator--1f022f72-524f-4642-9a9e-82c664c9c5da", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb33aa8b-a460-4960-afca-2d81e567e353", "sighting_of_ref": "indicator--5a649229-132a-494d-a003-eb466c3cded3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2cfee0-a701-436f-9670-abe0fb23b833", "sighting_of_ref": "indicator--5a649229-132a-494d-a003-eb466c3cded3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b41107f-1f53-4788-a005-2f2a319cbef9", "sighting_of_ref": "indicator--2185361a-56b9-45cb-83b7-af0c66e9c8c3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3220fd5c-f14e-454d-b5e7-cdeec51feeb8", "sighting_of_ref": "indicator--2185361a-56b9-45cb-83b7-af0c66e9c8c3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996239af-b760-4a62-8d1d-31f08ff23735", "sighting_of_ref": "indicator--3f37d8c9-166f-4a81-807a-506ac8819767", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2d2a4e-d219-4138-84dd-ee2dbd348a0e", "sighting_of_ref": "indicator--3f37d8c9-166f-4a81-807a-506ac8819767", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60218667-7674-4d62-98fb-c091d21fb4b0", "sighting_of_ref": "indicator--1890deb7-751e-451c-9938-fc0629e1025f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bafdf8-8dcb-4743-ade9-ddfb5216d7f0", "sighting_of_ref": "indicator--1890deb7-751e-451c-9938-fc0629e1025f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215d1296-7e20-42cd-91bb-5192746d2a21", "sighting_of_ref": "indicator--0a1f9938-fdf3-43b5-9590-76b96994d04b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd87276f-2a7d-4bd2-a25b-cb2543399eb7", "sighting_of_ref": "indicator--0a1f9938-fdf3-43b5-9590-76b96994d04b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ead5cf-a009-46b9-9c17-30f975a61720", "sighting_of_ref": "indicator--b797ded0-afe5-4360-9a7d-c8eb32697205", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e0c59a-e5a5-4551-8cfa-3e8f7190256b", "sighting_of_ref": "indicator--bbe506a0-d043-4ff7-acfd-fe5ea470799d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09aa931d-0ff5-4774-a857-03f026a7e390", "sighting_of_ref": "indicator--81d42ab0-07e2-4719-909e-32bb9f57afef", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85518bde-fd2b-43cb-88e8-0c8b1cdbe0cc", "sighting_of_ref": "indicator--81d42ab0-07e2-4719-909e-32bb9f57afef", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca90f21-84b5-411f-aa59-7ad162af536b", "sighting_of_ref": "indicator--9ed04e14-95fe-4132-b9a6-336ef7b8d34f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e6f593-1e3a-4883-a7a2-2c0054d40e70", "sighting_of_ref": "indicator--9ed04e14-95fe-4132-b9a6-336ef7b8d34f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09caf4ca-6edb-4fef-a179-caf8975321cb", "sighting_of_ref": "indicator--51dc9bfd-3c0c-4b39-9def-d10d0f7e086f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82dc6e40-8063-46c8-b580-17b9c6335461", "sighting_of_ref": "indicator--51dc9bfd-3c0c-4b39-9def-d10d0f7e086f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e26f597-5420-426f-93d5-2e78f2ec8613", "sighting_of_ref": "indicator--51dc9bfd-3c0c-4b39-9def-d10d0f7e086f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696f2065-ca2b-4b87-ae2d-e6377d197115", "sighting_of_ref": "indicator--326ffc43-5ba1-4af3-b86b-5e4c14df0a84", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2992e80a-7b7d-4bdd-941e-697fa7b58caa", "sighting_of_ref": "indicator--326ffc43-5ba1-4af3-b86b-5e4c14df0a84", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7934d4-8f0c-4dcd-a35b-3d855691ee50", "sighting_of_ref": "indicator--9e5748fb-e2b9-42ad-9793-cd6938a58ef2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc432fa-f675-4c1b-8e7a-7526c430befc", "sighting_of_ref": "indicator--cf0a1423-d9d3-4afd-ac49-7e44039a0206", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926f383b-d706-489a-8457-4d2b4ec3ca11", "sighting_of_ref": "indicator--cf0a1423-d9d3-4afd-ac49-7e44039a0206", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24b5708-9b10-4e44-97a9-0e7148e8a8d2", "sighting_of_ref": "indicator--cf0a1423-d9d3-4afd-ac49-7e44039a0206", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10130e5d-06c2-4275-bf55-5efa123ee6c0", "sighting_of_ref": "indicator--6d5c9e12-dec1-4a35-b520-8231681e6261", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009885f5-ca8b-4671-bda7-a8600bdd9b4b", "sighting_of_ref": "indicator--6d5c9e12-dec1-4a35-b520-8231681e6261", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e966ab4a-7795-4c6c-aded-84372df66535", "sighting_of_ref": "indicator--f53fbdf1-9b92-411d-b3c0-df773a684d67", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef982ec9-16e2-4ed4-86eb-1b2791af62d4", "sighting_of_ref": "indicator--55e68fcc-fa40-4722-b6ab-50ca960a243a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e47d64-2cb8-41d2-b2ce-48b39518b4ab", "sighting_of_ref": "indicator--55e68fcc-fa40-4722-b6ab-50ca960a243a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352b104f-9256-44a8-bf05-696238139793", "sighting_of_ref": "indicator--55e68fcc-fa40-4722-b6ab-50ca960a243a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0b6090-0fe8-452d-ae5e-fd8f41b1cdfa", "sighting_of_ref": "indicator--3e666e29-8d66-416a-9b58-56c3e9b1f319", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7031eba2-5b3c-43d2-8b3d-141d852e32ee", "sighting_of_ref": "indicator--da834ef1-b8c6-49c4-8201-7b295ddd433f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607135ca-1a51-46e6-b185-48bb0f070963", "sighting_of_ref": "indicator--da834ef1-b8c6-49c4-8201-7b295ddd433f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70217d7-6154-44e2-9483-2b605c965524", "sighting_of_ref": "indicator--928a7da5-e2a9-4c06-af97-ccb14c90cdcd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8ebf57-9ab3-4923-a75c-32e2579fb2b2", "sighting_of_ref": "indicator--928a7da5-e2a9-4c06-af97-ccb14c90cdcd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b68d5cb-e1ea-483c-a7cf-dd080fdc706b", "sighting_of_ref": "indicator--1ef075aa-d4dd-453c-873a-c45e097e5738", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55a4454-e00b-4dd1-a55f-ed53db83852b", "sighting_of_ref": "indicator--8dc9348f-2144-48bf-8b4f-6a1c6920d2be", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5495d3fc-2809-4739-b0a6-f31808b89ea1", "sighting_of_ref": "indicator--91e0184a-cb4d-4f0c-b688-a782d5123bcb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4512bed9-1a96-41c1-b6a1-96770bebeb00", "sighting_of_ref": "indicator--91e0184a-cb4d-4f0c-b688-a782d5123bcb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f75a3b5-d12e-4e40-92ae-f1bace9ab4c4", "sighting_of_ref": "indicator--1af0f21f-6e68-45ef-b094-0532e1397340", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4da55c6-40a8-47b4-a468-232a093e5862", "sighting_of_ref": "indicator--42db2139-5a03-4d8f-8517-5602d25a8073", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71379e35-bd58-4599-927b-0fea2f1a19e9", "sighting_of_ref": "indicator--e32fa8df-4af7-40da-8811-548e21a993db", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0993ac09-e657-470d-8be9-8703d380f842", "sighting_of_ref": "indicator--89674988-809e-4d37-ba5d-30f3b797743c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0128599-50d8-4df3-bce3-18c3032d8cb7", "sighting_of_ref": "indicator--89674988-809e-4d37-ba5d-30f3b797743c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2105c38-6f89-49a5-b6e3-34e06564fbe1", "sighting_of_ref": "indicator--de9ff8bf-5970-4e38-aa15-f39865183152", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8111d04d-7630-4c7b-9e85-4cc1c71d74c7", "sighting_of_ref": "indicator--61041526-1b89-47e8-8db8-7d320fc81ef3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6db52b-75e7-4ce2-a675-b4f95482c557", "sighting_of_ref": "indicator--61041526-1b89-47e8-8db8-7d320fc81ef3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a3c8d0-39f3-4557-9aab-5fc953d767d7", "sighting_of_ref": "indicator--61041526-1b89-47e8-8db8-7d320fc81ef3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e551859-99dc-4cf1-9c98-641b3dbbbc6d", "sighting_of_ref": "indicator--4e037366-df80-41ed-82dd-e01409bdc6e5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fb4134-0d6b-4755-835f-91664eb3405b", "sighting_of_ref": "indicator--7c826a81-38f1-4606-912d-18b60e147341", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b02fcbd-e61d-4a28-b80a-0107b630e7e0", "sighting_of_ref": "indicator--f0ec6245-0f2f-4e3c-bdcd-ee5c82b5688b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7654f3-7450-49c3-8bb3-2ebb2d86a335", "sighting_of_ref": "indicator--f0ec6245-0f2f-4e3c-bdcd-ee5c82b5688b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd42d4be-c187-4db2-af43-d26ebd0813f7", "sighting_of_ref": "indicator--6b9291d8-0a0a-4353-b964-fc7ad7cd1342", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740ce8c0-f9c5-4d32-8a4f-059f1b16d609", "sighting_of_ref": "indicator--8ab5a0d7-9900-4db1-b96a-715503e9e6fe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc10cb0-6874-4707-a4f2-6df4f31fc610", "sighting_of_ref": "indicator--8ab5a0d7-9900-4db1-b96a-715503e9e6fe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f11144-852f-44b8-a36e-ea20ac5f7eb8", "sighting_of_ref": "indicator--8ab5a0d7-9900-4db1-b96a-715503e9e6fe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56515f6e-36aa-43b1-8de6-d230942f37d3", "sighting_of_ref": "indicator--ef56dfa0-b4d0-41ca-a9d3-ed2ad33d7b45", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c6acdc-7f26-4b56-9e9c-5a652f7aa263", "sighting_of_ref": "indicator--3f2f4479-f3c2-45e9-8d37-aa7caa82fdb5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e4b613-8249-45db-b684-e03507bae3f3", "sighting_of_ref": "indicator--7f9a9bcb-b51b-497a-82b9-6de38b2fe0cc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6462f7d-bf24-4346-a7bf-fd7dc1539334", "sighting_of_ref": "indicator--afacbbe3-877f-4cd9-8d3f-08e758aee602", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65da83d1-1eb1-4840-9ee2-e6eee2da7eb0", "sighting_of_ref": "indicator--afacbbe3-877f-4cd9-8d3f-08e758aee602", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a34929e-5371-4655-9e64-87fa6978530d", "sighting_of_ref": "indicator--b7ca8801-1e1e-4882-ad44-919d5eb8f787", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f0348a-7f8a-4b3b-8832-1a7bed1e1042", "sighting_of_ref": "indicator--b7ca8801-1e1e-4882-ad44-919d5eb8f787", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2004607e-e81c-44c3-aa71-9f024111f1a4", "sighting_of_ref": "indicator--1b4f7396-994d-47c7-b332-024d2c3ae236", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625c7b69-38c3-4cd7-8f41-1e567fb2bfec", "sighting_of_ref": "indicator--4f6b9974-f2db-478e-ba21-6a2352e0f3b1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69b42f1-0172-4517-a68d-f45803a0e95c", "sighting_of_ref": "indicator--4f6b9974-f2db-478e-ba21-6a2352e0f3b1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf67ae8-4562-47e9-a44d-a05442097e95", "sighting_of_ref": "indicator--8d74aae3-012a-41bf-90a8-08935a539821", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96002526-46ce-4921-b327-5bb5aa87335b", "sighting_of_ref": "indicator--8d74aae3-012a-41bf-90a8-08935a539821", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab328ce-6002-491c-83e7-cec90dcdc6dc", "sighting_of_ref": "indicator--8d74aae3-012a-41bf-90a8-08935a539821", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473aa027-3d72-4f79-bff0-d639607a4ca7", "sighting_of_ref": "indicator--66814ae1-e0f1-4306-b49d-0f53605290ba", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc43901-7785-490f-bddd-edd35781a754", "sighting_of_ref": "indicator--66814ae1-e0f1-4306-b49d-0f53605290ba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26755815-e9b5-43e0-b0b8-d8c2dade3eaf", "sighting_of_ref": "indicator--2ac42158-585b-406e-ab10-586172b6e608", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d14ccb0-d5aa-4dd7-8878-e64fb70f9156", "sighting_of_ref": "indicator--e57c3ae3-b9ee-48bd-8a92-239aff387d6a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf4b876-0ce9-4e3d-a98e-22b0b8b13533", "sighting_of_ref": "indicator--f662b11b-f9a1-46c6-973b-9fdd9d61fe2a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e0c293-33e7-4125-a256-a0bd4026de87", "sighting_of_ref": "indicator--cc20c991-fdc0-40dc-b827-866b5bccda01", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78803c44-f00b-482c-8d6b-99111318220b", "sighting_of_ref": "indicator--505a79fb-fcb6-45bc-9fe8-885e0302065a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c6e91b5-116a-4b94-be1e-ed53d6c2ec9a", "sighting_of_ref": "indicator--18c5090e-8dc7-44cb-b313-038aa27623fc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18c2641-e7f7-4436-bb3c-1be6f315d675", "sighting_of_ref": "indicator--93fa14f0-5e63-4a27-a8df-a07765e2bd8e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f48c60c-e76b-4607-93c1-4adc58c47e2e", "sighting_of_ref": "indicator--93fa14f0-5e63-4a27-a8df-a07765e2bd8e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2429291-d9cd-42a6-a516-2b37486c6f40", "sighting_of_ref": "indicator--9ce9a9c5-77fe-4004-8212-729f41b54fb1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129255c3-b495-4947-a2bb-0e38849ff1fa", "sighting_of_ref": "indicator--9ce9a9c5-77fe-4004-8212-729f41b54fb1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa553f1d-9507-45dd-b098-ac2700d5ff23", "sighting_of_ref": "indicator--9ce9a9c5-77fe-4004-8212-729f41b54fb1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6d799c-de82-46b0-9688-b68bdac06b97", "sighting_of_ref": "indicator--8ab35cd7-ccc3-4ade-93b2-d14e50536719", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b789d4-8db0-4b42-8934-5a89d6ee3a60", "sighting_of_ref": "indicator--306883ea-d36e-414e-a962-29435f0ee37a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4d8ebd-2615-47bd-a8ad-4d57738aea19", "sighting_of_ref": "indicator--ad47e619-6d01-4497-84f7-8e85e043e5de", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0087435-31c7-4534-ab4d-7a2d80133ab5", "sighting_of_ref": "indicator--ad47e619-6d01-4497-84f7-8e85e043e5de", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c996ea2-9ed2-40ce-bfc6-9d5c5ded9ac3", "sighting_of_ref": "indicator--ad47e619-6d01-4497-84f7-8e85e043e5de", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c23b5e-b259-4754-bf1b-7c330f244bff", "sighting_of_ref": "indicator--658390f9-982b-4415-9356-cbeb7ee1ea6a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c7d495-a840-4125-b6ee-a4818d8f4d24", "sighting_of_ref": "indicator--658390f9-982b-4415-9356-cbeb7ee1ea6a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2a3ebf-2796-49a2-a090-357060dbb8ab", "sighting_of_ref": "indicator--658390f9-982b-4415-9356-cbeb7ee1ea6a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c70170-fa04-48f7-a80b-6a1cd08bfb52", "sighting_of_ref": "indicator--8d093a9e-8a31-42d4-861b-8649f73cbd27", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdcf2aa-4054-4216-ba57-0a8588303569", "sighting_of_ref": "indicator--870aafae-9a3d-454f-8dcd-304335f59dcd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066f50d3-e48a-462d-bf0e-cd1554039afa", "sighting_of_ref": "indicator--870aafae-9a3d-454f-8dcd-304335f59dcd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815d2a44-ce8b-485a-8c1c-645cf9e7863b", "sighting_of_ref": "indicator--870aafae-9a3d-454f-8dcd-304335f59dcd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feea3205-a7ae-4595-ac4c-0df33c6ddf71", "sighting_of_ref": "indicator--0dcc083b-3e88-45a1-ac68-aea211138e9a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d956106c-15bb-4ad0-89fa-2d3b9b02a52b", "sighting_of_ref": "indicator--5c7962fa-5ec5-4895-9f1f-080eaa85da7c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12aa23ca-8163-4ad0-ba64-91f7f0753570", "sighting_of_ref": "indicator--5c7962fa-5ec5-4895-9f1f-080eaa85da7c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7783c007-87ef-453b-90f5-3b0ee76abf19", "sighting_of_ref": "indicator--5c7962fa-5ec5-4895-9f1f-080eaa85da7c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffc824e-0ddb-48c3-86a0-94759644740f", "sighting_of_ref": "indicator--ed5e8fa6-4ee3-43e1-9af0-e3b50cb5ec48", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9384d292-5763-4efe-971f-e2b3342ebf25", "sighting_of_ref": "indicator--ed5e8fa6-4ee3-43e1-9af0-e3b50cb5ec48", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2e3035-592b-43d5-af2f-e43dec0843a3", "sighting_of_ref": "indicator--f1cd9bc8-822d-4e6d-bd0f-1993092269c5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ea1a37-b980-4a20-a2eb-528499d0afb9", "sighting_of_ref": "indicator--f1cd9bc8-822d-4e6d-bd0f-1993092269c5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8920d8f0-c251-4e54-b8b1-de451ef8b605", "sighting_of_ref": "indicator--936ef8af-c037-4575-b973-e5f6c9653a59", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a985b385-b119-4a62-885c-a568430e91b9", "sighting_of_ref": "indicator--936ef8af-c037-4575-b973-e5f6c9653a59", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b660d53f-c486-41ca-a4bc-3eca60cba6c8", "sighting_of_ref": "indicator--b8b7e46e-7424-406e-91e0-69b3f2c1aa62", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c889c46-6795-46ea-9c7b-0ee9fb67d957", "sighting_of_ref": "indicator--1dcdce97-20ba-4861-a912-ebec970b1b8e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18a9f09-d68b-48bb-99e2-a6b1afb454f9", "sighting_of_ref": "indicator--1dcdce97-20ba-4861-a912-ebec970b1b8e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d57a45-fcd0-4810-a674-cb06e2bc1689", "sighting_of_ref": "indicator--d1b9dcd8-2d77-4786-bfd9-491fdf534e66", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4253703e-7b60-49d8-bc91-7fef399abb71", "sighting_of_ref": "indicator--d1b9dcd8-2d77-4786-bfd9-491fdf534e66", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327b2b10-b32c-45be-9a40-ba51ed1a5df4", "sighting_of_ref": "indicator--023cccd1-d6cf-4ad2-8cd2-baf9f45def4d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915f5c5a-e96b-4e0a-95f8-1fde1bcb7a67", "sighting_of_ref": "indicator--96ff17d7-f97b-4b6d-b121-b5ce389033a6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e32a2b-dc92-4d96-96bd-c4c6ac17f174", "sighting_of_ref": "indicator--ef75eeab-4296-4f34-83d3-434d36b1be7e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61fa5009-ec3f-4c12-af78-ecc40dcee856", "sighting_of_ref": "indicator--ef75eeab-4296-4f34-83d3-434d36b1be7e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1dad360-842b-4e1b-b216-94f4fa20d306", "sighting_of_ref": "indicator--9cfc2582-b7bd-47fa-b4ba-1f5265fccc7a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47bb82d-ee1b-43b9-a8a7-bf5d2a479cb7", "sighting_of_ref": "indicator--9cfc2582-b7bd-47fa-b4ba-1f5265fccc7a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1f4e8e-f6ba-4b7d-bd47-1bbb90cf17e6", "sighting_of_ref": "indicator--9cfc2582-b7bd-47fa-b4ba-1f5265fccc7a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194bb6a5-a542-48bd-a69c-a8d8afa4ef02", "sighting_of_ref": "indicator--235132be-cdbc-40b2-929e-de1c06995d2b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273a779c-f76a-4d63-ae55-0be5a25de49b", "sighting_of_ref": "indicator--e5b65f55-ffd1-4003-9797-65d185d68e1d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b47648-83ad-41ec-be8d-b097324fd46c", "sighting_of_ref": "indicator--e5b65f55-ffd1-4003-9797-65d185d68e1d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d037ef3-bca6-4e80-a156-077e3d71d98e", "sighting_of_ref": "indicator--f06eae46-e9d7-4a82-ab64-d47bfe2e4c39", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4afa27b-42c4-4eed-ae5b-0051cdf8819f", "sighting_of_ref": "indicator--8e4ff488-52b2-4e2e-9afd-bf038a446232", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c323f51-8ec7-45fc-8fc4-0b30ee52f713", "sighting_of_ref": "indicator--8e4ff488-52b2-4e2e-9afd-bf038a446232", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca78515-0d67-4aa1-b4b9-c1987484654a", "sighting_of_ref": "indicator--f69bb06a-3d37-481c-b3e9-96cf9cb66fa5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9b7c4a-d827-44e2-8ae7-1f099f668ac3", "sighting_of_ref": "indicator--f69bb06a-3d37-481c-b3e9-96cf9cb66fa5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72af4b30-35b7-4c43-b65f-40322bc0e63a", "sighting_of_ref": "indicator--f69bb06a-3d37-481c-b3e9-96cf9cb66fa5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f096bea-ffb7-4d9c-b967-48a5a976cc46", "sighting_of_ref": "indicator--9772ba02-5ce9-4d7e-ab0b-ecd626e5f920", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e2ea63-fbe8-4f37-bc09-04c2b32aa60c", "sighting_of_ref": "indicator--97f9fd81-1f56-441a-9e8a-3ee7052564d9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a453403-6b82-4bdd-bc30-da29434f06d5", "sighting_of_ref": "indicator--97f9fd81-1f56-441a-9e8a-3ee7052564d9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47db27a-d9ec-4dec-a084-3154898350f3", "sighting_of_ref": "indicator--97f9fd81-1f56-441a-9e8a-3ee7052564d9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23938e7a-7f6a-40fa-82b9-87d29a1648ed", "sighting_of_ref": "indicator--13392148-49f2-4c5c-97e8-dcb019757ea1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706ed02a-8613-4d48-b577-1669b30b5e6e", "sighting_of_ref": "indicator--13392148-49f2-4c5c-97e8-dcb019757ea1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c867041-177d-4e5b-b6a8-ca31dbbb63aa", "sighting_of_ref": "indicator--13392148-49f2-4c5c-97e8-dcb019757ea1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d311187d-fe8b-426f-847b-4ebaf1211da0", "sighting_of_ref": "indicator--d46d0321-d95d-4429-9b01-f3660f9fa2bd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86cf50e9-f2fa-454b-9f89-22b659cb70b5", "sighting_of_ref": "indicator--e4584ca0-0da6-4cac-8551-0aa02a592a25", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea06243-dd19-4d58-a81f-a1e60e1f180c", "sighting_of_ref": "indicator--04a74860-cf04-4e9f-b656-1f029c1f18ec", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8da9daf-d603-4374-ba99-6d1d245045af", "sighting_of_ref": "indicator--04a74860-cf04-4e9f-b656-1f029c1f18ec", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ed76f4-52f9-483c-bcdc-29f0eeea9733", "sighting_of_ref": "indicator--04a74860-cf04-4e9f-b656-1f029c1f18ec", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f9b397-9bc3-4111-90bd-2f91d7a1a290", "sighting_of_ref": "indicator--122895bb-1be0-469d-8799-0c1c2112bab4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9c7ea8-3ae9-4499-9032-552b4dfaf678", "sighting_of_ref": "indicator--b161936e-ddc7-4425-8433-8d45b8ca28f4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f091650-9e22-4846-9972-a8b642956cae", "sighting_of_ref": "indicator--85af94ac-f547-4e8d-a20e-c042a647c912", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d20e24-86bf-48c0-adc0-330b43290560", "sighting_of_ref": "indicator--52291443-17e4-4485-90e3-0df961c98e9f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f988f133-a87b-4826-ac0c-86bfa168d3bb", "sighting_of_ref": "indicator--52291443-17e4-4485-90e3-0df961c98e9f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de42778c-fac7-4d86-a079-f914acb1de4a", "sighting_of_ref": "indicator--8ad00dad-b4a1-4e8d-929f-b58b2d267a17", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67426e89-ed05-4228-b48a-2fc23ee7375f", "sighting_of_ref": "indicator--8ad00dad-b4a1-4e8d-929f-b58b2d267a17", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ae5383-669d-4da4-97c2-62f5c77dd670", "sighting_of_ref": "indicator--8ad00dad-b4a1-4e8d-929f-b58b2d267a17", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3439f7-8fca-48b9-b6e8-addb0b6c8a6c", "sighting_of_ref": "indicator--fb7f1133-9e06-4708-9c17-7e3fbb6cb85e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1be9dd-c96a-461b-a9f6-0bf99c91f216", "sighting_of_ref": "indicator--a8dd018b-3e77-46dc-81ac-9dba42f6ffba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb8d876-2580-4603-9191-dd163ff620ae", "sighting_of_ref": "indicator--a8dd018b-3e77-46dc-81ac-9dba42f6ffba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a247e066-9ddb-4474-8c79-565533a94a31", "sighting_of_ref": "indicator--9642d534-9094-437c-88ae-89dc2c9fd5a8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d81944-9e3a-49c5-b8dc-901c199790dd", "sighting_of_ref": "indicator--9642d534-9094-437c-88ae-89dc2c9fd5a8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac85860-bf87-4057-a407-33ca4c062efb", "sighting_of_ref": "indicator--9642d534-9094-437c-88ae-89dc2c9fd5a8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d34cc9d-ddce-49e4-9422-f9db25dc7514", "sighting_of_ref": "indicator--4c8434e4-ba3d-4ef0-952b-e776cb49039e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6836f33-d02d-4ba8-941b-ad8075731461", "sighting_of_ref": "indicator--4c8434e4-ba3d-4ef0-952b-e776cb49039e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567fddd7-aa79-4bec-9432-fdb76c18b8c1", "sighting_of_ref": "indicator--5633f58b-c9b4-4cb1-868c-cadccb1043e4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcdda2a-777f-420b-84f5-b2575d7834f4", "sighting_of_ref": "indicator--5633f58b-c9b4-4cb1-868c-cadccb1043e4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a740c22-ba3a-48dd-a13f-5f93b17cb34f", "sighting_of_ref": "indicator--f3088671-8437-42f9-aa7d-847c784a766f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21fb95f-1b64-4277-a212-12f36fc9ee15", "sighting_of_ref": "indicator--dac296fb-c585-4e8e-aba0-f04304bcba18", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b729a7be-ddf0-4846-b89a-697b5c3ca072", "sighting_of_ref": "indicator--dac296fb-c585-4e8e-aba0-f04304bcba18", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594a425a-8d5f-4192-a559-0b8567017a8b", "sighting_of_ref": "indicator--69b9ea07-18ab-406b-8b5b-b56102559748", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e01dcd2-d5b3-4c8e-b230-53fd7cc05bea", "sighting_of_ref": "indicator--69b9ea07-18ab-406b-8b5b-b56102559748", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dcb87b2-c05f-411e-84b2-bdac35eb1708", "sighting_of_ref": "indicator--69b9ea07-18ab-406b-8b5b-b56102559748", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876bec91-13cc-4a8d-96f5-2f081c03b15e", "sighting_of_ref": "indicator--1cddfbbf-f311-42e6-baa9-abfd993f8c22", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186f79a0-fff4-4332-af8e-008fb000db12", "sighting_of_ref": "indicator--06b24847-9665-49e4-9c5a-d4cc885c163a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0710a3-668d-4d5e-a6da-b9a10b4e3619", "sighting_of_ref": "indicator--06b24847-9665-49e4-9c5a-d4cc885c163a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a612a9-f991-4041-98c7-71a9068d8e06", "sighting_of_ref": "indicator--7df93f29-2f7e-4371-a2ca-7fa3f4ae06d3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9435c073-c805-45a4-a005-db761849e8f7", "sighting_of_ref": "indicator--99280a81-e6f2-44b4-9d1d-a8bf1690a765", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c86a271-a5dd-463b-9076-0e0162d801ee", "sighting_of_ref": "indicator--4194598d-a0b9-473e-8b61-ed4cf61791c3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22120b48-7aab-4b88-becc-c491a81b1fb4", "sighting_of_ref": "indicator--4194598d-a0b9-473e-8b61-ed4cf61791c3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e026b354-548d-4fe8-a051-1bd63ed07ce0", "sighting_of_ref": "indicator--4194598d-a0b9-473e-8b61-ed4cf61791c3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25739f9c-d22c-4020-af9e-bb4ff60aa851", "sighting_of_ref": "indicator--5b1250b5-a4f6-4786-94c1-0c32a484b70a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570a9587-40ee-47b2-9c43-0abde480d8e9", "sighting_of_ref": "indicator--65e6775b-26d1-4431-9eda-8e71a6102a19", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76fc8453-4aa3-419b-be31-2c801e594123", "sighting_of_ref": "indicator--65e6775b-26d1-4431-9eda-8e71a6102a19", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68189004-0669-47ed-bba4-d471bc2a76ba", "sighting_of_ref": "indicator--65e6775b-26d1-4431-9eda-8e71a6102a19", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1767b7-f996-4d90-b71e-2bb6079fa9dd", "sighting_of_ref": "indicator--ff6593bf-4d62-4391-af5c-4043654f168d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d171deb2-41ae-40ac-81bc-7179093f92c4", "sighting_of_ref": "indicator--fcca1043-a555-40df-b5d7-be3ae283f97e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd422cb-d488-44cd-89c8-eead1a4b1c00", "sighting_of_ref": "indicator--d4455eea-9ced-4de6-888a-865813eabe04", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001d541e-2765-432c-a0b0-ad5397a8289d", "sighting_of_ref": "indicator--176d8ca8-36fe-46e4-abbd-d9000686ef5e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a28ba1d-e1ab-45f7-8153-ef5f81ed1bb0", "sighting_of_ref": "indicator--176d8ca8-36fe-46e4-abbd-d9000686ef5e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47298956-cfe0-48e2-ae71-2d25edfd2036", "sighting_of_ref": "indicator--8da6064b-0492-41c1-8f89-f9aeae7ecf40", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887e3f5e-0e2f-4678-802c-83c67c7eba27", "sighting_of_ref": "indicator--bfa86c20-d67e-4ad7-8b4f-9ad9df4044f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62341fb5-354e-406c-8fb6-fbf14336cf59", "sighting_of_ref": "indicator--bfa86c20-d67e-4ad7-8b4f-9ad9df4044f0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a853eca6-689e-47e1-9b3e-f81d2263a227", "sighting_of_ref": "indicator--1ecef0ee-3d65-4bb0-9b38-b44d8b2de526", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbfbf79-ab1d-4b9f-816b-0edfb57ef522", "sighting_of_ref": "indicator--1ecef0ee-3d65-4bb0-9b38-b44d8b2de526", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2faaef-e93a-4d23-8dc5-603f69a6bd53", "sighting_of_ref": "indicator--da38daca-f96e-439f-87ef-713f975db845", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb02b51c-cf63-4b07-a425-e51b40521cbc", "sighting_of_ref": "indicator--5e0b399e-b3f2-4fc6-9b60-d53cf1abf688", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5288a54-30ae-4e82-a391-4ff27c9dc5c5", "sighting_of_ref": "indicator--de00a6da-1b01-40f1-8cc0-5999be2a92b1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5dd3a2-66fd-4e74-8213-955929c7aa5b", "sighting_of_ref": "indicator--72be8026-8d5e-457f-a9dc-91f503f02bc2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b396adf-78a9-4953-9da4-50b06a9ffc68", "sighting_of_ref": "indicator--72be8026-8d5e-457f-a9dc-91f503f02bc2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa73ccd-018f-435a-960c-8b493e96f77b", "sighting_of_ref": "indicator--72be8026-8d5e-457f-a9dc-91f503f02bc2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03db8a5-ec38-4625-8e8c-1d15ee759c25", "sighting_of_ref": "indicator--f769f82d-99b8-4c60-b453-e396a95b7045", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80626901-bdee-40dc-9ceb-3631b5cb2ae6", "sighting_of_ref": "indicator--f769f82d-99b8-4c60-b453-e396a95b7045", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403e2bd2-b187-4c79-811e-95531e8cb17d", "sighting_of_ref": "indicator--25cc8747-d93d-40bd-ad0d-623e666ff4f2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996cedca-59e5-4617-a877-624222ebec7e", "sighting_of_ref": "indicator--1b34b3d8-c822-48aa-8380-4ec325410643", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a2a3c3-5ac6-4271-ac94-b899d7695f08", "sighting_of_ref": "indicator--1b34b3d8-c822-48aa-8380-4ec325410643", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7811c5a0-62f3-48e9-b8e1-1ea05a72d44f", "sighting_of_ref": "indicator--1b34b3d8-c822-48aa-8380-4ec325410643", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e19031-e042-4d69-b166-d475190db229", "sighting_of_ref": "indicator--9d65e548-4368-4e43-a583-6a531c5be77e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906d8c31-43af-4c48-8b17-79ef69d79f03", "sighting_of_ref": "indicator--750d930f-ee0f-47b7-9194-07c9e158879f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9532e24f-8946-4b14-97d3-d44895c882a9", "sighting_of_ref": "indicator--6edc54d1-17e2-4c4b-b1d8-39c0a6a8a3d7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5457759f-b50c-41a2-a84d-a67ba35f3113", "sighting_of_ref": "indicator--6edc54d1-17e2-4c4b-b1d8-39c0a6a8a3d7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e65b07b-3c4b-41da-a935-226964401abc", "sighting_of_ref": "indicator--9207ef73-e082-4ebc-9aa7-810eeb670532", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6a346f-1a64-45de-ac34-1b81354a3606", "sighting_of_ref": "indicator--9207ef73-e082-4ebc-9aa7-810eeb670532", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98748a9b-075b-4973-bac9-ae3c0edbad83", "sighting_of_ref": "indicator--9207ef73-e082-4ebc-9aa7-810eeb670532", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea022fe-91db-4959-a47b-96e36bed61d6", "sighting_of_ref": "indicator--41e3349a-e359-4804-bc9b-c51400d97879", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc47749d-0963-45cf-b151-4e332ebb8f9e", "sighting_of_ref": "indicator--9c6da319-af84-42d9-a878-31c626aae931", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6cc60b-b2b9-497b-80c1-b637812567bb", "sighting_of_ref": "indicator--eba87dd9-f6cf-44f6-92ac-b49217a70fbc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4904fd85-5e7d-46d1-9695-d9052849c804", "sighting_of_ref": "indicator--eba87dd9-f6cf-44f6-92ac-b49217a70fbc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c4051f-9387-4247-8141-0739b02b959b", "sighting_of_ref": "indicator--bca203d7-34f1-42c3-81d0-7143b32dac61", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912ae15e-0843-4de0-8bd3-d943cd8e3921", "sighting_of_ref": "indicator--05b4b2a8-7482-4a12-aa52-bae7e456296d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e211aa67-3282-4e2a-b300-6c515366f10c", "sighting_of_ref": "indicator--2b875bdb-3669-4efd-829d-fa270cc10987", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278bfc73-866a-4f68-b76d-e9a8f5c7ffe2", "sighting_of_ref": "indicator--66e1ace7-8682-474c-985b-b4b01b39b90f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b57841-a346-4dd8-9eab-746d1049edef", "sighting_of_ref": "indicator--08f4f5e4-8f85-46cf-abcb-285542b41ebb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58f1525-b66f-499c-83e8-f31c5e23449b", "sighting_of_ref": "indicator--eff5d200-de1d-43f2-b771-52f17d064ea4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcce9ff3-b339-40e8-83d9-30e6406ae1cc", "sighting_of_ref": "indicator--34ca8f65-78cd-4226-93d9-2f1464bd4e77", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15f2e78-40d8-4a23-82f8-425a414644cf", "sighting_of_ref": "indicator--34ca8f65-78cd-4226-93d9-2f1464bd4e77", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a795c40c-db05-42f6-bbf4-a7c24dc2b59a", "sighting_of_ref": "indicator--e370a906-1a49-4324-88cc-2c5c5024ff7e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15bfe5c-06e0-4093-acf9-630c113b01aa", "sighting_of_ref": "indicator--2977ab92-2f53-46f4-b99a-7a29d4358660", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f0541d-e041-437e-baca-eae47073c36d", "sighting_of_ref": "indicator--1af44680-695d-44aa-8273-014738e6d0de", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13fa58c-f2fb-4df4-9491-e2de06754076", "sighting_of_ref": "indicator--82462542-03b4-46f9-a4c6-4bce316a76d0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30cdc580-fc4b-401e-b166-f6cea14bfab8", "sighting_of_ref": "indicator--d5748861-1cf8-4de1-9194-63e5d9d72615", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f20a32-8208-4fb5-baef-bd8069ab2de5", "sighting_of_ref": "indicator--234a3b4b-3973-4831-905c-29b13cd76ccf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a1194b-266c-44d0-b648-75452cacf3cd", "sighting_of_ref": "indicator--a240df75-be2b-40c5-8f39-f1fa7e3b545c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b14684-1898-49ff-92c4-c67ea5bb6891", "sighting_of_ref": "indicator--393d03b6-c419-44a7-9cb9-3a89585d4aaf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbe8559-bc1b-43f8-83d6-ba2cccd97ad8", "sighting_of_ref": "indicator--393d03b6-c419-44a7-9cb9-3a89585d4aaf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5291dfb-8972-465b-83e4-b4d20411d985", "sighting_of_ref": "indicator--7bd3198f-e0fd-4f3c-adfa-5c603bcde588", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53dfb2c0-6337-451c-abb3-1d1d81e17f62", "sighting_of_ref": "indicator--7bd3198f-e0fd-4f3c-adfa-5c603bcde588", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616d63a0-a6b3-4091-aa05-639da52a2bb4", "sighting_of_ref": "indicator--7bd3198f-e0fd-4f3c-adfa-5c603bcde588", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755ec3ac-8ad3-41e4-ba58-eb35dd78d6ff", "sighting_of_ref": "indicator--879458ca-4eb4-4ede-8c93-5fc2ab813313", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b84fd4-3915-4a93-b11d-a622d715c3b3", "sighting_of_ref": "indicator--b4fef512-8f6a-41ce-ae43-b62da85ecb37", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5f1a0d-02a8-419e-bd31-5f1bce4b6321", "sighting_of_ref": "indicator--b4fef512-8f6a-41ce-ae43-b62da85ecb37", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9858032-f577-4686-9840-df5bb0a6c289", "sighting_of_ref": "indicator--bf1c23a9-66fd-46e3-8020-2ec7d9fd2df3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a37358-16e8-4dd5-b2de-de3d2bbf385b", "sighting_of_ref": "indicator--bf1c23a9-66fd-46e3-8020-2ec7d9fd2df3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516ba6a2-6c01-4142-ba00-feb3fe9561c0", "sighting_of_ref": "indicator--bf1c23a9-66fd-46e3-8020-2ec7d9fd2df3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f317f90-aba0-4049-885a-7669fc9a2aa9", "sighting_of_ref": "indicator--e0f24e56-728a-4780-8358-b5c395ddf20a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61419841-21be-4b40-8ee5-9bbe90f2429c", "sighting_of_ref": "indicator--e0f24e56-728a-4780-8358-b5c395ddf20a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7aebe4d-4134-4774-9854-21ba5f2f19e4", "sighting_of_ref": "indicator--e0f24e56-728a-4780-8358-b5c395ddf20a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54399d19-b3cd-4c75-ae78-be0c5132867e", "sighting_of_ref": "indicator--5af1f9b3-1191-41ef-b5e2-21ebafeef196", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa6f78b-066b-4ab8-8152-d63b4c3478e6", "sighting_of_ref": "indicator--5af1f9b3-1191-41ef-b5e2-21ebafeef196", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2725b38-ff7c-4ff4-b06a-7c3ffa5ce282", "sighting_of_ref": "indicator--5af1f9b3-1191-41ef-b5e2-21ebafeef196", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2305b77-3a9e-493f-9c8e-418b2b51e2f9", "sighting_of_ref": "indicator--f941e6c2-9ae9-4256-8d5b-a05945c8a797", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5b74c3-e48d-4b48-a117-fd21adbb8936", "sighting_of_ref": "indicator--f941e6c2-9ae9-4256-8d5b-a05945c8a797", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e751eece-5236-4d98-aa74-e3a4479b9ceb", "sighting_of_ref": "indicator--f941e6c2-9ae9-4256-8d5b-a05945c8a797", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca54fda-d166-43c9-9fd0-7052da0d0531", "sighting_of_ref": "indicator--50ebd264-7073-4e95-ac22-53553ce3d4d4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d00347-7915-4dfa-b1df-0fba168e127e", "sighting_of_ref": "indicator--50ebd264-7073-4e95-ac22-53553ce3d4d4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34841cde-9fc0-42c5-919d-9898ba3dbca6", "sighting_of_ref": "indicator--50ebd264-7073-4e95-ac22-53553ce3d4d4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00584684-22fc-474e-92bb-8bebf01b4522", "sighting_of_ref": "indicator--5f279c59-51b1-488d-a205-cc61daa43e1b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f097eb9f-74b1-4c1d-901e-b83f9198a4b5", "sighting_of_ref": "indicator--5f279c59-51b1-488d-a205-cc61daa43e1b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a582f7-3e14-4b06-a26c-6b8f68813a82", "sighting_of_ref": "indicator--5f279c59-51b1-488d-a205-cc61daa43e1b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c884bf2-af47-47ad-8699-1c785642a980", "sighting_of_ref": "indicator--eb55ee89-a72f-437e-ba57-b374fa13c249", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52c92f6-ef14-4394-aa51-0ad1130117a9", "sighting_of_ref": "indicator--eb55ee89-a72f-437e-ba57-b374fa13c249", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa38cf8-0405-4b07-aa0a-8a52bff2f8a5", "sighting_of_ref": "indicator--2a585ec5-4b6e-4664-ae6a-ecd14e0df999", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95034ca5-4400-4c0c-9da9-ee2c6de164dd", "sighting_of_ref": "indicator--2a585ec5-4b6e-4664-ae6a-ecd14e0df999", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abbc99c-19b4-4f96-83df-7ca99dd804fb", "sighting_of_ref": "indicator--2a585ec5-4b6e-4664-ae6a-ecd14e0df999", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad81c76-f756-434f-8270-9114d7ca20ed", "sighting_of_ref": "indicator--2318e106-86e9-4054-802e-93d2be5ea8af", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf0adab-807e-46bd-a229-106937b46092", "sighting_of_ref": "indicator--2318e106-86e9-4054-802e-93d2be5ea8af", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4f23e6-5020-4e1f-b34c-3a9fddca3faf", "sighting_of_ref": "indicator--2318e106-86e9-4054-802e-93d2be5ea8af", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3bc73f-e29b-4c53-8e31-5a911cdde681", "sighting_of_ref": "indicator--8e3dd5d4-55e7-469b-bfe9-e882b6f27b08", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb62db2-6cb1-4ca0-a943-013dac777601", "sighting_of_ref": "indicator--8e3dd5d4-55e7-469b-bfe9-e882b6f27b08", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed15b64-536d-421c-8d56-9a4a55be8780", "sighting_of_ref": "indicator--18cbcbc8-a215-4728-9282-57488891470f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddd15c7-b6e4-47a3-9f94-d0c1526561c2", "sighting_of_ref": "indicator--18cbcbc8-a215-4728-9282-57488891470f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3f5ac0-dd56-4dc3-bff3-a17b6ee74a5d", "sighting_of_ref": "indicator--18cbcbc8-a215-4728-9282-57488891470f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee8b5d8-cb2d-4cda-80fc-284b4ffeb7a1", "sighting_of_ref": "indicator--3d7903f4-ec47-432e-b962-998e3f0709bd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c46e2c-4323-474e-b684-fbe4f7098325", "sighting_of_ref": "indicator--3d7903f4-ec47-432e-b962-998e3f0709bd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c85f61-a06e-447e-a96c-f31ce0a99488", "sighting_of_ref": "indicator--3d7903f4-ec47-432e-b962-998e3f0709bd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fabde86-2d76-40ee-8b8b-a17b417925fd", "sighting_of_ref": "indicator--daa01926-aa8d-4cec-ad64-f0d873170d6e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702e163b-7c1a-482f-9625-3a09dc0661dc", "sighting_of_ref": "indicator--daa01926-aa8d-4cec-ad64-f0d873170d6e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4085a299-3a67-4678-b5d1-b6adfd98eea5", "sighting_of_ref": "indicator--191b3f0f-b846-47c0-afa5-4fac508ea6fb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91a4d44-053f-4e77-ad98-3f262e4407e4", "sighting_of_ref": "indicator--f9224d5c-a3e9-4fc4-a743-3b907b4bfef4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9017127f-bed1-411e-961d-f30c3786353f", "sighting_of_ref": "indicator--a492d00e-bfc8-4dfa-9295-274cd7988be6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60da736c-1a6b-4ee7-ab95-528edc098ffe", "sighting_of_ref": "indicator--a492d00e-bfc8-4dfa-9295-274cd7988be6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ef3164-adde-4afb-9fd7-07c542f12159", "sighting_of_ref": "indicator--e916103a-9bdb-4da4-b2bb-afeae338ec81", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1cdfb04-dad8-4e1e-a0b4-dfd58d04aae1", "sighting_of_ref": "indicator--1626dcad-0aef-4deb-bdf0-8773b5080d30", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b393e617-0005-44d4-b4c6-dd0c12bed739", "sighting_of_ref": "indicator--6688c21b-371e-4294-9997-e7f31debbe3a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d9c071-a4ec-45ad-a861-e6f1b1dffdc5", "sighting_of_ref": "indicator--09f0af84-dd0c-444f-a967-56bcc45d4e09", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6587f41e-6145-4013-a61d-1bd9cc74b7ce", "sighting_of_ref": "indicator--a2af3473-df0f-45f4-b20a-ceb653097a2c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1001ceec-8804-4645-96cd-e5f0112ef5a7", "sighting_of_ref": "indicator--29ba31e1-225f-4a8c-b64a-7fb7b5cd7822", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44e1105-e38a-4807-8b6c-e1198e45ce26", "sighting_of_ref": "indicator--2639e31d-59e5-4085-9d4c-21debd5758d2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a98693c-3229-4577-93fd-f371e254502a", "sighting_of_ref": "indicator--2639e31d-59e5-4085-9d4c-21debd5758d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa21e72a-91c6-44cd-a1a0-8020e0fee3d8", "sighting_of_ref": "indicator--c3457baa-ffe7-4b63-9028-49feb9d7ba05", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6262c4-8d26-483a-bada-da630e9c0be6", "sighting_of_ref": "indicator--06c8c591-f016-4ca9-a96f-2360501b49a9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41609bda-c461-4eaf-beff-c13af0963dce", "sighting_of_ref": "indicator--79b337e7-4233-4909-a967-e9ae7ae91b4b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39718e1-874d-4b0d-a0be-0b6d56d303e3", "sighting_of_ref": "indicator--13e1b762-febd-447d-8ea6-fa300d852b4e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadb4a18-4553-488b-a7c7-441eb9706ca7", "sighting_of_ref": "indicator--13e1b762-febd-447d-8ea6-fa300d852b4e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73b8ef8-d858-4faf-937e-5a25f5b2fb24", "sighting_of_ref": "indicator--4cbf0760-1df8-493e-9cea-445f8ef9e38b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d4fd38-2712-431c-ba15-d904350931d1", "sighting_of_ref": "indicator--13cfd687-6147-46f6-afed-fdf47e12e2a9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57340fe-cee9-4cab-9d05-2d5d1593f592", "sighting_of_ref": "indicator--13cfd687-6147-46f6-afed-fdf47e12e2a9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac8b3e0-0c80-4049-a62a-c8bcce7d695a", "sighting_of_ref": "indicator--9e219903-6771-43fb-aacb-3ed9472e436f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1493ecc1-af5a-49c5-b794-a78d4ed7d83b", "sighting_of_ref": "indicator--9b141099-c74b-4b3b-adeb-c8fc62d16ac7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d399f159-202d-4b3c-8d54-5ac05fc7c903", "sighting_of_ref": "indicator--445751a8-150e-43ac-9c01-be1fec349fc0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd834e6-f8b4-43c8-9011-31a8fb06096c", "sighting_of_ref": "indicator--bc8c00bc-1b25-4248-aa40-976d23da4df9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2baaf811-e438-46ac-b9a3-7da28ac457d3", "sighting_of_ref": "indicator--780121af-86a5-454e-b1a9-18646af9a171", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62579f30-b3cf-4c57-9aed-f65977a2875d", "sighting_of_ref": "indicator--c1629a97-178c-42d2-9457-e49a276feab9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea473831-4d24-4bbb-90dd-59641bcbf058", "sighting_of_ref": "indicator--c1629a97-178c-42d2-9457-e49a276feab9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e9c388-66f6-43b4-b400-cb6d154addda", "sighting_of_ref": "indicator--c1629a97-178c-42d2-9457-e49a276feab9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d97212b-2b43-48e9-92f8-5d62e1e9bf4d", "sighting_of_ref": "indicator--c1629a97-178c-42d2-9457-e49a276feab9", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4530489a-f802-4693-99a5-2a0d05872676", "sighting_of_ref": "indicator--d14f1337-f7e3-4b1b-82fa-b66f2178914e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa236ae8-48f6-42c2-ac51-92e9adf695ec", "sighting_of_ref": "indicator--d14f1337-f7e3-4b1b-82fa-b66f2178914e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6781a262-5c74-4aec-8bfe-8f3ad657b8bf", "sighting_of_ref": "indicator--d14f1337-f7e3-4b1b-82fa-b66f2178914e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0dc89c-2906-4e98-843b-4925972735d9", "sighting_of_ref": "indicator--d14f1337-f7e3-4b1b-82fa-b66f2178914e", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad45568-9c4b-4a05-881e-f840572f7c46", "sighting_of_ref": "indicator--02f39f56-166a-4ab9-9ec4-20815d5d334d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fd67dd-439d-46e0-89b6-3c3b02f58dd2", "sighting_of_ref": "indicator--02f39f56-166a-4ab9-9ec4-20815d5d334d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0089e137-3619-4eeb-8bcf-c88b720e908d", "sighting_of_ref": "indicator--9ff6ac71-cbad-41f9-9cab-7a3e6fd89839", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c1ef91-f766-4c10-bd02-56e700bb9830", "sighting_of_ref": "indicator--9ff6ac71-cbad-41f9-9cab-7a3e6fd89839", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e038f85d-57ca-4451-8b2c-91754a783e8b", "sighting_of_ref": "indicator--9ff6ac71-cbad-41f9-9cab-7a3e6fd89839", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd47ed9e-06c6-473e-9d3e-33f2631b62c0", "sighting_of_ref": "indicator--261a23cd-7a58-4fea-8e3d-88ad4867cf1f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4210a4-6af0-4e56-984f-81af3041e10f", "sighting_of_ref": "indicator--d4b09405-c763-494a-bbd4-29ff6da26dcc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7af57c7-1ce8-445c-8c0d-e05794520c7c", "sighting_of_ref": "indicator--81cec46d-153b-41ec-8c5a-947cc426f81e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73c2b1a-cfca-4bb1-af54-1d338f6a9b09", "sighting_of_ref": "indicator--aa085653-4fb0-4194-942d-124052c97613", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652d9ff6-8214-4296-b60d-1c64da538312", "sighting_of_ref": "indicator--6735e357-bcca-44f5-855b-7b2310ac3935", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58999524-edb6-4b28-89e9-265491ae6c18", "sighting_of_ref": "indicator--a478b698-e895-4571-912a-a8a315a11fb6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aefd73b-6bbe-409c-a1b6-ec23b4c6969e", "sighting_of_ref": "indicator--064ccd8e-937c-42ef-b126-c2ae8a25f2ca", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c19bcc-7b6b-44d0-9253-ae3b464bd50c", "sighting_of_ref": "indicator--38b890f9-79c8-4ad1-b332-0407e68f223b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33afbf93-1741-436d-a124-72522d761d34", "sighting_of_ref": "indicator--c0581a43-ab5f-4383-a9ed-8878b50bb682", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b8ea73-a8d9-4d5c-a4b4-ab3502de9747", "sighting_of_ref": "indicator--b382e4d1-0c47-44b0-9c91-6f4ad3d22aa2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc45a78-143d-43a3-b848-07b9b595ce00", "sighting_of_ref": "indicator--65f53f09-8967-4ff8-9bac-b374b6934c6f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75497fdc-e9c8-42ee-ad79-bad729b06f99", "sighting_of_ref": "indicator--1d7c29e3-b3b4-40d9-ba05-4286dfe0b054", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de24d21a-70bf-4880-bb38-470160fc0d98", "sighting_of_ref": "indicator--2d60cbd5-9fbf-4e7e-a510-b568d71add61", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53249e8-5fda-4efe-8162-6d18d8dee675", "sighting_of_ref": "indicator--7d12fa03-05b9-4c81-8b8c-8258d2dd8ccc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fb1953-19ea-4d3e-951b-a59b60b44138", "sighting_of_ref": "indicator--161b7c3d-0b42-4e83-8503-503e381e9877", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef7a0b8-528f-48ff-8df5-afb157f96eb8", "sighting_of_ref": "indicator--93ab80dc-3513-4be8-9528-bfab3a2086f5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a496475b-4946-485b-ba6d-c836cddcc8ac", "sighting_of_ref": "indicator--8f401f05-125e-43ab-8a68-014263a63205", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eeda11e-3f81-4866-93af-eeae0e7368f9", "sighting_of_ref": "indicator--89846934-b517-49a8-b131-3cd79b9b6810", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4dbbd7-7d03-47cc-88fa-e747b3afb251", "sighting_of_ref": "indicator--4916238d-54f9-48e1-8cfa-c51689f865f2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e06132a-51f4-4f9f-9ac6-763e495c6158", "sighting_of_ref": "indicator--d389ed1a-e6e4-4b20-b4f3-446edb1afe10", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c915fdba-cec8-4b2f-a32b-6b4f83e621a5", "sighting_of_ref": "indicator--10e9a44b-2752-4d70-a46a-152f0bbe46c0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b2587e-29c9-47d9-aac7-1f586573f3c2", "sighting_of_ref": "indicator--a09257a7-ba3a-446e-be5e-8c01c9632776", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c0ecb6-5dc9-4c93-b552-d19e020a7fef", "sighting_of_ref": "indicator--67d76690-86d2-48b3-bf81-46eec2c80d9d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5020d3f2-ee11-40a9-b1ce-70b855bce8d3", "sighting_of_ref": "indicator--ecad5a7b-e9ff-46ab-8e05-6d480579c425", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f6dc0d-4e12-4d88-ab48-d834ab26e0e8", "sighting_of_ref": "indicator--42abde43-e63e-4326-818c-3552ceff8906", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b10978-6f73-45da-b8a2-6fc733289c9c", "sighting_of_ref": "indicator--b5a8d8df-ded6-4dde-b480-7a5e10b8349e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86891363-1a41-4505-8261-ef229584180f", "sighting_of_ref": "indicator--4c4b9a41-09ff-4aee-890a-32d35e86f098", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f1d785-066b-4f6d-a736-9982be5fc92a", "sighting_of_ref": "indicator--4c4b9a41-09ff-4aee-890a-32d35e86f098", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda3124a-d107-44f3-b17f-60a569630214", "sighting_of_ref": "indicator--9d970ea6-878f-4163-9a5f-2c0ef811ca54", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf0ae5a-b3af-4182-a6b8-632bac2c8cc0", "sighting_of_ref": "indicator--9d970ea6-878f-4163-9a5f-2c0ef811ca54", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0062afa6-27d8-454c-9334-7b970584dd06", "sighting_of_ref": "indicator--96595794-10bd-47ac-8d10-999780f83eb4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ae6420-5417-4251-90d8-13638e92b129", "sighting_of_ref": "indicator--d91e6eb3-887c-440a-9ddd-0ba8be5a8592", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c91804b-99d3-4f60-bddc-c2b1c815ad5a", "sighting_of_ref": "indicator--e9bebe52-ac88-4461-9a3c-9e82c2bd7680", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7767b62e-120c-42cd-be9e-31dfd91972eb", "sighting_of_ref": "indicator--c65934b8-813f-465d-8982-5ad6b4869d39", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d567f8-2584-4976-bc09-e9b75cf94e3a", "sighting_of_ref": "indicator--09f60686-006f-4ab9-841f-a985cf0d12cf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2084b70-9e6b-4758-b524-18afeb8ac6d4", "sighting_of_ref": "indicator--09f60686-006f-4ab9-841f-a985cf0d12cf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492d49e8-dd3f-491b-8020-bf9b75764bd3", "sighting_of_ref": "indicator--72f4cbb9-93c9-4b5b-be43-918a041fcc3c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28df9434-ac98-4ee7-a3bc-8ed8aa92501d", "sighting_of_ref": "indicator--2253be62-6199-48ed-89de-46be4b8cebee", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01fabfa-5648-4f0a-bc6a-8cfd53768c85", "sighting_of_ref": "indicator--2253be62-6199-48ed-89de-46be4b8cebee", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf31cd60-6530-4b08-8054-8c89ed463190", "sighting_of_ref": "indicator--73b989d9-c9b7-45d9-aea7-9fc4d5ab95d7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f35b102-037d-4a93-9d27-3bdae686460e", "sighting_of_ref": "indicator--23bdbaef-0766-40b6-abcc-97696d818b66", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb201f2-f227-4e98-8797-db499604e724", "sighting_of_ref": "indicator--ddbe10d7-3cba-416d-b357-7477b9523d8f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eae99f5-5177-457a-83f3-d7fb9888d56c", "sighting_of_ref": "indicator--21d6aa3b-842b-4e52-8018-3b4ed464c46a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dd89d9-98dc-47b6-83de-b3bace1d549f", "sighting_of_ref": "indicator--6f7d4319-782f-4fd6-87e6-e204e83486c6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4f8780-4a9e-48b2-85f8-0c6c4d72dffb", "sighting_of_ref": "indicator--61dab96b-24c4-4110-b448-bb7d5f0040cc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba936fc-eaa8-4c92-97f0-a3fb631716ef", "sighting_of_ref": "indicator--7af84686-842e-4fab-a547-d19f28f5de07", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752759a4-04da-48cd-878c-c65facdd7218", "sighting_of_ref": "indicator--e821d0ed-9700-4ef9-a036-fabaa14efe6b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2635bc1-cfc1-4fcc-8c36-a9d4970be9d4", "sighting_of_ref": "indicator--99e508ae-a7bc-40e0-bafa-e267708eab2f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10223c26-934e-4dd8-b623-7c07e3780b36", "sighting_of_ref": "indicator--377ec533-fa88-485b-804a-e6d32ceb0542", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e247123-5670-4e02-815e-08a3dcf83b53", "sighting_of_ref": "indicator--894227c7-05ba-4205-ab99-89c9ea618c2f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b849bfb-4cae-4e8d-8f57-f957ef7e8f2c", "sighting_of_ref": "indicator--894227c7-05ba-4205-ab99-89c9ea618c2f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5155892d-1658-4064-80c3-38a75490c9a7", "sighting_of_ref": "indicator--1d9b8868-77e1-46e7-a236-9f1e502e2b7a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb46bc8d-3f44-4be0-969a-9bf517fbba75", "sighting_of_ref": "indicator--cfb3ffd7-4e07-40d2-a864-ab24fdac7e99", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee94ec8f-8643-48ee-9593-485191c37873", "sighting_of_ref": "indicator--3ea4b1b8-aa40-43ac-bba0-0e86fd3209d0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8528271-5fb2-4158-822f-9b95e9eb88da", "sighting_of_ref": "indicator--914dac73-23ea-4704-81b9-82b95296583f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8534b562-6810-4a07-9fdc-6716033524d7", "sighting_of_ref": "indicator--e53ddbc8-8ec6-41e2-bcbb-3d93c3a957c4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb63779-ceb6-4a57-b53f-2f6343e710d1", "sighting_of_ref": "indicator--945f338d-f296-4e65-961d-844ddbcb8911", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f59f39-e353-4d69-9bc7-24f7b9bb3793", "sighting_of_ref": "indicator--1dc85377-d873-46dd-8031-1ede057e94c1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5550f21e-716a-46fc-a277-8b892212242c", "sighting_of_ref": "indicator--3dd5eaa1-121e-4c71-914d-9b1297a871d5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ca90c3-ed34-491e-b328-0c968665ffa1", "sighting_of_ref": "indicator--4c0c4ff3-70b9-4d5c-8177-2a06c55199c8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3cd769-46f9-471e-98eb-5ae7dd4de0cc", "sighting_of_ref": "indicator--629c9d44-004e-4306-99fb-dd5bbb66b3ce", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25cb62da-974b-4e98-83dc-958cf69d1ccf", "sighting_of_ref": "indicator--c3cd16f8-e8e2-47fd-aed9-9f519ad697cb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363e1990-d3d6-4bfa-9f82-02c9e6b6d3fb", "sighting_of_ref": "indicator--5f44bf7a-e67b-43fb-8848-c57486c77ee3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423959c8-2f5f-40b7-b0ec-ebad9633b773", "sighting_of_ref": "indicator--3ada487d-2371-4d75-b11b-6386e2796ac6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e7ef27-0946-4327-ac44-8dfe5ac26b87", "sighting_of_ref": "indicator--6342325f-a62c-44e7-849a-334e1ac72fec", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8b7812-6fd5-42ef-ae47-45df0b74b78e", "sighting_of_ref": "indicator--dc396568-701d-4ea9-b5ee-8c1586e23c9d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f199f791-e82a-42ce-b281-bb6e1f914f01", "sighting_of_ref": "indicator--b2afeff9-12f4-406f-ba78-6d5573ec54de", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595acb38-d279-4210-85ef-aed7a4a334cd", "sighting_of_ref": "indicator--b61d0457-148b-459a-8ff5-24eb1e5eb75c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23b93c3-fa64-44ce-9ec9-9b756b9c0a43", "sighting_of_ref": "indicator--f79bbb45-c01d-4c00-80dc-d53f4f169d76", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1aa02c-afb7-496e-94e8-c838bae2def9", "sighting_of_ref": "indicator--4cb6b201-b9bc-4f13-834a-1fcfbbda7020", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2ca38a-515f-4ac8-8516-d5ded64860d7", "sighting_of_ref": "indicator--b5e51b92-dc6f-4c32-ad3a-f0b8b4ce12b8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bc627a-eae0-46f9-8656-ef53099e3506", "sighting_of_ref": "indicator--da1d74a7-2031-405b-9ce9-1345e00ad14a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a80d34b-de4a-415d-b0d0-7c08c5fb876e", "sighting_of_ref": "indicator--adbe3880-a4fd-40cd-8376-9cb942c3fd1e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f91bf7-0008-4999-9e03-0859d519dab6", "sighting_of_ref": "indicator--4cb05db0-0c69-4aa2-acd1-76d2ee231610", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30949618-3dfb-4139-9094-cf5dac305a35", "sighting_of_ref": "indicator--5035bcd2-52ea-4487-b46d-1bb2c76738bf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b2fb3f-b3f5-4ebf-b891-1d2851796212", "sighting_of_ref": "indicator--19c661ef-f2fe-4945-b6cc-12024ffa93fa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91df91ea-ca7c-4286-b57a-ff59ffc1979e", "sighting_of_ref": "indicator--a387738d-d632-48a2-a5e1-13aaf1366b59", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c38f80-2b65-49db-8f95-fb7a2b34b4ac", "sighting_of_ref": "indicator--a387738d-d632-48a2-a5e1-13aaf1366b59", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa158b19-4a11-4ecf-9c87-7d92b4a44d7a", "sighting_of_ref": "indicator--c9e4ae74-800c-427a-83de-51abf7d29978", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab010dc4-e95c-4f70-9909-c375fe802d98", "sighting_of_ref": "indicator--d0a367b9-2a13-46c5-a806-919fb63bcdf6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1acfff8-d0c2-4255-b163-72d813edca83", "sighting_of_ref": "indicator--d0a367b9-2a13-46c5-a806-919fb63bcdf6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5874d68-c805-48fc-9f3b-f5afc22fa0a2", "sighting_of_ref": "indicator--22267322-456e-4ed4-b020-9e0f3a72e949", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ca092f-a25f-4c3c-a23f-66995bce29ec", "sighting_of_ref": "indicator--7494b102-c4b7-4081-88c4-7ce19b610bb7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3aa3e8-f0b0-4020-9e8a-ba61f2aa8426", "sighting_of_ref": "indicator--2629d64a-2e7f-41fc-a500-13e6f715e04e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ff2f1d-52b8-4fce-9a9f-8550c1d279c1", "sighting_of_ref": "indicator--edcb1336-3d52-4623-adc4-c687caeb6393", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa64f4e-672c-4cbc-930c-18908f407b66", "sighting_of_ref": "indicator--f74c6834-960a-4647-9d04-a61fedfd0775", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190a9341-8a7e-400e-9e27-abc284c2ac99", "sighting_of_ref": "indicator--f74c6834-960a-4647-9d04-a61fedfd0775", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e35559-6a65-4d80-81ea-9c32697f87d5", "sighting_of_ref": "indicator--92fae51a-e8cd-4548-842f-fc9a2fbbee61", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc591440-5c4e-41b9-a206-629d041de778", "sighting_of_ref": "indicator--570f81f2-499d-4582-8f73-5d90c85f92b0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dae780d-8e78-48fd-b691-2f1881a5fab9", "sighting_of_ref": "indicator--570f81f2-499d-4582-8f73-5d90c85f92b0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394add05-67b0-4dba-b158-c647d10f8fbf", "sighting_of_ref": "indicator--c4687202-2074-4901-9b1b-1154a4e1a824", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e258a22d-9cfb-495e-8b9b-343820e9bd59", "sighting_of_ref": "indicator--c4687202-2074-4901-9b1b-1154a4e1a824", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7702c8-e73c-437d-9662-48a5826620e1", "sighting_of_ref": "indicator--27af1249-89b7-4451-b1b2-40fd03843c73", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c60997-04c7-4b9f-8618-9cfa1502b0dd", "sighting_of_ref": "indicator--e2242ca5-9291-46c9-aebf-0c3f8134de64", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00b3890-eef7-494f-9600-8deebee52829", "sighting_of_ref": "indicator--5b8bcce3-d1d8-402b-bee0-2e3b409ec6cb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6663f5-d22c-41a6-8fc7-f290bb6ffb9a", "sighting_of_ref": "indicator--259f6c3a-a6cb-46b7-9d35-5b3a9cc4b8ad", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a194b866-9b61-4126-9082-39b7a5ed4d33", "sighting_of_ref": "indicator--aa7e2d65-5758-422f-9e15-c732a2b2b2ad", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924d439c-006c-4229-b24d-f671cf74a4f7", "sighting_of_ref": "indicator--aa7e2d65-5758-422f-9e15-c732a2b2b2ad", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97eed2e-bde6-4654-a366-02e10777300f", "sighting_of_ref": "indicator--5b93d01d-a853-4dd3-9dcc-f1256df57b9f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762bc984-6378-4f18-8fb7-c07932d32a84", "sighting_of_ref": "indicator--396d7919-1ca0-4d4f-9549-7501a0d06336", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5c5197-368a-4db7-b8a5-9cb16ab4ced6", "sighting_of_ref": "indicator--77039283-7922-4b6d-a223-709122fb6290", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e8ca8b-ca3d-42f0-8b83-88b887583d33", "sighting_of_ref": "indicator--71004a53-1da9-4c20-8d96-05dd79433997", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1996fc82-6f04-4f46-bd8f-38fc94c4dd38", "sighting_of_ref": "indicator--71004a53-1da9-4c20-8d96-05dd79433997", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca84d10-a524-4f8c-b15a-887b536dc795", "sighting_of_ref": "indicator--06c67f5a-8d23-4643-806e-0295c630bfa6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e10047-321d-47c7-b801-f19b22a1517e", "sighting_of_ref": "indicator--51a83d46-9ac7-4fad-ab6b-85f06512456d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583da3e7-ebb6-4fa3-8c77-30bc06b0b40d", "sighting_of_ref": "indicator--3931462a-2b3b-49c7-9e53-15cebf0060fb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04f06c0-86ba-46b0-8834-cfa8eafbad02", "sighting_of_ref": "indicator--aff0050b-3310-49b0-a83a-33bb47c4c912", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde89269-6780-481e-812e-0ce2ce63f2ff", "sighting_of_ref": "indicator--e8371395-ed78-4d70-848d-38a9c563d24e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4334037-59d3-4a9d-97fa-deb9f29c13ae", "sighting_of_ref": "indicator--2cfeee11-01c4-42e3-911b-36eab524ef61", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81340431-3cb5-46f0-b837-7a65467668a6", "sighting_of_ref": "indicator--0120718d-069b-4ac5-b9dd-f859208d83c7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806a14b5-0640-4d99-97d3-a1f98226e2f3", "sighting_of_ref": "indicator--e754e7c0-453f-42a2-975e-0f88827e126f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b0d8f5-9c8a-4811-9b20-b466d2c5cacb", "sighting_of_ref": "indicator--dd76afda-eb07-47af-bc2e-a0e138223bb0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d6c78b-f633-4fb2-be92-bee5011d207c", "sighting_of_ref": "indicator--162bd2fd-fa82-4b94-9bc2-0671b9b7eb58", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0318ee6-c4e4-426f-b6b1-3cdf9377c286", "sighting_of_ref": "indicator--f1626fa4-8fc4-4df4-984e-aa9f5b6e945b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83ffac4-5126-48cb-8d87-c96b8f8d3452", "sighting_of_ref": "indicator--683dce16-6dcf-4b96-b7b1-42e2cfba7162", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4080cd05-4afd-4797-be08-926706aacef2", "sighting_of_ref": "indicator--1e8ed946-2637-43f0-8968-e591db22a4f5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0004ea-cd64-4986-9b26-146bc31bec37", "sighting_of_ref": "indicator--dc0c2cae-e69a-4e3e-a65e-f2c8d9adbc62", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667b3540-75ec-48a8-9170-08f77fe77aa4", "sighting_of_ref": "indicator--fd8b4436-14ef-4b9e-a339-69e3fafe7686", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9932a705-154a-4f2e-bf1b-244715537f9e", "sighting_of_ref": "indicator--a83ec4e2-572e-4517-ab48-fed4b9e1060c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b0fc27-4881-40f4-b7d5-f201a0224fd1", "sighting_of_ref": "indicator--1caa806c-3568-4f99-b3da-65442b2e1485", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ddffff-f9af-468d-b3af-475271cef883", "sighting_of_ref": "indicator--1caa806c-3568-4f99-b3da-65442b2e1485", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd97950e-3093-4f43-9624-2c21b2f92034", "sighting_of_ref": "indicator--0c5a95ba-4815-4e79-924d-87309b48bec3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52734bbd-0942-4738-886a-043c684f2cec", "sighting_of_ref": "indicator--b68e82e0-0105-4abd-8c40-d52c7b3eb852", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6116e465-5fd8-41a0-b980-cebcd881244f", "sighting_of_ref": "indicator--a067f036-dfde-49d6-9e75-e548258f0c62", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502ff42d-4373-4fa6-94c1-fecf1845c98c", "sighting_of_ref": "indicator--b831ec47-e66a-406d-a405-d3dd12b48577", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcd7b2a-8df3-454e-bc98-069fd578a4e1", "sighting_of_ref": "indicator--b831ec47-e66a-406d-a405-d3dd12b48577", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27e05b3-c18b-4593-a306-3a265ad676df", "sighting_of_ref": "indicator--9cccd01d-3c64-45b2-b047-7b1cf2453a6e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae7a0da-d5b9-4ebb-8c6c-7af25a2574ea", "sighting_of_ref": "indicator--4f3acaa0-a2c3-4c19-992c-3de0e5f93559", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c20fba-9f71-4840-9ec6-0b6adc6dd517", "sighting_of_ref": "indicator--c2fcd2d8-f854-4487-b372-25ab907a31c0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8a6698-924e-4fb9-b2be-aaecde842881", "sighting_of_ref": "indicator--c2fcd2d8-f854-4487-b372-25ab907a31c0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4c81d3-2dde-4c0f-821b-098455d2646f", "sighting_of_ref": "indicator--dc6a18a1-b88b-4379-ae9a-6d827d48edac", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873e48ba-61a8-4d5f-bec2-f2d77b30ec46", "sighting_of_ref": "indicator--7b7383ea-a1d1-440a-a306-4016a6e2fccd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3565a2-6605-4053-b2b3-2631bb913b0d", "sighting_of_ref": "indicator--ee38ac51-c66f-4e94-aa0e-85a4830289c1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68f4758-69cb-4bd6-a04e-7fd9178c32e8", "sighting_of_ref": "indicator--625daeea-e7f0-4ac5-a874-c588ba20595a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f762395f-148b-4f35-80fd-469f8182091c", "sighting_of_ref": "indicator--6fef1707-5fab-496b-b3dd-c72ecb368501", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6cd5b0d-2952-449b-91d4-4618a2e6cbb6", "sighting_of_ref": "indicator--61ac9b3e-2cb5-46f1-8172-925307ca7640", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562daf3e-3ce2-41a2-a8b1-88d6359e8d89", "sighting_of_ref": "indicator--b4fcbc5a-0a1a-437f-a05e-b7cfa2217162", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f94d58-da74-40ad-9dc9-6e9e0f6e48cb", "sighting_of_ref": "indicator--b4fcbc5a-0a1a-437f-a05e-b7cfa2217162", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8952fd7-ab3d-402b-8d8d-fcbb3c023823", "sighting_of_ref": "indicator--2f36facf-cbed-4612-9fc8-4173df69cdc5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea329c5-0d7c-4215-a229-9e6c40eaead7", "sighting_of_ref": "indicator--3e13ec5a-f586-462b-976a-3e3eb50b51e3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e0a583-b7fd-4ac4-8e67-ace46441d0da", "sighting_of_ref": "indicator--bbdfcc5b-c58e-4dcc-85a9-6d9850035b72", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498d9e7c-9006-48fd-8aa6-c14d113698f3", "sighting_of_ref": "indicator--64ba077c-7ce9-428e-8eb3-bc4d01377188", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6252360c-2f57-476f-aec5-4214d11608af", "sighting_of_ref": "indicator--5fad5137-4c6f-424b-8f50-c2404cc22098", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536b94ad-4c32-4551-aa89-6938c598b7fc", "sighting_of_ref": "indicator--9ef437f2-7b99-4738-aa3d-1ea58d196872", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8453e7-83d8-4391-bde5-77a855aa0d92", "sighting_of_ref": "indicator--d9c9a7e1-2dcf-42fe-b63e-581498afc88b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42930640-be7c-4490-91ab-553134957142", "sighting_of_ref": "indicator--2fa34c0f-4909-4ad7-bc39-2cd8947b3c9a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b860e98b-d830-43a0-bec6-0ce98f78d34d", "sighting_of_ref": "indicator--1fa43e65-47cb-486e-aeee-c3878cdf5301", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7493cc8-b07c-46f5-bc61-0bc36a210a6e", "sighting_of_ref": "indicator--0e805dd9-5b2a-4a94-8e25-b6be329f2b29", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b853af19-a638-4ed2-b583-57d3bd207683", "sighting_of_ref": "indicator--c2e87372-ccbd-447b-bb43-7ca495ef9f20", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba726de-a9d0-43d2-ad4a-9a28a2179665", "sighting_of_ref": "indicator--c2e87372-ccbd-447b-bb43-7ca495ef9f20", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c2613a-01cb-4f1a-956b-15238c1579e5", "sighting_of_ref": "indicator--2bdf74f6-c398-4401-a0ec-688442e043b3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bd2b2f-41ab-411e-af4e-fa7005680451", "sighting_of_ref": "indicator--3c1bcbbe-74cb-4372-a129-1a2b5a507a1e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe6afd5-cc9e-4f48-889a-4747ce44b798", "sighting_of_ref": "indicator--f571d0d5-f42e-4608-b7dc-dc56410dbb1d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c23791c-39e6-4d4e-865d-de4f78744230", "sighting_of_ref": "indicator--7f165b5d-af43-49a5-99f4-f38c0879b839", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05cd9d63-c0cf-4c08-86d0-0dbb40e0322d", "sighting_of_ref": "indicator--aceab53f-ea89-4527-9f56-2392b88749c6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1776075-073d-4a85-8031-ae8dcf040b3e", "sighting_of_ref": "indicator--beb0b13b-fb0f-4cdd-9789-4d7e31758aff", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7099dd-bc0e-4035-afe1-3709fd230d31", "sighting_of_ref": "indicator--e2bb634a-a6ab-421a-8138-88ba92d14f4e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640f692f-20b0-4c63-b714-3f18f7c9b422", "sighting_of_ref": "indicator--0c42d9ff-eb5f-4fab-8825-f07ade0a59f8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bce90c7-1d8e-40a9-86b4-8238da3dbed5", "sighting_of_ref": "indicator--0c42d9ff-eb5f-4fab-8825-f07ade0a59f8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fec864d-e7c2-459a-af11-1e562548c75b", "sighting_of_ref": "indicator--761c7f44-cf7a-4fdf-9c0b-cec2c67fd6d9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64b9887-8947-4c62-9798-61cc79092476", "sighting_of_ref": "indicator--79eea8cc-8372-41bc-8689-a4d19f1ae433", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50423635-efa2-42fb-8fdf-4c281b1c489a", "sighting_of_ref": "indicator--5988aca2-9ed7-4771-b59c-cf78305cc4bd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abe60b0-f56f-4b42-a175-b7743c75759f", "sighting_of_ref": "indicator--d9464890-569e-4360-b955-92bfc4957e64", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6aa9c7a-cc41-4b6e-b0d1-43ef8c25f550", "sighting_of_ref": "indicator--7d72f108-9016-4280-b72e-77e5e0b21ffb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609b6903-45b1-43b6-a5c5-424b886ec47a", "sighting_of_ref": "indicator--7d72f108-9016-4280-b72e-77e5e0b21ffb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd2a38e-b77c-445e-8cf8-fefc30b6a7b0", "sighting_of_ref": "indicator--8e03ff38-8b76-4238-92cd-01f437793c10", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90b0c05-3937-4ff5-b652-81fce0bf9a5e", "sighting_of_ref": "indicator--1d98b7fe-1ff3-4ff0-a0d2-4f5fcf64c94d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf564d5-99f3-444d-8a98-421b496a117f", "sighting_of_ref": "indicator--25e2f3f0-2248-4a12-84df-23854961caab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d256285a-178b-4fbe-aab1-c28b52797b45", "sighting_of_ref": "indicator--43373a78-a948-4be3-a735-3c6b3f36b9fb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997375ad-2544-49b7-a0c4-01354b5df219", "sighting_of_ref": "indicator--43373a78-a948-4be3-a735-3c6b3f36b9fb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362c61bf-ff07-4a5c-be10-5149d5bc53ae", "sighting_of_ref": "indicator--290d0fc6-c2a9-4ba7-9c56-008aed421cf6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8a61eb-4139-4a76-a701-d074a76a65ed", "sighting_of_ref": "indicator--294d1540-9376-496a-9ec7-4922a73a3861", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16261eb-adc7-4be8-bec2-3b46b7331491", "sighting_of_ref": "indicator--1ac5072c-e33b-43ee-9756-3f99b13d7a4c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c754d1-2e9a-4bbf-9f90-7b6bbfbfe607", "sighting_of_ref": "indicator--9aca9f5f-3cc2-44c2-9c77-8004ac48ec7e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a467818a-0da5-4342-b275-9c4df07f3083", "sighting_of_ref": "indicator--27c2f134-2f6a-476f-9f67-4fb9aeea6530", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7663a31b-22b4-4157-b082-3cc8ab1eae1a", "sighting_of_ref": "indicator--c66d9a06-6683-4b2a-9b5e-a11477b61bca", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a81d87a-bd3f-4c26-8530-a948cf3c7f75", "sighting_of_ref": "indicator--f052675b-983f-4f2b-9d44-4ab0da47f454", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758f5096-857a-4ce7-ad5c-04f6ba0dd857", "sighting_of_ref": "indicator--4810a872-dea8-411b-a6c7-2ff8866fcdc7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27784202-06fc-4ffc-bdaa-e387db7dbbc5", "sighting_of_ref": "indicator--2ff748ee-f51f-4159-8e7a-9b601c4816a1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a2ebf6-fd33-4817-97fb-0874608af077", "sighting_of_ref": "indicator--58404ece-a80a-4aeb-b3fb-0521d0735e81", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc232339-19ff-4548-b690-6679bccf5af2", "sighting_of_ref": "indicator--d179e337-5645-4ac5-8364-77e1eb316372", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba92d19-5917-478b-9dd7-8edd4ee99654", "sighting_of_ref": "indicator--afea24ad-39d7-49cf-ae11-a782c872bed0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de80d5b-bc80-4c4e-92b5-abb85be65ba9", "sighting_of_ref": "indicator--f9600108-ad30-4e98-b540-455ef76738c2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124f7e74-237b-4fff-8988-44f1a2f4ad1d", "sighting_of_ref": "indicator--f9600108-ad30-4e98-b540-455ef76738c2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6b4cf4-a155-4f9c-ae04-bf33700aa54f", "sighting_of_ref": "indicator--455f58a7-bf52-4fd4-be31-1f3f0da56f96", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f669e83-7511-46fa-a8fa-ed9bae97b27e", "sighting_of_ref": "indicator--c3da4ea4-1c09-4af4-aef5-958e55195507", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10efca22-aed7-4240-ab25-d74cf4071dbf", "sighting_of_ref": "indicator--bd592891-9c6d-41d6-8d73-09902f28a7ba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b888c33-5319-4ee0-83de-b4e03fca8a8a", "sighting_of_ref": "indicator--728c9eb9-7b76-4cd2-8ba7-4e54f047d806", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6891c8be-4275-40a6-9ed6-50d0ae5a374f", "sighting_of_ref": "indicator--16b513ca-62e6-46dc-92af-8b589d2d37f7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0975165-205f-437e-818b-5c33bcbefa0f", "sighting_of_ref": "indicator--3422c051-d0e6-4876-b09c-ef85b9000c63", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4be4a78-4fc6-45b5-b738-b313370bf00c", "sighting_of_ref": "indicator--8aee6052-b506-4f3e-95f5-263b17997c81", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6ca07b-1d64-4262-96dd-daef9c6c70c9", "sighting_of_ref": "indicator--5aafe2a3-c70d-4728-ace6-62e3b1a14d54", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b03bb4d-c75a-4657-8e6d-19c78544d5be", "sighting_of_ref": "indicator--37c2cc1d-0fb2-410e-9aeb-c2aef2e3d4e9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ad810c-bc2c-4ea5-89b5-8d21d17a7ca5", "sighting_of_ref": "indicator--fd9d1d5f-33c6-49fc-83ce-1d4ac29eeb48", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4e10d5-72e0-4df6-8ad7-95fd5658cb18", "sighting_of_ref": "indicator--fd9d1d5f-33c6-49fc-83ce-1d4ac29eeb48", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d572dcc-20d4-4032-aa01-fd7a2f2fdf27", "sighting_of_ref": "indicator--fd9d1d5f-33c6-49fc-83ce-1d4ac29eeb48", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01498260-f75f-41e6-8ae1-c425fc4ddde1", "sighting_of_ref": "indicator--bae91310-9221-49ba-a9f6-e97605f7576f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d67dc1-74df-47f2-b929-b4f3e4919cb4", "sighting_of_ref": "indicator--0c3eb28c-d75c-4097-b9ee-81d6d7b8e265", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1386c7-dd19-4855-9dba-81981e0de8b9", "sighting_of_ref": "indicator--e6cceb60-a2ac-4507-87b3-8008f9dba19e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4ce747-b356-49e9-93e5-a12c1f2377c0", "sighting_of_ref": "indicator--685b32a3-f8f0-4175-ae1a-66e44ff84bc0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de162ba4-8908-48c5-8e11-572849025957", "sighting_of_ref": "indicator--3e84f858-189f-443e-bcb5-f8e0944bba85", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97290f0a-eb11-4347-a4ad-a4cb93550957", "sighting_of_ref": "indicator--83f56cc5-a974-423b-a6bd-e1ae7d72b840", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d506f272-c0fc-45dc-baf9-aaa33fa577a7", "sighting_of_ref": "indicator--83f56cc5-a974-423b-a6bd-e1ae7d72b840", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06857f90-d0ea-48ba-8eb0-6252777e3c8a", "sighting_of_ref": "indicator--08028828-0b99-429f-9da1-a7aa6cf14c4b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee07f9f7-2d46-4ca3-8852-57c3911cf47e", "sighting_of_ref": "indicator--cb1a0fd8-cc30-4a97-9789-b0ce4bd4c798", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbe1430-46bf-460e-8b46-0249bb241d5b", "sighting_of_ref": "indicator--c94b10ce-cfda-403b-903f-ceca15fd6202", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db91ecc-a536-4131-9582-e63b89266b2a", "sighting_of_ref": "indicator--98ee4e12-cf58-4a33-9742-0f4bf45bee37", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d829b1a4-1ecb-42a7-af4a-9b0108fbfef3", "sighting_of_ref": "indicator--df123407-0eab-4b6d-be01-cccc4a338d04", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcec993-d309-4c8a-b4f5-f87e8997b4de", "sighting_of_ref": "indicator--df123407-0eab-4b6d-be01-cccc4a338d04", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670eacba-2966-4b47-9a4c-26fcff6535ee", "sighting_of_ref": "indicator--ae461493-0b46-47a3-a1aa-e2c336a6fa9f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a26dd2-c8db-473e-9bf7-8f15fae4a514", "sighting_of_ref": "indicator--c3d95806-d7f3-4c43-a460-b9fd5a109a4f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ab5d26-e660-4015-b7b1-edf6c7948965", "sighting_of_ref": "indicator--1234d61c-e588-49f9-8982-0184795b0736", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38637d4b-ddc3-440d-9754-457ab3648954", "sighting_of_ref": "indicator--52ea6ba2-57f2-41b9-8669-59d3a6effa0b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abfac3a-37e4-4a5e-a4b2-69eb0977c655", "sighting_of_ref": "indicator--af1f2e8e-e4b5-4d88-8a29-94bc13631d2b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad84f763-a959-4326-a00d-fb45e811b691", "sighting_of_ref": "indicator--30a244c6-46b8-4c8e-a5c6-9d8d0f28053b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a764f3cc-9b1c-4311-aea7-c9a6978a5d07", "sighting_of_ref": "indicator--a6e98372-81a0-4619-bb80-d2d025abbbf3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d56430-0cf5-4935-a179-778c68edf3a0", "sighting_of_ref": "indicator--6ef7d9d3-46cb-4682-83a7-5bb9a19aab04", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d59fba-420a-4ecd-87d6-b9fdd7777ab5", "sighting_of_ref": "indicator--8b72ccb6-a2b3-41d2-9139-f7216d1b55d4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3359b5fc-7e0d-408b-af4b-c8f6f9f758fc", "sighting_of_ref": "indicator--8b72ccb6-a2b3-41d2-9139-f7216d1b55d4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62622e87-c5d5-44d0-825e-8835c4123104", "sighting_of_ref": "indicator--9cb8eb97-53fd-46c1-b2d4-24ba52a852a4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab774e5-baa7-425b-b2fa-1c6e83c5a68c", "sighting_of_ref": "indicator--5edfe826-f500-4208-bb21-b472aa888a42", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4e757f-84f0-4157-bea9-d5fa0b1fd14f", "sighting_of_ref": "indicator--29fbf9c9-6b05-4802-ad88-ca07973bfa7a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5101e6a-3c8b-4658-8385-ce438cbdc938", "sighting_of_ref": "indicator--29fbf9c9-6b05-4802-ad88-ca07973bfa7a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7afa319-b0c4-47f5-8b80-5e8532d7daa3", "sighting_of_ref": "indicator--0f63bd0b-7898-41d3-b97f-acea94ed7739", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90155a35-c3d7-4d55-a7d6-783e30297723", "sighting_of_ref": "indicator--5281900a-94e6-430d-bb86-a7893f276e11", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc2d805-0dfc-4002-a626-3eec5a3ec18a", "sighting_of_ref": "indicator--a9fe32c0-9900-4578-9ecb-902088881e90", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabc9eeb-f34b-4c4c-848c-270e67f24541", "sighting_of_ref": "indicator--a1735852-5c0f-4aef-8ae3-1dc2005923c4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3b189f-1435-47ad-ab7a-beab82d5d76d", "sighting_of_ref": "indicator--828739dd-ab8b-431a-8507-698a006fc926", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d870c022-1851-449d-bef5-fda1bff49228", "sighting_of_ref": "indicator--828739dd-ab8b-431a-8507-698a006fc926", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6066bce-8dc4-4130-9480-3d12934ede2c", "sighting_of_ref": "indicator--0648d46d-d78f-45a7-a869-eb4921c0dea1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1103ec5-03f7-4043-a85a-223cad86241b", "sighting_of_ref": "indicator--98dd71a7-bdd2-4215-8b1c-a75aa5bf6069", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e19c8c8-67ea-4261-b692-1efbf26933bc", "sighting_of_ref": "indicator--f28d456e-3d43-4b38-af3d-f122c4c32267", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bc47f5-3ad6-4e15-85bb-ebb2d9ca1c63", "sighting_of_ref": "indicator--2430acb1-fda3-41a9-8edc-02b54bf2c08e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9322b9d-877a-4400-9e59-98e7eeed746b", "sighting_of_ref": "indicator--6022cb11-9c2f-4d28-b6b5-553c1068a902", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f44bed8-db5e-4d57-bc29-7b31341c76a9", "sighting_of_ref": "indicator--2c36ae86-e5ac-4073-80b1-656d1e5ba43e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8949aea-1c98-4f17-af59-7b01d1e7be3b", "sighting_of_ref": "indicator--c2b0ab33-9533-4c05-a0dd-50af07c858e6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae67c639-bbbb-46e0-b060-5a4fe07c22a1", "sighting_of_ref": "indicator--52e193e0-e42b-42cf-80d7-9cea64c016be", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc2be4a-3a3b-45e1-a857-07a469ced519", "sighting_of_ref": "indicator--52e193e0-e42b-42cf-80d7-9cea64c016be", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301b5c53-a689-4abd-be99-30780abddcf2", "sighting_of_ref": "indicator--4af93161-d4db-4a4c-903f-a76de2aa1d2a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c00f7b-a4e8-43d7-a53b-f892aa810929", "sighting_of_ref": "indicator--6e4a8035-741a-4512-8640-46370c2c217a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3068550f-8349-4b1a-9c7f-f9db7fc1c232", "sighting_of_ref": "indicator--6e4a8035-741a-4512-8640-46370c2c217a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608dadaf-81f2-4136-8cd6-bbc47d559905", "sighting_of_ref": "indicator--27c15a3c-bbc2-4782-93eb-d03c9b26dce5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285ec7a3-b77a-42b7-b8a6-9f1dd8d73760", "sighting_of_ref": "indicator--45eeeed6-7b47-4c38-be3b-a2d58fd0707a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7f7d00-acb5-4c5a-b19b-3c511e824b06", "sighting_of_ref": "indicator--2c088da5-db14-4db8-991c-32cb83272d10", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45197553-22ab-468b-b8ec-16a5e253ff7d", "sighting_of_ref": "indicator--87571f8f-7ab6-4413-8c0e-8bbda4fc986e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089c018f-001c-4077-b00f-479892843534", "sighting_of_ref": "indicator--647c932f-0a20-46e0-9b0f-6b1949cb92d3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a5ea45-433d-4936-a257-2b8913d84493", "sighting_of_ref": "indicator--6d0d00e5-8542-4781-92c5-66585ba4eeaf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33cc5c3-8641-4fc7-872f-ebb86173ee57", "sighting_of_ref": "indicator--7d936952-4273-44c6-8b51-216212c252f5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aef1f8c-cb77-454c-b705-d00b7fb46973", "sighting_of_ref": "indicator--9d9e93e5-fbe1-4406-8e6a-a0203c68410c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed952bb-222d-4aad-b4f4-a2f7d402ed45", "sighting_of_ref": "indicator--9ca7a483-7ea8-4d2d-a9eb-32658e936a5b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62748fa7-6213-4d6f-a84b-76e6d696b3d8", "sighting_of_ref": "indicator--87d9a6ba-1306-4590-8fd5-b6b9d7121344", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11717132-d688-4399-97d3-d29ae0cb00d8", "sighting_of_ref": "indicator--e27660ea-b6ae-4160-8df1-d84ad20d4287", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c344a368-c282-4d41-8983-9517355fbb2c", "sighting_of_ref": "indicator--d7d0cadb-ad3e-41cf-ba73-3eea6924c59b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1348fff6-b5d1-4cd4-b017-ff314de8e497", "sighting_of_ref": "indicator--022563de-b1af-4d6e-b649-98e4efbdc9dd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657e086d-430d-4ead-abbf-ccabe783f157", "sighting_of_ref": "indicator--6e1dd40c-0746-4746-90ad-e516f0cbc3da", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764acf75-0a77-4a63-a2a1-a6e34f470da7", "sighting_of_ref": "indicator--9980dc4d-de76-45a7-a925-041023dcdad6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77cec27-76af-4d5d-8f3f-4e463c3cd954", "sighting_of_ref": "indicator--eeac3e24-4328-4e44-b9cb-9a63e5e504b9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f375ed5-7fa3-46b8-abbc-f6016ccb3bc0", "sighting_of_ref": "indicator--eeac3e24-4328-4e44-b9cb-9a63e5e504b9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55d649d-970f-4e66-8131-156f8aac8e93", "sighting_of_ref": "indicator--fa26e991-c176-4fa8-8ebf-8ee7a25fe3eb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8782f102-92a5-4c47-9a8a-f3df4ef6a655", "sighting_of_ref": "indicator--0ce9fde3-60cd-42ab-a763-8988c0fc8153", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680dbcfa-0c73-47dc-bc66-161fd5c71bee", "sighting_of_ref": "indicator--0ce9fde3-60cd-42ab-a763-8988c0fc8153", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599ba959-940b-485f-9dff-8fb297cedc98", "sighting_of_ref": "indicator--0f80ef9a-3190-4be4-9b73-97e5e28df916", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1afcfe5-5492-44c1-b7b5-4afa1a215519", "sighting_of_ref": "indicator--0f80ef9a-3190-4be4-9b73-97e5e28df916", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c947e8-e541-49cb-984d-49deb4c765db", "sighting_of_ref": "indicator--0f80ef9a-3190-4be4-9b73-97e5e28df916", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93dfc88-e537-41d6-95ad-6f2dcb956a6a", "sighting_of_ref": "indicator--7168eafd-cfc0-40a4-9b24-7d6e0fbe2f35", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4cbe2b-9c1d-4a96-8a14-d33315255985", "sighting_of_ref": "indicator--36bedef9-061e-46a0-b263-c8de395c5e87", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1393fb69-11c7-4391-9ba3-0ff727179890", "sighting_of_ref": "indicator--24f5fae9-6351-4f67-b82e-e1f26caebc75", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08109b5b-24ac-43d4-acbe-c92582b331e2", "sighting_of_ref": "indicator--2e76ff03-5d42-4e01-bbf6-76b7fc4c3004", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7116b5ad-1536-4a26-870a-9c2560c61a57", "sighting_of_ref": "indicator--36450438-9f5c-4160-814a-6946077c54fe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03764c79-6157-4fa3-8f53-85b4c67e3b89", "sighting_of_ref": "indicator--f5d66f5d-5507-4880-b5cf-f3808c3af77b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0146ad-a012-423a-9467-3b3882080c57", "sighting_of_ref": "indicator--eb1df8ba-2549-4140-a593-420feef6df17", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b987ca3-d365-4665-ab0a-eca88c477cce", "sighting_of_ref": "indicator--89103e6c-70a5-4392-9764-b0139cf1984a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffea845f-f895-412e-96f7-1a334341bd45", "sighting_of_ref": "indicator--eb453fe2-83cb-44fa-96e8-c35e96c4f60c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35089298-d4e8-41a5-8587-7eb154c88172", "sighting_of_ref": "indicator--b9d75e87-dc82-4bbd-ad7a-ba56ea18033d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6de05a-1a24-48ac-b7de-0d1c3a028117", "sighting_of_ref": "indicator--97a64a2e-bcf7-4bbf-8158-bfc7296594ca", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24af8bf-04cf-464c-a8b9-f944af5f09b0", "sighting_of_ref": "indicator--84692b1f-4582-4ccb-80ef-3bb1d14375f4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4305798-e0d0-4e87-ae54-d3568c5c0a69", "sighting_of_ref": "indicator--68d8dfa3-932f-425b-9f90-7168bb7bb88a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9cd6c7-4de6-46b0-82f3-6c81fdc8b222", "sighting_of_ref": "indicator--74ce3666-b95c-4c07-b911-847509c6d595", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14831165-166c-49be-be32-5081b9cac1c9", "sighting_of_ref": "indicator--0fcb65a4-2cd6-46bc-974f-e2a0823fd2ce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edf7965-d64a-4ede-aca8-b924df69180e", "sighting_of_ref": "indicator--c5834fe9-17b7-417b-949b-661d75055bfb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1288bec7-12cd-4577-908e-4f8cfc7c1ac2", "sighting_of_ref": "indicator--ebd8a383-eb5b-4786-a819-dccc36b00067", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f1d1ad-033b-4e41-96b2-85bb4d33b225", "sighting_of_ref": "indicator--242f3711-5526-490c-9350-53ac84749e2e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822a8e53-b190-416d-a0f3-386f8d1a05b1", "sighting_of_ref": "indicator--81c095f1-8dd6-4aa6-8ccb-88df54c83b5e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbe350f-a713-4fa4-9931-5a02f1d9617a", "sighting_of_ref": "indicator--81c095f1-8dd6-4aa6-8ccb-88df54c83b5e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e07ec2-b199-4fdc-85f6-36afd51d04ef", "sighting_of_ref": "indicator--8fdfabca-81da-469d-8df8-d954315b7f39", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910b2e02-934c-46df-b4f7-4f3f16292511", "sighting_of_ref": "indicator--4ac05a02-d363-4440-b811-9cf26e437771", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4379ea6-6670-4a35-8951-913bfad2f61b", "sighting_of_ref": "indicator--5ede8524-cf34-436a-a4af-4b8f74b40b9e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d4123c-75f3-416d-88eb-28d8c5190e7f", "sighting_of_ref": "indicator--5ede8524-cf34-436a-a4af-4b8f74b40b9e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ca34f7-619b-4d81-9169-7cda285e54f2", "sighting_of_ref": "indicator--cf9967f5-f96b-4cfb-9995-551fe25ab1e1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1548ff8-a76f-4c23-89c1-e3f5ccb32750", "sighting_of_ref": "indicator--292510a6-6b2e-49b4-99f0-f1b38ef7f7f6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fbc5638-009f-4a32-8caa-2f6a1158f530", "sighting_of_ref": "indicator--9865a2b7-cf94-41e4-b7df-57557cd22f60", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33f236d-d969-4207-8722-7d5c60e77681", "sighting_of_ref": "indicator--6e45e38e-9c54-4d07-8039-cfa0036d0b98", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debd476d-5264-4fe2-a7c7-42f54d1756ee", "sighting_of_ref": "indicator--872fc244-ea26-4654-9a95-4aa13dbf0fce", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d60be39-2f54-4fc3-878f-98e9a5ecc70a", "sighting_of_ref": "indicator--872fc244-ea26-4654-9a95-4aa13dbf0fce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87875c5b-4fe7-4132-990d-cdca00149ba5", "sighting_of_ref": "indicator--dea64cde-769f-4802-b0d0-67e1b6baad57", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8e3930-84ce-4680-9307-379ae23300d2", "sighting_of_ref": "indicator--14424318-7285-48af-8168-16211bc2c4f5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e21b2a-bc45-4729-85fa-0369ec0c897b", "sighting_of_ref": "indicator--62f13b27-2414-4f45-8d4d-b1f51684a02b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5bacf6-990f-4003-baf8-5f4419edb4aa", "sighting_of_ref": "indicator--62f13b27-2414-4f45-8d4d-b1f51684a02b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23d69c9-e153-4875-9c55-493af3fb280a", "sighting_of_ref": "indicator--fdc98f8d-20f0-43f7-a358-aaa9687302d6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb2593c-1f61-46f7-aedc-5ab446dc1671", "sighting_of_ref": "indicator--be304764-7f8d-44c6-abdd-6cc5c76d69ff", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec932ca-0fe3-4f5d-9b60-6968aa262ba4", "sighting_of_ref": "indicator--29e71250-bc43-4ec4-aa51-7eea5183fb05", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01165e86-542a-4313-bfea-0128bacb40ae", "sighting_of_ref": "indicator--b0a46d85-8979-47a2-83e6-8ac6d78e9ed4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f28a630-675e-44cc-8577-f1a9cf4b9ca0", "sighting_of_ref": "indicator--a043be28-a83c-4d9d-91d6-1b6df1f38bde", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e503a7c-1917-4c37-b04d-dddaf7062f90", "sighting_of_ref": "indicator--5883643a-c074-4433-9380-0ed6a44be790", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d442218c-4e02-4e29-b626-6a527365055f", "sighting_of_ref": "indicator--720ddb93-9418-406d-b6bd-dbaf0d98ec13", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6836adb-1c55-4062-8683-ff6c8d0f6db0", "sighting_of_ref": "indicator--720ddb93-9418-406d-b6bd-dbaf0d98ec13", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2138876-0355-4273-a576-8acbc980d9c6", "sighting_of_ref": "indicator--90f0f046-6bca-47ed-8ea3-0c02f15abbd7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91f9175-5677-4afa-b240-91b1953b2f5d", "sighting_of_ref": "indicator--fe02adb5-bf15-432c-9acd-241bb7f1aed0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801a3cf2-6a70-4874-a574-9821c9e30ac2", "sighting_of_ref": "indicator--57d9be3c-e9e3-4692-a645-285c178c8838", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ae45e4-15cd-4d60-bb04-b0180296dc06", "sighting_of_ref": "indicator--57d9be3c-e9e3-4692-a645-285c178c8838", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0edf4c9f-8137-4771-9d62-e41096b72023", "sighting_of_ref": "indicator--0a11840c-e385-43f3-851f-bfb28a961acb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d023a830-cd70-4cc5-ade8-456902066fb2", "sighting_of_ref": "indicator--76b908cd-5da4-4963-ba46-3d6927b04237", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f844de22-3383-44f4-bc42-8ab47046ee40", "sighting_of_ref": "indicator--78a6e4c0-8a59-4784-b363-916bb610ffa2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa2a9ee-13fb-4983-9b36-61b4ef173b5c", "sighting_of_ref": "indicator--e5a85d69-3a91-4fa8-9234-7e69195b8cd9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15d6ccd-30aa-4fdb-ab38-27916145faf9", "sighting_of_ref": "indicator--e5a85d69-3a91-4fa8-9234-7e69195b8cd9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545823f8-f1c2-4674-beda-1f2d4745bce9", "sighting_of_ref": "indicator--485bce98-999e-48e7-8f1c-cae16e12ff6d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d145038-cae4-4757-adcc-97fd89327c3e", "sighting_of_ref": "indicator--485bce98-999e-48e7-8f1c-cae16e12ff6d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a0e722-c3f7-487a-bdaf-32813f8477a0", "sighting_of_ref": "indicator--f67d7784-5911-447a-b0e0-12fe9d1a5f2f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92b4eb5-54d3-4bb2-9a45-da181c840ddf", "sighting_of_ref": "indicator--1594b3c3-f57b-4679-80d6-b0f033d56c29", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be5ab47-be04-476a-9198-93113f077ce1", "sighting_of_ref": "indicator--1594b3c3-f57b-4679-80d6-b0f033d56c29", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf24c4d-7185-4219-80a3-68e678a9ccad", "sighting_of_ref": "indicator--1594b3c3-f57b-4679-80d6-b0f033d56c29", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4135eff6-0935-4354-9124-dd6592fd2415", "sighting_of_ref": "indicator--e9a85039-a5d1-4f49-9282-b52896fa6e18", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d8ed84-50bc-4e99-bd3a-5efd2ca96956", "sighting_of_ref": "indicator--461478f5-8c23-429b-bcdc-33e8f11ca2a8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773fd4bb-33e1-428b-9170-18e18e4e0c4c", "sighting_of_ref": "indicator--461478f5-8c23-429b-bcdc-33e8f11ca2a8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8c8422-574e-4832-91b0-d127f067a42d", "sighting_of_ref": "indicator--a784d382-2140-4f94-8f42-0a1f5b00395f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e4ea27-860f-4aaf-8cf9-714e4aab3e0b", "sighting_of_ref": "indicator--81fbd9e6-d3ca-41d1-b7ff-dd1b5bc40685", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3e0fce-d794-4b28-a239-76be70c3fce1", "sighting_of_ref": "indicator--9f71d9c4-6be9-411c-b6f7-957c89019466", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920fbadb-c94e-4ad7-bfd9-10f09ccb9fed", "sighting_of_ref": "indicator--faf8d648-9df1-4b5e-810e-e3a12aebe7d5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffe8d4b-9035-4196-87c9-27804424d11a", "sighting_of_ref": "indicator--62817c4c-c472-4642-acda-49ee456f4590", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b80d6d-b569-4e4d-9915-57c56c4a9a83", "sighting_of_ref": "indicator--a10031d1-81a2-4308-8c38-11b594af5f82", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449f04ac-23ce-47bb-969e-aaeb8a99409f", "sighting_of_ref": "indicator--c442fccf-f5cc-48ec-87f8-59d6d9b18a3c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43f3b02-ead3-4849-8669-a6c674401d35", "sighting_of_ref": "indicator--662fce81-e6de-4e20-973b-0d70c1de8c49", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f152e00-6782-449d-94b4-99fa8e41c156", "sighting_of_ref": "indicator--42fbc33f-e542-45bd-baa0-4559a330fa2f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2caaa56-199e-4a17-90ca-9e5b8c99f2f5", "sighting_of_ref": "indicator--42fbc33f-e542-45bd-baa0-4559a330fa2f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26973f7-c3e2-4962-8491-1f0818af9a69", "sighting_of_ref": "indicator--42fbc33f-e542-45bd-baa0-4559a330fa2f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c55bf3f-12a2-44a4-8eb8-164b7fed1dcc", "sighting_of_ref": "indicator--b9b9b234-822e-43b9-a9f1-f1bbbce27418", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb765cd-181d-417f-aa20-db7e6d71035f", "sighting_of_ref": "indicator--17d71872-8cb7-41d0-a1d5-f583762ad812", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91957cc5-e8ea-4e00-abd2-d1e039eec3a8", "sighting_of_ref": "indicator--3f116f92-979b-4a9a-8aac-1a1214d6b676", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d6734d-261b-423f-a628-effd1c1992a1", "sighting_of_ref": "indicator--336e5825-d207-429e-86b8-91c476e51637", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c3c25f-312d-49d9-a4e1-7a157e6b4a22", "sighting_of_ref": "indicator--eb6d3098-3466-49a8-9ee8-0be8bbad232f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d94546-0ded-4424-8f41-96468814c731", "sighting_of_ref": "indicator--6a759968-aa08-40c8-86b1-76f5411a0734", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2543a6e0-ab99-4ee9-a1ce-07b734525f57", "sighting_of_ref": "indicator--ea086e6e-43be-43ce-8bd7-b1153fa3a98a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48c8290-73b5-4b5c-b232-e091aa2b96be", "sighting_of_ref": "indicator--164d160f-1cb7-4d7d-8ea5-1dcb181ef97b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c7a7df-9091-494d-b210-d279e1b50c0a", "sighting_of_ref": "indicator--fe2a44ad-0455-4c46-949b-8c28f865c8af", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c9a5cb-11cd-4012-8477-fbc88a57785c", "sighting_of_ref": "indicator--085bc997-63f9-4beb-ac7e-7986c389f95c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a288696b-87cd-4d05-8f66-40b6b75e4ce0", "sighting_of_ref": "indicator--085bc997-63f9-4beb-ac7e-7986c389f95c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2cf67b0-d643-4997-a9a3-4f0c942b7820", "sighting_of_ref": "indicator--9ad87076-2100-4277-863c-79a0996b5f86", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5652b9-6c8b-4fe0-8632-9cfaad36283d", "sighting_of_ref": "indicator--d762b70c-5cba-4326-9d8c-cf84ada61c39", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54bf7960-4c55-4ae6-8727-fcb68ea13528", "sighting_of_ref": "indicator--aa1eed11-e464-429e-9dc9-ef6b4d2d48db", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20a1b23-7bd2-423d-a158-74a2a89e47e4", "sighting_of_ref": "indicator--597e32cf-4ad5-4210-bc65-d7ae4291aca8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78de25a9-d20d-4da8-a1f3-e7f0d25a3ed5", "sighting_of_ref": "indicator--b630d538-4d37-45d1-befa-6b185a411987", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466f9f2f-33b6-4c6d-8a73-0bc4a27e1c97", "sighting_of_ref": "indicator--b43b65ab-6307-4999-85e1-b10f7c63bdab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f86e10-546b-4c1f-bb55-4fe9f6f78b92", "sighting_of_ref": "indicator--b43b65ab-6307-4999-85e1-b10f7c63bdab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7824fc2-9349-4ca6-a2e5-454e81ef9d34", "sighting_of_ref": "indicator--fcff59a4-8ab9-465f-b2f8-98420dcad7e0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9637e85c-3820-4020-82fe-5b91ce705fe8", "sighting_of_ref": "indicator--ba9f0a30-f4d2-4c4b-a995-fe40ea709e1e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f96e92-e378-408b-a51b-72bf0f61ab46", "sighting_of_ref": "indicator--678ce209-69b8-4c94-8854-1b69973f5e52", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc3a4aa-cfaa-4a0c-96e7-4966c2b69baa", "sighting_of_ref": "indicator--42821b6f-9d6e-48c4-85d1-6eae95f4eeac", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3f26f0-d31b-41e1-a1c2-211ea014654f", "sighting_of_ref": "indicator--ea535ea2-0db4-432e-9656-6b96d6fcb6bd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d012a08d-a904-44cd-b78b-7742858dacdd", "sighting_of_ref": "indicator--ddd0334e-0284-42f1-ab6d-adc0d0b5dd2e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f732ede-0eb1-4162-be3f-7ada14e674d0", "sighting_of_ref": "indicator--b3dbb77d-cf97-4501-aaac-7a487ef919df", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a3013f-a3d0-462e-980d-247f79eac2fa", "sighting_of_ref": "indicator--7bed3fb7-04b3-4f37-afe7-43bb706693ff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b318f4-fef9-4020-b8b4-fc2e774944af", "sighting_of_ref": "indicator--7bed3fb7-04b3-4f37-afe7-43bb706693ff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24b538d-f37b-41e1-bcbc-b166c4a793a4", "sighting_of_ref": "indicator--bb749e64-5c12-4263-8d56-62c8874c8c74", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c523cc-b4a0-4d6e-9a7a-646f1a77985e", "sighting_of_ref": "indicator--26d56aff-4fca-4126-8aff-316484786193", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef0edef-c7d7-48fe-9ea3-5933eb61361e", "sighting_of_ref": "indicator--83410ce8-6807-4589-942e-49e0d4134fba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3429277b-c9e5-4a26-8725-76a9311cc7c7", "sighting_of_ref": "indicator--157f7605-701d-486b-af51-d6ae0993156c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53704757-909d-4f08-9af0-beb9b4afb365", "sighting_of_ref": "indicator--4cf8e3da-658f-4dd7-8b3e-98c16250a374", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc655348-cec6-42e6-8ca5-bf70258140c3", "sighting_of_ref": "indicator--dab434a8-dddb-4879-9c7b-04d857d5d310", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1480de6a-05a4-4af3-b11a-b46ed65d0e16", "sighting_of_ref": "indicator--8d424986-1b07-4aec-a2f2-e8c0da1ba845", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a5e576-4705-46c9-a1d4-d84307babfb0", "sighting_of_ref": "indicator--7c4ba395-b0cb-46d6-a3eb-e834d5df4735", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0a01fb-ac9c-4c43-a894-273aff122789", "sighting_of_ref": "indicator--40e283e2-fa35-4da0-b501-df98602659cb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df213120-df8e-41bc-a792-76c7bbe5b55f", "sighting_of_ref": "indicator--3c68759d-6c48-493b-ade3-d8d02e4aa401", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b3bdc5-4762-4465-bc50-cd4c914ec539", "sighting_of_ref": "indicator--ad98544e-19a3-4e38-8fb2-e92942a9336f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10983e75-9e50-4722-beac-9ce6785a9bfe", "sighting_of_ref": "indicator--12271403-fe6a-49e3-a25f-7e908c30b923", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931bbfce-0df9-4cb1-9ea6-5fbaf5d35201", "sighting_of_ref": "indicator--181377a4-34f3-4c51-80d6-c0584cab6d95", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc4d279-9e07-42f7-9908-debe0b7d1189", "sighting_of_ref": "indicator--ac6e9d0a-d6a9-46da-aae8-11619523846b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e76fa8-cfc3-45eb-8321-55f8f59ba58c", "sighting_of_ref": "indicator--1a1909a5-09ff-42ec-bbc8-e9187a0a11c0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576bc44f-93c7-41a9-8a17-07c5618525df", "sighting_of_ref": "indicator--10873e3e-3728-47e7-8818-4e7caf553462", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968cd6d4-3a46-4f4f-a319-0fb3efaa3260", "sighting_of_ref": "indicator--10873e3e-3728-47e7-8818-4e7caf553462", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847ffab7-ef09-4e48-81af-94ffc0e13c7f", "sighting_of_ref": "indicator--9374f23f-6e26-4f5a-9f75-5fb62275e36c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf870ec-860d-4d5f-a76b-762d27d5f823", "sighting_of_ref": "indicator--24283bc0-d1ed-4632-8a26-cb9826ff9f93", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d695c8-4546-4e2b-a28c-f3f8fc8abbdf", "sighting_of_ref": "indicator--c7bf1198-b89e-4183-8d82-dee1e30439cd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9926ea-a7c7-4271-b4d6-feee775724ff", "sighting_of_ref": "indicator--5a749384-05d0-43e0-b68b-a27d0225483a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22a7d71-f8bb-4421-ac65-5807787d6749", "sighting_of_ref": "indicator--c1bd5aee-0931-4b1f-80cc-ffdfa4992a0f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c28da5-d875-42a6-b519-c171182eceb0", "sighting_of_ref": "indicator--0e24d6ce-38e2-40b0-b58a-e604ca5a226d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7062f137-7bfc-4ae5-8975-dff9e071cd51", "sighting_of_ref": "indicator--14092227-aa51-4ac8-a893-89115076879b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9274faa-2cc1-4729-9e6f-7edcec6be1eb", "sighting_of_ref": "indicator--3ae705e8-9c23-4910-8df8-312dba7e638b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6305fc39-2e41-4d3a-8d33-f138a62295ea", "sighting_of_ref": "indicator--62b70f9e-3b30-4944-90fb-f066935a715e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24aec8d0-6295-4410-8a58-60af954d69ad", "sighting_of_ref": "indicator--d791805e-9cfe-4e02-9019-e8cb750de8f3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2566c8-a498-42e0-8f4e-ede652324093", "sighting_of_ref": "indicator--731a9997-62ae-4e03-9268-ba708d61a86f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107acdc2-68c2-41a4-b9f2-46c899775b29", "sighting_of_ref": "indicator--731a9997-62ae-4e03-9268-ba708d61a86f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bc82e9-4dff-44cb-b1df-7fe168f76824", "sighting_of_ref": "indicator--50aed1cc-86db-4946-8717-c97b39971921", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177b8e4f-2100-4378-912c-93e04b416a11", "sighting_of_ref": "indicator--30c767ea-5434-4564-8643-15cfd43194d5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528f437b-5a38-44ef-b596-bc0074bab0e7", "sighting_of_ref": "indicator--f4d3c7ad-a193-432d-826d-0ac060c0bcb7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c15185a-68f1-4dd8-8ecc-c7fe505d472c", "sighting_of_ref": "indicator--f04f8872-29e8-45ec-9bb7-9fdd1e085e0b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73dfbbd9-8d63-4b1e-845d-64a412a1ba73", "sighting_of_ref": "indicator--e0c4358f-5ccc-436c-9d9f-8953b5a2790d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0cff549-54ed-4522-9b65-3b085bf91556", "sighting_of_ref": "indicator--3293fda8-2085-4946-8846-49896c5e6edd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29e9766-e82e-49df-975c-021d0ef13704", "sighting_of_ref": "indicator--99a30fd7-cf9a-4d4b-80b4-26cdf9c541a9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc97747c-9cb7-4d53-9501-bbeeae579d43", "sighting_of_ref": "indicator--2c2c9b9d-a1e2-4a6f-b160-b1ac915b3ba6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60301c75-5ce0-4ec7-b163-a5eb49ac9f96", "sighting_of_ref": "indicator--3b29f0e1-aaec-436a-8425-4ef0dab64ec0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4061b77b-70ca-4323-a74c-880f0d56c671", "sighting_of_ref": "indicator--89798ee0-5512-4316-9ccf-2aaae8a12dae", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb85255-af41-4be3-8ee7-300ad8344a87", "sighting_of_ref": "indicator--cb45f74d-ed5f-4a0c-9cbc-ffa60691f716", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ff861a-f664-42e0-89b2-6b3261811207", "sighting_of_ref": "indicator--cb45f74d-ed5f-4a0c-9cbc-ffa60691f716", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe37538-26b2-41be-8597-add5a6cabc6f", "sighting_of_ref": "indicator--e5dd2bf0-cebc-4551-b63e-bc819a7fda89", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52887fa3-e739-4976-b74a-f2b292e8ec1d", "sighting_of_ref": "indicator--e5dd2bf0-cebc-4551-b63e-bc819a7fda89", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7771d8f8-d7f0-481a-8fd7-22fe5b47a979", "sighting_of_ref": "indicator--a9bf3cfd-237c-4df0-8188-c67074df0735", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3594d89-83a7-4697-8399-938076678256", "sighting_of_ref": "indicator--7ae7bbee-1d15-467d-95eb-3e5dc4e40f6c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5027b522-da4d-468b-93e8-4231a7eb2ef3", "sighting_of_ref": "indicator--69483b77-d85f-4ead-95d8-bc1b6196b2eb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3d4c21-9f92-405b-8e4f-530e7dabbe4c", "sighting_of_ref": "indicator--689da808-d490-4a90-8263-62810f52ac33", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5446734-9073-4706-9572-ee401684f2e9", "sighting_of_ref": "indicator--689da808-d490-4a90-8263-62810f52ac33", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3277c31c-1070-4c4a-9885-be76a73e5c70", "sighting_of_ref": "indicator--021befe9-379a-433f-949a-10be12172282", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6288cf0b-1c56-4628-a457-d473ff9ad305", "sighting_of_ref": "indicator--b5d236a0-a290-40a2-9ed3-7f51742d33a1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e4dff2-825a-4d45-8e6d-5f738c569a72", "sighting_of_ref": "indicator--58a09542-28dd-4ec3-a210-dc680b5c2790", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac66a51b-4596-4ee9-aafc-ff6b1bbdc896", "sighting_of_ref": "indicator--58a09542-28dd-4ec3-a210-dc680b5c2790", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78cba52-b397-4c83-a744-f2f4de37c48e", "sighting_of_ref": "indicator--b6ffaab8-f1db-4785-8dfb-d87689d5d1e4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9c0978-83dd-4248-90fd-98cdbfee7545", "sighting_of_ref": "indicator--ac3f9351-69f4-4a1c-a9e1-e4d9c5c20345", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4096bebd-d903-4715-ac24-28737f59f473", "sighting_of_ref": "indicator--4d526c9d-f8f1-41e3-b026-86fa44520286", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55b14a3-9013-46a2-bd4f-efc14adf6736", "sighting_of_ref": "indicator--2b6d6f73-ce32-44af-a594-8b655e367373", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748e465e-7cd7-4bdd-974c-e98bb63db6d7", "sighting_of_ref": "indicator--a9014538-8c58-4863-9886-143f138ad3d9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd41dcaa-91fa-4129-88c9-432ddfdd4e59", "sighting_of_ref": "indicator--78ff067d-54fa-41d9-9779-ef9c484ce5f1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01fb04a2-7a0e-4aaa-929b-d874042bf13e", "sighting_of_ref": "indicator--c5f98af1-0049-49c8-88f1-f549f92b0903", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14f9255-6720-4aba-881b-c488fe20a264", "sighting_of_ref": "indicator--c5f98af1-0049-49c8-88f1-f549f92b0903", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a697f51c-3263-4192-a3d8-34d363d80d57", "sighting_of_ref": "indicator--630d1a78-3cb2-4d51-8681-07d61280781c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f66adb4-9104-4cf7-82a5-89a287560c3b", "sighting_of_ref": "indicator--17f12286-05f2-4b77-80a7-a2bb03b684ba", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b85998-5c71-4d2a-868f-8bdc29fc0d2e", "sighting_of_ref": "indicator--68f81d12-73fc-4f83-9304-771a5474d03d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75dfaf33-8a0e-4bb3-b89d-519e5481ba4a", "sighting_of_ref": "indicator--4c790547-fa99-44b0-8ed3-af5a742be7f4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c1d83b-fc4b-4185-a722-8079ccaa4cb8", "sighting_of_ref": "indicator--446a677c-8b51-4eb5-8747-bcf1fbd5b48e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f644a19f-422c-4820-abdc-9337550b1c1e", "sighting_of_ref": "indicator--446a677c-8b51-4eb5-8747-bcf1fbd5b48e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f86d9c-7655-4a84-ad31-9685c43967dc", "sighting_of_ref": "indicator--446a677c-8b51-4eb5-8747-bcf1fbd5b48e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a77ef1-ffcf-4fd1-8ee8-5449a08a4053", "sighting_of_ref": "indicator--98eb5ce8-9802-4a57-a2bb-542dc5910beb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1da4a57-61a0-4569-b945-211d355fec51", "sighting_of_ref": "indicator--63b22d64-7818-4afb-8b8b-6045b9a2cc8b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0f40a8-a9fe-4805-84f1-f7de6b87dc5c", "sighting_of_ref": "indicator--882e05ec-0cb4-4590-afe1-edf505698ac1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a619235-0d64-40ef-8a46-b6470e2ee546", "sighting_of_ref": "indicator--f4f6ce5d-e070-4bc9-9b1e-0ecb444548b8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f3cb43-60b5-4955-ac2f-4973282e9551", "sighting_of_ref": "indicator--d867f215-50f1-481e-9737-ce4932234615", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc4b1d5-f519-4e42-8b93-1481f6fc10ae", "sighting_of_ref": "indicator--3069465a-9d30-45d9-8fb4-62309215fc2f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc8be93-735f-4920-9942-32b0c2a0279f", "sighting_of_ref": "indicator--910d8bec-aa81-4ed0-8b8e-c6f5eb954f77", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94ff4c6-49ae-4466-a406-85bbe4820fd8", "sighting_of_ref": "indicator--910d8bec-aa81-4ed0-8b8e-c6f5eb954f77", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4d3be0-2f6e-4ced-95a4-c6672e2b683b", "sighting_of_ref": "indicator--b6002441-b6c9-44a3-9bd3-b0c71c5a7cfa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b1f534-1da8-440d-b6ad-4c889bcc0d6e", "sighting_of_ref": "indicator--8e18cb35-10cc-43bb-be7c-49d151746c69", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c92d10b-e5a3-4c1f-ae23-f135271a3c03", "sighting_of_ref": "indicator--d36b3d85-5711-4e2c-8385-68b7509915b9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3a85d1-af15-443a-bef0-1b3c86feb5d1", "sighting_of_ref": "indicator--8b7acf46-abdd-41ef-b6a4-3792aac2f867", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46513c2f-84b4-41b8-bfbb-bca3e0c3dd65", "sighting_of_ref": "indicator--fc53d215-8809-48e5-9a59-2e0b9fd79dbb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e91a86-2e1b-4b58-8f82-95856ea215a1", "sighting_of_ref": "indicator--ca85852a-e268-48e8-ba5b-0b19946c390b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffedaf88-1c1a-43e5-bb77-35d0b6ac4701", "sighting_of_ref": "indicator--ca85852a-e268-48e8-ba5b-0b19946c390b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13478ef8-6938-4280-ac11-b8a35fe9fcfa", "sighting_of_ref": "indicator--1537c816-c7e6-4e05-ae5d-24519285d99e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e14885-f0d3-4a0b-8fda-cd9fc01deb35", "sighting_of_ref": "indicator--43f02abb-721d-4b77-a205-b3a9a5ddf91a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8eba6ae-e83a-42c2-9efb-bd4d7b1fad8f", "sighting_of_ref": "indicator--ef4b43e9-6be9-44cb-b75f-ae66c0b6d443", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bac80a-6e3a-492f-8ed4-333443875c3f", "sighting_of_ref": "indicator--ef4b43e9-6be9-44cb-b75f-ae66c0b6d443", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8208ff03-a80a-427c-a71f-81d4066add95", "sighting_of_ref": "indicator--c95fc73f-04fd-4094-8f85-95136993ae19", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c8e6c8-5332-4a37-9657-f7b3a3c5d548", "sighting_of_ref": "indicator--2558a9e8-5ac9-4250-a37d-5d72605e5b1d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb8f567-46da-40e9-a1d3-ab110a0dce2d", "sighting_of_ref": "indicator--d88642f5-fdd6-4bd6-a34a-52f69dca148d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845571ae-8496-4548-8dea-0975d8719a90", "sighting_of_ref": "indicator--bfaa553c-6acc-42fa-aec2-1bc9fdfa5df1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97970d89-c344-478d-a6f7-3d9e7c83c071", "sighting_of_ref": "indicator--1f2455ba-071a-4120-8f40-c3b323e723f7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4b3267-b825-4705-898f-17a3561569b8", "sighting_of_ref": "indicator--300df458-46c0-49dd-ac3b-48853ca231f2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45800409-96fe-4490-b5cb-9b0de9221f40", "sighting_of_ref": "indicator--15bed7f3-c1e4-409d-b44c-c61784e37217", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffb2797-7d1d-46fd-b2a9-79923e871e46", "sighting_of_ref": "indicator--878c2806-fbf2-48e0-84d9-564e27efa0f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1bc656-999b-4427-b99f-fc701c475297", "sighting_of_ref": "indicator--a8179415-a46d-40ee-b590-344de3cfbd21", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abc7212-8fc1-49b7-8b32-bc240e80293d", "sighting_of_ref": "indicator--b94f6952-1803-4f19-90e9-b69b462430fd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528ffe40-2b52-43d2-99ce-b0f696d9235d", "sighting_of_ref": "indicator--6f64d46e-91cc-47f7-8900-82e7c81ab31b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d621f31a-1fa5-4afa-a437-f23585b5514e", "sighting_of_ref": "indicator--d83746fb-2e2a-4b47-8749-a92e8b48c322", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac093d2-abcd-4bf5-862c-13aaae6dcbb9", "sighting_of_ref": "indicator--4194f96d-e1b8-4f86-b2e1-5dca54a3806d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6a7ca1-0cd1-4193-9047-077cdb195319", "sighting_of_ref": "indicator--6ed01a9b-cefb-46bc-a3df-b5f3ee22daa6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8504fc-b2fa-4a3d-992e-8ba23118d3f1", "sighting_of_ref": "indicator--f91971e9-aefe-41e5-a3dc-bc88adee7f38", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fd5553-b89a-4a1e-865c-d80cd39a2b77", "sighting_of_ref": "indicator--705fbd85-7774-4e17-9ff4-6596b5fa142c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4e1727-c73b-4aec-b153-f3d5a3bcee96", "sighting_of_ref": "indicator--131fe4b4-7ae2-4239-af54-d87ef5b6ccac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db9bc76-7c9d-4b8e-8e30-5e2d4e168130", "sighting_of_ref": "indicator--1a9bb556-cee2-4993-9368-ed0fc568f481", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb10a15-75dc-4c94-906c-bee9fc255ff1", "sighting_of_ref": "indicator--10e94e89-c25b-4edd-b2b0-fa3159be97f9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4162d2a-9258-42d4-99dd-5167c1b4e871", "sighting_of_ref": "indicator--10e94e89-c25b-4edd-b2b0-fa3159be97f9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fb43fa-a872-4679-9572-12d06c8c88c0", "sighting_of_ref": "indicator--f1831e73-1395-4def-ad7a-1fc3337ca403", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a0b9e6-b0cf-4a55-8901-d5e09fc196b5", "sighting_of_ref": "indicator--7b549ce3-15a5-46d9-8839-3a0aeec97de1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2bf5892-bedf-46f0-81ee-474355a21b85", "sighting_of_ref": "indicator--70f4c5eb-3938-412c-ab57-1c4222871f75", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62106911-f720-4fd6-b658-f49be9f5289c", "sighting_of_ref": "indicator--93862fee-0929-4e4c-84bd-b773a8426869", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe83433b-8279-4aea-b5c1-485803128db4", "sighting_of_ref": "indicator--bdca04fa-a706-4308-a10e-05be3efdf6a4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8b30bb-6ad5-44d8-ab24-bd4d43112878", "sighting_of_ref": "indicator--bdca04fa-a706-4308-a10e-05be3efdf6a4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd78d510-e615-44f4-aa18-e36a2ad97589", "sighting_of_ref": "indicator--9088445f-5877-4e70-bfbf-f4b799aefe2b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb57c03e-a5f4-4a61-837a-e8c336f95aa2", "sighting_of_ref": "indicator--7c787084-9446-4555-9fd0-3688c550d00a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac29ab8-125a-4dbe-8650-0f1aae356ba5", "sighting_of_ref": "indicator--bf0b7920-5ea7-4f84-a0f6-6c43acba66d4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f86518-b51b-41c3-920b-c68210debac9", "sighting_of_ref": "indicator--a7721f77-5cb2-4fe5-a9b8-c06d887c5629", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844129cf-0174-43ef-a2ba-9a5603ef8816", "sighting_of_ref": "indicator--780e8224-9b8e-4422-b350-8e11947916cc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0643fd4-242f-40b2-956f-7216f9781238", "sighting_of_ref": "indicator--4d889ebe-bcaa-4c57-86dd-51604933c224", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24586e13-b7d0-41af-a092-18ea47241597", "sighting_of_ref": "indicator--a32c67e2-397e-4645-995d-df53d75d9aef", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2178ffd3-6d5a-48be-8255-8e6ab57d634a", "sighting_of_ref": "indicator--e47a8f33-07a2-4c3e-8ca8-bc39e138218a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ecae12-4336-4bd3-82f4-2843cd4ec9a4", "sighting_of_ref": "indicator--5133786e-5420-4312-b8e0-507519c809c3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85572df8-f01b-4352-962a-3c28752e212f", "sighting_of_ref": "indicator--d93981f4-473c-4fad-b21e-ba8bf3ce7147", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3cc1c4a-2d3d-4036-9125-c13e44490af2", "sighting_of_ref": "indicator--c93e1a69-0d71-4745-aa49-b36a41a7eaeb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef047fa9-85a4-4803-8890-24a632631b6d", "sighting_of_ref": "indicator--9a1123d0-f2b2-4e1a-bb44-2cbf799c7b12", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0475f59-1390-4dca-8822-67b145093695", "sighting_of_ref": "indicator--2c056788-640c-4d28-ba55-fcf6e5a8d080", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4e6866-20af-4608-95c9-a7fbbaaf103a", "sighting_of_ref": "indicator--65b67176-8fab-4c88-a36f-961684ac8712", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d144ee3-d841-45ef-969a-690ee5b89c2a", "sighting_of_ref": "indicator--cb9254a2-004f-44cf-b3c3-3409cf5772ab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a541e59b-24d8-45f6-b34a-be0ad26ff0a7", "sighting_of_ref": "indicator--0035319c-86cd-445d-9e9e-dba6dd4a89f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824863c1-4089-478e-91ca-a096c14405fb", "sighting_of_ref": "indicator--143073c0-6d2c-45c8-8795-6681c15a4ac9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75898d85-38bc-49b1-8be9-ea7edeb7fbd0", "sighting_of_ref": "indicator--143073c0-6d2c-45c8-8795-6681c15a4ac9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd35cf3-0b24-48a6-8985-e4b1b01c8b0d", "sighting_of_ref": "indicator--d84f32c4-0a60-4e03-810d-fec20c36fd78", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8e75f0-80a6-4622-955c-4f32890ecad4", "sighting_of_ref": "indicator--d84f32c4-0a60-4e03-810d-fec20c36fd78", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3dc195-b469-4bcb-b328-b63eacdbaf65", "sighting_of_ref": "indicator--b56b33b5-18fe-4c25-9756-d5ad4bc1e48f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9864739-5f37-436c-9d3e-8c10d0aae585", "sighting_of_ref": "indicator--5f8119ad-4dd1-4848-9dcc-4fb2c04c3195", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f5649a-d713-44a2-998c-274871be8c6d", "sighting_of_ref": "indicator--5f8119ad-4dd1-4848-9dcc-4fb2c04c3195", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741fe6cb-2e1d-4f5f-a021-97161ee9f1d8", "sighting_of_ref": "indicator--8b8f0585-dc3c-43ed-b2d7-f1e18ab06025", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb8f642-28c7-457d-9a59-85aecf2a3805", "sighting_of_ref": "indicator--1ea424d8-416a-4b21-8fa7-22c2fe133793", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06380620-acca-45cd-aeb7-36e3cfad6303", "sighting_of_ref": "indicator--b27324ef-084b-4ab3-83fd-4fd0f91316f6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2109154b-b289-484a-904d-18688fb5477f", "sighting_of_ref": "indicator--63464f18-6982-4666-bc33-ad35c889f867", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdd67cb-d4ac-4404-9ff4-b48bf0d569b7", "sighting_of_ref": "indicator--79cc39b7-f8a3-4bc1-ad4a-6e4ec450189a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08766402-f0f6-4a40-8879-bd649a106293", "sighting_of_ref": "indicator--f14c53a9-8c5a-4fb1-98c3-2fe932f02c5e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb97abd-0b56-4dbc-ad9e-1a79e8896e0d", "sighting_of_ref": "indicator--698a9b73-96ad-473d-b4ed-3ec835d53cfb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8dd644-346a-4264-8f9e-adf0a2a4a5ff", "sighting_of_ref": "indicator--698a9b73-96ad-473d-b4ed-3ec835d53cfb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4db39e-e92d-43a5-92e9-89ca39dc1fba", "sighting_of_ref": "indicator--698a9b73-96ad-473d-b4ed-3ec835d53cfb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0a03c5-1dc5-4a7f-9ae9-ca035f2b3580", "sighting_of_ref": "indicator--20608cd7-3170-4466-ad93-d2869418039a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5649b37-e277-45c7-9ceb-89e77d6e89c2", "sighting_of_ref": "indicator--f1d8b8b5-7838-4fc2-ac16-f77bee0bfa42", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6015480-1dd5-4dc6-b255-52f5d25c6663", "sighting_of_ref": "indicator--fa1fe695-fa3a-4093-a418-27480dc0c742", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b436672-e764-4770-85c9-99a740ebb95f", "sighting_of_ref": "indicator--6dc6a36c-7cdc-4e39-8035-092f4be03357", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cae54b2-e3e1-4638-857c-fa28e9d219ef", "sighting_of_ref": "indicator--ee56e961-d89a-46cb-9b9d-fe2ddaa1599a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19fdd2e-131f-479c-a1a7-05d2c9f94176", "sighting_of_ref": "indicator--4e12b6f8-7515-4d9d-bdb3-ca8c36b15314", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0e2aae-cdbf-4240-8f8e-dca9f55af700", "sighting_of_ref": "indicator--c8087e9e-7a0d-4afd-92c9-e616ad62e09a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4014f29b-c317-4e93-9413-0fe16b255297", "sighting_of_ref": "indicator--842ad297-34ae-4a08-848f-45acd1399565", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c02c9d-73dc-4109-9c10-58ff5c29e587", "sighting_of_ref": "indicator--747ccde6-e32d-4040-9643-0700b4f3defd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48260455-ae32-440f-8c03-5c80aa1991c7", "sighting_of_ref": "indicator--5f4e6910-875a-47b1-b130-af067cc63b82", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09da4c0-5378-4667-ac20-72b2954daf88", "sighting_of_ref": "indicator--ca292d21-346e-49f4-a1a4-e261a319bf93", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00283a90-90cd-4d6f-8965-0aead9bdd7a3", "sighting_of_ref": "indicator--abadc3d8-c5a0-421e-aaa0-b2903cbf8f40", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ca46f4-3a9d-47a1-91dc-d2521f4db48c", "sighting_of_ref": "indicator--a61f55d3-7fa7-4ef8-bb88-6d566c90ac60", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9311b316-18b3-4954-88b4-48dd650dc490", "sighting_of_ref": "indicator--e73cf6ea-e24d-47ee-80fb-7ee454e7f911", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39077e7-d934-4439-9540-5a7c5c43aaae", "sighting_of_ref": "indicator--e73cf6ea-e24d-47ee-80fb-7ee454e7f911", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d97242-57a6-403c-9305-b9e03d163c76", "sighting_of_ref": "indicator--f7fb533f-1512-4fd8-88a1-9132341ae2e4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45694e1-8dc8-4b68-a38d-80793d810692", "sighting_of_ref": "indicator--5fee1bea-5acd-4d5b-9c80-4945eae81044", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8866b80-fe93-4319-87b2-674b57f6133b", "sighting_of_ref": "indicator--5fee1bea-5acd-4d5b-9c80-4945eae81044", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd656bd1-9651-4c4c-a8c2-aacef08021d3", "sighting_of_ref": "indicator--9684d942-6864-41cc-ad80-c361b9c16301", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d54c67-99d9-4f69-9ac2-e2fa52056ae9", "sighting_of_ref": "indicator--974b6528-8f0b-4b73-ae3d-c0dc1fb7dbde", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c3f942-3a16-48a0-a4e2-30e0875f17fb", "sighting_of_ref": "indicator--5c19ae7f-68a5-46d9-8d7c-b8b644f80d0a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76fad5e9-08ab-4a9b-b414-2b609fa38889", "sighting_of_ref": "indicator--2e77dd0a-df8c-4637-839d-74c55e6b67bc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf88c90c-1ca7-48ec-84f5-63dbd214cb0c", "sighting_of_ref": "indicator--47e9235b-6a5d-42b6-a510-68867d29a14c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8a0447-2637-4930-85a3-73af1e6ef224", "sighting_of_ref": "indicator--9360eb79-50d5-4a9f-a2f4-0e84512d34e9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28606e74-d3c8-4eb8-8030-e9193ec719e0", "sighting_of_ref": "indicator--d6a7d7a5-792e-4b46-b26f-d8fac38f75a5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a4bd12-0640-4bb5-a9d6-8650a9e2b7a5", "sighting_of_ref": "indicator--fc1e496e-a837-416a-89bd-027ace3b1524", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb09b7cd-1bd0-4bff-9b1d-d229a9ab69f6", "sighting_of_ref": "indicator--53a23054-36cc-45ae-83dd-d56fdb4a9139", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75541104-de62-482d-8520-26a90e201b6c", "sighting_of_ref": "indicator--9a375e21-d37b-4bcd-a081-edeafd57f607", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea11b4b5-b8a1-44a6-bdee-15f1197191f3", "sighting_of_ref": "indicator--4f8cf59f-dc95-4b43-a69d-da28c5913f01", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372d9167-b57d-4f1e-ab6c-323e11fdcaf6", "sighting_of_ref": "indicator--d594e940-6c73-4f40-b9d9-1c7f8924fbe3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a4fae2-b4a3-49d5-80f6-1293a7282230", "sighting_of_ref": "indicator--d594e940-6c73-4f40-b9d9-1c7f8924fbe3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de24eabd-aa02-4768-b86f-287a6fbeda24", "sighting_of_ref": "indicator--1bfb7700-3a76-4bae-82e1-f9ceeecc912a", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a5315d-3d24-4714-806f-92fbc99fbaab", "sighting_of_ref": "indicator--6f0fc39c-088a-4572-93ea-895fed9bd369", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7f5af7-c03f-4a87-b0f2-85c2098621d9", "sighting_of_ref": "indicator--d8c52fda-dfc5-401a-8c00-ef65f4b08bc1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1915c796-2902-460e-bbb4-172be2f6e7ee", "sighting_of_ref": "indicator--8acb79f9-3165-4028-9075-327a59de5ebf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627bb8ca-4fab-44d3-9bd7-b72324488518", "sighting_of_ref": "indicator--8acb79f9-3165-4028-9075-327a59de5ebf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e7790e-fb4c-472e-a774-d30331416aaf", "sighting_of_ref": "indicator--9d037a69-2be8-433b-ab4c-b14764697bd4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85a82c6-17dd-46f9-b677-63065ba23cfc", "sighting_of_ref": "indicator--9d037a69-2be8-433b-ab4c-b14764697bd4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa21fc29-0f05-4b70-8776-6c25addd8b02", "sighting_of_ref": "indicator--745ec914-10bd-48c6-a5f1-3bd77a44cc3b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c1f2df-9506-479a-939a-fddf09cb4eb0", "sighting_of_ref": "indicator--745ec914-10bd-48c6-a5f1-3bd77a44cc3b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62d6381-4dfd-4317-be91-3e94a6d1b834", "sighting_of_ref": "indicator--745ec914-10bd-48c6-a5f1-3bd77a44cc3b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbca658-6651-4078-ad7b-8b2d9b8fa909", "sighting_of_ref": "indicator--e1ddb820-74cf-47b3-b777-022166b6d803", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71115e0-212a-4f35-bf36-4ef5b13fa9e0", "sighting_of_ref": "indicator--0f94a342-1503-4ef3-a4cc-5e3c6eb32cb5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbccb35-4051-4406-9276-a9cb4e3b5be4", "sighting_of_ref": "indicator--2384898a-8a05-40a2-aeb5-8c304e6ad590", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0fcba9c-ae36-408b-b9f1-15cf5e07ad3d", "sighting_of_ref": "indicator--4381e8c6-a96d-4016-a1aa-a90c395755c2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd5cd62-2cc2-4e49-863e-2b2fce7e7531", "sighting_of_ref": "indicator--4381e8c6-a96d-4016-a1aa-a90c395755c2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfcc762-a347-465c-8edc-862763ce6e3e", "sighting_of_ref": "indicator--d7162d32-4d97-4ab0-8bad-055f90dfadce", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e480decc-667c-407f-acb9-7ef409937f86", "sighting_of_ref": "indicator--d7162d32-4d97-4ab0-8bad-055f90dfadce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be272e6f-efc9-4dfd-aa4f-422d8810b557", "sighting_of_ref": "indicator--d7162d32-4d97-4ab0-8bad-055f90dfadce", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499f11a3-b3a8-43c7-89e8-7a506fb7e4e1", "sighting_of_ref": "indicator--b68dc044-c5a2-4c55-8e0f-27bbacfedd11", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c20f00-b4e2-40cd-af26-ff337136bd7d", "sighting_of_ref": "indicator--b68dc044-c5a2-4c55-8e0f-27bbacfedd11", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4567405-656a-4a5b-9a75-f09d33791712", "sighting_of_ref": "indicator--c80bfb8f-8fc5-4ce4-9ced-40034ece8d73", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d75009d-210f-4e5f-8b93-064f98cad802", "sighting_of_ref": "indicator--65a53a73-abde-4a0c-933e-6a02d4645f38", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb428dbc-6d6d-43ab-bba8-5cc81e97e60b", "sighting_of_ref": "indicator--e50d0e35-7926-49fa-803e-158b53734d54", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2218491-4b5e-4d97-80bc-c739e0afe667", "sighting_of_ref": "indicator--610566c9-08f5-403d-b86d-c7ce55deddfc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b34f42f-ce23-439c-a40c-18aced49f132", "sighting_of_ref": "indicator--1a189994-1b83-4da1-8a6e-2c96b01a2acf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82985db-7bc9-49f6-9b15-fe9878a9b126", "sighting_of_ref": "indicator--ab17df8b-4d6a-4ece-858d-168392cc149c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab088a2-7c64-49d6-a58e-db18a85f7ce6", "sighting_of_ref": "indicator--9e1f93a4-f03c-40e8-bb5b-1f8f9f673d8e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d33a3f-f4f8-49d1-8412-89e3ee24647e", "sighting_of_ref": "indicator--8f13e152-acac-460d-b11f-f9793fa90e83", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590e4cae-c475-4b89-b677-ad85e55ee930", "sighting_of_ref": "indicator--fdb24613-07f8-4d8d-bd9e-5afb32bea807", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e996327-a24c-4efc-a727-37ea07d6887b", "sighting_of_ref": "indicator--75c4282a-7270-46cf-9bfb-d200486f5c15", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ba3198-0f90-4a46-82fc-51dcbf3dba05", "sighting_of_ref": "indicator--4ad7a5d6-5c1c-499e-a03b-20c0d8e09606", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c038075-7fc2-48ff-9224-181617e6b64f", "sighting_of_ref": "indicator--1d2890bf-29fc-4ce7-b261-395c81be4d0a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a17a178-bb7e-47a8-ba45-fdc99593edfa", "sighting_of_ref": "indicator--c85d7e83-ca83-4c85-9323-6229ad6f7a4a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277eabb1-145e-4a8b-9704-e0372eb8b29a", "sighting_of_ref": "indicator--c85d7e83-ca83-4c85-9323-6229ad6f7a4a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712ee684-0786-43d4-a671-0bfd80e249ad", "sighting_of_ref": "indicator--0d494a23-5c1b-44f6-ad36-68fbe7746855", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75299d4c-e771-42b1-b30e-7ea85da3e8e1", "sighting_of_ref": "indicator--523dbf16-fe2d-4016-b6be-74ed12310586", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8896f4-14d9-4ea2-8dca-a67b2cef5deb", "sighting_of_ref": "indicator--4569b50b-370a-4f04-b3a6-377e5f09aadc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f934152e-0b82-4742-969b-b14e92da9ad2", "sighting_of_ref": "indicator--4569b50b-370a-4f04-b3a6-377e5f09aadc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4cb6b7-f194-4e88-b4f4-323bded25baf", "sighting_of_ref": "indicator--4569b50b-370a-4f04-b3a6-377e5f09aadc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876acfcd-6754-455d-b189-cd7874386334", "sighting_of_ref": "indicator--9780c5b8-71f0-4eda-a3a8-d16b7d0b0cea", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d863dda2-f6dd-466c-bd1f-4cd579d475b7", "sighting_of_ref": "indicator--31aeabb5-0d3f-4dc4-bf5b-f2082f19c214", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d15b908-7102-4006-aa64-af71d9c54874", "sighting_of_ref": "indicator--a42b335b-011b-405c-96b7-cc43c4ed4bfc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7db21c-c2f4-4df4-8d30-bb99be992ad1", "sighting_of_ref": "indicator--a42b335b-011b-405c-96b7-cc43c4ed4bfc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11541c82-8374-4247-bc89-6bcde3d2fb32", "sighting_of_ref": "indicator--a9282d63-c6e7-4efc-8187-35af130e5c0e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c2345a-244e-4601-a2af-ee5183219edf", "sighting_of_ref": "indicator--a9282d63-c6e7-4efc-8187-35af130e5c0e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7099b35c-d0c2-458e-bef5-799c2824a6b6", "sighting_of_ref": "indicator--80ae8e6d-c04c-4611-8fb2-76d08ad3ed1c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b807a6b7-3fcd-4176-81c7-efe20f49181f", "sighting_of_ref": "indicator--80ae8e6d-c04c-4611-8fb2-76d08ad3ed1c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12cb0818-c131-436b-a3e0-53960a2abc42", "sighting_of_ref": "indicator--b4ef33eb-9d92-4580-97a7-98abe1d1bfbb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b54f4ce-bb87-4339-8910-a40ad64b8b54", "sighting_of_ref": "indicator--b4ef33eb-9d92-4580-97a7-98abe1d1bfbb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28545dd4-f7d1-412e-8428-4a4953890d23", "sighting_of_ref": "indicator--b4ef33eb-9d92-4580-97a7-98abe1d1bfbb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3572bbf-7c30-4df7-a04a-88857b8a129d", "sighting_of_ref": "indicator--45092bd0-eb16-4e8a-a62c-fdccc3e4b364", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d325467b-f734-4a98-9b26-0beac04742b4", "sighting_of_ref": "indicator--45092bd0-eb16-4e8a-a62c-fdccc3e4b364", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7d4b31-d191-46c0-8f53-bc4fbfc9798d", "sighting_of_ref": "indicator--6514a0a6-05d2-4bc6-9b7f-34924f153b16", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6efc6a8-21b4-4ed5-8806-0f2a8af560d3", "sighting_of_ref": "indicator--6514a0a6-05d2-4bc6-9b7f-34924f153b16", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdcad77d-217f-4362-a9f0-255c07f10d91", "sighting_of_ref": "indicator--2f2a1341-4791-4f3b-b0d5-75a69d5b1be4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8baa89-f95e-4a89-9899-ea991d3ba2f9", "sighting_of_ref": "indicator--2f2a1341-4791-4f3b-b0d5-75a69d5b1be4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9188d3-e8c4-4812-9ed5-341e0dcdd317", "sighting_of_ref": "indicator--2f2a1341-4791-4f3b-b0d5-75a69d5b1be4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de04904-eecc-4719-a06b-bb5c630108e3", "sighting_of_ref": "indicator--62b5cbac-b925-4ef7-bc18-f4dd8d83b938", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b843ee95-c1fb-4b74-948a-318cc2a011e2", "sighting_of_ref": "indicator--62b5cbac-b925-4ef7-bc18-f4dd8d83b938", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c397544-fc4c-437f-8f3c-0e5dde6c9afd", "sighting_of_ref": "indicator--62b5cbac-b925-4ef7-bc18-f4dd8d83b938", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fdd7fe-62a1-4124-8776-bef75b46b166", "sighting_of_ref": "indicator--5853dd9e-b15c-44a7-be83-d2a738ad3b0d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635e02eb-0663-4fcd-a449-c96efea83065", "sighting_of_ref": "indicator--d02c1988-cd65-43ac-b503-136c7021139f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac4957a-ff72-44da-8678-c03daab8134b", "sighting_of_ref": "indicator--a16ebc34-3f94-44cf-a858-b43ac2aad793", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba433388-84f4-4680-84a2-fca9dea43565", "sighting_of_ref": "indicator--a16ebc34-3f94-44cf-a858-b43ac2aad793", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4083f072-f3fd-4a81-948a-2e6334481970", "sighting_of_ref": "indicator--feb283d2-be5f-4990-806e-aeb199228996", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9fa659-399a-4142-9650-faac2d87078b", "sighting_of_ref": "indicator--feb283d2-be5f-4990-806e-aeb199228996", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46a18c5-acaa-49a6-a833-7093b70767be", "sighting_of_ref": "indicator--feb283d2-be5f-4990-806e-aeb199228996", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df1a6fe-a4e4-422a-a963-644cc4ed9413", "sighting_of_ref": "indicator--dad23014-6e1d-4fee-a2cb-9cf89bafaaa6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8607cc-5ea7-4f4b-9a60-3533b70923dd", "sighting_of_ref": "indicator--78a41fd1-28ae-45be-9539-7eab00fed918", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd69d28-258b-46da-8e6e-364ec8fcdb89", "sighting_of_ref": "indicator--0c7981bc-41c0-4a66-9051-e4f7a4c4a6f6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7143fe4-bcb0-44fe-93d6-27967fae4f8c", "sighting_of_ref": "indicator--4cd48e01-a44b-424d-a7a3-9b39c8ae29ec", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acfe064-eef4-4139-88f1-2a53f407f2ff", "sighting_of_ref": "indicator--dd391249-62ce-4594-bbad-a8211d910270", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0705f4-7efd-46b0-b5bb-7e035afa8d20", "sighting_of_ref": "indicator--f7664b79-81bd-4551-9a65-21274532628d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76909b89-bce1-4dda-9a39-15127ef19a60", "sighting_of_ref": "indicator--7cb639e6-aa5a-432a-8980-1d3c4be6bfcc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a027ef-6def-4d91-a11e-ae0893c90c4b", "sighting_of_ref": "indicator--77b2b456-df40-49b7-b61e-a0d9950796bf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65f8e88-4332-4154-a11a-f2cc9b31efdf", "sighting_of_ref": "indicator--e4297159-0b79-4892-b1d8-72099518165c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e42f1ff-6ab2-43fb-b8ae-df21a47ab071", "sighting_of_ref": "indicator--2ec767da-ce4b-459e-9a5d-e5e87619c936", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb62448-de83-4a3b-bd6d-7dc40571d9e7", "sighting_of_ref": "indicator--99725923-1d7c-4958-94e4-f2a6da9f2a1a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7122ed8-fcd0-4d3b-8228-9b7423727c1c", "sighting_of_ref": "indicator--01f94733-16a4-4fb3-889b-53d9daebed34", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4988f25-bbd2-4e69-baa6-977d2ee8f176", "sighting_of_ref": "indicator--01f94733-16a4-4fb3-889b-53d9daebed34", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ef4f5f-7d23-40ef-81dc-950af7fc2479", "sighting_of_ref": "indicator--1b8b048f-42cf-4416-985e-488e2af19038", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd9d6a9-cebb-4672-868e-ad0387b93bc3", "sighting_of_ref": "indicator--1b8b048f-42cf-4416-985e-488e2af19038", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ee56da-7b2e-4923-a60d-cc46aa345f06", "sighting_of_ref": "indicator--2fe47b66-1dad-44d1-97e7-a3147da08e1c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2741740f-c69c-4484-b9b7-91c46d498b95", "sighting_of_ref": "indicator--781ae891-b588-4f12-84db-a4e2636e674e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859f1e1c-fbf4-4d8e-9747-05c8ce7511ff", "sighting_of_ref": "indicator--7b495cc0-af8b-4677-92e5-4eda08671e2e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1056b373-86c2-4959-a949-c53f5ae542cb", "sighting_of_ref": "indicator--9b3424b5-64ac-4701-af9f-2cac8bfe4e22", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98af60f-6541-46d7-bcbd-7c2d60087fca", "sighting_of_ref": "indicator--79c82cb7-0943-489e-8e11-ab9e8abbe088", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7d2790-8acf-4faf-959b-3d27290c2df2", "sighting_of_ref": "indicator--7a9d07e5-db33-4baa-a784-79548b72e0db", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae05dcf1-fcab-4cbd-ad14-19974f2197b0", "sighting_of_ref": "indicator--a7ea23e2-4a4c-43b7-8cee-e5833ea8af41", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e632873c-8c05-4bd1-af7f-66cf08997503", "sighting_of_ref": "indicator--a7ea23e2-4a4c-43b7-8cee-e5833ea8af41", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49f3c1a-b65f-40c1-8d3f-14a0ea45fd4c", "sighting_of_ref": "indicator--6596f746-520d-4822-9f48-73ee99848c1f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51a2eb5-9a72-4544-8c69-5bf56764d940", "sighting_of_ref": "indicator--0d5d3221-ea1f-402d-af14-ec5ae6c3f49b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e94b99-29ac-4961-8bac-1547a55bea41", "sighting_of_ref": "indicator--9e7561d9-a1a4-4f43-a3f9-6a6733a1ff27", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb10baf-3e1c-4088-937e-15ff69532836", "sighting_of_ref": "indicator--bb588b57-d309-45c8-9840-15c16f58dbb9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51d21b9-9ec6-424d-8a80-81602f516875", "sighting_of_ref": "indicator--bb588b57-d309-45c8-9840-15c16f58dbb9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be929a3-c04a-43da-bb62-744c202e18f3", "sighting_of_ref": "indicator--860dfc23-c787-402e-b7ed-4c44d275edb1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d3a8d5-fdf1-4960-a56f-12bc612f8e1f", "sighting_of_ref": "indicator--5a28d577-8373-4133-9ff4-80d00f1439e2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b0f11e-3b67-44db-b9f6-4a8702f75bf3", "sighting_of_ref": "indicator--5aaf83ee-8588-4c1d-9f08-7877ccedd145", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3fc5de-51f4-4496-ae6b-48af71c8f1b8", "sighting_of_ref": "indicator--f4e7405f-eb8d-419e-ab35-fd7fbee85d64", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cdc7dd4-d708-4b19-8bc8-70f631edb067", "sighting_of_ref": "indicator--6f22d969-1256-4036-b6f2-160e988c2e90", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4aea2c-e791-4cbb-9742-36ba58bd1f2c", "sighting_of_ref": "indicator--a2e80acd-8e62-4695-b6fe-c8e90a1a5992", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055d8de4-2ccd-464d-b0f6-e4fb23b021ea", "sighting_of_ref": "indicator--a2e80acd-8e62-4695-b6fe-c8e90a1a5992", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba981035-f932-472e-968b-a06fe80dcf3b", "sighting_of_ref": "indicator--ff26ef66-5647-4308-abb9-614cceb7b961", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361ec0e2-641b-404e-9b9d-ac53abe445f0", "sighting_of_ref": "indicator--8018b9fb-6abd-49a2-a217-16c9ffd2590e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6481d6bf-da4a-4365-8d83-94b3bed6c15e", "sighting_of_ref": "indicator--8018b9fb-6abd-49a2-a217-16c9ffd2590e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38369f63-630c-4e3c-a6d2-dfe707f15d8d", "sighting_of_ref": "indicator--8018b9fb-6abd-49a2-a217-16c9ffd2590e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd65f95-028d-4c38-978b-955382a440da", "sighting_of_ref": "indicator--b23d790f-d311-4a88-9651-5014a1b3a620", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd112def-7fc9-4682-9fbf-aec78b6a8e80", "sighting_of_ref": "indicator--b23d790f-d311-4a88-9651-5014a1b3a620", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde6e9ac-6cab-432a-91fd-630271ff6144", "sighting_of_ref": "indicator--ddfa50a5-d94a-4fce-ac58-8529017c237e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5183a701-0a2f-4cc7-83c5-c878adcb2b18", "sighting_of_ref": "indicator--ddfa50a5-d94a-4fce-ac58-8529017c237e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f274d24-61da-45be-93cf-d50f121deff9", "sighting_of_ref": "indicator--ddfa50a5-d94a-4fce-ac58-8529017c237e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697eb8db-97bd-44d5-8574-41371bb2564b", "sighting_of_ref": "indicator--3cb89299-31a0-40d6-a57d-ba3739fe28d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323edb03-7ad9-4854-9780-afc377cccbf2", "sighting_of_ref": "indicator--0465eee8-0b70-4339-b3c5-19c084a5a1a7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a64f8f8-0b78-454e-b377-13e2fcb4881d", "sighting_of_ref": "indicator--0465eee8-0b70-4339-b3c5-19c084a5a1a7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cba7ba3-8332-4508-94f7-2c0e2e6e3fe7", "sighting_of_ref": "indicator--0465eee8-0b70-4339-b3c5-19c084a5a1a7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08be506-fc0c-4c2c-8def-8fcc4be9c6fc", "sighting_of_ref": "indicator--22cb31c6-a651-426d-9dc4-41e8921b2944", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302b2f58-2dbd-497d-b1f5-6285c489a581", "sighting_of_ref": "indicator--22cb31c6-a651-426d-9dc4-41e8921b2944", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53dc5f03-92cd-47f1-8b8f-26d9b1fd2909", "sighting_of_ref": "indicator--22cb31c6-a651-426d-9dc4-41e8921b2944", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b869f67-7a11-4447-bd1a-fe8c40e7403f", "sighting_of_ref": "indicator--0ad97034-68bd-49de-806c-59ea85e43f44", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5bdd6a-0493-47dc-81e0-18305c6467fe", "sighting_of_ref": "indicator--b481d728-86b1-4359-8e78-83da57e86f6a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c2646f-59f3-4de2-b525-15a0bd8623bc", "sighting_of_ref": "indicator--b481d728-86b1-4359-8e78-83da57e86f6a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329b1dfe-cec6-46ab-b370-fa451f6ccc18", "sighting_of_ref": "indicator--987a86db-09e7-411e-954d-e6d6d7744e2c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3878186c-c37d-495f-b14f-b86fd55a1c71", "sighting_of_ref": "indicator--6419f012-19fe-46f8-911f-6a01b620567b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08b990f-afb2-4b03-a793-92923da3907d", "sighting_of_ref": "indicator--6419f012-19fe-46f8-911f-6a01b620567b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a711fe6c-c134-4ce1-9ec9-bb0ee3f1f80a", "sighting_of_ref": "indicator--6419f012-19fe-46f8-911f-6a01b620567b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffecc36-7d1d-4cd1-9dbe-c15dab18c519", "sighting_of_ref": "indicator--162f1b66-aed2-41f1-8e3f-db44f45655a4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3dc5aa-34af-46e6-ae4e-f013d74ec567", "sighting_of_ref": "indicator--162f1b66-aed2-41f1-8e3f-db44f45655a4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b96780-be6b-4423-985d-520ce1b5e417", "sighting_of_ref": "indicator--162f1b66-aed2-41f1-8e3f-db44f45655a4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584c188b-be68-4100-9524-34cdc53ed6ee", "sighting_of_ref": "indicator--1e9d3bef-d0b4-4633-a2af-7ce58b9af664", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef17a93-3ecd-47e7-b3fd-a8f9074f0103", "sighting_of_ref": "indicator--1e9d3bef-d0b4-4633-a2af-7ce58b9af664", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35aad1f4-c56b-417a-bc70-18aeb42ce9e3", "sighting_of_ref": "indicator--a64c5d96-9cc0-4268-be20-294410b07928", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f710d0-ffef-493c-8c55-cb2ee17693a1", "sighting_of_ref": "indicator--a64c5d96-9cc0-4268-be20-294410b07928", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ee98f3-1a37-4f73-8452-3da5410b9f7b", "sighting_of_ref": "indicator--a64c5d96-9cc0-4268-be20-294410b07928", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b76658-26a5-43fd-8349-ec0610e14dbe", "sighting_of_ref": "indicator--161bf751-8749-49c8-9af2-47a66ca02a95", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a3e20e-33b4-4a39-8c34-3697a6bd8798", "sighting_of_ref": "indicator--1205c842-5d3c-44b3-a8e7-e81a76f503d7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecfb2dc-dbb3-41df-97f1-8088af7d11e1", "sighting_of_ref": "indicator--1205c842-5d3c-44b3-a8e7-e81a76f503d7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86978ecc-53a7-42de-9efc-7b88872257ab", "sighting_of_ref": "indicator--1205c842-5d3c-44b3-a8e7-e81a76f503d7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebabcc8b-0d91-4abd-acb9-21f4264eae7b", "sighting_of_ref": "indicator--5bcf5169-2a45-4002-977c-28f063a121d9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad19b5e-c69e-408d-9ef9-60800ba9d43f", "sighting_of_ref": "indicator--5bcf5169-2a45-4002-977c-28f063a121d9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c5476e-35a0-48f2-851f-7b22432939b7", "sighting_of_ref": "indicator--e8040afe-00cd-40a4-9d32-70fa3063861a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89663400-4809-4678-8dfd-39f86793b416", "sighting_of_ref": "indicator--f9a0b332-99ef-4501-a7e5-d55753f0ac4d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c16021-4314-4861-ba07-c7c8ed0c6e36", "sighting_of_ref": "indicator--f9a0b332-99ef-4501-a7e5-d55753f0ac4d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86157d39-873c-45a3-b167-7749561c96bf", "sighting_of_ref": "indicator--0e86bf4e-b812-4d35-bd4f-51ac527bcf05", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2b1641-941b-40d7-9662-4393dbf33f6f", "sighting_of_ref": "indicator--0e86bf4e-b812-4d35-bd4f-51ac527bcf05", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4f266a-c549-4fea-be64-991fc632486b", "sighting_of_ref": "indicator--b6d6c75d-4b01-4b1d-95ee-415171b48ffe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a3adf3-fa02-4f72-84fb-0e9e1153a506", "sighting_of_ref": "indicator--0382f27d-32af-4257-b51f-75f04892cbfd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7b8af6-bcce-472c-96f0-30145b399445", "sighting_of_ref": "indicator--0382f27d-32af-4257-b51f-75f04892cbfd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ee3104-31bb-4b0c-bf25-141a097aacb5", "sighting_of_ref": "indicator--37056875-1491-4dce-bce1-232960e6d5f2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75187fe-1c5a-4e43-9249-b9447b8b3857", "sighting_of_ref": "indicator--b75571a0-9070-4aaf-9139-246efd514ad6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd50c165-fc70-4e82-a3fe-3c477a0711a4", "sighting_of_ref": "indicator--0de63126-a4e1-4c59-845c-3fce0c75e621", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c58295-2d3f-408a-8a92-252d59402cd9", "sighting_of_ref": "indicator--da276ce5-339f-4d36-b843-d730319b7796", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5837bd62-3259-458f-af89-33e56563e992", "sighting_of_ref": "indicator--da276ce5-339f-4d36-b843-d730319b7796", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65135c7-1073-4b46-8b36-bcdc96c34fee", "sighting_of_ref": "indicator--36fd7b72-3bcd-416f-8509-46270d17a866", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0094deea-9401-46ab-b1e3-853cfebb6257", "sighting_of_ref": "indicator--90e670d4-1802-4a84-a8f0-d8e3f4e6a090", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1594aab-6a13-470b-a54b-7a551c8471e6", "sighting_of_ref": "indicator--aaca2824-e414-45c1-9752-d98c23bc72eb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e20f3e-828f-4684-842d-b3a802b45477", "sighting_of_ref": "indicator--aaca2824-e414-45c1-9752-d98c23bc72eb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8328bcc3-b861-40f7-a08a-be762387d7c9", "sighting_of_ref": "indicator--1fd0aac1-62e3-4114-875b-8cea8dab589d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405dbc84-cc75-4e9e-8940-51ba6bf94a29", "sighting_of_ref": "indicator--1fd0aac1-62e3-4114-875b-8cea8dab589d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24c6418-d3d7-44fd-9ebe-7c4143cbeeb1", "sighting_of_ref": "indicator--ca9f83f6-9bc9-47f4-b84d-62fca48716e8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8e74d9-af35-439a-9562-f7964133d8ad", "sighting_of_ref": "indicator--ca9f83f6-9bc9-47f4-b84d-62fca48716e8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7802cc71-8328-4e4d-80d3-2edfd1fa2efa", "sighting_of_ref": "indicator--5af4030f-4b0d-47da-9ad5-fe92d1fe93c5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0774a24-35c2-4ba9-b30c-dd1693eb9cff", "sighting_of_ref": "indicator--5af4030f-4b0d-47da-9ad5-fe92d1fe93c5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0b323e-b636-4f8e-94aa-35ed1a752c3d", "sighting_of_ref": "indicator--68b93c2e-6323-43d4-8756-1d498878cca5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0dd2e2-2180-4b63-8f72-99f5c8384d22", "sighting_of_ref": "indicator--fd32997a-ae5a-41f0-8dd4-057968e1a3f0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e9177c-eaa6-4dcc-9ebd-97ee4b8abc32", "sighting_of_ref": "indicator--fd32997a-ae5a-41f0-8dd4-057968e1a3f0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b2413b-92bb-4f83-8819-421113022ac6", "sighting_of_ref": "indicator--8fbd3c94-d853-414f-beb1-dd126ec20800", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4722b9f9-a32a-403b-b427-d3c6a5a5f3a0", "sighting_of_ref": "indicator--8fbd3c94-d853-414f-beb1-dd126ec20800", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196d5b05-de2f-4c61-a7ba-2e8e732522ce", "sighting_of_ref": "indicator--e6b152db-0c38-400d-88c0-fc98fa4a0957", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7650ec3f-58d1-4384-8e76-1f4bfa6fa2ba", "sighting_of_ref": "indicator--e6b152db-0c38-400d-88c0-fc98fa4a0957", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d491418d-34d6-4360-a59c-901cdda0a13e", "sighting_of_ref": "indicator--4e79c559-d374-4d40-b984-bd98406a41b5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a2522d-dadc-4570-9bf5-8c4a7a0bb6c5", "sighting_of_ref": "indicator--4e79c559-d374-4d40-b984-bd98406a41b5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ae7b74-3e41-46bb-9c19-e9278330a01d", "sighting_of_ref": "indicator--5da48261-3502-47d1-8658-206ce34570e9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5510efba-17bf-49b3-83ab-156f620d87e4", "sighting_of_ref": "indicator--5da48261-3502-47d1-8658-206ce34570e9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c62ad41-8acc-4897-affa-fadeb7d0a891", "sighting_of_ref": "indicator--95418597-a4b4-4dbe-81b6-9ebe09642f28", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8eb3b5-2e4a-48dc-9648-1ce5a51dc8f4", "sighting_of_ref": "indicator--d05bef73-53f6-4712-bc48-a81e27d912da", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19be8fb-61b9-4741-88e6-07b2e39e0195", "sighting_of_ref": "indicator--c805787a-f059-4ce1-9f18-0f95a30de5d6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33531050-4438-415a-b22f-0374f5e1e8e4", "sighting_of_ref": "indicator--97bfcd17-3bfd-4cb0-8469-fc04fb642f27", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262e4129-1035-4d28-95f4-62af0af639bd", "sighting_of_ref": "indicator--2531a7c5-9279-4b27-90c8-4748c1588543", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd91e22-3901-45d0-8d0f-20c56c3f5457", "sighting_of_ref": "indicator--2531a7c5-9279-4b27-90c8-4748c1588543", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13b8a2c-bb07-4db5-9240-ffefdb60d7ef", "sighting_of_ref": "indicator--2531a7c5-9279-4b27-90c8-4748c1588543", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f085647a-de4a-4a63-a5f6-3cc7615b6376", "sighting_of_ref": "indicator--c462c56f-1250-4b66-a266-176706483b2d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65428598-f8e0-46e6-92f6-3bfcbc4e10be", "sighting_of_ref": "indicator--ce205c5c-44c3-4b3d-81fb-560a35b0a05a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d6e9b5-b65f-460d-b4d9-fe7b5bbe9d6b", "sighting_of_ref": "indicator--0b4b9131-0703-4a43-bc11-7c42ef968e46", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e8c36b-862d-425d-8531-9eb1faafa6d0", "sighting_of_ref": "indicator--0b4b9131-0703-4a43-bc11-7c42ef968e46", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0fc8b15-325c-48d8-a9ca-f51379f7978b", "sighting_of_ref": "indicator--d36367c4-ad01-4777-ab24-ef3eee12610f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f60fbf4-d9c6-4f93-b118-02a71e7d763d", "sighting_of_ref": "indicator--8b6438fd-c768-4fb5-b7fe-831ea265b9c2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d0b6e2-1863-402b-874c-068075f0b751", "sighting_of_ref": "indicator--e5dae34f-8b38-403f-977b-c73c752f8137", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34f4e9a-35d8-4706-bac9-fa0ac7ac9bff", "sighting_of_ref": "indicator--09bd2fcb-a913-43ea-a1e2-6ee5d80257aa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be68299-4672-4f44-b301-dd7e87dfcfd4", "sighting_of_ref": "indicator--982d690d-628c-4d8b-9267-5e2bf96a3d6c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17006ca-b9cb-4ad9-8065-35a9eba6db9c", "sighting_of_ref": "indicator--06e7ee56-c132-4378-8fdc-efd64b5d139f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d07f72-2014-4ff3-9763-ba64e26f72ea", "sighting_of_ref": "indicator--06e7ee56-c132-4378-8fdc-efd64b5d139f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90722952-8df4-4f97-bdf9-788a7b246bfe", "sighting_of_ref": "indicator--5ead43a8-8056-4ba7-8a16-93ecdeb70f44", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e86d293-3b95-4a74-9e83-b3f51ebe470b", "sighting_of_ref": "indicator--5ead43a8-8056-4ba7-8a16-93ecdeb70f44", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af3efec-c3f8-4665-9427-5971a1b04dd2", "sighting_of_ref": "indicator--245d4036-2bad-4712-a15e-bc8e4b6222ce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fb3878-ee12-4946-ada2-b02ec434a0f5", "sighting_of_ref": "indicator--74c680a6-40bb-4448-92e7-f2ff955dcb3b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64caf864-7ed6-4904-95aa-d414fcab9d8a", "sighting_of_ref": "indicator--74c680a6-40bb-4448-92e7-f2ff955dcb3b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667c3a3c-000c-4bd3-873c-3b60960553d0", "sighting_of_ref": "indicator--58e44739-f334-4551-bc73-f16158c1b3bc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd7eb4e-2045-47ce-bff6-906830294dd1", "sighting_of_ref": "indicator--4923d04c-486b-4a8d-a49a-22978e847440", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249a4cd1-af28-4292-acd8-bd232751a09f", "sighting_of_ref": "indicator--4923d04c-486b-4a8d-a49a-22978e847440", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e81c5c2-8a1f-45a5-ad3a-a9a6491716d2", "sighting_of_ref": "indicator--4923d04c-486b-4a8d-a49a-22978e847440", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361310a4-5505-4d57-bc2e-e6a9742b0bc4", "sighting_of_ref": "indicator--e2dae323-d30a-4b94-8f59-1d677bf1b0b3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8943ad9b-0778-4560-a99e-0c70004aeb99", "sighting_of_ref": "indicator--e2dae323-d30a-4b94-8f59-1d677bf1b0b3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead0b773-38d7-44d8-8aac-a204c704679c", "sighting_of_ref": "indicator--f93df074-d11e-41b6-b31c-4c419b67cf0e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c2b0d6-f3a8-4db5-8d45-8d59c14dd230", "sighting_of_ref": "indicator--47cd56f6-4983-4cbc-871f-b5f3480581ce", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2984c427-d42c-443d-99bd-18498e1363a7", "sighting_of_ref": "indicator--47cd56f6-4983-4cbc-871f-b5f3480581ce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba6ed61-f740-46fb-916c-f60729fd0dbc", "sighting_of_ref": "indicator--802e296d-fd28-4411-92de-d672107ed0fc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d172466-f985-4894-97d1-06c27897d3c5", "sighting_of_ref": "indicator--98c06f7b-2a78-48a5-8e25-6755c078cee5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9809e4a1-489a-4318-b0ee-5fe10a69c205", "sighting_of_ref": "indicator--98c06f7b-2a78-48a5-8e25-6755c078cee5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0e6122-3c89-4cda-8128-f4ccad160c4f", "sighting_of_ref": "indicator--98c06f7b-2a78-48a5-8e25-6755c078cee5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12dc3533-f9ed-4db7-8ac5-436f6b197fe0", "sighting_of_ref": "indicator--d5b15d26-2585-4db4-b510-ee6b4774cc56", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81afbfe-8255-4504-970f-245a5c320de5", "sighting_of_ref": "indicator--d5b15d26-2585-4db4-b510-ee6b4774cc56", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6082fd-f231-46b9-9449-d683618f59e7", "sighting_of_ref": "indicator--aee7eab2-365f-4f8a-8224-31b89f082645", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace7568f-ec36-405d-8807-a64dfd841b80", "sighting_of_ref": "indicator--aee7eab2-365f-4f8a-8224-31b89f082645", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b2bf9e-5b85-4bef-afbe-7c6a53dd1a8d", "sighting_of_ref": "indicator--9124ca52-4292-4577-a5cd-241f6b0f6012", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782a5457-b63e-421e-86d5-0be4a9ff6d5f", "sighting_of_ref": "indicator--054b95b6-b6fb-45b6-9e7f-adc0e5d4de39", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68daef81-f5a6-422f-bf70-eef0be55346a", "sighting_of_ref": "indicator--8b4a513b-5b5c-46dc-9e9d-368fdfa486fe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6a2b88-e2e8-4fde-ae84-0e53c3f52c02", "sighting_of_ref": "indicator--8b4a513b-5b5c-46dc-9e9d-368fdfa486fe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00b0a5d-b8c5-40d5-bc3c-150d3b1a15f3", "sighting_of_ref": "indicator--a16a9ae7-6f5b-4623-9caa-05035fb99c53", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8f3a5e-123e-45f0-9c80-f03304589860", "sighting_of_ref": "indicator--a16a9ae7-6f5b-4623-9caa-05035fb99c53", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1054ed8b-3efb-498b-8d7e-3d1dc03a155b", "sighting_of_ref": "indicator--95e21d44-4c11-4779-a40d-c93ab8b0fd97", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7650d4-71ee-4648-8448-798e6657fa78", "sighting_of_ref": "indicator--95e21d44-4c11-4779-a40d-c93ab8b0fd97", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec90b0c5-be4a-478c-99ba-626bfacbd36e", "sighting_of_ref": "indicator--71d1cfbe-edaf-40f5-bbab-89e422179048", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea9cde3-947b-48d1-b9fb-465e0496c9b1", "sighting_of_ref": "indicator--ef160e83-97c3-4675-9478-5bbea53fe4a1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a606409f-00f3-48ac-b9f5-993fc8c0c52b", "sighting_of_ref": "indicator--ef160e83-97c3-4675-9478-5bbea53fe4a1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d48547a-85f3-4c6e-b025-5203a2a0401c", "sighting_of_ref": "indicator--4bc5c529-e2c9-4178-913c-8fd3d8680b76", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac5d5a8-a4ff-47ac-a2a1-15d7c75fcda4", "sighting_of_ref": "indicator--4bc5c529-e2c9-4178-913c-8fd3d8680b76", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba88813-d89f-4722-9109-7e05c60b38e0", "sighting_of_ref": "indicator--bc1f8884-9928-4cd8-9e95-22a85bfe7075", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81ecaea-55e0-4e08-ad53-79ce435e2482", "sighting_of_ref": "indicator--b3b002ca-9524-49ec-a8e8-ac0c4531fa11", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c839e4b9-6af2-4bb3-ad2c-f5f2e4f3cd17", "sighting_of_ref": "indicator--221afc62-ff72-453a-a5ab-828841470483", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffd3742-7099-47cb-b03f-84836c4bf2b4", "sighting_of_ref": "indicator--221afc62-ff72-453a-a5ab-828841470483", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2665888-c12d-4726-9cc2-15ebe97aa1b9", "sighting_of_ref": "indicator--037793fc-e76e-4cc7-95e5-e882b6460432", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6663634-9859-487d-909b-41befc3a7e3e", "sighting_of_ref": "indicator--037793fc-e76e-4cc7-95e5-e882b6460432", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b96f3cd-c236-4131-aa1b-49d8426adfb1", "sighting_of_ref": "indicator--037793fc-e76e-4cc7-95e5-e882b6460432", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048d63ba-6ac5-4443-bbd1-72bf3417d73c", "sighting_of_ref": "indicator--2c1744ac-f6b4-4fd9-b1b2-3b0219bdb5d5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a1e352-5543-4444-b521-8881321d47d5", "sighting_of_ref": "indicator--2c1744ac-f6b4-4fd9-b1b2-3b0219bdb5d5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bafc77-6e58-4f00-a108-207d95e5ce83", "sighting_of_ref": "indicator--48dfcd27-2e0a-49b8-99d1-cbf104c388fe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db96dace-f5aa-42c8-95ba-0e092952b5d2", "sighting_of_ref": "indicator--0209762c-4bea-4484-83ac-507d04fb7288", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3e878d-94dd-460e-ab98-f0d129169323", "sighting_of_ref": "indicator--2ed5c8c5-1a3e-4c93-b3b8-9ef7a7f0ddb0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f3be5d-85d9-4ede-b57c-5c7173079acb", "sighting_of_ref": "indicator--6cf2939e-2752-4e20-9e03-611c73a45360", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05e5b0f-08f6-45be-b555-793ad7a8e297", "sighting_of_ref": "indicator--622e1e62-97e6-4d65-b34b-23c7d729e661", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92412136-773f-4560-9c05-21b0754c4533", "sighting_of_ref": "indicator--396c35f9-62ef-4ae7-8639-a0ccfaec0e57", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d3d1d5-8fbb-44f6-9f94-57fcaba426ec", "sighting_of_ref": "indicator--396c35f9-62ef-4ae7-8639-a0ccfaec0e57", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1aad20-6a1f-4ac6-83fc-510b2eb51598", "sighting_of_ref": "indicator--e4a5513f-f5e4-4859-9bf2-04fede07d629", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc6a255-79c2-4741-883a-9520a13dfccc", "sighting_of_ref": "indicator--9fe37a1a-2028-45cc-81d4-ada7291983ba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261e0f2c-e451-40c8-a71d-34949e4f7170", "sighting_of_ref": "indicator--9fe37a1a-2028-45cc-81d4-ada7291983ba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583353bf-fa43-47b9-a238-7f55dd0164b8", "sighting_of_ref": "indicator--fd548c2f-279c-4676-8256-2a750da01914", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26be35a3-6c81-409a-81e1-f2d552e7e06b", "sighting_of_ref": "indicator--fd548c2f-279c-4676-8256-2a750da01914", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7468cb93-91a3-4d2b-a3a2-76fbfc299311", "sighting_of_ref": "indicator--87204714-c452-4594-aad3-2cd68f27916c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314cfbd4-fde7-4b59-928c-9de6abf557ca", "sighting_of_ref": "indicator--87204714-c452-4594-aad3-2cd68f27916c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19dcd8a-71e1-4b86-b939-372337e41018", "sighting_of_ref": "indicator--f07a4143-0bf7-494b-be23-24ee74a24aa3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3608d4fd-f38c-4291-b13a-0871d5092780", "sighting_of_ref": "indicator--95af94d4-9c6b-4a34-84a5-640c6390753e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f840415-2031-48eb-8cb4-97bc39321a36", "sighting_of_ref": "indicator--95af94d4-9c6b-4a34-84a5-640c6390753e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e28abc-c923-46f6-82d7-269c7f6d25c2", "sighting_of_ref": "indicator--d430b1de-0743-47bc-a087-56c51c038c8b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc706c4-0dd2-4406-8899-1793f20347f5", "sighting_of_ref": "indicator--9616032d-31e8-4009-ab7b-ed46cd4a016c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd67c13-e9c7-4ebd-88d2-c2600870be78", "sighting_of_ref": "indicator--9616032d-31e8-4009-ab7b-ed46cd4a016c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811ecb73-2fc0-42e5-af88-9411f969d7f8", "sighting_of_ref": "indicator--1689c792-a6b7-4343-a97b-5744b56e66ca", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d31695b-97f3-4055-abed-862c291f2125", "sighting_of_ref": "indicator--d3ebfd6d-7051-4329-81bd-8ba96531775f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8ace36-237f-492f-b49f-f7aaab707a02", "sighting_of_ref": "indicator--4584a1a3-d38b-49db-a3b8-2eb1867af143", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d9470f-a302-4462-95ee-66adb77bac04", "sighting_of_ref": "indicator--ba3de69c-a9f4-4385-8800-e4536111780a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae813ba-0e4f-497a-b430-30e9c52f517c", "sighting_of_ref": "indicator--ba3de69c-a9f4-4385-8800-e4536111780a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bb5516-7cd3-4787-bafb-57d0b476b3cd", "sighting_of_ref": "indicator--7f33a5ab-e88f-4ab6-9b6d-c778342ea80b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3681a49-274e-4ffc-8103-403028a023a9", "sighting_of_ref": "indicator--1c9be62b-29b6-466a-a70b-ec65321b87f6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633f3168-5e75-4608-9a82-6c448233338f", "sighting_of_ref": "indicator--765f9119-55ac-4c67-8adc-4fcecc05e676", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496b5bf5-e841-459a-8567-ab50fa7fff4f", "sighting_of_ref": "indicator--765f9119-55ac-4c67-8adc-4fcecc05e676", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ccea40e-adcb-4df4-a3ee-a190de97a1fa", "sighting_of_ref": "indicator--765f9119-55ac-4c67-8adc-4fcecc05e676", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee23567a-19fa-4593-8e9a-47eea49607e9", "sighting_of_ref": "indicator--036e7499-07ab-4937-ae1d-e46365dfc601", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa63e4f-7ee7-4257-b565-04d8a64020c6", "sighting_of_ref": "indicator--036e7499-07ab-4937-ae1d-e46365dfc601", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f932b6ef-305b-4d8c-ae65-92336ee6f3b5", "sighting_of_ref": "indicator--28e32ef6-dbe6-4a05-804a-b0435162bcdc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cee69e4-57e0-4455-a220-aeb6abe91dba", "sighting_of_ref": "indicator--28e32ef6-dbe6-4a05-804a-b0435162bcdc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a93bb80-b77a-4d6b-825e-a16f096bd4f7", "sighting_of_ref": "indicator--c0f06147-6583-4b2a-b97a-9c72861c6b86", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac23daff-7277-4dc8-a480-025d26461d64", "sighting_of_ref": "indicator--b3a961de-8176-469f-a9b2-0b63ceb12485", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659b3370-6e85-479b-a3b9-f7d07fa4bf84", "sighting_of_ref": "indicator--b3a961de-8176-469f-a9b2-0b63ceb12485", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90bdcd60-aa80-473f-b89e-0c0ab6ff8bfb", "sighting_of_ref": "indicator--a84a7172-2815-479e-b5c2-09c875c1d95c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9f3bc3-38e8-4f69-aff8-da434357194d", "sighting_of_ref": "indicator--a84a7172-2815-479e-b5c2-09c875c1d95c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa8118e-23ea-48ec-8903-5e73307314ce", "sighting_of_ref": "indicator--18e04b09-1f58-4434-b865-30fe536c2df9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f7d0bd-465f-4338-85cb-a5667cee4e3f", "sighting_of_ref": "indicator--18e04b09-1f58-4434-b865-30fe536c2df9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3814688-033d-40d0-b3c2-684461f0511a", "sighting_of_ref": "indicator--18e04b09-1f58-4434-b865-30fe536c2df9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30118ff9-49fe-4e20-9773-4289c8b9c462", "sighting_of_ref": "indicator--cd465709-6913-4c76-b92e-86d2184118fd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fe82dc-2e8c-4a81-aa20-3527013adb41", "sighting_of_ref": "indicator--d132598c-0bd6-407c-a6c8-e0a32922693a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0887aa6f-1ea8-402b-995b-d5357c76439f", "sighting_of_ref": "indicator--d132598c-0bd6-407c-a6c8-e0a32922693a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d8ae4a-9f97-40f2-8020-89c035454059", "sighting_of_ref": "indicator--d132598c-0bd6-407c-a6c8-e0a32922693a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0c5072-df57-411a-b6eb-81c4cdeaa08d", "sighting_of_ref": "indicator--17cda5a8-e5d9-4c5b-ab5e-e97c616042ba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec32aa8-5b64-4dee-9b60-2c4537ca8cf9", "sighting_of_ref": "indicator--17cda5a8-e5d9-4c5b-ab5e-e97c616042ba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85363dad-77c6-4a81-8388-9f1300207a29", "sighting_of_ref": "indicator--e76d6297-9f43-4bf0-a592-b4b244043678", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa3c548-5c14-4c22-bab2-39e1e201725c", "sighting_of_ref": "indicator--5dc2041c-9531-46fd-bc57-18bcc517a3ee", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a54b6c2-1af6-44bd-890c-cd30af3f2c66", "sighting_of_ref": "indicator--3243a171-1868-457d-9424-a07532a11074", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43b53ce-350f-41cc-ad24-4b4eab6093e7", "sighting_of_ref": "indicator--490397ff-f210-47fc-912d-4615ede76e6b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9baac7ed-c098-4719-8370-d2c67bd0f3d9", "sighting_of_ref": "indicator--490397ff-f210-47fc-912d-4615ede76e6b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067d8e21-07fa-4c46-87ba-06b37368e301", "sighting_of_ref": "indicator--1cd6fed4-1a1c-4df2-801a-a55018e13b89", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146b7d1a-5178-45d4-a7bb-2c10665b94a9", "sighting_of_ref": "indicator--1cd6fed4-1a1c-4df2-801a-a55018e13b89", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc92acd-9f81-48b3-8d99-82618b7f093b", "sighting_of_ref": "indicator--09694901-e3a8-42fc-a91a-f4da3c22b19d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e26b4f-eabf-499c-b2ae-16e2ae9b5913", "sighting_of_ref": "indicator--00b17558-70eb-4a1c-ba0f-7ab400309013", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52942c29-7960-43c1-90e2-c6eaa0b4a06e", "sighting_of_ref": "indicator--4e924bad-e9ca-47f8-b8d7-bfe32ff567e7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583aee22-4247-4458-b086-0f66a7d2908c", "sighting_of_ref": "indicator--4e924bad-e9ca-47f8-b8d7-bfe32ff567e7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7344663b-f983-4599-aeb0-78b5d37235a4", "sighting_of_ref": "indicator--72cec85c-27fd-4533-beae-9af2b19a21e5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc1456b-7b36-492f-8750-402d539275de", "sighting_of_ref": "indicator--72cec85c-27fd-4533-beae-9af2b19a21e5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75d62ea-c124-4626-8ce0-6b2141c20810", "sighting_of_ref": "indicator--c04071ff-3a4a-4749-9125-6a137bb5ff67", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ea461c-4f3a-4ae0-ba77-66243750c784", "sighting_of_ref": "indicator--d7835382-b83a-42c6-bef1-8429a30fc556", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f539264-37e9-4c97-8073-8ca199a23201", "sighting_of_ref": "indicator--eef70b8e-4ce3-4e42-b74a-2f6a89a11263", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb084aa-81cc-44e5-8090-60f98013902f", "sighting_of_ref": "indicator--586bacd0-5b11-4235-bf63-68e7c0f79f63", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70f0665-911b-4532-98ee-5e4ff888e12e", "sighting_of_ref": "indicator--586bacd0-5b11-4235-bf63-68e7c0f79f63", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350d36b4-e0f6-4b0d-bc98-488dae081f19", "sighting_of_ref": "indicator--f29ce536-239b-4c83-b97b-66f6b14c4ab4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e37ff19-c04a-47ab-b350-4c896e1c6a1b", "sighting_of_ref": "indicator--f29ce536-239b-4c83-b97b-66f6b14c4ab4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9763ace-8159-4884-80a4-1ea2bc604a1e", "sighting_of_ref": "indicator--dfe433c4-9567-4178-8a55-57e95523f97c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c10cd0-bc5a-4c3e-8a70-10b538f275dc", "sighting_of_ref": "indicator--8dee8f66-b831-4d99-9daf-ff46cbf3f657", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f1e045-b86f-4996-8b93-8dec40027ee0", "sighting_of_ref": "indicator--7405176f-6527-4e19-8dce-4a117442ea6b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ad4e74-d478-4e17-913d-043bd56de75a", "sighting_of_ref": "indicator--7405176f-6527-4e19-8dce-4a117442ea6b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc1652f-f440-4b09-95b4-d6fc05a59ab5", "sighting_of_ref": "indicator--7405176f-6527-4e19-8dce-4a117442ea6b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380df043-f728-4101-bc19-905675eb9732", "sighting_of_ref": "indicator--12b4eea5-4e82-4549-b0f7-bd6d122e9323", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb06481-4b7a-4105-a585-176ddf847fe9", "sighting_of_ref": "indicator--e909490d-ee8f-4cfe-b59f-dc8af78dc777", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42167533-412e-405f-a7d4-08e4d80193dc", "sighting_of_ref": "indicator--dd582a02-f9c1-44a3-9e37-4b359113a155", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90469923-e557-4ea8-a4df-5102331113cd", "sighting_of_ref": "indicator--dd582a02-f9c1-44a3-9e37-4b359113a155", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d776b5cb-beec-416a-80c4-c31474e8efeb", "sighting_of_ref": "indicator--dd582a02-f9c1-44a3-9e37-4b359113a155", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28b3bd6-f790-42ef-96b0-815a42804cc0", "sighting_of_ref": "indicator--7695da48-b8fa-4c0c-a773-4c8cc9ba0369", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a7ea3d-7bc7-44e5-accc-6d5d47a03a2f", "sighting_of_ref": "indicator--7695da48-b8fa-4c0c-a773-4c8cc9ba0369", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ebb073-80ff-49e4-abca-379ea0fd78dd", "sighting_of_ref": "indicator--7695da48-b8fa-4c0c-a773-4c8cc9ba0369", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce89f2bf-7723-4e3e-87e7-ffc6fa7a2d2a", "sighting_of_ref": "indicator--87752c79-bc25-4a3e-8d27-8bdf13331a8e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e66c6f-ee7e-43e2-909b-ec3d4a1d1a9c", "sighting_of_ref": "indicator--8fcdcd4a-c019-4506-ba05-bd3cfec9f4c7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d31247-2fd5-48b6-a035-85283e6a9252", "sighting_of_ref": "indicator--2ef0ef54-ef5f-4be7-bc8c-6107eaceeb05", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b94417-e2d2-4c04-899d-9a2cd5e463be", "sighting_of_ref": "indicator--d02e47ee-62ff-40b7-9642-e88ae6b5583a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a52df5-a0b1-4bfe-954d-747e29b436f3", "sighting_of_ref": "indicator--9633669e-48a2-47e1-b812-5296dfe67175", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925cd022-03b7-4fd3-ab9b-8777018693ec", "sighting_of_ref": "indicator--fe2d2d7f-b926-4d7a-bdc8-67fabf828b8d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec79241d-5ea7-4564-8e99-c00bd6d14f6b", "sighting_of_ref": "indicator--a8cd06ba-c6e5-47fe-8d0e-14dcae615fad", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c703d48-168a-4084-bd9b-20747ff72f9c", "sighting_of_ref": "indicator--a8cd06ba-c6e5-47fe-8d0e-14dcae615fad", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281ad237-d7d3-4ae1-b7e1-323883574b69", "sighting_of_ref": "indicator--a8cd06ba-c6e5-47fe-8d0e-14dcae615fad", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c119095f-973b-47b2-ba4d-8698757d1788", "sighting_of_ref": "indicator--330d0d3f-2e5d-4100-b11b-7069335202a4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ade178-9eff-4d67-a0b8-6fef04a079a7", "sighting_of_ref": "indicator--330d0d3f-2e5d-4100-b11b-7069335202a4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243b0f20-3f9b-48ec-b25d-6b1683ab415a", "sighting_of_ref": "indicator--330d0d3f-2e5d-4100-b11b-7069335202a4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5328062a-9106-4496-b071-8f1fa98d6e75", "sighting_of_ref": "indicator--627a10e3-8ef0-469b-acaf-9252bfe4a3a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1991a94d-2822-42c6-b9be-4c209175fe79", "sighting_of_ref": "indicator--2af2797d-e0b5-4210-9818-f7bc89036447", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b33048-f9b9-4369-bcb6-85980eb827de", "sighting_of_ref": "indicator--2af2797d-e0b5-4210-9818-f7bc89036447", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9cfae5-234b-4cee-b462-d1a1d15a57f2", "sighting_of_ref": "indicator--233b87a6-a4d4-43a5-b710-f174c90930b5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2014de27-08cd-4c91-a705-a1de8cab479a", "sighting_of_ref": "indicator--233b87a6-a4d4-43a5-b710-f174c90930b5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f95811a-8bfe-42ec-ac0f-54ba660bf65d", "sighting_of_ref": "indicator--91411351-723d-425b-a80a-08fad3320444", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db975562-0a7e-436f-8b75-7a6085e2cb7e", "sighting_of_ref": "indicator--e0037b28-9020-4f01-b33b-a3054760b15f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31cf646-8a36-4ed1-a0cb-a212cff3abc8", "sighting_of_ref": "indicator--5d87d1e7-c7d9-4edf-83d5-45b9bc9d295e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4145483-b382-4e3d-8318-1d880d83252b", "sighting_of_ref": "indicator--eee70bf4-e420-47fe-8a6c-2f15755afd30", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f19bf7-0708-4077-8adf-7b15d23046ed", "sighting_of_ref": "indicator--eee70bf4-e420-47fe-8a6c-2f15755afd30", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5493f3e-8425-40be-b8d3-2d5de832053b", "sighting_of_ref": "indicator--eee70bf4-e420-47fe-8a6c-2f15755afd30", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd463e8-4466-4056-9e67-6059f4b50c5e", "sighting_of_ref": "indicator--a6f99fa8-969b-404e-94bf-cb492ca6a809", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8b3836-cc66-4bef-a8e6-88b282db368b", "sighting_of_ref": "indicator--d37b0e90-4eb0-4848-9e1f-0968362682df", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72002374-43cb-416e-bcd9-648e27b89961", "sighting_of_ref": "indicator--60d71f1e-87f3-44ff-ad88-f42ca526a884", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a609759-381b-49db-9555-7ffbbc0da877", "sighting_of_ref": "indicator--911541e0-3951-4754-9143-ee011ed5fc17", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278b389b-a238-4ade-aa14-f050349210d2", "sighting_of_ref": "indicator--911541e0-3951-4754-9143-ee011ed5fc17", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14a0ecc-676d-40d0-aa47-4978114b707a", "sighting_of_ref": "indicator--65e8625f-5d05-49e5-a3f6-ce0e4b1a9fd6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7002344-67a6-4734-8fb7-f34b74ff1b52", "sighting_of_ref": "indicator--dd230c6b-b921-4897-abab-ca39144abb48", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29936de1-49ad-4696-a305-d5e80a71a8b2", "sighting_of_ref": "indicator--dd230c6b-b921-4897-abab-ca39144abb48", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b28edd0-02b5-40a3-99e4-136b61c65ea1", "sighting_of_ref": "indicator--dd230c6b-b921-4897-abab-ca39144abb48", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9fbbdd6-7fd8-46e9-9c46-e0b4b2e8a2ff", "sighting_of_ref": "indicator--5b548a9f-4b50-41b5-8878-7098a7b1556b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c252cc-7fa6-4398-935e-a07b6e43f190", "sighting_of_ref": "indicator--5b548a9f-4b50-41b5-8878-7098a7b1556b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d4dae4-ad20-4d2e-81e7-5b02d637e00a", "sighting_of_ref": "indicator--011e018b-77cc-4e54-b2a3-09a3fe25655a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8008f0b0-887c-4926-b2a6-4d7226ca070b", "sighting_of_ref": "indicator--0526e244-492a-4da0-9342-4d3ed5d98cdb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bafdbae2-4f37-460a-b49d-bf406989c3ee", "sighting_of_ref": "indicator--0526e244-492a-4da0-9342-4d3ed5d98cdb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f050bd-80d0-4a9c-9016-255446641e31", "sighting_of_ref": "indicator--0526e244-492a-4da0-9342-4d3ed5d98cdb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49d14f1-3b25-4350-9522-e29a96041ac4", "sighting_of_ref": "indicator--b0bf6a3b-22bd-49ca-acb5-755ab3dca33c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4162292c-cf99-4496-b3eb-1a000c4cd251", "sighting_of_ref": "indicator--b0bf6a3b-22bd-49ca-acb5-755ab3dca33c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b175c288-d872-460e-a04c-5e70424a6e77", "sighting_of_ref": "indicator--b0bf6a3b-22bd-49ca-acb5-755ab3dca33c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718df13b-f61b-48d3-b35e-e74bb14b52f6", "sighting_of_ref": "indicator--5e555cf0-1e2e-4f91-8afc-0027121cffa9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570f6adb-dd06-4828-a34b-f166f6f40307", "sighting_of_ref": "indicator--5e555cf0-1e2e-4f91-8afc-0027121cffa9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79380baf-0525-49ae-aaf4-71a5ddc0b85f", "sighting_of_ref": "indicator--5e555cf0-1e2e-4f91-8afc-0027121cffa9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64f7c87-d911-403b-96e5-1b65b2018371", "sighting_of_ref": "indicator--0a672455-94ef-4c5a-82f5-da388567b575", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe04706e-2e02-48fa-a952-525fe71321d0", "sighting_of_ref": "indicator--0a672455-94ef-4c5a-82f5-da388567b575", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59eae6cd-0bac-4b51-a37d-485c970bb662", "sighting_of_ref": "indicator--b9fc971a-73cd-48dc-a5d8-22e1565bf664", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc67d40-2423-4b26-b3a4-322458bb3633", "sighting_of_ref": "indicator--b9fc971a-73cd-48dc-a5d8-22e1565bf664", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c33785-0587-4475-b950-23f08b62f6e5", "sighting_of_ref": "indicator--9382760c-af0b-4adb-90e4-24ab36e499e5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0dbf50-0634-420c-926f-c1ff1b8b6602", "sighting_of_ref": "indicator--9382760c-af0b-4adb-90e4-24ab36e499e5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8f9428-441e-4c69-ab9f-8aa4f5db4572", "sighting_of_ref": "indicator--752aaba0-e579-4a48-bad8-e3c75a4cec4e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d062a481-3ba7-42b3-8672-1c679153489a", "sighting_of_ref": "indicator--1361e6d6-3d8a-44a8-bc03-ab6fce67d8fe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211389e7-e7b3-4b02-bc4b-6c5e13fe4cba", "sighting_of_ref": "indicator--7ff3388a-ce43-441d-8f25-093d7d87aa0e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261e5dc5-aacb-48ee-9e9c-014dd629e0f0", "sighting_of_ref": "indicator--c0f79bf0-1269-49d7-9c37-9fa71d4f2ab6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7382bb7-dd1d-408b-9309-847ddc3f4a50", "sighting_of_ref": "indicator--d3be1cc8-cd27-4b81-b219-80f94860321f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f78930-01bd-441f-8f79-e89bde0e9764", "sighting_of_ref": "indicator--d3be1cc8-cd27-4b81-b219-80f94860321f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264f8e9f-9323-45b6-8277-7063ba09283d", "sighting_of_ref": "indicator--6f32c482-70eb-4746-9b48-de99bfb1fe4b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1e7aa0-2fe0-4bb5-8b8c-ff12cad0e332", "sighting_of_ref": "indicator--cb2b7dde-bb6e-4410-a819-ef69ffa51d9e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0adf0e-973b-44d7-98f2-63b3dd5a2e81", "sighting_of_ref": "indicator--b01d1b4d-9129-4e62-9d89-236413bb4c8f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a993d0-2ea6-492b-9acd-0b8ade59af75", "sighting_of_ref": "indicator--2410ec15-5cf2-493f-a846-1fb3035bd617", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e387d7-7590-45d2-9387-00b970bdeb70", "sighting_of_ref": "indicator--2410ec15-5cf2-493f-a846-1fb3035bd617", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb60a0e-f9df-4b33-9b9e-d30ea3c64578", "sighting_of_ref": "indicator--2410ec15-5cf2-493f-a846-1fb3035bd617", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07086041-5116-45f9-93d0-e4b3f7ec07c4", "sighting_of_ref": "indicator--e57573d9-c3be-4f2c-80f3-2a1131e60e64", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4cc0adc-34f9-40b8-a441-7a196f1c729e", "sighting_of_ref": "indicator--e57573d9-c3be-4f2c-80f3-2a1131e60e64", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5296e07-4954-4d6c-9c10-4e50025c198c", "sighting_of_ref": "indicator--ecc8026a-50d2-4b82-be11-6bdebe84855b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6089daf8-53c9-465b-accb-591ef90324d0", "sighting_of_ref": "indicator--ecc8026a-50d2-4b82-be11-6bdebe84855b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211dd3f4-4343-416a-9265-c7409d73929f", "sighting_of_ref": "indicator--ecc8026a-50d2-4b82-be11-6bdebe84855b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e00977-36d4-4cf0-a1b5-f73db4e1edcf", "sighting_of_ref": "indicator--908bc05b-e139-4577-a397-5dd72f2c9180", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789f5e6e-b3da-43af-a475-74f6bd10ed04", "sighting_of_ref": "indicator--50202bdb-ce1d-4223-b8b1-17a6d2c36752", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceedcdd7-48bf-4387-b72f-3d7294457e11", "sighting_of_ref": "indicator--8ad86730-096e-4894-84d6-622c1255d043", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e652e6-19dc-44d4-9e77-5e98c68a4325", "sighting_of_ref": "indicator--1c6cd222-fefc-4c39-89c6-c9fcc58e5a54", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e881219-4cb9-48d8-8ad5-32f406bbbe08", "sighting_of_ref": "indicator--1c6cd222-fefc-4c39-89c6-c9fcc58e5a54", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168078d5-86bc-4600-904d-1e4fc0697c7d", "sighting_of_ref": "indicator--1c6cd222-fefc-4c39-89c6-c9fcc58e5a54", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2754964-88be-4c70-9011-a0971d79e55c", "sighting_of_ref": "indicator--39e74f54-abaf-4ca3-8093-e9751dcf34fd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a72cf7-62a3-495d-9518-23d2f1e24a1c", "sighting_of_ref": "indicator--79d1a599-4327-4dcc-9e7c-1d9b32af9c9a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2b0880-275a-409e-8009-700eca7f3a7e", "sighting_of_ref": "indicator--39c57a73-bee7-476a-9a88-d0960cb365c8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94330fc8-0f12-463d-b68d-75f260ec1a82", "sighting_of_ref": "indicator--39c57a73-bee7-476a-9a88-d0960cb365c8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5cccf1f-8f10-40cf-b762-90dfe0d63d58", "sighting_of_ref": "indicator--9e2b0a3b-f162-4cec-9d09-8f7479b590c6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56e8c54-10f1-4312-9d49-e567b22072dd", "sighting_of_ref": "indicator--9e2b0a3b-f162-4cec-9d09-8f7479b590c6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25aee97-0d1c-4097-97bf-5113238e9924", "sighting_of_ref": "indicator--83e93749-1e9f-4001-a004-1b7f8287c9f9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120e5e42-44b9-4f90-ad02-a134e4549d0b", "sighting_of_ref": "indicator--83e93749-1e9f-4001-a004-1b7f8287c9f9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfe7a57-1651-457d-9187-1610fffeed63", "sighting_of_ref": "indicator--83e93749-1e9f-4001-a004-1b7f8287c9f9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dec831e-120d-46ae-8954-37cb6927d83e", "sighting_of_ref": "indicator--340b96ec-c7a9-4ddd-a5fc-fe58239de9d0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9694284b-c6b2-452d-ae11-0538d129fec4", "sighting_of_ref": "indicator--db6ab197-69e4-4ae3-bab6-a524ca8da1ea", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9196ae8-9eb5-4416-a423-25358ca9cb0e", "sighting_of_ref": "indicator--44da0947-ed82-494f-a6a1-78919a866c9b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f614c1-7a74-4bca-9802-791851a79afb", "sighting_of_ref": "indicator--e98c4e25-92a4-4802-ae9f-cc15e9030165", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c942bcd-b4cc-421b-8d50-3e0cfc1664a3", "sighting_of_ref": "indicator--276e100d-3678-46c9-8003-1add438320d4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddea043f-3692-4e15-868f-63eb1bd0bebd", "sighting_of_ref": "indicator--276e100d-3678-46c9-8003-1add438320d4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80a7a2b-4432-40e3-9a62-bf2288e70680", "sighting_of_ref": "indicator--5e215c51-61eb-46b9-a85d-c17c9f2c2a7e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4e8222-9fff-4473-aceb-1e7265a401cc", "sighting_of_ref": "indicator--5e215c51-61eb-46b9-a85d-c17c9f2c2a7e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a0e05d-937a-4bf5-8e58-e28edf9b81a4", "sighting_of_ref": "indicator--5e215c51-61eb-46b9-a85d-c17c9f2c2a7e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c4e63f-9255-44e7-9808-04d4964865f4", "sighting_of_ref": "indicator--cce1c251-234c-4ce5-8621-228603039e51", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86268084-074e-46d6-be3f-a2570c7ea84a", "sighting_of_ref": "indicator--757ec58b-991d-4a77-9d33-5e34c18af361", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3d487d-3239-4663-992d-fc832db73ab7", "sighting_of_ref": "indicator--757ec58b-991d-4a77-9d33-5e34c18af361", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f853ce-1227-449d-a385-0089e5548d65", "sighting_of_ref": "indicator--757ec58b-991d-4a77-9d33-5e34c18af361", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e014f9-8874-4597-b6b6-f1037d50aaba", "sighting_of_ref": "indicator--fde676b7-366b-4cce-81ab-24c9dfd3c14f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d67fc5-7754-4000-a580-06033faa11eb", "sighting_of_ref": "indicator--fde676b7-366b-4cce-81ab-24c9dfd3c14f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae6b2df-17f3-4ca6-bd86-ce1bf84bf85f", "sighting_of_ref": "indicator--fde676b7-366b-4cce-81ab-24c9dfd3c14f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78a1e36-5e7f-40db-928f-31b868aa7724", "sighting_of_ref": "indicator--faed7d3e-6808-4b84-8472-a7dae1bcdcc1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2e22e3-1c55-4c20-a7f9-fea9da7a10b2", "sighting_of_ref": "indicator--faed7d3e-6808-4b84-8472-a7dae1bcdcc1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a895283-1e72-4e58-a08f-dda0ab6129e3", "sighting_of_ref": "indicator--faed7d3e-6808-4b84-8472-a7dae1bcdcc1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e4faac-879b-4b53-b3be-cb8dbeea2f7a", "sighting_of_ref": "indicator--53ad432c-b100-46e2-b34d-370f65d3a2cd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e018c1-3487-4ff1-a064-0bcb018b4efd", "sighting_of_ref": "indicator--0fb81706-8cb4-4a82-bcd0-d36595da49e5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057c9154-687c-4f43-bfef-38b44403f46b", "sighting_of_ref": "indicator--0fb81706-8cb4-4a82-bcd0-d36595da49e5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1bf042-35ce-4ade-983a-0173ec4f146e", "sighting_of_ref": "indicator--4872b4c0-0315-4431-81b5-fbfbaa163139", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60bc6f2c-467a-4614-b9d2-baeb166615e0", "sighting_of_ref": "indicator--4872b4c0-0315-4431-81b5-fbfbaa163139", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc39be0a-8492-4ef3-8934-4fc0d5b40d49", "sighting_of_ref": "indicator--51de206c-3ac4-4cbd-b98c-42feff6b951d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e873069-1e2f-406a-957a-a89a7313e036", "sighting_of_ref": "indicator--51de206c-3ac4-4cbd-b98c-42feff6b951d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98aa81c-a2c4-4110-909c-7df72fb071c7", "sighting_of_ref": "indicator--51de206c-3ac4-4cbd-b98c-42feff6b951d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca2ac52-7f4a-488b-a194-e61c0306091c", "sighting_of_ref": "indicator--a779315c-a51a-4796-b067-06c3707f9479", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1750183c-8988-492d-9a2c-7c44895843ab", "sighting_of_ref": "indicator--702aada8-1abd-48e5-afc4-701017afe491", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1557db6f-321d-480d-93e9-536804494391", "sighting_of_ref": "indicator--72349aa9-481d-45e5-b150-4c924ea8f2a7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21153a29-4aae-4553-8b6b-c6ed0e9f190c", "sighting_of_ref": "indicator--fe1092fd-7dc9-4ad5-b89e-572c23f5094c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3674f0-699c-4799-ad4e-ea8cbed79c41", "sighting_of_ref": "indicator--867e6703-b1d3-46e2-a60f-798ed415a1aa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80ce43f-cbd2-465a-91b1-1c87b06f5507", "sighting_of_ref": "indicator--8bec4399-2568-44de-b416-d07b46bca8b4", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1bc5b0-7586-4832-b2e3-045d0193b8b7", "sighting_of_ref": "indicator--0074a8e3-ad46-4c6f-99c8-11479d4be3a5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac3248e-1ecb-42ce-87f5-687511ff6013", "sighting_of_ref": "indicator--bdcee71d-a911-4e82-92fb-f13d645090a6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abbde23-5755-4f45-aecc-d722625c685e", "sighting_of_ref": "indicator--39ba67d6-efc2-4dc4-a98f-419bb3e7f57a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29a4cc5-d949-44de-9bab-ba57688f02de", "sighting_of_ref": "indicator--39ba67d6-efc2-4dc4-a98f-419bb3e7f57a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b171a548-c8d6-419e-bf4a-6afe73eb5aa0", "sighting_of_ref": "indicator--50930e8e-ae9c-41f8-a2a6-8210ec7cf050", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0d34af-7a8c-43d9-80a3-6c32c49e5a61", "sighting_of_ref": "indicator--b36cfd0e-1c1e-42ec-ab0b-b94d1ed0477e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f8013c-deff-4062-a0de-f22e1085058b", "sighting_of_ref": "indicator--b36cfd0e-1c1e-42ec-ab0b-b94d1ed0477e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40034d69-4b00-4c81-888a-4f6dd9d284f2", "sighting_of_ref": "indicator--b36cfd0e-1c1e-42ec-ab0b-b94d1ed0477e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667f9302-b604-4668-a969-5cb31bcbf3fb", "sighting_of_ref": "indicator--da519257-cd6c-4ca4-bd0b-5bc10ea36fff", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17881eb3-2cc5-4a5d-927b-f4e1d864d247", "sighting_of_ref": "indicator--da519257-cd6c-4ca4-bd0b-5bc10ea36fff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41daa3e-ccb4-4443-b68c-5271814816bc", "sighting_of_ref": "indicator--da519257-cd6c-4ca4-bd0b-5bc10ea36fff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a28ed1-99cd-47fe-bf45-2421a8ed3ac7", "sighting_of_ref": "indicator--bc22a50b-8ad4-4dce-acbc-a6b00fdd6411", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccafb718-91f3-43c3-9138-f2ef8f1d2f5d", "sighting_of_ref": "indicator--bc22a50b-8ad4-4dce-acbc-a6b00fdd6411", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdaeea77-2be8-4b39-8aa9-a6121d10f6da", "sighting_of_ref": "indicator--bc22a50b-8ad4-4dce-acbc-a6b00fdd6411", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4142a909-a9c5-4933-9c9e-c4d816b0effd", "sighting_of_ref": "indicator--b1fb4b7b-cdb2-45b2-b170-0897568dfe77", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc339afe-ba03-4648-a8ff-4369196c2230", "sighting_of_ref": "indicator--ad22da25-2e79-4233-a66f-abf15381763e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b72d86-1ca1-41e4-89f7-8c231c52062e", "sighting_of_ref": "indicator--ad22da25-2e79-4233-a66f-abf15381763e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d67edc6-5cbf-414b-96b2-3500f5b1b8d8", "sighting_of_ref": "indicator--ad22da25-2e79-4233-a66f-abf15381763e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c26944-f915-4c5b-a37d-e230d365342f", "sighting_of_ref": "indicator--b351a4f6-72eb-4e07-ab29-26804b40a1fe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b6acd3-2019-4cbb-9314-c1e99abad7f8", "sighting_of_ref": "indicator--b351a4f6-72eb-4e07-ab29-26804b40a1fe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f28c8d9-7246-420b-85ad-423b41736103", "sighting_of_ref": "indicator--b351a4f6-72eb-4e07-ab29-26804b40a1fe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5030c87-e67e-4198-a8c0-7c71a765753f", "sighting_of_ref": "indicator--5fdd1ece-f218-4602-b9f7-6fa2427e30fa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78707ef7-fd91-4a49-9383-78dcf97dd87c", "sighting_of_ref": "indicator--5fdd1ece-f218-4602-b9f7-6fa2427e30fa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a24bcff-ff9b-4c01-a967-b6b0ed6bca4f", "sighting_of_ref": "indicator--5fdd1ece-f218-4602-b9f7-6fa2427e30fa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118497a0-81cc-4d46-b411-08f9bbd30621", "sighting_of_ref": "indicator--052d3f64-64fa-4c59-9e50-8d8602f83489", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87f9556-4a22-4e1c-94b4-4eaac8071eb0", "sighting_of_ref": "indicator--052d3f64-64fa-4c59-9e50-8d8602f83489", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314e5e4f-a3ed-4de9-ab65-d8b7ee2c80ab", "sighting_of_ref": "indicator--052d3f64-64fa-4c59-9e50-8d8602f83489", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7595fe15-b01c-43a6-b220-916ff07b9666", "sighting_of_ref": "indicator--5372e859-38f5-43c5-8b08-c2f0f3624347", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f057c2-2ecc-4441-8c1b-03a9771d9958", "sighting_of_ref": "indicator--5372e859-38f5-43c5-8b08-c2f0f3624347", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf9795c-6bc5-43c4-af87-bda5cff20449", "sighting_of_ref": "indicator--5372e859-38f5-43c5-8b08-c2f0f3624347", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055c663e-7c88-4a82-91d7-28a79edaad4d", "sighting_of_ref": "indicator--42b68b1f-340d-4d8d-950a-f745953a9e42", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8067cb48-e10d-4388-87f1-c02d6bde5154", "sighting_of_ref": "indicator--42b68b1f-340d-4d8d-950a-f745953a9e42", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875f4076-c4a5-425d-ae87-e25b0c9244f5", "sighting_of_ref": "indicator--42b68b1f-340d-4d8d-950a-f745953a9e42", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc276d6-f65f-4903-bdd6-7fd5dad1f988", "sighting_of_ref": "indicator--9bd8f5a7-979f-4a2c-a846-8c5da6a4f429", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf55a53-2a18-4c25-8d28-7b4d444dfde9", "sighting_of_ref": "indicator--9bd8f5a7-979f-4a2c-a846-8c5da6a4f429", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a90374-ae77-4782-87f1-87b7a97edb07", "sighting_of_ref": "indicator--9bd8f5a7-979f-4a2c-a846-8c5da6a4f429", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8589b694-8f9c-40c7-9d59-e901a8415024", "sighting_of_ref": "indicator--b7367782-d1a3-4049-b6a9-5e7af18ea690", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50d1034-c2ed-4744-96b2-d8de5d5bd38a", "sighting_of_ref": "indicator--b7367782-d1a3-4049-b6a9-5e7af18ea690", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4169a4d2-1ce6-4ae2-8748-e106db3c2274", "sighting_of_ref": "indicator--b7367782-d1a3-4049-b6a9-5e7af18ea690", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fa8ca2-5857-4071-b417-39e15bda2439", "sighting_of_ref": "indicator--0c63532d-2fe1-498e-9b25-53cca843dff8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b678176-2c68-45ac-a060-aa0442ce3f02", "sighting_of_ref": "indicator--0c63532d-2fe1-498e-9b25-53cca843dff8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d8c680-3126-4af2-be8b-847399aba783", "sighting_of_ref": "indicator--0c63532d-2fe1-498e-9b25-53cca843dff8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb551cf-1521-4988-aabb-ef06a90a5e62", "sighting_of_ref": "indicator--9be5fa47-bdf2-47b2-85d2-b6770f4ced9f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0baba2e3-6dcb-4484-9581-148c54844ac8", "sighting_of_ref": "indicator--9be5fa47-bdf2-47b2-85d2-b6770f4ced9f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b49a54-df3a-4785-883e-41649a5f341e", "sighting_of_ref": "indicator--9be5fa47-bdf2-47b2-85d2-b6770f4ced9f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4f7f0d-3e29-4613-b294-86e72c448182", "sighting_of_ref": "indicator--16356919-bd3b-4299-a31d-ebb9e1a18315", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fe36ee-bc17-415e-8235-b0b80a76b033", "sighting_of_ref": "indicator--16356919-bd3b-4299-a31d-ebb9e1a18315", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ec411b-7848-4f46-80ab-5df71d818a93", "sighting_of_ref": "indicator--16356919-bd3b-4299-a31d-ebb9e1a18315", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7156d03-6a50-4e34-b8de-82fda63a91ea", "sighting_of_ref": "indicator--56c9d96e-4bf1-4466-a24f-cc0dee81e9b7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b1a25b-9c80-49f5-ab47-9db98704f834", "sighting_of_ref": "indicator--56c9d96e-4bf1-4466-a24f-cc0dee81e9b7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e284ec92-f137-4846-bccd-4d8a151bbef5", "sighting_of_ref": "indicator--6a502e5d-47bd-4560-9a35-5a126b159608", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5f6c07-9850-4a38-bb91-da9dc5bde65d", "sighting_of_ref": "indicator--60e6afb9-d0ed-41d4-813e-cd6a8f4e835e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06d8c94-1a3d-455e-8fc9-47a2cd2cb282", "sighting_of_ref": "indicator--60e6afb9-d0ed-41d4-813e-cd6a8f4e835e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7a3821-e557-4d02-9cc6-f4c3305073af", "sighting_of_ref": "indicator--60e6afb9-d0ed-41d4-813e-cd6a8f4e835e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7ff8d5-d7e0-49df-bd14-aaa93536f0cf", "sighting_of_ref": "indicator--eef8ec2d-9711-432f-a963-f7a74556d642", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb930a5e-46e7-4fbe-bce2-a1fd31636f7b", "sighting_of_ref": "indicator--eef8ec2d-9711-432f-a963-f7a74556d642", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af866170-60b2-4a46-aeda-e789d316cd22", "sighting_of_ref": "indicator--712e5b9c-efbf-473e-aea9-c7eb2591bd37", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46921d37-0eb7-48c4-a1e9-950fa0bd95cb", "sighting_of_ref": "indicator--712e5b9c-efbf-473e-aea9-c7eb2591bd37", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9995a1-8a05-4b0d-9de6-9c7832aab1f8", "sighting_of_ref": "indicator--712e5b9c-efbf-473e-aea9-c7eb2591bd37", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37943e98-38a3-4c7d-bb2a-eea85941ade2", "sighting_of_ref": "indicator--8867f19b-b567-47a5-8c48-209447345d5c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5002bf9-0dc9-4a36-8546-a1397053a3f6", "sighting_of_ref": "indicator--8867f19b-b567-47a5-8c48-209447345d5c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b8a55f-9a54-4116-b092-c0e80688d1ef", "sighting_of_ref": "indicator--cef951f4-03b5-415c-8e55-8fb66f972321", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92efa0e-51f5-48ad-868f-74ad0567a009", "sighting_of_ref": "indicator--a0e24f26-fdb2-4337-a644-8bdbef351208", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fe8952-c850-4abb-9c68-ea1645cbfc12", "sighting_of_ref": "indicator--9e942873-a160-4c12-83cc-9382adddc573", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c577a9c6-549c-4118-ac2c-52917a905b7e", "sighting_of_ref": "indicator--584b7a7c-ffc8-4ca6-ba3f-d2b79c27c969", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fd542f-c4f8-4056-bcd4-f8c225a7a634", "sighting_of_ref": "indicator--0fe089ad-5cf6-4725-8be8-0eedfc9bfdb1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f95e7a9-468d-495e-9b03-89632a7070db", "sighting_of_ref": "indicator--0fe089ad-5cf6-4725-8be8-0eedfc9bfdb1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24dafea-c26a-4c50-950c-72127a7f09e5", "sighting_of_ref": "indicator--0fe089ad-5cf6-4725-8be8-0eedfc9bfdb1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d4889a-bc0a-4809-b1f9-397e2e1b5156", "sighting_of_ref": "indicator--2e2b85c6-ea29-471d-af4c-681de2c0cfb2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1de46bf-ac97-425a-becc-c4e5f5d38e85", "sighting_of_ref": "indicator--2e2b85c6-ea29-471d-af4c-681de2c0cfb2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da462dab-6132-4b8f-b31c-cca2b3140cb7", "sighting_of_ref": "indicator--2e2b85c6-ea29-471d-af4c-681de2c0cfb2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbda8bd8-337f-4a97-bc4f-d6216211ceb6", "sighting_of_ref": "indicator--fc9b05a9-41b4-4e0c-8620-eafc9a583e31", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba1f9bb-11b2-4345-911a-835a8a84a36b", "sighting_of_ref": "indicator--fc9b05a9-41b4-4e0c-8620-eafc9a583e31", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59c2f13-0dd5-4ec2-9476-5c4bc0d81e8e", "sighting_of_ref": "indicator--fc9b05a9-41b4-4e0c-8620-eafc9a583e31", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccb446c-c3e2-4ec5-9503-f52080e7df46", "sighting_of_ref": "indicator--dff31679-73f6-4733-aa46-ae3495dbeb0b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382a6541-1754-4553-ab84-9e305643ade0", "sighting_of_ref": "indicator--612a2a85-fd5a-4b61-ba5a-a4478b5a92c0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef250bd-bfb2-4a3d-be1e-979d7b54a004", "sighting_of_ref": "indicator--47f22e83-8cb6-465c-b2d6-0d7cf64a98c1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c718c7e-65eb-45fb-9454-60b41ce7abf3", "sighting_of_ref": "indicator--a0b4207a-22e8-4e1a-ae9a-bee5e5bda1a2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebecf6a-1ccf-43a7-b8b0-7f6e3a5d756c", "sighting_of_ref": "indicator--dd0ebce3-6d22-4607-ab7e-62299e97fbba", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673fc680-690d-4c90-8685-a2dd45e0abc4", "sighting_of_ref": "indicator--dd0ebce3-6d22-4607-ab7e-62299e97fbba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d81f20-cfac-46d5-85fd-0aaa3de58a6c", "sighting_of_ref": "indicator--df6fbc94-c661-4d94-a9a4-dbcdc9494bee", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd034ea-6256-4128-bccd-1d5cad7ec85c", "sighting_of_ref": "indicator--f60da494-f6fd-4ff9-a498-8fc45d21b59c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7105f12-d084-476d-9154-16c23b775aae", "sighting_of_ref": "indicator--1ac75f1b-64a0-4aee-bd67-e10fe844a8b9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e71a586-fb61-45c8-aa2e-b7cc54000762", "sighting_of_ref": "indicator--23ed69a5-dbca-4778-b21e-7d1f99476bb3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633c6963-e4bd-4c0e-b649-8fc1dcaa98cc", "sighting_of_ref": "indicator--c8b53250-db16-4305-9116-abe2e33bd413", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0355ab5d-cad1-47d9-b136-018012f9cd82", "sighting_of_ref": "indicator--e1754117-9f41-45ef-91a5-348e7f0a528a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dfb888e-8428-462d-a3a7-c57bfe00bd5d", "sighting_of_ref": "indicator--35037fe1-5fa1-4395-a93b-c38d9572de15", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a5705f-d531-47f7-a73c-1e903e0d5c1b", "sighting_of_ref": "indicator--ca8086de-d000-46df-8cea-bbc0c6cfad20", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357fa106-8a89-4c02-a5fc-2b930cf0eaa0", "sighting_of_ref": "indicator--f948eeff-a553-4ddb-8739-49aab386112d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd0d355-c7cc-44e5-9081-f60c1d39a35f", "sighting_of_ref": "indicator--f948eeff-a553-4ddb-8739-49aab386112d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470b1a79-5bcd-4bf8-9a15-66ca3c0f7ac3", "sighting_of_ref": "indicator--4cc9f2f7-df5a-4ab7-a557-7f3c323f045c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7940f5f1-a165-4918-9b9e-803a78d36c59", "sighting_of_ref": "indicator--d3614054-0f15-4e73-81c5-3b4f0700cb97", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d3c0c8-b04e-48eb-9b40-6bddd1e4b1dc", "sighting_of_ref": "indicator--d3614054-0f15-4e73-81c5-3b4f0700cb97", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24741257-e51f-446b-9085-052a8c295d2e", "sighting_of_ref": "indicator--97b2166e-ae9e-47ac-befc-2a68366484be", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0515da-4ace-4e7a-8aa1-652ed204b537", "sighting_of_ref": "indicator--ef5460c4-ff12-4579-8e57-0e652ae2b903", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50a7880-44e4-4452-9827-42fb9ba02ec1", "sighting_of_ref": "indicator--9f2740cb-65e6-497a-8864-31beaa100f6c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea52e6f-f75a-4e5a-9118-2bfcd9052b12", "sighting_of_ref": "indicator--16945427-b0ee-4d65-be12-fe465f8b5d0b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37bda3df-f8ad-4617-b4b7-e59e862a863f", "sighting_of_ref": "indicator--16945427-b0ee-4d65-be12-fe465f8b5d0b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c27c758-72ec-4a5b-907c-9d597be2e477", "sighting_of_ref": "indicator--16945427-b0ee-4d65-be12-fe465f8b5d0b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0971e779-b4e7-46d5-9432-b2539fdef899", "sighting_of_ref": "indicator--7929af07-50d1-400a-a22b-fbdc55758d0c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45e3081-36f4-44ba-b11c-9a5bb582790b", "sighting_of_ref": "indicator--11967679-aff1-4c49-b401-6a907a5e69ef", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1f5780-0fa6-4ae8-b226-227b186c1b64", "sighting_of_ref": "indicator--11967679-aff1-4c49-b401-6a907a5e69ef", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d0f825-0d50-460c-9968-c29d3dcf5921", "sighting_of_ref": "indicator--a222b254-9498-49ad-9313-9f5bf84dac0c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a0cb53-50ee-4c6a-9ab9-ecc29326dd46", "sighting_of_ref": "indicator--8affc208-e4d9-4a1f-b02d-b6c84dda21e0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55d207b-2f8b-485f-94d6-70d279b30635", "sighting_of_ref": "indicator--028b21ce-e14e-4d78-ad87-523862d1f49e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4b3fc2-14b0-43d8-8c7a-a63f8fb21b62", "sighting_of_ref": "indicator--94546b60-4fca-458b-ab21-3c2c699d86e7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13bdc23-25d0-4552-a74e-cc0707214821", "sighting_of_ref": "indicator--94546b60-4fca-458b-ab21-3c2c699d86e7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e8a036-ad6a-4d82-af9e-3acef7db71aa", "sighting_of_ref": "indicator--fca5b865-1c5b-4ecc-b4e7-aa04ecf541cb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7b8dd7-2148-4ed4-bc4e-0f5faf1873ad", "sighting_of_ref": "indicator--7a6b9257-b86b-4443-88ea-a946b19d2ec1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6043f7fb-172a-4564-b2b6-0ee8faa6ca61", "sighting_of_ref": "indicator--51a9e8de-636e-4b4d-a3ee-b74d88280f38", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fad6f35-d9e4-4948-a27b-1cabc0d0e5a3", "sighting_of_ref": "indicator--0f804120-64ee-4f6f-b468-928e908e5d06", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00905f7d-7f71-4668-b468-8cb73f8a5b99", "sighting_of_ref": "indicator--7e29cbdb-26ea-4c62-9c66-4a41b32c0a0a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed949890-6860-4e8a-a8d0-f0a0a5bed1d8", "sighting_of_ref": "indicator--cb5c74c4-c747-4921-b514-21aaa5100e91", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6da3f62-1a61-4eaa-a421-899f485e03aa", "sighting_of_ref": "indicator--cb5c74c4-c747-4921-b514-21aaa5100e91", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9747d5-2213-41f4-9367-8d54c7e019b6", "sighting_of_ref": "indicator--66a013a1-a425-4f99-95ab-06cb621bb282", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9773677-571a-4cd6-b3d0-436ac4e472af", "sighting_of_ref": "indicator--85be2125-0030-4b6d-b011-27245007b24e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d3e43c-6683-40b9-b13b-3ed4c632eadc", "sighting_of_ref": "indicator--c895bef0-c096-454b-881b-59e3e5cee99a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1749c5a-f348-4a7d-9edb-c7aab7d86848", "sighting_of_ref": "indicator--c895bef0-c096-454b-881b-59e3e5cee99a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a428cb3-0c9d-4926-9dc3-ca7d5bee9b2c", "sighting_of_ref": "indicator--37c33617-a64e-4779-8a21-d05a1fce0aff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede9b935-f775-4fa8-87f2-ad0587af1beb", "sighting_of_ref": "indicator--37c33617-a64e-4779-8a21-d05a1fce0aff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6706495-14ff-412d-b34b-192055564bec", "sighting_of_ref": "indicator--2684b90e-e7e2-4a26-8f29-093fa658f618", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a88dcb5-6255-489e-8f7e-2de9d8f1da86", "sighting_of_ref": "indicator--fac5d5a4-7d50-4ee9-8721-b47b6392f3f3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562bfca8-a60e-48a3-accb-423473e1e7ae", "sighting_of_ref": "indicator--c8d2f9dc-21e8-4565-8cd2-3faff83084e6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d298e2d2-9763-466b-846d-b0325a949bd9", "sighting_of_ref": "indicator--d9f9797c-1c55-463d-af22-785bb89af0f7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f78c3a1-2fc5-4c06-a124-b81d45093514", "sighting_of_ref": "indicator--d9f9797c-1c55-463d-af22-785bb89af0f7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f26ac28-59aa-44fe-a17f-a4c23a57a5e6", "sighting_of_ref": "indicator--d9f9797c-1c55-463d-af22-785bb89af0f7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed23b12-d822-4ef0-824e-7d8a10476ba2", "sighting_of_ref": "indicator--cd5466b8-de97-4c47-9795-cda0c09d7bff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f857221-a678-4b62-94e3-f0de2d6bcec3", "sighting_of_ref": "indicator--b1aedd81-bcf7-4424-a0ae-f8d690378731", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937759aa-b206-44cd-ada7-c86b37e3ad3f", "sighting_of_ref": "indicator--7fd05c2e-eec3-4b02-806d-6c6aa838c447", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c19560b-1550-4672-b7a1-c0992ea7fa10", "sighting_of_ref": "indicator--7fd05c2e-eec3-4b02-806d-6c6aa838c447", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19bcc39e-6111-4bc9-918f-1a3ad9da3f0c", "sighting_of_ref": "indicator--f23cedcf-a797-46ab-80f9-5669b231353e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7aad005-1eb0-48d0-be60-66bc09fefa10", "sighting_of_ref": "indicator--8c3fb0c9-a3d4-4613-899e-afe14d16d5f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e36ddf4-31a4-4243-8c3a-238d050e93f1", "sighting_of_ref": "indicator--8c3fb0c9-a3d4-4613-899e-afe14d16d5f0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a11620-c2c1-4b8e-9c67-a558c3305ccc", "sighting_of_ref": "indicator--fb4d77dd-baff-4e00-821c-de3543415ff9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a5aacd-902c-49f9-b226-a6d982b7538d", "sighting_of_ref": "indicator--da567391-eaf0-420f-967a-61b5881aed3e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53395bca-f2cd-4852-b5da-98019368dd3b", "sighting_of_ref": "indicator--da567391-eaf0-420f-967a-61b5881aed3e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220ce53a-d6b0-4317-a2b9-445560b77d1f", "sighting_of_ref": "indicator--da567391-eaf0-420f-967a-61b5881aed3e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0c8274-c795-49f1-a454-b1130c09e78c", "sighting_of_ref": "indicator--b5228957-43c3-49e7-8701-9c468ede51ab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c605a089-cdba-4680-ac80-0e718ed2590a", "sighting_of_ref": "indicator--eb7bce5f-708d-44ec-aa30-b154f58f19d4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661d5c67-dbac-493c-b513-d95223e85a04", "sighting_of_ref": "indicator--eb7bce5f-708d-44ec-aa30-b154f58f19d4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e52fb0-ca91-43e6-9aac-95d895c20696", "sighting_of_ref": "indicator--eb7bce5f-708d-44ec-aa30-b154f58f19d4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd8a30c-5da9-4be2-962b-bb0ca71c93e4", "sighting_of_ref": "indicator--299d8810-1b5e-4888-87fd-a19d3d2a9a8e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd7b911-c3c7-480b-a7c7-61bc83418051", "sighting_of_ref": "indicator--c95b7708-3e5f-4733-8e69-0c274989de8b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c0873c-d6e4-463a-89a6-8d844ddf4f58", "sighting_of_ref": "indicator--816a9bbd-1e47-4c13-b13a-638dcc7c9403", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7f26b0-696f-410a-957f-ce076537f433", "sighting_of_ref": "indicator--816a9bbd-1e47-4c13-b13a-638dcc7c9403", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374c4871-ac7c-432b-b1b9-875ffbf030c0", "sighting_of_ref": "indicator--42b1721b-dfa2-41a7-a642-47221b3ddd5c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26bb7e0a-4852-4985-86da-7b107b21050d", "sighting_of_ref": "indicator--42b1721b-dfa2-41a7-a642-47221b3ddd5c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ead17e-c42b-46df-b431-eb214bfccdf4", "sighting_of_ref": "indicator--0b9862f6-708f-42ec-90a8-fcb77d73de0f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8f54d4-27cd-4977-8b1e-0b1c427dc631", "sighting_of_ref": "indicator--0b9862f6-708f-42ec-90a8-fcb77d73de0f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce73b59-03ac-47fb-b82c-38dfa12ad9c6", "sighting_of_ref": "indicator--0b9862f6-708f-42ec-90a8-fcb77d73de0f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670cc5d5-d48a-474e-bb47-f40fdfd0710e", "sighting_of_ref": "indicator--d3931c9e-6bca-4fab-a441-334cd7cb296e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc9695f-4e91-4a2f-96c3-deb8459c8c54", "sighting_of_ref": "indicator--19302c27-ab22-4606-9ca3-84473d736210", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70902287-ecfa-4859-beb8-5a57b0e42a91", "sighting_of_ref": "indicator--19302c27-ab22-4606-9ca3-84473d736210", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c4e385-7e14-46d5-8c94-66a08ab1bb7a", "sighting_of_ref": "indicator--19302c27-ab22-4606-9ca3-84473d736210", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf967df-069b-4c0c-8ea6-3e129e2bd8f2", "sighting_of_ref": "indicator--469114b4-e3bd-4cd4-afdf-979b1008f5a8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37eac77-5140-43f4-a871-609b75468a0a", "sighting_of_ref": "indicator--469114b4-e3bd-4cd4-afdf-979b1008f5a8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5eec096-97a0-41a4-807a-f3a18c827502", "sighting_of_ref": "indicator--bc3331cc-205d-4a9c-a185-00b3c0cf2128", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ab7aef-9c03-42c5-ba76-caa04e96d986", "sighting_of_ref": "indicator--bc3331cc-205d-4a9c-a185-00b3c0cf2128", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b96f4f-4675-443a-9f93-09ba0faafdd6", "sighting_of_ref": "indicator--05b03ca4-074e-4991-9188-6aa8b00b5d9f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538071c9-1a99-4888-89d0-67b12e4ed1bc", "sighting_of_ref": "indicator--05b03ca4-074e-4991-9188-6aa8b00b5d9f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda081bf-887b-4dbc-b8d4-b700c9959c43", "sighting_of_ref": "indicator--44160a64-c711-4cc9-86cb-ebcd01b4e0a0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759a9a40-dbee-46f5-b5a9-7c4ef1903511", "sighting_of_ref": "indicator--44160a64-c711-4cc9-86cb-ebcd01b4e0a0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd93666-f2e9-4007-a18e-fa1273ec8b30", "sighting_of_ref": "indicator--457fdbeb-8702-4257-8206-d645ad08ed77", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18741a3-c665-478b-9665-b57fb71ad7a6", "sighting_of_ref": "indicator--78f7ded3-83ed-4748-914d-b5a96930cb4b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc74175f-30ef-47d1-ac62-da3b3364526b", "sighting_of_ref": "indicator--78f7ded3-83ed-4748-914d-b5a96930cb4b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d78c25d-d0d7-48f6-a38d-1acea8121e0b", "sighting_of_ref": "indicator--053c283c-1c02-4df4-96ef-f06c12f27687", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952a759d-ec4c-458e-8311-a556d367372c", "sighting_of_ref": "indicator--d8ae8de8-7234-4708-b3c2-bcb1105e42fe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad5b097-6bb8-4b34-8a1a-313778df6b89", "sighting_of_ref": "indicator--6d24df7d-9a19-44a5-a7bc-3b915d3530a1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64b530a-e2dd-4ca0-a40e-cfaa37e0d4c4", "sighting_of_ref": "indicator--45379e00-8340-496c-9645-f196caeb10e6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8db1c4-e260-481a-bd4d-c837874069ab", "sighting_of_ref": "indicator--d48e625a-ed24-4cd8-b86c-0e21c919567f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d905d26-d6a4-43b2-9d99-f3b4bb3484f1", "sighting_of_ref": "indicator--ec5fa9b2-c5a0-43f0-a187-30ce957df2ab", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daec0002-8076-47a9-868c-16815b7bb34f", "sighting_of_ref": "indicator--fa9e7f95-9869-4955-9bec-104bd0980dfd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92764777-8db4-425c-b31d-85223f7d542f", "sighting_of_ref": "indicator--fa9e7f95-9869-4955-9bec-104bd0980dfd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373bffc0-0561-40f9-9abe-1a77e4344670", "sighting_of_ref": "indicator--dfdac0ad-df6f-44b8-a0c1-d3ada164517e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3621e1fb-2d80-4155-a2ab-706808c3de68", "sighting_of_ref": "indicator--dfdac0ad-df6f-44b8-a0c1-d3ada164517e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151f4e55-6812-4ff4-9d6f-f1c68c37bd86", "sighting_of_ref": "indicator--7e6d6bb8-2bf7-4f90-9357-abf7c291ee62", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7101cc5f-5729-48a4-83dd-c4526a35fd5f", "sighting_of_ref": "indicator--7a11b5e6-7003-44a7-baa2-90d979f6738e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b6971f-0366-400e-9de1-4a6237312f34", "sighting_of_ref": "indicator--7a11b5e6-7003-44a7-baa2-90d979f6738e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8610f1-efa2-47dc-960b-b8b21f3b80bf", "sighting_of_ref": "indicator--52f6535f-1aa6-4e52-99a3-73142dd0de9e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c289c5e-2c62-449a-bed9-636cf0eea87d", "sighting_of_ref": "indicator--52f6535f-1aa6-4e52-99a3-73142dd0de9e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319ab715-83d4-4dd6-9ec8-95abe1e4bc12", "sighting_of_ref": "indicator--3e3c2855-6843-4a60-9d9d-6f00767557c1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5a80a8-5436-4978-9de7-15cdf464d165", "sighting_of_ref": "indicator--590f14a3-ceee-47e6-900e-c13dd4343e5e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d78b992-3669-41e5-8c8e-09421fe73c97", "sighting_of_ref": "indicator--590f14a3-ceee-47e6-900e-c13dd4343e5e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3d6109-9e4c-49df-abd9-9a44b59c9af7", "sighting_of_ref": "indicator--8cacccb4-0f0a-46d8-ad8e-838e268d402e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e75c08f-97f5-4cfe-a0a2-318b2d078b6e", "sighting_of_ref": "indicator--8cacccb4-0f0a-46d8-ad8e-838e268d402e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee70f2dc-f517-4811-ae14-3cd74dd9732f", "sighting_of_ref": "indicator--8cacccb4-0f0a-46d8-ad8e-838e268d402e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4cbbe1-7f2f-4941-836f-14fd37f95113", "sighting_of_ref": "indicator--b7bad0f9-604b-475a-88fd-9a195735ac19", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ad1a6c-f8a6-4d68-b59b-2b2e24a4cd8e", "sighting_of_ref": "indicator--f6bf9a08-a52d-434c-846d-dff700893124", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28553e7-a0f4-4b68-aac5-fd475e842a5e", "sighting_of_ref": "indicator--f6bf9a08-a52d-434c-846d-dff700893124", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c275aa0-fa21-42bb-a9d3-7bc15db98a1d", "sighting_of_ref": "indicator--f6bf9a08-a52d-434c-846d-dff700893124", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e791e54c-c622-412b-a6f8-833b9605972d", "sighting_of_ref": "indicator--3e264fa8-d73b-472b-bc2c-593f3a8918bf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef978b99-b8a3-42bd-bf98-d0c77c372e93", "sighting_of_ref": "indicator--3e264fa8-d73b-472b-bc2c-593f3a8918bf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da76707d-bab8-4925-864d-7f97125cfa45", "sighting_of_ref": "indicator--2a9d6768-0e76-42a7-abbb-36858ce97bed", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62a22aa-88d2-48e9-879d-5c8c3ec3bf78", "sighting_of_ref": "indicator--04948021-4207-4d6b-a440-07a1a7b67866", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fddbe080-ec47-40f8-b7b7-c79d7f9916f3", "sighting_of_ref": "indicator--472c07d9-3e54-4a96-86ea-6e1ecf87422b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ccd3e7-c8de-44d8-a2ab-3f89c14e7de1", "sighting_of_ref": "indicator--3dc45ce8-a7c9-4bad-9857-010aa1741572", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed916a0-82ff-44f2-8aea-ab4c32f47eb7", "sighting_of_ref": "indicator--3dc45ce8-a7c9-4bad-9857-010aa1741572", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747b6aca-f333-406d-aa8e-8045c77e10d2", "sighting_of_ref": "indicator--3dc45ce8-a7c9-4bad-9857-010aa1741572", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faab7d6f-6897-42c1-b4a2-77c33bb60feb", "sighting_of_ref": "indicator--3973d7b8-eb33-4abb-9128-65adc0ae21d3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38f155e-374a-4930-ae04-81cc97219237", "sighting_of_ref": "indicator--3973d7b8-eb33-4abb-9128-65adc0ae21d3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afa27c8-41ef-485b-b349-500c9ed093d0", "sighting_of_ref": "indicator--3973d7b8-eb33-4abb-9128-65adc0ae21d3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73561a86-1c57-4e99-b738-c5d40d653b80", "sighting_of_ref": "indicator--7dbeec0b-a3b3-4a7b-96f2-597772bd2eeb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082df280-12b1-41f0-a646-fe4a3317a3f0", "sighting_of_ref": "indicator--7dbeec0b-a3b3-4a7b-96f2-597772bd2eeb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154811f4-27ec-4dc6-a576-3e3ff5eb1177", "sighting_of_ref": "indicator--657beaf6-8e8a-4987-ab85-28e61be35067", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d1c84c-0437-4ab8-b729-aa10be6397e3", "sighting_of_ref": "indicator--657beaf6-8e8a-4987-ab85-28e61be35067", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64f9b02-8c91-49e2-b3c5-a81d307cd82b", "sighting_of_ref": "indicator--144e63a5-7897-4e38-85ea-571d4c3eeafc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14f2ded-6cd8-4119-9348-3d79fda3bbf8", "sighting_of_ref": "indicator--144e63a5-7897-4e38-85ea-571d4c3eeafc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9d1ef7-6ab0-4ff4-aea3-184dd940c3d8", "sighting_of_ref": "indicator--4d352dc2-0ce1-44aa-832e-07bfc080c94a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c870606f-54ef-49ce-a6e7-593e43ab9cae", "sighting_of_ref": "indicator--f3e401b8-f59f-4f8e-9784-c0713943185e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6143b3b6-8bee-443e-b45d-664fcda79fef", "sighting_of_ref": "indicator--646de930-b1a7-4ea1-818c-9c0b7ede27b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3257b8-6632-42c7-8963-20a7de2d2efc", "sighting_of_ref": "indicator--392b8e46-4495-4a99-85c2-023c1e3abff4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7c27a0-b956-41e0-b310-bd280a50b302", "sighting_of_ref": "indicator--2d9b4c25-aa76-4175-87e1-61720a6b02b5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e603163e-afe7-4fc3-809d-d5e60e98b45c", "sighting_of_ref": "indicator--fee6a449-74a4-4dc7-b9eb-26e7d2232d3e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec28018d-3b60-4f79-9ac3-affaefcf4957", "sighting_of_ref": "indicator--96d5f202-0d57-4d77-82b0-a41c12f0c99a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7957e166-17ca-4af4-8af8-7a863a51178c", "sighting_of_ref": "indicator--96d5f202-0d57-4d77-82b0-a41c12f0c99a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71841eb4-0249-43a3-a6b1-2bf9a67915c2", "sighting_of_ref": "indicator--d633a419-5be9-421e-9e18-35086bf50f00", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20df26a2-5130-47b6-928c-c4afbd707926", "sighting_of_ref": "indicator--d633a419-5be9-421e-9e18-35086bf50f00", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79bf3912-38b3-4945-b5f4-f94412edc20d", "sighting_of_ref": "indicator--d633a419-5be9-421e-9e18-35086bf50f00", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fce62a-b174-408a-b59d-96be94d9ab9c", "sighting_of_ref": "indicator--1f24b5ff-e54b-459a-a060-7255645fca7a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4d3684-8efb-4971-b7e0-cef793043929", "sighting_of_ref": "indicator--1f24b5ff-e54b-459a-a060-7255645fca7a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72aa2a30-35dd-4522-b4ad-b196ad8082b8", "sighting_of_ref": "indicator--1f24b5ff-e54b-459a-a060-7255645fca7a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e95992-edd1-4427-9c59-ee17ffdeeb92", "sighting_of_ref": "indicator--857eb6fe-6d13-4852-b85e-bf2c25bad9f8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e8e959-048a-4fa1-aae0-2121b1f18155", "sighting_of_ref": "indicator--78374c6f-97a2-4ea8-b836-c6695e017e32", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02364c3-b3c6-45b4-bac7-62949414aa50", "sighting_of_ref": "indicator--20b4cd7f-8da3-4e35-9b10-e38d74340b52", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4eaec8-22c5-4b9d-9e57-600bb43dfa7f", "sighting_of_ref": "indicator--20b4cd7f-8da3-4e35-9b10-e38d74340b52", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db8f429-e011-42f9-a9c2-310d9771f48a", "sighting_of_ref": "indicator--20b4cd7f-8da3-4e35-9b10-e38d74340b52", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8701606-6f5a-4894-a317-469601d05f62", "sighting_of_ref": "indicator--ca4aa424-a0d7-4446-904d-019c6e134698", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17415b5e-ebae-488e-a9c2-5ae8e2cbaa60", "sighting_of_ref": "indicator--ca4aa424-a0d7-4446-904d-019c6e134698", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9cfee5-5f1f-4347-94d9-b352fdb02425", "sighting_of_ref": "indicator--ca4aa424-a0d7-4446-904d-019c6e134698", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43444635-3162-4c7f-bc48-5a18e166bb7b", "sighting_of_ref": "indicator--72d2d675-9f8d-4bd0-a342-ecb31d99423f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0058e81-84dc-46f4-ba5c-fa66e5e62b19", "sighting_of_ref": "indicator--72d2d675-9f8d-4bd0-a342-ecb31d99423f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb1bb35-cf23-461a-a228-b292971474ac", "sighting_of_ref": "indicator--8ea3774a-5f8a-4292-9680-54c526c86d4b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcca6389-b077-44a1-b602-fe0b56d7f7c3", "sighting_of_ref": "indicator--8ea3774a-5f8a-4292-9680-54c526c86d4b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adf2eba-efe7-4b85-a64b-ccbbd9dc61ef", "sighting_of_ref": "indicator--8ea3774a-5f8a-4292-9680-54c526c86d4b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc17871-4ac2-46f6-b06b-39df74a1f7ea", "sighting_of_ref": "indicator--d262a2dd-2788-4a77-a4fb-7a94b38d0a61", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5acbbdd-6ca0-44ff-9f61-953f4deeb539", "sighting_of_ref": "indicator--d262a2dd-2788-4a77-a4fb-7a94b38d0a61", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b678052-e734-4f3f-99dc-0ddd5b4c128f", "sighting_of_ref": "indicator--d262a2dd-2788-4a77-a4fb-7a94b38d0a61", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72079b7b-6113-411c-a69d-8bded39fcda5", "sighting_of_ref": "indicator--1a889d79-ee9f-4f7c-9204-1aab5dfe3791", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84c99a2-f2ef-46f3-aae2-e9eed5927535", "sighting_of_ref": "indicator--1a889d79-ee9f-4f7c-9204-1aab5dfe3791", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a9bdab-f576-4ed7-bea6-4696c9487e5a", "sighting_of_ref": "indicator--f4816ff8-3b9c-4388-ae9a-7883cccbf968", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a3749a-11e5-4559-af22-d06fa3f0bf80", "sighting_of_ref": "indicator--f4816ff8-3b9c-4388-ae9a-7883cccbf968", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c65ba68-4078-49fc-9dda-94ec4a73cbfa", "sighting_of_ref": "indicator--46c7fac1-c981-416f-82a8-38e2cd19ef55", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a199567d-0f9a-4a41-a92b-35490ea709a3", "sighting_of_ref": "indicator--46c7fac1-c981-416f-82a8-38e2cd19ef55", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55139795-9282-46cf-a40f-c48decdaa642", "sighting_of_ref": "indicator--b5dac577-6796-43ca-a1fd-168cba168167", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7126385e-0843-4fee-8a5f-a9104ec02639", "sighting_of_ref": "indicator--89e371c6-22a8-4681-8f13-8a82ba3dd07b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86bd2df6-2e41-4398-a900-5a47b68300ca", "sighting_of_ref": "indicator--89e371c6-22a8-4681-8f13-8a82ba3dd07b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e04635-2879-458f-a0f9-cb0d6692f7dd", "sighting_of_ref": "indicator--89e371c6-22a8-4681-8f13-8a82ba3dd07b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ec734d-ba35-4e6b-a54c-8ce649901d47", "sighting_of_ref": "indicator--a92f407c-d93a-45b7-9225-05a1f9216d13", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e368f1-9ab7-4dbc-8872-f80cdf6bec8d", "sighting_of_ref": "indicator--a92f407c-d93a-45b7-9225-05a1f9216d13", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aba1e54-db68-4f9b-90d6-3b7e831cdda1", "sighting_of_ref": "indicator--a92f407c-d93a-45b7-9225-05a1f9216d13", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d352245-7c4f-43df-a6a0-e9ae628019c7", "sighting_of_ref": "indicator--832191c7-aaf6-4ddc-804c-7577e478e610", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f59b1f-bc83-47eb-b7cb-21f7842ddfe3", "sighting_of_ref": "indicator--979efc8f-d5a7-4fae-a596-b76a1422bd8b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8224be-9896-4284-812d-48bfa8b6fe6a", "sighting_of_ref": "indicator--979efc8f-d5a7-4fae-a596-b76a1422bd8b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7aa9dd-1287-40dc-b7db-8f85839bbd22", "sighting_of_ref": "indicator--9f78eab7-9050-42d6-af46-b66d1664c760", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f4c570-6c98-4072-95fe-a3e69c82b619", "sighting_of_ref": "indicator--73bb41e1-9fab-4e0c-a216-b80b989229c4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df7eb42-c56a-4b94-ae35-193304684cc3", "sighting_of_ref": "indicator--73bb41e1-9fab-4e0c-a216-b80b989229c4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14abd996-ad0b-4572-983d-57f87d27efa7", "sighting_of_ref": "indicator--73bb41e1-9fab-4e0c-a216-b80b989229c4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e09c25-b923-4e1b-a307-8c19deddd1b3", "sighting_of_ref": "indicator--7b12b2b0-1373-4c0e-b8e3-6a6f337c3cf4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e250823-7555-4642-9929-40639528deb6", "sighting_of_ref": "indicator--7b12b2b0-1373-4c0e-b8e3-6a6f337c3cf4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd594c77-5655-49c0-893d-c894916b24a5", "sighting_of_ref": "indicator--7b12b2b0-1373-4c0e-b8e3-6a6f337c3cf4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c536de1-e7b0-4609-a43a-8acdf2d42353", "sighting_of_ref": "indicator--8ce4e672-c520-4b10-b5e3-51039b47c6b9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e77a6a-fa7b-49eb-b51d-d8a5122a086a", "sighting_of_ref": "indicator--8ce4e672-c520-4b10-b5e3-51039b47c6b9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2eb406a-7ae9-4f6a-8ebf-972ab53c966b", "sighting_of_ref": "indicator--8ce4e672-c520-4b10-b5e3-51039b47c6b9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7c4111-5355-4b7d-a396-80626f8a0fcd", "sighting_of_ref": "indicator--f3bfd549-79c5-4435-a51b-05fa1de0acff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f3904e-c7a8-4c2f-8492-8612fca8c63a", "sighting_of_ref": "indicator--e588c8c7-2754-4bfd-a6ac-7cf89ff4773b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987d5db8-126b-4c51-8441-f643c8036120", "sighting_of_ref": "indicator--83ec2f2d-c7c5-434e-808d-f6ffd04f747d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb70146e-db62-45ce-ba5b-7adfce6b1c4b", "sighting_of_ref": "indicator--83ec2f2d-c7c5-434e-808d-f6ffd04f747d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aac7a3a-eca3-45f2-88d0-8c4c2db7f733", "sighting_of_ref": "indicator--83ec2f2d-c7c5-434e-808d-f6ffd04f747d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0160bc3-5288-4f79-b701-b7145eb506e7", "sighting_of_ref": "indicator--57f0ced9-717c-4331-8eb5-bb1e32d16bb2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab21e34-5bfa-4bb1-b4f8-ecf6379a07d0", "sighting_of_ref": "indicator--487fdc9d-5774-40b4-b66f-d15d91722334", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac6d246-479a-4e2f-8da4-c51f8fc89431", "sighting_of_ref": "indicator--a5a2d6ed-cb21-4f51-a863-7a35c0983563", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e96112-ef57-444c-8757-d5b5f6d1f7b3", "sighting_of_ref": "indicator--7f8fb458-ce50-4a8c-96b7-3c14221a7f5c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a51aaf5-1990-4b4e-a40e-479c493a0c17", "sighting_of_ref": "indicator--0533e2f0-ff4a-49a4-baa3-dad2bf434ce5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7edb75-d195-4356-a054-341b7cb030c7", "sighting_of_ref": "indicator--6911cf71-d451-49bc-8874-644b12ecf4c3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd68f2df-62f6-4d7f-aa61-3ca036bfd7a4", "sighting_of_ref": "indicator--2b974c7f-cd30-40e5-8a64-c64b72908305", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb3b906-17c0-4ebf-b1aa-7e270366f77b", "sighting_of_ref": "indicator--2b974c7f-cd30-40e5-8a64-c64b72908305", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49c6720-c1cd-4fb4-98f2-cdc49a165f7d", "sighting_of_ref": "indicator--2b974c7f-cd30-40e5-8a64-c64b72908305", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d26651-9d5d-4e1a-bbc5-5724e48bec14", "sighting_of_ref": "indicator--9446f9a0-3089-4fd8-9504-ff649d3e1b3b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1404d5cf-a466-4feb-9006-3b63cd35373e", "sighting_of_ref": "indicator--8057883c-40d2-41c9-a5c2-7f47ed4fd2a6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b8e753-63ec-4c44-86bd-f98ec0434c04", "sighting_of_ref": "indicator--8057883c-40d2-41c9-a5c2-7f47ed4fd2a6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c09a1d-a307-414d-94df-99a040d7deb6", "sighting_of_ref": "indicator--8057883c-40d2-41c9-a5c2-7f47ed4fd2a6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d44a3cf-9bcf-4399-869b-938cd4bb320c", "sighting_of_ref": "indicator--1a5e6f56-b673-47c8-a032-b1b9632ff1b3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140513c9-3373-4092-8582-0e0e6387b11c", "sighting_of_ref": "indicator--751fb269-161a-497b-a574-efb18c22f60e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85b1498-8e10-467d-b6ec-1c93e5ea18cb", "sighting_of_ref": "indicator--23f965e5-516a-4188-ad41-df47c7db7cd7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01109eb1-a538-4c24-898e-507387dd7be9", "sighting_of_ref": "indicator--23f965e5-516a-4188-ad41-df47c7db7cd7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d1d820-3162-48a9-8066-ea7186e46fbc", "sighting_of_ref": "indicator--e6539db3-afa4-4d70-8d32-423ed11fc7c1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a30f3f5-40e8-4c2c-ab87-de2d9c70954a", "sighting_of_ref": "indicator--d3b54979-2032-47c4-ac0c-049f3bd955d4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1126af-56ed-4d52-a4a9-8986961d7d38", "sighting_of_ref": "indicator--2be3a499-d5b2-41f7-a888-e15e6949eee9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917441b0-315c-46c3-a187-b802d074ae9b", "sighting_of_ref": "indicator--7dc3c3ec-97a3-4566-80b7-c3fd5212de70", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3972b02-602c-47c3-a1d1-c8486beb751b", "sighting_of_ref": "indicator--aabbf4d7-4809-4201-8743-b70eba63b0ba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8f2fdb-d5d3-4224-82b4-7b16cf844539", "sighting_of_ref": "indicator--4b62a888-02e8-4657-8720-3050eeb295d7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3d2026-b1f1-49af-8ade-3efcadda0904", "sighting_of_ref": "indicator--b4d6b0bb-e9ad-4bf4-ac1a-5551f7b386d6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7dced6-c982-46b4-a842-e99003d69a77", "sighting_of_ref": "indicator--4198b1a6-28e1-42f5-b503-9461bd9aa054", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2843dc06-c859-466b-a4bd-80d7541226d2", "sighting_of_ref": "indicator--4198b1a6-28e1-42f5-b503-9461bd9aa054", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7f3bfd-be0f-46b4-b76c-24d26dfae28e", "sighting_of_ref": "indicator--da9bf6cc-8cc1-4fb3-a710-f38ae57c9864", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7d5ac6-e069-4774-b574-4bceb61544e5", "sighting_of_ref": "indicator--23c69b2a-9afd-417d-89a0-d609e127acb2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968977e9-de8a-4e1a-b828-24cf4d16e159", "sighting_of_ref": "indicator--fc2b7d50-c710-4b04-a98e-adc0ebf1c032", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e45610-1086-449c-ab11-bb0da08f4d41", "sighting_of_ref": "indicator--d480a51c-f338-419e-afb2-580465dccfe1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f13d073-1fa6-4a8d-b40c-79a72b6f1d9b", "sighting_of_ref": "indicator--f61027e6-727e-4416-967a-38ed9b7b2bf6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80fdb45-dc7a-4ce5-921d-126c33da8e6e", "sighting_of_ref": "indicator--672e95a5-02b3-42b6-af95-e0e5f176d951", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538dfd6d-2856-4431-a788-8fd98f96db15", "sighting_of_ref": "indicator--ac9b328a-5229-4dd5-908a-1ebd25d37f26", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43252cf-4743-473c-be3d-85c688b3d9ca", "sighting_of_ref": "indicator--bfbc072c-bdd8-4e25-b2f6-3a211f93aaf0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a321b5-814d-42e2-a756-aceb2cc67299", "sighting_of_ref": "indicator--c5ce22e7-2c8f-4b3c-b2cc-669eeecde791", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b84db5d-a9a8-4554-8a46-11c96f18af4c", "sighting_of_ref": "indicator--d52e2e95-1056-4e1a-ad9a-528c813eb039", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02e4b95-47e0-4882-9b63-214334d2403a", "sighting_of_ref": "indicator--c33d829a-f426-4d81-914b-942042297bd7", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09fb545-c6be-4f90-842f-ed1b8315bb85", "sighting_of_ref": "indicator--d00367cb-4b8d-4dea-a8a2-5d7555f10878", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984f3583-a7e6-4a5e-a1de-2ff61d0cdbac", "sighting_of_ref": "indicator--05e0956b-2470-437a-9e5b-ff45e4908730", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76813200-8442-47a3-8e4e-f9e8bb12d138", "sighting_of_ref": "indicator--40cc541a-d166-4595-a328-201d387507c3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3340e0bd-833a-434a-8d64-3fe625e68441", "sighting_of_ref": "indicator--24fbd39f-ddcc-4bfe-81b3-b708a44a4479", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5e21cb-49b5-4c68-9863-7059b1096716", "sighting_of_ref": "indicator--000318de-6b0d-412a-a6c1-0e1a0396d968", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfe53d3-62da-4fb1-a5e0-de0d5180ddc1", "sighting_of_ref": "indicator--c729642e-fcf3-459c-972b-61350ccf0d0b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c1e45c-ab7e-43aa-8ae6-2bd6ba8db79d", "sighting_of_ref": "indicator--c729642e-fcf3-459c-972b-61350ccf0d0b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a730add-c5d3-4d52-aa7c-4af2c1e242da", "sighting_of_ref": "indicator--c729642e-fcf3-459c-972b-61350ccf0d0b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd61c882-9827-4693-8668-9cbf58e94568", "sighting_of_ref": "indicator--187426ef-dd62-446d-ab16-78a3aa34faac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590d64d4-281a-478f-bd76-038ba071ce5b", "sighting_of_ref": "indicator--26eb3fc8-97f6-4a59-9ff2-6dd33cc3f194", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48afe52e-35a0-4041-ab05-76c542dc443f", "sighting_of_ref": "indicator--413fc203-ec6d-4384-bd48-535f3b401d35", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c69f82-dde5-433c-9487-b952ef222e29", "sighting_of_ref": "indicator--746dabca-21b2-42f7-b718-45a3ff75e009", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b8747a-8f52-49cc-b35b-18cad040f72c", "sighting_of_ref": "indicator--e6588825-76a9-48c1-a117-4ac7cd16fbe8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f52e8e-4ccc-4f02-8050-95e0a28ebb40", "sighting_of_ref": "indicator--0249ca90-2cf3-4ce3-a1b0-db96427aac98", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ecbaef0-e1d3-4f6c-846d-38e24cf446a9", "sighting_of_ref": "indicator--c1a7a2b6-1ea6-488b-aedf-d949165dec74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900ced75-a248-44f8-84c0-c985c88e1390", "sighting_of_ref": "indicator--dc2541e7-069e-43d2-bd11-be41bc3b2acb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186756d7-1c50-48dc-8a0a-3c7b2f6a4ddf", "sighting_of_ref": "indicator--4e6b43c7-0d76-42e4-b56f-d2195db63a0f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4528ad1-75a8-4ebd-bb78-27bd6907b8ff", "sighting_of_ref": "indicator--7b5930b6-707d-4564-8742-b90ef0207795", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f0d744-8ff2-45c6-a4ce-91bddd83eb3d", "sighting_of_ref": "indicator--2552a270-3577-4ff5-aa6e-6b037be30a6f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf642ff-f369-44e0-b2aa-3a9e3cf3e76f", "sighting_of_ref": "indicator--e7b13b31-c3f6-44ae-92e0-ccfde87a20d5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064db930-46f4-4dce-8b03-c948a7c27369", "sighting_of_ref": "indicator--0646d08d-387d-43d9-aa01-4004ea9ef148", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7297b34-c1de-494f-8ee5-daec93d8b100", "sighting_of_ref": "indicator--fc3dd1bc-093e-43d5-9acb-b18e5a976757", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03129fc-4c97-4dbd-a81b-e590e1905062", "sighting_of_ref": "indicator--2231df14-279b-4bcb-a6f9-62121969e9c0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86390460-d72b-4045-b49c-215a7df6d993", "sighting_of_ref": "indicator--2231df14-279b-4bcb-a6f9-62121969e9c0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc77667-1916-41a8-9ac7-acb5b963e717", "sighting_of_ref": "indicator--a74de58e-1e97-47c5-8791-11b45c2ab7d3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888c175a-4a9d-45b8-af86-64f601e593f0", "sighting_of_ref": "indicator--7e557307-9383-4995-a2cf-1ebbdaf04274", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddae8f6c-c5af-4e87-852e-775ca6f13229", "sighting_of_ref": "indicator--22b5875b-c2c0-4f67-b2f6-230bb93fd537", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38eb17e7-edec-4b24-9aae-b724682cb69c", "sighting_of_ref": "indicator--6cb694b4-316a-4f23-9194-bbedf49580db", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207310fc-81cd-4310-9188-af04e7cfbe56", "sighting_of_ref": "indicator--bea7f3f9-12c3-4364-b0e9-a0a503e4b8bf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edde3409-0f73-4aff-9ab8-ec85245f1cbe", "sighting_of_ref": "indicator--926092d3-a40b-4b15-98a1-8a21ce225332", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40ec186-2449-46eb-a994-c69c8385fc88", "sighting_of_ref": "indicator--5a0aabeb-ab15-4a83-9ef7-dab230f74c0f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fae485-3165-4afd-b242-fba94c700615", "sighting_of_ref": "indicator--9ddb4e55-c8f4-4daa-b803-956285dbe29c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067a5ab8-e75f-42e0-ae60-d455e73b1965", "sighting_of_ref": "indicator--e02e8813-2b42-481f-8c61-ea66fb863b91", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c064bd-ec70-45a8-b6d7-a06b8e0b81d3", "sighting_of_ref": "indicator--97410bfd-8694-442d-9bef-e299630e5234", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e28676f-7da6-468a-9d33-13496ace2049", "sighting_of_ref": "indicator--97410bfd-8694-442d-9bef-e299630e5234", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860bfd08-fcba-4629-863e-6a59e0e67f7e", "sighting_of_ref": "indicator--03c290f6-9e95-4c2f-925e-a8318ea9b011", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0e7af1-dce2-4504-a964-6692c413869a", "sighting_of_ref": "indicator--bb64aa26-60ec-4771-b365-ff2e4586396c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90464756-8ae0-4416-9f69-819bd7df0d98", "sighting_of_ref": "indicator--0e644324-b326-43c5-b9f0-1e9bd74a1318", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b0e915-551c-46a1-9c2b-05a26fd18e15", "sighting_of_ref": "indicator--0e644324-b326-43c5-b9f0-1e9bd74a1318", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1c3016-a4c8-481a-ad3c-ae3d732e08e7", "sighting_of_ref": "indicator--967b8186-cc6b-44a7-a80e-a71eecdda99b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d95f19-46f7-4140-89e5-14959e5ddc90", "sighting_of_ref": "indicator--21289b15-a740-464e-8139-262e400e5c7c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18db43f-7a98-4738-8f08-4ba75e114b4e", "sighting_of_ref": "indicator--3259d323-936b-4df8-8340-e3cae07c1d1a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819f333b-f789-400a-a389-055abb2be69b", "sighting_of_ref": "indicator--193f9f81-7e09-429d-8743-af6914e781b9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2ed1b5-0099-4224-9457-ca84cdc910a8", "sighting_of_ref": "indicator--01b550e1-585b-4b99-9426-e5ce4bb06ea0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d12c01-cca3-48db-9f78-6bbf90c978a5", "sighting_of_ref": "indicator--23690779-fabb-46de-8291-b2c0cde37b8a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31be4755-4a5c-4d07-829d-f16b5b860e0d", "sighting_of_ref": "indicator--23690779-fabb-46de-8291-b2c0cde37b8a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91c876e-6e83-4a74-960a-2d3a6b956e71", "sighting_of_ref": "indicator--7929187d-8fc0-4101-9f7e-a8832d95eb84", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4578047-0b45-436a-9c1a-cc4c879d67ac", "sighting_of_ref": "indicator--d49d0a2d-b582-4ef2-bebb-cd75ab605db0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfe8959-7525-4249-bd6e-face4263d1ec", "sighting_of_ref": "indicator--1bb682fd-abd8-48e3-aa06-cc361e3dbf13", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53a6b5b-a2d0-46e2-a8b3-c8588082b5b2", "sighting_of_ref": "indicator--efca0127-9341-4a25-9110-3e1386a9b4e2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98cf542-3196-4f8d-998c-191b67e8b77b", "sighting_of_ref": "indicator--eded95fb-4530-498f-a2f6-7c941b49710f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27e3b3e-990a-43c2-ae8a-6ad8425bfd20", "sighting_of_ref": "indicator--eded95fb-4530-498f-a2f6-7c941b49710f", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cdddd9-9081-4710-8940-66a45c00324b", "sighting_of_ref": "indicator--a3dba6e5-117a-457f-bf4e-88d1782c3acf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00241494-4298-472f-a049-482f274a56ad", "sighting_of_ref": "indicator--a3dba6e5-117a-457f-bf4e-88d1782c3acf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25192267-1aa8-4dbc-82dd-6e12dd0246e6", "sighting_of_ref": "indicator--a3dba6e5-117a-457f-bf4e-88d1782c3acf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce66ec6e-2b8e-4ffe-b2c2-586ac6d57b53", "sighting_of_ref": "indicator--de071f8b-c89c-4639-9ae3-390984ae1156", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fb9f70-b0c5-4e32-98d0-61b47dbcac91", "sighting_of_ref": "indicator--6ad540fd-8763-4397-acb6-8e0c33e9a912", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c94870-0b44-4ae5-9a57-5ed251bdbea1", "sighting_of_ref": "indicator--a5dd1484-b363-44a7-8b8c-f66e404bb48c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d776ae4-5266-47d2-8560-90116c2d2ee0", "sighting_of_ref": "indicator--a4f71f56-7faa-4db2-86a8-ba750359e128", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fc672b-4f97-4f37-99f2-7ff9faf68df5", "sighting_of_ref": "indicator--6d28a7c8-6e73-438f-8a2c-22bbccc88483", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfa23c9-868c-4805-bfe0-06b46b028810", "sighting_of_ref": "indicator--1be5213d-4a00-48ce-a8b3-647558446d6f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d53baf-5c32-458b-a089-66630b0c5427", "sighting_of_ref": "indicator--14bc2dc2-3448-456f-adab-a3f53757542f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed819a34-528c-445c-870e-33ccb07b8eed", "sighting_of_ref": "indicator--105ecf88-2264-4418-930a-a912f10b74db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08d48f2-26fa-49be-8437-6fb3ea98d59a", "sighting_of_ref": "indicator--b79035c4-a126-48fb-8444-645650424049", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82139e2-ab6d-4ef6-8299-58a31aae56f4", "sighting_of_ref": "indicator--673053cb-e917-40c9-9956-c77c5e47a819", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dccdce8-f357-4b7e-9ee5-b0f6fb129d22", "sighting_of_ref": "indicator--cc09349f-bcc1-49f8-9535-c3d8bbfc8f32", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9caa6f51-0ad6-4ba1-9d66-75b00044a8a5", "sighting_of_ref": "indicator--cc09349f-bcc1-49f8-9535-c3d8bbfc8f32", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad5713c-d8b2-424d-867b-1baecde61d7d", "sighting_of_ref": "indicator--cc09349f-bcc1-49f8-9535-c3d8bbfc8f32", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d34ce6-c9e8-4114-908f-6ddc2492860e", "sighting_of_ref": "indicator--dd2cedfe-31b0-4e62-beb5-3e94afd7cbe4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed922ee-c0f6-4a54-ab1c-7b61ac180528", "sighting_of_ref": "indicator--7bb42cea-a859-495a-b93f-13be242095b3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71cdc502-255a-432f-a853-0fbdba6eb2a2", "sighting_of_ref": "indicator--92ce832c-aec7-4919-add0-a834b44eceb3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90c9cd9-1e5f-46c1-9cf6-490be4782d3d", "sighting_of_ref": "indicator--7b633480-1d77-4d14-a2e6-13bb199c98bd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6826c442-cb5f-4c67-a82d-26c8ee4978eb", "sighting_of_ref": "indicator--b8c34a1a-2228-41af-ac70-fb5a9a0689a7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4d71c8-d128-4be4-b992-1f25aa84821f", "sighting_of_ref": "indicator--b8c34a1a-2228-41af-ac70-fb5a9a0689a7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6d51ad-e40c-438f-b550-4063c5039972", "sighting_of_ref": "indicator--ecdef998-7eac-49b2-852b-7c7fbde90c2a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbc66c5-9efe-439a-9d0a-46c05a0ec275", "sighting_of_ref": "indicator--ecdef998-7eac-49b2-852b-7c7fbde90c2a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0632c695-5797-4dfe-b15f-1cadb8f7b83b", "sighting_of_ref": "indicator--ecdef998-7eac-49b2-852b-7c7fbde90c2a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7ebf8e-c047-4960-aa48-bfd37de54d1c", "sighting_of_ref": "indicator--fa34c96e-44eb-4de2-968e-d9d016e04604", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd108d0-25d6-42cf-981c-2f719e0ca3e5", "sighting_of_ref": "indicator--fa34c96e-44eb-4de2-968e-d9d016e04604", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1370ca2-fcfd-4ef9-bb1b-a72d576fccb9", "sighting_of_ref": "indicator--fa34c96e-44eb-4de2-968e-d9d016e04604", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453bb6da-b5f5-4661-9ad1-924c8181778e", "sighting_of_ref": "indicator--83581101-8702-4757-bffa-c7613306b50d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3e4140-d705-4940-a160-8699088c3208", "sighting_of_ref": "indicator--03ae6953-6a26-477f-a694-e8e4013746f3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88bd415-7c03-45c1-aadc-52dda6e031aa", "sighting_of_ref": "indicator--03ae6953-6a26-477f-a694-e8e4013746f3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c52837-484e-4bbd-bce8-8dbc768449b3", "sighting_of_ref": "indicator--03ae6953-6a26-477f-a694-e8e4013746f3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6975cb07-d346-49fb-87c1-2cf229462497", "sighting_of_ref": "indicator--37ab8ff2-e9f0-4fb8-b72b-edee4cda94f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa0c8cb-3f95-4aae-baef-d5340d4526e4", "sighting_of_ref": "indicator--37ab8ff2-e9f0-4fb8-b72b-edee4cda94f0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabfd1c6-13f2-41cc-b7cb-939443b15590", "sighting_of_ref": "indicator--37ab8ff2-e9f0-4fb8-b72b-edee4cda94f0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e56c20f-e39f-44da-9fd7-097ef8c8c483", "sighting_of_ref": "indicator--8817b9e8-b146-44f5-9fa8-73c174ff0f61", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4d5bcc-63e0-48b4-b030-1a80eda64f9c", "sighting_of_ref": "indicator--df88e353-6c7a-4deb-a50d-8ac6c540d836", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a42409-895a-46c4-88d1-26c0cc12bdea", "sighting_of_ref": "indicator--df88e353-6c7a-4deb-a50d-8ac6c540d836", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4cec5b-78be-49d7-a922-c2472fc12aee", "sighting_of_ref": "indicator--61c4a3bd-995a-41fd-9f74-49d539307f08", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be75270c-cea3-4367-ba0b-0eff01426430", "sighting_of_ref": "indicator--82090574-b0ea-4933-ac28-ebb4766bf93b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49b6ffb-f826-4f64-b461-29bb69e9ffaa", "sighting_of_ref": "indicator--e17d4ecc-5bc0-45ee-9f46-8c2c1876c889", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562aa411-bede-4711-85fc-3b5a99a6d032", "sighting_of_ref": "indicator--e17d4ecc-5bc0-45ee-9f46-8c2c1876c889", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31be14c-2172-494c-9c12-b6e6ef471af7", "sighting_of_ref": "indicator--e17d4ecc-5bc0-45ee-9f46-8c2c1876c889", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb980293-87b3-45ee-a054-aa92700f0391", "sighting_of_ref": "indicator--d1e56b29-f1f1-425f-a98e-e663037fa5c3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ab83bb-e816-40b2-99ae-1588cda6b973", "sighting_of_ref": "indicator--d1e56b29-f1f1-425f-a98e-e663037fa5c3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b47ae7e-f03f-436b-bca5-ef3a5b98674b", "sighting_of_ref": "indicator--05469133-a9f5-474d-b073-0cafd9021985", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97dd5f9-84d0-4c87-b5b7-310edfcb81b6", "sighting_of_ref": "indicator--05469133-a9f5-474d-b073-0cafd9021985", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2536fc7b-384d-4d91-8cac-230a5b94f252", "sighting_of_ref": "indicator--05469133-a9f5-474d-b073-0cafd9021985", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e728e7f-cf7a-4d5e-8989-c2dd7b2f3b37", "sighting_of_ref": "indicator--78e72947-f8ee-4d0b-a4e2-b568f0e2da50", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75bee165-8b31-4bff-8989-4263e519823a", "sighting_of_ref": "indicator--0f3d67ff-e901-46cd-9008-4f00764653d8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf683e4b-2b8f-4197-88ac-e44ad1502d7a", "sighting_of_ref": "indicator--63fc86e5-f7fb-44d7-b382-0dc855750f7d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3214f94f-da47-48f4-b033-f88efaecb62a", "sighting_of_ref": "indicator--f9c31c2f-9d77-448a-8085-d4e5801dd319", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75803ee-c9ff-4238-b4a5-7506c3ba19c5", "sighting_of_ref": "indicator--03644f36-af23-48bb-9c1a-76d840c1ee34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e20cda-be36-49a5-8b62-38e2fa6c25cf", "sighting_of_ref": "indicator--e171fd47-bd46-4f51-941d-705c422517ee", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3b8ca9-d44b-4999-8179-edad64c3f50d", "sighting_of_ref": "indicator--d4b13a20-8ade-4f9f-9efb-2887a69960df", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f779b497-f8db-411f-a539-54f0454af9df", "sighting_of_ref": "indicator--e5f42a0e-5ae3-46d6-87db-522744595a27", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a3376a-211a-42a3-ac8c-dd6de7766915", "sighting_of_ref": "indicator--b753f6aa-0908-4297-9ca1-dec53a9bb461", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31baf032-6e00-41b5-b843-27d4a0976c1f", "sighting_of_ref": "indicator--0f5c8978-671b-4d30-89b5-4c5c90f2ebbc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0586e29f-c279-4d5d-9516-e249e777b5ef", "sighting_of_ref": "indicator--ad134cdb-ef60-41c1-9717-622ca4f4e7a2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e28bba0-9303-408d-abf6-a30aabdaaa3d", "sighting_of_ref": "indicator--464e0e64-ac6c-45b8-8e97-f53e16f0da2f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcc07b8-97cd-4f4e-a9a1-d2ad86cece94", "sighting_of_ref": "indicator--376efba1-264d-4645-95ad-451b5a954f49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321494c1-bea8-4d53-a822-7ce8550365e0", "sighting_of_ref": "indicator--13af3a4b-07d2-4a06-8372-b0dfb66ca3d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9498cdce-7af5-496e-9395-b424d19c54b6", "sighting_of_ref": "indicator--5e7c65b6-1ef3-4264-8840-2f81c933ea32", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491e757d-b2d2-4f5e-b91c-b097a678affe", "sighting_of_ref": "indicator--5e7c65b6-1ef3-4264-8840-2f81c933ea32", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0889acb-c70c-43be-928b-c5cca024151b", "sighting_of_ref": "indicator--5e7c65b6-1ef3-4264-8840-2f81c933ea32", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd93b62-5242-4251-b5af-8b715a74a83a", "sighting_of_ref": "indicator--3b021a1f-2aa2-4c6d-a104-d891d175fff3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b759edc2-a8ff-4511-b4f8-b5761bc8b557", "sighting_of_ref": "indicator--04b79b1b-93a4-4c2c-a5e9-6547c87ef02e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c6e2c4-7238-43a6-a6a9-bf085fdfbb8f", "sighting_of_ref": "indicator--2adafc7c-f4e4-46af-ac3b-5c1a45183d2e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6746657d-1699-4a3f-8f51-c71b2b785766", "sighting_of_ref": "indicator--b13d0e50-0645-47c8-be7a-8ee340a61729", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd40174-49c2-4fe1-943b-9c9ddaf3b777", "sighting_of_ref": "indicator--b13d0e50-0645-47c8-be7a-8ee340a61729", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5356d8e4-0e59-45b0-8225-eab6f2050bbf", "sighting_of_ref": "indicator--01198879-1aeb-4e70-a9da-a77ba8f6884a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356bb767-15c8-475e-a3e0-25b89c16b105", "sighting_of_ref": "indicator--01198879-1aeb-4e70-a9da-a77ba8f6884a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3514b9a-bb1a-4c54-984a-f87ff6b569a8", "sighting_of_ref": "indicator--01198879-1aeb-4e70-a9da-a77ba8f6884a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e23c8a-4f41-463a-b30a-4ef6aaf9f2ea", "sighting_of_ref": "indicator--f4035d26-1a26-457c-abb9-a2d2ec9f092d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bf94b7-958a-439d-9e7a-cbc513ce92f9", "sighting_of_ref": "indicator--f4035d26-1a26-457c-abb9-a2d2ec9f092d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0154dbde-9730-4637-87ac-e672d7992be7", "sighting_of_ref": "indicator--97233d06-d86b-4a40-9059-b5f0356bd548", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c724ef64-4544-407a-b54a-97a99a108656", "sighting_of_ref": "indicator--4781b826-fb75-4045-aa27-183fd594ab24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3225641-38bd-46c6-9ac8-6b91825f0595", "sighting_of_ref": "indicator--d1b295d9-d367-4325-855e-c5498bf90d1f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb678da6-4405-49f1-b2e1-493d83a2a97c", "sighting_of_ref": "indicator--27b349b1-fa3c-4b5b-80c6-62caeb454fd9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730ece79-abca-4e9a-9c6d-ca03f50f2e81", "sighting_of_ref": "indicator--60d657b9-e858-49a3-a1a3-20119f9560a3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e2b8e0-15bb-4186-937b-1d24e8282e86", "sighting_of_ref": "indicator--66d8a538-8e12-4449-acc6-0fa3d72242e9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b450af6-fe7e-4072-ba33-127cdcfe20ba", "sighting_of_ref": "indicator--b78dca3d-af89-4d37-883f-31905dc83048", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9630753d-ed0d-4114-b841-1d7cb8e40b2e", "sighting_of_ref": "indicator--b78dca3d-af89-4d37-883f-31905dc83048", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d02ae6-fea3-4efc-a8ec-f3d489cf5926", "sighting_of_ref": "indicator--4460d675-b008-448e-b79b-c1f03225fade", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c76bc94-bdf9-4832-8dfc-bb056fc98ff4", "sighting_of_ref": "indicator--4460d675-b008-448e-b79b-c1f03225fade", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1bf3dc-ddef-427a-a5f6-bea98d7fc2c5", "sighting_of_ref": "indicator--d2be77c9-0015-4490-b225-52029e702735", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f89ecc3-ef14-47e3-b2a1-911fc00fee10", "sighting_of_ref": "indicator--051cda51-7d0d-4356-b88b-09a9fdfea474", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42114bb9-960b-4418-b9a6-597db58da9f0", "sighting_of_ref": "indicator--0955020d-cc6a-439a-a699-aa8200df2301", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea89c79-9f75-49a3-b67d-32b7b03211b2", "sighting_of_ref": "indicator--bc35cf6b-99c3-4bfd-9b45-e6f3c86e6a03", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e7ad11-43b4-4839-b61f-8e7e2ad66410", "sighting_of_ref": "indicator--e013d375-8493-40e9-bae6-aad6f186bd66", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5176f043-764f-47b9-8938-4b5f1cc8623c", "sighting_of_ref": "indicator--ae4e3288-0ae6-48f3-9b8f-0fa9c86b94ac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa00468c-2292-4d11-9d83-8fe07d8b471d", "sighting_of_ref": "indicator--ae4e3288-0ae6-48f3-9b8f-0fa9c86b94ac", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376e415e-1763-40d3-bb87-2c9b5434f9c6", "sighting_of_ref": "indicator--22715bac-2393-4ac0-a54e-2f889a397fd1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8cf7ca-f254-4437-ba24-a5dcfbd44941", "sighting_of_ref": "indicator--c9c4cfd2-5b54-461c-89d0-7fb42ec21597", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b2f4eb-49b2-4109-bdf6-6d9ba59c5e92", "sighting_of_ref": "indicator--b780cc7c-0c5e-4ae8-95f2-74c747d864ed", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca648803-100b-4841-b0c4-be7a243963e4", "sighting_of_ref": "indicator--434cf7af-8c72-4ed1-a4c9-c88c44ca0633", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b185435c-b99a-4c37-9018-0b3f92cd474c", "sighting_of_ref": "indicator--434cf7af-8c72-4ed1-a4c9-c88c44ca0633", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20364c77-cfc0-4a68-b512-fd87af3ec135", "sighting_of_ref": "indicator--434cf7af-8c72-4ed1-a4c9-c88c44ca0633", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4948bc55-bce1-4332-8c26-b658de95d082", "sighting_of_ref": "indicator--84d18ac4-979d-4ba6-b533-417ed7a2b5dc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57618ea5-0fb1-41d3-b419-a0233a20d8eb", "sighting_of_ref": "indicator--8874e266-edd8-4394-9e9f-bb49358d8f99", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2615a4-6482-4ae8-b048-7e3174da6d2c", "sighting_of_ref": "indicator--509a8464-200a-4702-ba0a-83d9ba716da9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e22cea-2ccc-45d1-9dc4-f63e6d3a0443", "sighting_of_ref": "indicator--41aea6a1-ebd6-480c-960a-50297fb48daa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedfc0d3-30d0-4f26-9644-1ec7126789c4", "sighting_of_ref": "indicator--e861f3af-c9b3-459d-9e15-47fd5f27075e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd5ec3ee-58e0-42d8-9564-9d6c4fbe09d5", "sighting_of_ref": "indicator--fd25ce62-4fb0-4309-b5b5-44e8d8d6ff5c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bbe956a-92f2-4ffe-9768-f10b70cd1772", "sighting_of_ref": "indicator--fd25ce62-4fb0-4309-b5b5-44e8d8d6ff5c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a05fc7f-731d-47fd-bfaa-4db65d0cc639", "sighting_of_ref": "indicator--9767fdae-73e6-446b-9dba-7ccb18d4216f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80231f30-c184-42ca-8e27-3997be048bd1", "sighting_of_ref": "indicator--ab6aa879-bbc0-4dfe-a0f4-896dd124d4d6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4285a05-9fe5-4788-9746-519ad9ef93e8", "sighting_of_ref": "indicator--41b5975f-3664-44d1-9f4b-fc79f093c559", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe93fac-b569-4a83-a666-a41ff9407bc7", "sighting_of_ref": "indicator--9552009a-18a7-49d5-8ae3-f593ab4bfe19", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b6c5fb-820f-40c6-a028-542c1720b7e1", "sighting_of_ref": "indicator--1f49f5ec-e831-453c-b309-34ca2b9233f8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6aee1b-906e-4465-a23d-57d584d7819f", "sighting_of_ref": "indicator--72d66b12-92e5-438b-b2c6-43a9a6597d85", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6477d8-a5e2-4b77-a7de-fd041319e9d2", "sighting_of_ref": "indicator--4b2ac65f-9526-4b89-bfd4-c20510f6f244", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b37aabf-9c4d-4e6c-8a74-d8a2e150f615", "sighting_of_ref": "indicator--c675ade3-d2a6-4e00-a66a-027d84c29af0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe816e9-f240-4815-acf4-331277f21e79", "sighting_of_ref": "indicator--5c881ca4-9114-4b04-8ca7-af11e0dc2024", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1b09ce-34b0-49bc-8ccd-f41c032b0e11", "sighting_of_ref": "indicator--68e09e9e-3ba0-4bc7-812f-d824f29a8c59", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c23336b-b606-4cc2-8043-38d88cca5238", "sighting_of_ref": "indicator--7c29b988-31eb-4c84-b946-7b7c8303f8cb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1179e70-d657-4820-b2f2-7442587cd2f2", "sighting_of_ref": "indicator--7c29b988-31eb-4c84-b946-7b7c8303f8cb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f5c9f1-aff9-491b-9217-1a01ec7c4f77", "sighting_of_ref": "indicator--cbbfec28-eea4-47e7-9ecf-db6be05ed6fb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c006ac-f72f-4e64-97c0-ed164dfc5cae", "sighting_of_ref": "indicator--8ff81d36-a881-4734-ba19-6c9cb0df91ce", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cdfc4b-2190-44e0-a04e-c87d9c28a751", "sighting_of_ref": "indicator--8ff81d36-a881-4734-ba19-6c9cb0df91ce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c81987-212f-43cf-87cb-19c4d5e51d33", "sighting_of_ref": "indicator--8ff81d36-a881-4734-ba19-6c9cb0df91ce", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1aae4a-7200-4147-8409-a06b51eb74ce", "sighting_of_ref": "indicator--8140b0f4-c62a-4fe7-9577-3a7fc4d34f32", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c52465-8186-4285-8155-6a9b0d685424", "sighting_of_ref": "indicator--8140b0f4-c62a-4fe7-9577-3a7fc4d34f32", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6044205-5a43-47b1-a1a8-e813f53e4d1a", "sighting_of_ref": "indicator--0bc76fc4-70ec-41d3-b279-ef7f4c4716bd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e59018-8428-476d-9da3-f97e82d67a9b", "sighting_of_ref": "indicator--f399dcec-eb47-46a9-a892-8999a83525c2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f762cc0a-44ca-4a8e-b2d4-4d20f0517f47", "sighting_of_ref": "indicator--f399dcec-eb47-46a9-a892-8999a83525c2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b31259f-8249-4656-b24a-92fa9e412456", "sighting_of_ref": "indicator--769e8735-05a9-4c81-ab35-bfcbc2171bbb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716dc789-0075-451a-8a98-4ca6ef306262", "sighting_of_ref": "indicator--769e8735-05a9-4c81-ab35-bfcbc2171bbb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d920937d-0e1f-4da5-b0e7-2446a687c314", "sighting_of_ref": "indicator--769e8735-05a9-4c81-ab35-bfcbc2171bbb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d9f85b-7ee1-4893-a199-872713970750", "sighting_of_ref": "indicator--d22e4694-0551-4594-b2ac-d8cdc5bcecb3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1be5de-e9b5-4a02-b835-742bd5be269c", "sighting_of_ref": "indicator--49f636b5-9b85-440a-aa3a-761959f98df2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe71a04-1ee5-4347-aab4-b9016d8a5ac6", "sighting_of_ref": "indicator--49f636b5-9b85-440a-aa3a-761959f98df2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ef56d9-5160-4551-97fa-46c2de0a8d59", "sighting_of_ref": "indicator--49f636b5-9b85-440a-aa3a-761959f98df2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79cf4e43-8de5-4cc4-8221-95559e74be44", "sighting_of_ref": "indicator--b358585d-336d-4e10-bd5d-57608f5e97b4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909ae5fe-1862-41d1-9db0-85ae02d01453", "sighting_of_ref": "indicator--5179a92a-9206-4285-93f6-e1a091614b64", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615ed7d4-a756-42ee-9a7b-ec3c36d4e125", "sighting_of_ref": "indicator--5179a92a-9206-4285-93f6-e1a091614b64", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0edc48-4c0c-47bd-a4df-590ce8b714a9", "sighting_of_ref": "indicator--38730611-a030-4f48-ac1f-e43faf0bdad4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3f47c0-efdd-40bc-8304-b8542f3c6cb5", "sighting_of_ref": "indicator--38730611-a030-4f48-ac1f-e43faf0bdad4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595a61ec-3b20-4719-b964-89d90773a4b4", "sighting_of_ref": "indicator--38730611-a030-4f48-ac1f-e43faf0bdad4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981db09d-299b-4041-9302-5eba0e81fa46", "sighting_of_ref": "indicator--0f68178a-acbc-4215-a6ca-88aedf931302", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5371f858-5799-4e20-864a-b8f3b2eace08", "sighting_of_ref": "indicator--2ed5d9a1-7d3c-471c-8f49-6c218e56a5dc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207a133b-c5c6-4573-80bb-3ac7fb53254b", "sighting_of_ref": "indicator--2ed5d9a1-7d3c-471c-8f49-6c218e56a5dc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83fe903-1e4d-491c-9cb0-0b2a5079bac2", "sighting_of_ref": "indicator--caa0369b-3b93-434b-86a4-be71526cbdac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38c3a90-51c6-4372-b11a-804748cb992f", "sighting_of_ref": "indicator--7a35ae9b-b172-4f06-9a2d-1a80f1831e1f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a394166-502c-4a72-b702-080dc4c6e153", "sighting_of_ref": "indicator--7a35ae9b-b172-4f06-9a2d-1a80f1831e1f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a102bb83-9604-43ef-a881-cdca64739ef2", "sighting_of_ref": "indicator--7a35ae9b-b172-4f06-9a2d-1a80f1831e1f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5b12fd-8527-480b-b60a-2dd34ff8c5d5", "sighting_of_ref": "indicator--ef345787-b8de-4931-80f1-be708af3ee26", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e60fe7-1b6a-4dad-8fb0-9b720a038d2b", "sighting_of_ref": "indicator--ef345787-b8de-4931-80f1-be708af3ee26", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1c2c5a-3f6f-43a3-8185-f2bcf93622f8", "sighting_of_ref": "indicator--ef345787-b8de-4931-80f1-be708af3ee26", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681a852a-c6aa-4b7d-aae5-ae0230331c65", "sighting_of_ref": "indicator--276fd433-913a-401e-834e-b6df69f8bd7d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2917383-a8cf-4e69-aa3f-f040a109f6c9", "sighting_of_ref": "indicator--4e47523e-4b0c-43d2-91e7-97d1207c748a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d5342e-e062-4357-9c25-88a21234c297", "sighting_of_ref": "indicator--4e47523e-4b0c-43d2-91e7-97d1207c748a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8f0a92-8ba5-48df-8c90-b6e6a9dc7e44", "sighting_of_ref": "indicator--4e47523e-4b0c-43d2-91e7-97d1207c748a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e86b0d7-178a-4fd9-8c06-03d0c3079f7f", "sighting_of_ref": "indicator--ee859649-736a-4117-8a0c-e065d7e7fcf2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3131252-c1a7-424c-abc9-95eb699d6de8", "sighting_of_ref": "indicator--fa093e48-ce32-47ac-ab71-9100b8485137", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91967a8-6450-40d6-ae56-62a374acdd42", "sighting_of_ref": "indicator--fa093e48-ce32-47ac-ab71-9100b8485137", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb20be9f-dfe6-4278-8dd3-911ccf28cb0f", "sighting_of_ref": "indicator--fa093e48-ce32-47ac-ab71-9100b8485137", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2f8fc4-00e5-4393-877d-5fd4dbca6eeb", "sighting_of_ref": "indicator--0343bbf1-dfe1-4007-900d-ae88a5a74020", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f0e776-2e6d-4c68-81e1-aaa41eec1065", "sighting_of_ref": "indicator--7fc78355-2431-4d28-909d-cd06490a76ff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825713bf-86b8-40ab-afca-aa8402e53062", "sighting_of_ref": "indicator--2c0e7d4d-e14a-47df-8d78-a07647475596", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1b9fed-4ae5-41ea-bb50-645dfb3be9a9", "sighting_of_ref": "indicator--1a47485b-d653-41ae-819b-4d24462e6ff0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ada6618-cdb8-43ea-9c52-f96ed7c34afe", "sighting_of_ref": "indicator--1a47485b-d653-41ae-819b-4d24462e6ff0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42b55bf-314c-4686-8293-d3d733062083", "sighting_of_ref": "indicator--1a47485b-d653-41ae-819b-4d24462e6ff0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d67fd2-f3e6-4004-9291-8812f4add443", "sighting_of_ref": "indicator--148aa97c-50da-461d-9de6-102e7b7f933a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25c1cb9-390d-420f-ab86-cb2110523810", "sighting_of_ref": "indicator--a89f224c-a5f5-4985-9393-be0990572476", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d0126d-c4ad-4b1a-bda9-515226e1e9a0", "sighting_of_ref": "indicator--a89f224c-a5f5-4985-9393-be0990572476", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6bd862-ba0c-4ecb-bc46-75bc283bcd74", "sighting_of_ref": "indicator--0b46c245-dde5-460b-9336-fd81e0e66a2b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3baea8fa-a433-43d0-ae2e-ad635667d8bf", "sighting_of_ref": "indicator--c0ba8f9f-53f1-4393-b83d-488d26ae6ff6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9b8ed7-d76b-4516-b560-30818cb1ec4e", "sighting_of_ref": "indicator--c0ba8f9f-53f1-4393-b83d-488d26ae6ff6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66918fed-ae05-4a1f-8c88-24fc876ac874", "sighting_of_ref": "indicator--c0ba8f9f-53f1-4393-b83d-488d26ae6ff6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ddb9bf-623d-4c33-8ea5-021a6335525c", "sighting_of_ref": "indicator--e2b9c951-1f8f-405d-b1c5-7fb947407e08", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ba544c-15e5-4a84-b812-f916a8ed30b3", "sighting_of_ref": "indicator--e2b9c951-1f8f-405d-b1c5-7fb947407e08", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a046ae2-eb92-4fdb-88bb-13fde3beac37", "sighting_of_ref": "indicator--8a8f90c3-ffac-4781-bed1-6defb1a33fb5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc03330-a31e-48ee-9582-1d17667d013d", "sighting_of_ref": "indicator--d1d2ab28-474d-4996-bb43-3d1ff6347c34", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521d2a72-248d-41b0-a9de-e12db80ad9ad", "sighting_of_ref": "indicator--3ba925cd-0646-46c5-9b14-542787a87ec7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feff74bd-523d-4a8e-8584-d01778131575", "sighting_of_ref": "indicator--b3db5bcb-205f-41a0-a60a-533bc4ed9eb9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5086c673-dd59-43f3-87d7-1ee449d1825a", "sighting_of_ref": "indicator--b3db5bcb-205f-41a0-a60a-533bc4ed9eb9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ce4ada-ae7a-41f1-9f35-9830e6166c4c", "sighting_of_ref": "indicator--8c4cfa89-4068-4f8c-bd1f-3c4d1666ed5c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aeec705-1d8a-4aac-ad91-e78d9cfc090b", "sighting_of_ref": "indicator--3de9c3d7-82c1-454f-a94d-cd7172553f0d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de319b6f-ce13-4c24-8928-b319204c80ef", "sighting_of_ref": "indicator--3de9c3d7-82c1-454f-a94d-cd7172553f0d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b47a07-74e8-4434-b884-192deffd6036", "sighting_of_ref": "indicator--3de9c3d7-82c1-454f-a94d-cd7172553f0d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37707e12-a0bf-4a71-a7d3-5afc459f0b12", "sighting_of_ref": "indicator--867abe8a-1195-40a3-a3a8-5f6a23870371", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ff60cb-271c-48e7-8818-2317bae10f46", "sighting_of_ref": "indicator--867abe8a-1195-40a3-a3a8-5f6a23870371", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58900b08-8385-484e-8584-9a80122140a2", "sighting_of_ref": "indicator--867abe8a-1195-40a3-a3a8-5f6a23870371", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa36cd8-52a3-487e-8fad-5266e61d2a10", "sighting_of_ref": "indicator--1b997f9a-01d4-4859-bfed-8c631dc5be6f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6edf77-46a0-47cb-a0e4-b653c694e016", "sighting_of_ref": "indicator--1b997f9a-01d4-4859-bfed-8c631dc5be6f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c16a3ac-fd69-450d-ad56-31f62aa5dac5", "sighting_of_ref": "indicator--1b997f9a-01d4-4859-bfed-8c631dc5be6f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50f9325-fbfd-44da-8114-2ab2b27f4616", "sighting_of_ref": "indicator--fab89029-ac9c-4ae4-8004-baffc21dbf97", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb455b2-fab2-4140-8f9f-814644a24554", "sighting_of_ref": "indicator--fab89029-ac9c-4ae4-8004-baffc21dbf97", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac94f699-df74-4f89-bb89-f6e0c8770647", "sighting_of_ref": "indicator--96548fe4-c825-4585-86a8-7cfe946b5363", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cdf43d-5d82-4ea9-af15-da12a2058552", "sighting_of_ref": "indicator--96548fe4-c825-4585-86a8-7cfe946b5363", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746587c1-7283-4bf9-a522-391008c93ae0", "sighting_of_ref": "indicator--0c3d5187-6a6f-4ca8-8412-cc620f09785a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b76f5b-1878-43db-b76a-4684082cca19", "sighting_of_ref": "indicator--0c3d5187-6a6f-4ca8-8412-cc620f09785a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80f6297-37ca-4384-ac52-99a9704522af", "sighting_of_ref": "indicator--7a911b9b-53d9-4416-877c-be0aa68c68bd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ff52d4-5adf-4316-b8bf-e1f54420d5d4", "sighting_of_ref": "indicator--7a911b9b-53d9-4416-877c-be0aa68c68bd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492086f3-50a6-4c97-a83c-b87396f1fa3e", "sighting_of_ref": "indicator--0b0079c7-34fb-4f5b-b870-06c0c0f8f81a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ddcd4b-de9f-42a1-be48-a65df013d89f", "sighting_of_ref": "indicator--af82b979-ca2c-4ebe-9f2a-7dc97dcdb55b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6207071a-b7b8-4750-8450-304624e1b15e", "sighting_of_ref": "indicator--af82b979-ca2c-4ebe-9f2a-7dc97dcdb55b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67d9974-6940-4aab-bd4a-c5222d7c66f7", "sighting_of_ref": "indicator--af82b979-ca2c-4ebe-9f2a-7dc97dcdb55b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a857584-7c20-4070-a6c0-d51fc6b4e61d", "sighting_of_ref": "indicator--d571fb82-a875-430c-9226-1c8b75d24867", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70945dec-4957-460e-98b0-5f5eb80cba33", "sighting_of_ref": "indicator--d571fb82-a875-430c-9226-1c8b75d24867", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2857df3b-1a8d-4d0c-952f-caf906a4ab39", "sighting_of_ref": "indicator--8ab98143-d933-455e-a504-c7e6e2c8f9bb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e5bbe1-7fd5-4e4d-9ece-5afe087c43d2", "sighting_of_ref": "indicator--8ab98143-d933-455e-a504-c7e6e2c8f9bb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28196c8e-2d52-4009-948a-69119d2ad15f", "sighting_of_ref": "indicator--142a20e8-c78a-4748-aff7-bf594f11fa40", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40163354-8fb4-4bff-a2e6-4f9f2d71b535", "sighting_of_ref": "indicator--71d6b908-cd5b-447f-a793-0576b33d36b0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f10a8be-5adb-4851-b92c-185baf89082a", "sighting_of_ref": "indicator--71d6b908-cd5b-447f-a793-0576b33d36b0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616c9228-f1cd-4307-a3ff-4b4bbad45b37", "sighting_of_ref": "indicator--2628459a-7540-4fe3-b3de-d07fec6c2f90", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff1a59f-1c92-4a82-b6d0-6f6c51782b81", "sighting_of_ref": "indicator--2628459a-7540-4fe3-b3de-d07fec6c2f90", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c65de9-f13f-46d4-b095-1b1e3eeddaaa", "sighting_of_ref": "indicator--2628459a-7540-4fe3-b3de-d07fec6c2f90", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03f6c53-e2b1-4f1e-b07b-6ce4e8a74c86", "sighting_of_ref": "indicator--53a5d9ce-4a3a-4c69-9da7-5f4f0e81007f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b976f4d6-34ff-42bd-b0ab-72da5e72073c", "sighting_of_ref": "indicator--53a5d9ce-4a3a-4c69-9da7-5f4f0e81007f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e517a2a-d14f-4b9e-87b6-40cd99ecf940", "sighting_of_ref": "indicator--53a5d9ce-4a3a-4c69-9da7-5f4f0e81007f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e182d3-8834-4e7c-9a9e-75378d5dbcf4", "sighting_of_ref": "indicator--f4c47f94-8012-4530-95eb-c997e4df4bc1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b12e8d-9880-4149-9a3e-4a24a0f0fe3b", "sighting_of_ref": "indicator--aa522dc7-394d-46db-b893-6ff0fffffafb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed9130d-e248-4019-ae39-ae37346155b2", "sighting_of_ref": "indicator--532ab084-2967-443e-a471-028bc8dc2060", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b12bca-f15a-40c8-94c1-58a864475840", "sighting_of_ref": "indicator--e67a54ef-64f1-4424-a11a-60e738d23100", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9e5231-d6a7-4642-ac8c-d73e1df23780", "sighting_of_ref": "indicator--7ff4aea8-0de4-44b3-904a-409d346be1dd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e22fef-57c8-4162-bcbf-9f477d7f36b1", "sighting_of_ref": "indicator--0272819a-75ea-4342-b575-c27122dc74c8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96eb75a-987b-489b-82d1-c5fcccc7967d", "sighting_of_ref": "indicator--aa24b6fa-807b-4221-9c83-f0bb25490961", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4d7768-3c50-42fe-9e02-8e957e6194b7", "sighting_of_ref": "indicator--aa24b6fa-807b-4221-9c83-f0bb25490961", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd32ed5-30ca-409c-b5b8-86ded7ce97b8", "sighting_of_ref": "indicator--aa24b6fa-807b-4221-9c83-f0bb25490961", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a876b75-2176-4a68-afa6-3af8e708858a", "sighting_of_ref": "indicator--cb203031-a3f2-4d3b-8087-1f2dd13a6c65", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda39f81-3012-436a-a659-4f8881e881a8", "sighting_of_ref": "indicator--cb203031-a3f2-4d3b-8087-1f2dd13a6c65", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abda5dd6-baa7-4ed0-b0d2-3d8e2ede3d4f", "sighting_of_ref": "indicator--721b20f7-3c01-47fc-95ed-701c3a539f41", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b206f84-3049-41b0-995f-16aefa0f03f0", "sighting_of_ref": "indicator--721b20f7-3c01-47fc-95ed-701c3a539f41", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1431ddfe-10b4-444e-9e4e-b2d12e1aee2a", "sighting_of_ref": "indicator--e80a0422-f52a-41be-8870-8d46602f78d4", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab774e4a-739e-4ddd-9d66-0ec58634aa30", "sighting_of_ref": "indicator--7744e28c-6ab9-4238-924e-b8b606ee3ff0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520977e5-3ea0-42bb-8021-18b356573e86", "sighting_of_ref": "indicator--7744e28c-6ab9-4238-924e-b8b606ee3ff0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60c4742-4825-4c32-8bd8-e9109158d8b5", "sighting_of_ref": "indicator--7744e28c-6ab9-4238-924e-b8b606ee3ff0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82e112e-f465-424a-8c4e-3539ac90ad60", "sighting_of_ref": "indicator--eb2bf66d-543e-4558-9036-a51c22722b17", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e367497-0a07-45a5-81ab-1c85174b9055", "sighting_of_ref": "indicator--eb2bf66d-543e-4558-9036-a51c22722b17", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015e3ac7-db55-441f-ade7-4bd266a955e9", "sighting_of_ref": "indicator--457982e1-9ea3-42cc-859d-c6d695e0d367", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d8e182-07f2-4531-916c-04b334549de7", "sighting_of_ref": "indicator--e96c0950-c174-4191-917a-7d91974201a2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cc2099-3fca-4ab9-a270-32dadc1415f4", "sighting_of_ref": "indicator--e96c0950-c174-4191-917a-7d91974201a2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f515da-400f-4bbb-8930-fac40ffe4dd5", "sighting_of_ref": "indicator--e96c0950-c174-4191-917a-7d91974201a2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bfa9cf-4d62-49f1-9dc2-466d2cf3bb79", "sighting_of_ref": "indicator--be098e2d-6205-49f9-a763-0976dd276964", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9aa007-7bef-4f69-a3aa-1eada7e3d210", "sighting_of_ref": "indicator--be098e2d-6205-49f9-a763-0976dd276964", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ca91f1-7930-4b0e-8cb6-1c97a7b065b7", "sighting_of_ref": "indicator--f6bc73d0-af42-43c1-8315-2ec26166d185", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845a08ee-aa11-4668-8808-a4ad147716bb", "sighting_of_ref": "indicator--f6bc73d0-af42-43c1-8315-2ec26166d185", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e68fbb-ab43-40bc-91fd-1987d84a6104", "sighting_of_ref": "indicator--f2919b0e-74c2-40cf-b78d-45f67406748e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b26a9c0-b761-4cb2-bfa7-e244b4c6218e", "sighting_of_ref": "indicator--ca843f4c-823b-4f3a-84e7-4e383536153b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e86e50-fdac-41b1-9191-cf5a0e623ce3", "sighting_of_ref": "indicator--ca843f4c-823b-4f3a-84e7-4e383536153b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94657ac-43c6-43a3-bcf9-98e767b73b1d", "sighting_of_ref": "indicator--b15bb7b3-4235-46d5-bb17-2d0dc1b64f87", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6c5b72-8ee9-49c9-b242-2f9f15eff5bb", "sighting_of_ref": "indicator--51ef0f04-6939-4cb3-9072-df76fb023c75", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9cb81d-74c1-4e8f-9dbc-138833448d2a", "sighting_of_ref": "indicator--e1f80afe-fb01-4f89-beb5-c9978d9dd9b9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56c505c-8f42-4034-a205-ffb1da761025", "sighting_of_ref": "indicator--e1f80afe-fb01-4f89-beb5-c9978d9dd9b9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e566749c-cdfd-4808-9f6b-4f996c1a8ed6", "sighting_of_ref": "indicator--f5b54afa-ddd3-4465-9825-d4e279a80d9a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2f79c6-5ac3-45f9-866d-2b349007231f", "sighting_of_ref": "indicator--f5b54afa-ddd3-4465-9825-d4e279a80d9a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247a1f0d-987c-44b0-806e-c41e28d10682", "sighting_of_ref": "indicator--f5b54afa-ddd3-4465-9825-d4e279a80d9a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6f0604-7a8a-4b66-829a-00f1b8afdaa3", "sighting_of_ref": "indicator--da2c94c3-cf97-4f3c-9bc1-7988d6795d56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8665c2-b775-401f-b4ab-cf7d4d6e927b", "sighting_of_ref": "indicator--378a3ac7-4dc9-4663-ad27-c5c5cb323c9c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f75fd0-70dd-447d-b147-b7e87371d7be", "sighting_of_ref": "indicator--378a3ac7-4dc9-4663-ad27-c5c5cb323c9c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ceef950-20db-4dea-b394-ea3f5ee8fea9", "sighting_of_ref": "indicator--a8554dd4-1aa5-48ed-8ec3-c1ebbeeaa5fc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edac6d98-d55b-40fd-9c0e-ce92bf3b8af4", "sighting_of_ref": "indicator--8b762410-357c-4a9a-aec9-9b14c1ce00eb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2233aae0-6ae6-4f85-a6b5-b0b32cb4ba72", "sighting_of_ref": "indicator--e42c1e25-4389-4d6c-a6ed-c2a012574670", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904a6735-5887-4392-9c91-edb042f899fa", "sighting_of_ref": "indicator--e42c1e25-4389-4d6c-a6ed-c2a012574670", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d151a149-4dec-4bad-9134-f01fcf4976b2", "sighting_of_ref": "indicator--b88e589c-b575-4896-b527-dff5fe2f6c52", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d33dd0-0a54-4e9d-9eb2-9d907f7779f5", "sighting_of_ref": "indicator--b88e589c-b575-4896-b527-dff5fe2f6c52", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b67d164-f7f3-4607-8b41-78efe1717bce", "sighting_of_ref": "indicator--b88e589c-b575-4896-b527-dff5fe2f6c52", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c36e8e-8a23-4f8d-a62f-9b30e8cb5dc3", "sighting_of_ref": "indicator--cd4df83b-8acd-4f9a-9404-7c5df7175f26", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9dc7f8-2220-418e-99cf-395445b27aaf", "sighting_of_ref": "indicator--143bc4e1-7654-49aa-bc40-66792077c883", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b11461b-bf30-4d6d-acdb-799be97889b5", "sighting_of_ref": "indicator--143bc4e1-7654-49aa-bc40-66792077c883", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c0f206-83a4-4347-a2ca-8184f80cda31", "sighting_of_ref": "indicator--712b90da-20f7-4bab-98ab-c661a4fc28d1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011af508-6bdc-4cb5-89c6-5b401a4ef5e4", "sighting_of_ref": "indicator--a106a26f-418d-4d52-8cc2-295ee857498b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5483d9bc-2f8e-4896-87fd-2e7ec2bf2fb9", "sighting_of_ref": "indicator--a106a26f-418d-4d52-8cc2-295ee857498b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839f7fe4-c706-479f-9e3f-e863c3e62918", "sighting_of_ref": "indicator--d8d3f157-e66f-437f-acb5-dd628714b0c9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93e4a76-da1c-49eb-be5e-da9558c3a158", "sighting_of_ref": "indicator--5dd88e23-e780-4e83-a77d-27d0652411c7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38be2c98-3629-4b5d-aa21-7c7fa9db753e", "sighting_of_ref": "indicator--dd8db50c-d919-485b-bbf2-4a051fd3cd91", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cac3d6f-aaaf-4448-9f20-d30f71568bf4", "sighting_of_ref": "indicator--77897eee-52c9-4dc1-ab47-bcc301fd64a9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62ba6bc-3480-4e24-a308-7cfc08e4b14f", "sighting_of_ref": "indicator--272d184f-4f2f-42d1-98de-c27ca7fe2662", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c824a55-c06f-452f-8324-1954120b0ad9", "sighting_of_ref": "indicator--3bc4a1be-a65a-4430-8aba-47dd56e74181", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82fda919-ebea-43ae-903b-8adada96ddfd", "sighting_of_ref": "indicator--7c7c0056-cfb2-4966-99fa-4fa5f930f255", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e42002a-9fdd-4d68-b19e-90489383ded4", "sighting_of_ref": "indicator--a11045e1-b234-4e1a-b536-10cd3ef4c384", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd968d45-fdb0-4489-984c-0da289c5ad21", "sighting_of_ref": "indicator--a11045e1-b234-4e1a-b536-10cd3ef4c384", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859df1b3-a556-405d-95d6-e91939cfa806", "sighting_of_ref": "indicator--7b2ab754-69a8-4ad6-91d6-03b86c8057df", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5dc78f6-d43a-4157-bc80-f39d6a801f52", "sighting_of_ref": "indicator--f330e8dc-be16-4321-93e5-51b05b9758e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3385acac-bd1a-4e6b-b8e2-aec37e4f4c59", "sighting_of_ref": "indicator--57e5e963-6bcb-4602-b05d-858d23a88cfe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ecd9e5-ee4b-482e-a0d1-c6417148d40e", "sighting_of_ref": "indicator--57e5e963-6bcb-4602-b05d-858d23a88cfe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001f93ca-0964-4ea4-96c7-2eb2dec848fd", "sighting_of_ref": "indicator--57e5e963-6bcb-4602-b05d-858d23a88cfe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f17692-65fd-4f20-8659-8ff09842268e", "sighting_of_ref": "indicator--b3663b2b-baf2-40df-b305-b8a8553c473a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28171335-6d53-4345-8d6a-37631fc8bf85", "sighting_of_ref": "indicator--b3663b2b-baf2-40df-b305-b8a8553c473a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9371ba29-0dd6-4144-bbd1-77783ea7f769", "sighting_of_ref": "indicator--b3663b2b-baf2-40df-b305-b8a8553c473a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f102abb-9f5a-46b1-82d0-034a61b0fdf8", "sighting_of_ref": "indicator--4995df3d-9b00-4685-b554-810802aeb0b3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d47513-2da4-4674-b314-adbbd25b0bce", "sighting_of_ref": "indicator--4995df3d-9b00-4685-b554-810802aeb0b3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b640faa-a88d-479a-925c-e1bea634bcdb", "sighting_of_ref": "indicator--7cc11ef3-1986-4abd-aa94-b060e9474ad5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3763ce81-7069-4c7a-a49e-da7d401c3027", "sighting_of_ref": "indicator--397695b3-7406-4e7c-a89c-4a9460649656", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be00354-f4f8-480f-9a6c-e8c9e1a47e8a", "sighting_of_ref": "indicator--a1d933a2-da69-4868-b15c-1a45c78f4969", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43f12c3-f813-48c5-97b4-b0071496f95d", "sighting_of_ref": "indicator--a1d933a2-da69-4868-b15c-1a45c78f4969", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44fcb9a-576f-4b48-857a-c4631c97ec04", "sighting_of_ref": "indicator--2c93ec15-fda2-4262-935a-1f178595ace3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7776f02a-4d0e-49fd-b927-88a845594d9c", "sighting_of_ref": "indicator--6df176c8-66fd-4d73-9a48-9a734d50073c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25015923-0afc-4e1b-86da-49213b77ce85", "sighting_of_ref": "indicator--6df176c8-66fd-4d73-9a48-9a734d50073c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f784b7-d026-4e0d-b313-b9d53d6d3355", "sighting_of_ref": "indicator--03cc444a-0e9d-49df-a4e2-c99222db3a3b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90934933-36de-4f02-a531-72a9bc72382d", "sighting_of_ref": "indicator--256b5f70-712c-49ae-b1c4-8df046c92612", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a16315-ca12-4369-9926-c479b1fba53e", "sighting_of_ref": "indicator--9c828afa-4f55-4140-be29-8fa37952a497", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec29eb84-f43f-49fa-bce6-a7cf78b63195", "sighting_of_ref": "indicator--3b82928c-f037-4b7f-8ab2-560f870e16e5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4174d377-75bb-48f1-a92d-74f82eb23aef", "sighting_of_ref": "indicator--3b82928c-f037-4b7f-8ab2-560f870e16e5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ab42ce-9722-4d4b-aebd-7a56eeb10ad4", "sighting_of_ref": "indicator--3b82928c-f037-4b7f-8ab2-560f870e16e5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c754ce25-1f68-4ff3-88dc-d0c31e69326b", "sighting_of_ref": "indicator--9cca14bb-8730-4534-b08f-e30640fe5a33", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fab44ea-9cc9-4002-a8c7-78f8899e2b74", "sighting_of_ref": "indicator--9cca14bb-8730-4534-b08f-e30640fe5a33", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1791727f-2957-4c07-b556-53eb4fc7d80f", "sighting_of_ref": "indicator--e3c2b343-9a97-46b7-b3d9-0aade928d88e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20112047-00d5-4db7-9610-66705bd7f0fa", "sighting_of_ref": "indicator--ee749334-dcf8-4a3b-a48f-7e4fae15fe22", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cea84a-e8da-4bad-a99a-4e4e8e8949ce", "sighting_of_ref": "indicator--ee749334-dcf8-4a3b-a48f-7e4fae15fe22", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54b12ed-c4c9-420f-ba3a-88871a9f1f13", "sighting_of_ref": "indicator--ee749334-dcf8-4a3b-a48f-7e4fae15fe22", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82252a28-72e9-4ef5-9d15-b795967c47c8", "sighting_of_ref": "indicator--48f4ff36-afba-4371-bcfd-fe37f4be3ced", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba001e9b-d788-460f-b61d-bbb5c7aab49a", "sighting_of_ref": "indicator--ec60cdd2-ec21-40e6-a321-1807652c4906", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b0135d-2a5d-4488-ac86-75114a54c122", "sighting_of_ref": "indicator--a11bdb0f-5b11-4ffc-af97-9774c8ec0a91", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62e6409-233c-46ff-8018-83fbbbb9bc5a", "sighting_of_ref": "indicator--fff97443-25d3-4e9b-8c5e-3f8c9f69a040", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ad26c0-9d23-4dee-b444-e7ccecdc6083", "sighting_of_ref": "indicator--fff97443-25d3-4e9b-8c5e-3f8c9f69a040", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fe71b7-3d70-4201-b6f4-57136b79ea68", "sighting_of_ref": "indicator--c52fe05c-78f7-4ac3-9ae8-38b5d1b66ffa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6000ed57-9ea8-4f36-ba3a-b1e9bb905393", "sighting_of_ref": "indicator--9274a5a1-3037-4069-955a-f5343d141eb1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeabe5dc-cb9e-404e-b7eb-ae192131aa7a", "sighting_of_ref": "indicator--18856ee2-2440-4bf8-b753-8b8223e36eed", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d301b9c0-d56b-47e2-be3a-c3ff7d9be865", "sighting_of_ref": "indicator--ac7efa43-f342-41da-9655-4a8b98615ce0", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283041b4-523e-4470-8aac-461a97b7b54b", "sighting_of_ref": "indicator--4fb5d61b-7aa0-4a64-917a-4f86a43e05b3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca237ac9-939b-4c4f-95c0-885fb790ca97", "sighting_of_ref": "indicator--50b82445-0a33-4d6f-ba3b-10808cce0d98", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650e8e02-fb86-4537-9634-a94bdc246189", "sighting_of_ref": "indicator--50b82445-0a33-4d6f-ba3b-10808cce0d98", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8a8230-ae07-4d8d-a1e2-83ec1d4b20cc", "sighting_of_ref": "indicator--50b82445-0a33-4d6f-ba3b-10808cce0d98", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d30dd53-8230-4c00-bec4-66efc8a18190", "sighting_of_ref": "indicator--3677eb4b-fb1f-4c92-ba94-2dc17cecdccf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec5247d-2de9-4818-ab52-180621d9f902", "sighting_of_ref": "indicator--ced12740-ec57-4742-b5bc-2eb82df3c863", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0999e86-1dde-4f82-b618-6a8aae1105f2", "sighting_of_ref": "indicator--6c5224b5-f13c-4a57-8652-d5182ebeaedd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ab61be-45af-471f-8513-e011f8d62074", "sighting_of_ref": "indicator--6c5224b5-f13c-4a57-8652-d5182ebeaedd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c500d3c-79dc-45e9-9f9e-f46ce9c0af83", "sighting_of_ref": "indicator--53ff3227-5a7a-40fa-b851-42b0c5b2ef69", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89353568-f2c3-4b34-adfe-cade79ee6b6e", "sighting_of_ref": "indicator--172e5291-21f6-429d-a255-7675534d63b2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2456b58a-639d-49b9-8da9-f2ff06ac61b9", "sighting_of_ref": "indicator--172e5291-21f6-429d-a255-7675534d63b2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b7eee5-b64e-4dc6-afe0-278273434247", "sighting_of_ref": "indicator--84f3c89d-ef32-4f64-a395-e4922e77178c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff02be6-751f-4ab1-bfdb-5a0e1243746a", "sighting_of_ref": "indicator--84f3c89d-ef32-4f64-a395-e4922e77178c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6e53d5-403c-41a3-ba45-84471179483b", "sighting_of_ref": "indicator--84f3c89d-ef32-4f64-a395-e4922e77178c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f17e9f1-6919-4012-b29b-a3f5145fe519", "sighting_of_ref": "indicator--12044409-1cc1-4ef5-98d2-ee9419583eb1", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627c6433-c785-4791-b798-d9d753c0b494", "sighting_of_ref": "indicator--6f324a1f-1cec-4319-a8f8-419a562d3a20", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac9b784-55f3-446e-b0cb-765204b54659", "sighting_of_ref": "indicator--3779370a-9455-4687-87b2-cc100c9064b3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2008e5c1-6035-420b-9688-c61d00704acf", "sighting_of_ref": "indicator--88117d5b-b355-496f-a530-9a07d379016a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36cb6f9c-1631-4c33-ab47-fa441753f73c", "sighting_of_ref": "indicator--48d548af-995b-4273-a583-7d1701173a8f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8676b18-a23b-46cc-89e8-736096a7d244", "sighting_of_ref": "indicator--48d548af-995b-4273-a583-7d1701173a8f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0502d7ac-7445-4963-a54a-b84cf56276fe", "sighting_of_ref": "indicator--48d548af-995b-4273-a583-7d1701173a8f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51411288-cd69-49c3-8c9e-3a66007d33ad", "sighting_of_ref": "indicator--5a4456ab-fffb-4cc8-adc2-a6d5499fcc08", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4141ab7c-f5a5-4d75-b174-f21e8f921983", "sighting_of_ref": "indicator--5a4456ab-fffb-4cc8-adc2-a6d5499fcc08", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61173a07-d4f4-45a9-b997-e22640e974c4", "sighting_of_ref": "indicator--1e8b9312-f430-4131-9dcd-d6224c2c8303", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9901cb5f-0704-4fc3-aaa2-94668cf9b27f", "sighting_of_ref": "indicator--1e8b9312-f430-4131-9dcd-d6224c2c8303", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16526b8c-7842-4657-99dc-299105a83ffc", "sighting_of_ref": "indicator--1e8b9312-f430-4131-9dcd-d6224c2c8303", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d43a5d7-4ed9-40f3-8df9-4bed289770ac", "sighting_of_ref": "indicator--9f60afba-d3e9-441a-b58d-eafb4742ab02", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f67407f-65e8-40ac-91a9-6ca62f31de8b", "sighting_of_ref": "indicator--9f60afba-d3e9-441a-b58d-eafb4742ab02", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef769b1-98b3-4f3b-8ce3-059a0b98730a", "sighting_of_ref": "indicator--764c463a-a53f-4de5-ba09-1d9312926da6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8916ecd3-4be1-49af-b806-d07b331d880f", "sighting_of_ref": "indicator--e5f02ca4-fb00-421c-91ee-b697dab98ff1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7dc61c-675f-4535-aa49-78042acba7a5", "sighting_of_ref": "indicator--e3dd820b-e03e-480f-b33c-ad5293985d4b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98620709-7ffd-458d-9830-230fc852dc2e", "sighting_of_ref": "indicator--e3dd820b-e03e-480f-b33c-ad5293985d4b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0832ff-9d2e-4fb6-8ccb-b2f352ee37a5", "sighting_of_ref": "indicator--e3dd820b-e03e-480f-b33c-ad5293985d4b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1122218e-8855-4fe4-bd6d-54da2e333a25", "sighting_of_ref": "indicator--ec2ef210-5eff-4463-8abd-b409df86541b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c5ceee-3448-43cf-87ce-37bf5dca403a", "sighting_of_ref": "indicator--ec2ef210-5eff-4463-8abd-b409df86541b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983ff5ae-a1b7-478e-b4ee-4e0b660c17a2", "sighting_of_ref": "indicator--fd6b0378-13c3-4dcb-8ac6-0446d1edfc8c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8403e5-d19b-4c94-958a-2b47530b57f5", "sighting_of_ref": "indicator--fd6b0378-13c3-4dcb-8ac6-0446d1edfc8c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd40cd4e-0aec-43ce-82e4-0b73b2362c89", "sighting_of_ref": "indicator--6d4dc388-3233-40f4-88c4-43a053e392fa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762e9666-1514-4264-a3c4-b6f25f6a3339", "sighting_of_ref": "indicator--e5b82769-e84d-46e8-8f0f-6c5e7540131f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63dfa211-dfa3-49bf-a740-8e2b99c4e56c", "sighting_of_ref": "indicator--e5b82769-e84d-46e8-8f0f-6c5e7540131f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79bf132-34fa-4a1a-b0bd-900cd66a963f", "sighting_of_ref": "indicator--e5b82769-e84d-46e8-8f0f-6c5e7540131f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d06103-1508-4455-bebb-09e4ed2f0616", "sighting_of_ref": "indicator--c46b121f-7a23-4f34-ba3a-6d3f792fc87e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd1008a-d1eb-437a-a6ca-154120fd8cb2", "sighting_of_ref": "indicator--a2380f39-fe76-42ed-96d4-b0404d4d6338", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932e7974-581f-4ee8-96e6-09b388f2b114", "sighting_of_ref": "indicator--4f6d778f-92ca-4327-8091-10ff3d04fe80", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ddb110-d555-4241-9b01-6955e482bec8", "sighting_of_ref": "indicator--383b6177-ad7d-4a96-bfd7-5a2e95d07b53", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d9999d-3771-47ba-8e62-eae36f835cdd", "sighting_of_ref": "indicator--383b6177-ad7d-4a96-bfd7-5a2e95d07b53", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12839db7-2597-4c1b-ab32-bea3a08a7bbd", "sighting_of_ref": "indicator--ac267e8a-f4db-4a42-b215-4b056b5665cc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb4f49b-d0ed-4537-961a-fce11d6b69d2", "sighting_of_ref": "indicator--ed560e69-f0d0-43c6-90a8-a32070e835dc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ce8d66-3b24-4961-bf61-ccb4984be533", "sighting_of_ref": "indicator--bb580d0f-4227-4f1a-bf8e-fd9b9bbee8c3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d10d72-2b42-47e8-8ed6-c8141722659c", "sighting_of_ref": "indicator--bb580d0f-4227-4f1a-bf8e-fd9b9bbee8c3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3560d33-608c-47e2-9aa0-be6f26e73989", "sighting_of_ref": "indicator--74838706-ad9a-47a0-9f86-897dd3ae395b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb8d614-72a4-4950-97cd-107eccd99b09", "sighting_of_ref": "indicator--74838706-ad9a-47a0-9f86-897dd3ae395b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f827d0d8-e129-432b-aee7-56f9a9dcc76b", "sighting_of_ref": "indicator--aedd0b2d-5920-4e0d-9e77-a6282287dc89", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68dabbc5-a993-42dd-9394-d9b945e477b9", "sighting_of_ref": "indicator--6387b177-19ed-4e0a-9a3e-7cd8599825eb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb65b9b-b61b-4ec8-8854-be96ea2f9eb0", "sighting_of_ref": "indicator--c0a5bb22-6202-44fe-811a-140b5fb735bd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af36ca5-f8a1-4cce-bd86-c9a94c34d0a6", "sighting_of_ref": "indicator--c0a5bb22-6202-44fe-811a-140b5fb735bd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d53ed4-e733-4c21-ae4b-ce846c74ea63", "sighting_of_ref": "indicator--c4316daa-f352-41f4-b1a6-dd20eae8ffb5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c89af5-ba4d-456c-82cb-f9df8980b46a", "sighting_of_ref": "indicator--4edfd36e-fd0e-49d9-ac90-92c7a0357c73", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0312b722-8049-46b6-911e-bf686ad6001e", "sighting_of_ref": "indicator--f11190a0-5d88-4f19-9f0d-77899db4a327", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7283f8-8c9d-4dc7-9283-831638ff215d", "sighting_of_ref": "indicator--e57e04dd-f7ba-401c-8b02-eedf54ac3753", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882e06f5-ba5d-4436-acf9-653ba39ee0c1", "sighting_of_ref": "indicator--a3ca9fc0-caf1-469e-89c7-5b635e28214f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503784c1-3bbb-4ca0-b040-5765edff8b40", "sighting_of_ref": "indicator--29815b71-d6f5-4b8f-ad6c-d64f016b2620", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca240ed-bafc-46f0-83de-2943a67184a8", "sighting_of_ref": "indicator--30dcba22-8f24-4da5-bb42-62a358a27365", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51c3f32-643b-42b0-8b7d-11cead13633f", "sighting_of_ref": "indicator--80664704-bf47-4475-bf9e-d5ffe2bb8616", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb0f08b-98a1-4fbd-a5fa-5e7db4a9b804", "sighting_of_ref": "indicator--80664704-bf47-4475-bf9e-d5ffe2bb8616", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514a5b35-37f5-4b2f-8403-01c54637ed9f", "sighting_of_ref": "indicator--41f1f172-6a04-4fdc-a19a-60984b2b97e0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c092531a-85d9-41a4-bc90-1054f947470a", "sighting_of_ref": "indicator--0a8477c3-ee86-4ce6-a8e7-91194a219ef3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84d9727-5263-4ce4-878f-4859fc81d042", "sighting_of_ref": "indicator--96a612da-3398-45b4-8ba2-e6939543224e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273ae8d0-6d54-4e29-8e10-1ba9b0de90fc", "sighting_of_ref": "indicator--96a612da-3398-45b4-8ba2-e6939543224e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fdaf76b-9571-42eb-ac7c-85945a064903", "sighting_of_ref": "indicator--96a612da-3398-45b4-8ba2-e6939543224e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f84f5b5-914d-429a-9102-00beb955ac25", "sighting_of_ref": "indicator--eed2da79-7d87-4144-ba3d-ae1ab585054a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3712b3b1-6515-4671-9257-58d2a00908a0", "sighting_of_ref": "indicator--5c6c285e-c9bf-4fa3-b686-27eab774d9f8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f560c4cf-acdb-498e-a3fd-02db1fb32ec3", "sighting_of_ref": "indicator--ce980948-3647-4c62-96e9-935d478665b2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038f1528-36b4-453e-a8f3-bb5b6160b82e", "sighting_of_ref": "indicator--099ba3c7-931a-49f8-a311-aa4a5cd81062", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2452e68-1990-43be-a0ff-2f14d0a67c91", "sighting_of_ref": "indicator--0b9a4786-1204-46bd-8a9f-6da0c375002c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ae5295-b626-4822-9a11-f503b422d1a7", "sighting_of_ref": "indicator--0b9a4786-1204-46bd-8a9f-6da0c375002c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb25fe0-a92a-4e74-b5bb-5cd740da4d9d", "sighting_of_ref": "indicator--29482cae-1ed4-4e17-b8a4-db173945c211", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee9c795-5c50-482b-a5f4-0fd9c3b971ef", "sighting_of_ref": "indicator--58302834-21b2-46cb-a335-04349154a7d3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a41869-ff03-43a8-a9a4-315fe9adb6b6", "sighting_of_ref": "indicator--c080baef-0bbf-48f9-9e0c-e7146d9f66ea", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b310fe-b815-414f-9803-9d816843af5a", "sighting_of_ref": "indicator--0747d5dc-8af2-4494-9ee7-a285517c8621", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5d4516-c6f5-4b35-addc-e057f2af6a7e", "sighting_of_ref": "indicator--0747d5dc-8af2-4494-9ee7-a285517c8621", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7b721c-0c91-482c-bc51-50ae48c1a544", "sighting_of_ref": "indicator--0747d5dc-8af2-4494-9ee7-a285517c8621", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5280c342-3c2b-40c7-a211-5044b31c0b7a", "sighting_of_ref": "indicator--eb910375-4633-493d-affd-1bfe0e2e7dc9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0a1cf5-614d-4107-b6bb-4302f37a96f5", "sighting_of_ref": "indicator--c756d441-490d-4e2c-ae4a-d1d4fa7b975d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17dca3db-2480-45d0-99e1-16995dd9f44f", "sighting_of_ref": "indicator--c756d441-490d-4e2c-ae4a-d1d4fa7b975d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6b4a15-ed1f-4cd3-b336-360b8982c378", "sighting_of_ref": "indicator--e08a3f8b-de62-4294-82e8-7ff391a08e6f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d25fb9-dc9e-4f17-bc01-7f26af1b2062", "sighting_of_ref": "indicator--e08a3f8b-de62-4294-82e8-7ff391a08e6f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6f7e99-00f3-4b56-9211-51971a154555", "sighting_of_ref": "indicator--bd9069d3-29b0-45f8-a3d9-1dfbd3489dcc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a155022e-9b7e-40f5-979d-9a253a633b85", "sighting_of_ref": "indicator--af30c05f-8d4e-4851-bfd9-935b96f051a0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1925fff8-3b6c-475f-8d1c-c1b395e6dae3", "sighting_of_ref": "indicator--4c67ac81-bbf8-42df-a0d3-4e2a478ebff0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5048555c-69bf-4e2a-aac5-f7ff82c68d52", "sighting_of_ref": "indicator--a4b45de5-8bf9-47b8-936e-0638619c9bea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d2e53a-8a26-42e2-9803-6284da0477c5", "sighting_of_ref": "indicator--9abc59f8-5405-4910-b56c-0d149a466223", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35b583d-6d60-48c3-9435-25b2636904a6", "sighting_of_ref": "indicator--9abc59f8-5405-4910-b56c-0d149a466223", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176c5ffd-443c-484e-9504-417241d309ff", "sighting_of_ref": "indicator--9abc59f8-5405-4910-b56c-0d149a466223", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4ff3bd-7518-4230-a124-88e133a9f26a", "sighting_of_ref": "indicator--daae7bd5-8915-4aad-9945-14119385d8f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03709536-c54a-4768-8cb7-855d5bd4a5db", "sighting_of_ref": "indicator--c8f97bf0-c9b1-4cb4-8364-d88e9e15b678", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7205145f-c451-4f45-9223-131556f5b361", "sighting_of_ref": "indicator--2565d666-791e-4460-b747-70ebe600656e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a2aa8f-1413-4fc1-8576-0c651494f62f", "sighting_of_ref": "indicator--2565d666-791e-4460-b747-70ebe600656e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4f22e8-a9bb-44be-8b09-9972d70ce208", "sighting_of_ref": "indicator--dbe1787e-8a9d-4fe3-8971-6436de29991b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb2495e-a3a3-4a2a-996f-d10481179d75", "sighting_of_ref": "indicator--65e1a3d8-3a5b-4bca-ab3e-f96626f958e2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25cb8312-309a-4379-a320-401ced8a131f", "sighting_of_ref": "indicator--47339b17-08ab-43d9-bca9-71e324ab5c0a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4284351a-6aee-48e4-bb8e-5cbe57e4f39a", "sighting_of_ref": "indicator--47339b17-08ab-43d9-bca9-71e324ab5c0a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771c3961-9fe2-4ce8-9b74-2b8094803e5c", "sighting_of_ref": "indicator--5dfa27e4-a650-4c9d-94c9-923eaaeec03e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b637b8-e070-4525-9590-bc88821b24c3", "sighting_of_ref": "indicator--f3f5b4dc-58f2-46e9-99af-fcc27667ea85", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8302e94a-9fe4-4f31-81b9-0fda12073a5c", "sighting_of_ref": "indicator--6413ab90-3569-4909-9a31-20111e36b9f1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e4ea9d-8784-48e1-a926-b7f2b203bac8", "sighting_of_ref": "indicator--c4170980-c738-4735-a54b-ca0f01ee496c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e947f424-ac59-4d7e-b344-eebe55c59317", "sighting_of_ref": "indicator--c4170980-c738-4735-a54b-ca0f01ee496c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1277a241-0486-42c9-b591-27629fe8de14", "sighting_of_ref": "indicator--fcdf3723-fc95-47c3-a223-0fdadbf7eb7f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc0ecbe-2cbd-48df-b8f9-2df195b24bd4", "sighting_of_ref": "indicator--fcdf3723-fc95-47c3-a223-0fdadbf7eb7f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df58b964-7608-41f3-8805-5e44b3ed35d7", "sighting_of_ref": "indicator--fcdf3723-fc95-47c3-a223-0fdadbf7eb7f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21142160-3692-4758-a605-90a791a96334", "sighting_of_ref": "indicator--99016927-22c1-430a-8fe9-f72315d7f500", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957df081-cb65-42b7-beb1-1b9e4de53176", "sighting_of_ref": "indicator--2b67de94-81bd-4484-83f9-755ea430730f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30660f62-3133-424a-8d42-fcf9d9e99ee1", "sighting_of_ref": "indicator--d2b036f6-5c7b-4b0b-9905-abb9c598b673", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf1b804-1d91-46d9-be5b-dc3584ae35a6", "sighting_of_ref": "indicator--c2ec658a-552d-426a-a436-a94983ced435", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9bc8d35-89d2-4c76-aaca-084a081762a7", "sighting_of_ref": "indicator--1aa48e76-65be-4fc7-933a-f4e64a0e845a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54cce404-dc42-4d70-a44d-5fec234b6161", "sighting_of_ref": "indicator--7c6689b3-0870-4c25-8934-0300df54636a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8548f999-05a3-4188-9218-82a8b8fd2e05", "sighting_of_ref": "indicator--f001f8d8-cdcb-49aa-a39c-79a20571881f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3cdfec1-9bb2-4896-ae5c-727d5442e44c", "sighting_of_ref": "indicator--e5b7f0d0-4e9f-4b87-92f8-6abdefbf0eb5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06de9b0b-d583-43e2-9faa-28fbdf4a6a2e", "sighting_of_ref": "indicator--e5b7f0d0-4e9f-4b87-92f8-6abdefbf0eb5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816bdaa7-dcf8-45e8-92ae-ac135f90479e", "sighting_of_ref": "indicator--759f23a3-1bb7-4c8b-9bcb-d59bc3d39c82", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f588b382-7d10-41c4-b70c-f86eb8d2e9de", "sighting_of_ref": "indicator--759f23a3-1bb7-4c8b-9bcb-d59bc3d39c82", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825115ff-389a-41f3-8c58-46d55f2ef464", "sighting_of_ref": "indicator--759f23a3-1bb7-4c8b-9bcb-d59bc3d39c82", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4f8760-ea38-4944-a4b5-7fc1ad5b45b6", "sighting_of_ref": "indicator--d2d151a4-46ff-4a3c-b2e7-dbd69fc3296f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147d7c28-89d2-47fb-a6da-819688a603ac", "sighting_of_ref": "indicator--81ac663a-6dbf-43f8-a666-e7ba23b44107", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b439622-3cb0-49c5-90b3-648c80106633", "sighting_of_ref": "indicator--81ac663a-6dbf-43f8-a666-e7ba23b44107", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d9d0c2-a268-4657-be27-e186d3033c2e", "sighting_of_ref": "indicator--81ac663a-6dbf-43f8-a666-e7ba23b44107", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0831e1-4371-41dd-94ec-151c219a76f9", "sighting_of_ref": "indicator--e067cd28-6227-41e5-84b4-b85301af8403", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f366ff-93a6-47b8-943c-961acdf56dab", "sighting_of_ref": "indicator--83e4ec17-5c28-476b-899d-c46c09adfe4a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78e54a1-3c07-45fa-880c-b6f053e1841b", "sighting_of_ref": "indicator--49b413cd-6e1d-41f2-85e8-975cb1384ac3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33046226-fd86-4bfd-98b0-1ec69685b2f8", "sighting_of_ref": "indicator--49b413cd-6e1d-41f2-85e8-975cb1384ac3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316b87fa-1dc3-4d72-87f4-4a2925388545", "sighting_of_ref": "indicator--8b1f0bb9-2b15-44a3-a25f-43061a186264", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4fe79e-03a1-4db6-8a5b-031ef4da4899", "sighting_of_ref": "indicator--8b1f0bb9-2b15-44a3-a25f-43061a186264", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cc3cdd-45b4-4368-9f96-ad1d56d5080a", "sighting_of_ref": "indicator--3c60e8b7-e293-4fdf-b73d-ae47456951de", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50531d17-3ced-431e-b755-e3590aa95c92", "sighting_of_ref": "indicator--c7d07510-92f7-44f9-9553-5ba0ec924f98", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bae5ccc-e837-4555-bf29-c0213d00ccf2", "sighting_of_ref": "indicator--a912411e-7020-43b5-9215-2734a01959f6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17a9f8a-42c5-447b-8c17-8dd544345b6b", "sighting_of_ref": "indicator--682bc3b0-1ee0-4ce2-a885-9e87bd41d2d0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76986537-aeb8-494d-b93d-a1962ae5d8dc", "sighting_of_ref": "indicator--a2230866-5d3a-4d06-97ad-9a59c90e25e8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fb9a87-c2ee-4071-9921-164c33906387", "sighting_of_ref": "indicator--f207048c-22d2-4375-b59b-35bc2a53f3d5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6943a74d-119f-4ca2-a5d7-1d5382f758e1", "sighting_of_ref": "indicator--ec72cc25-7472-4f1e-b92d-19ac6cb92a5e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db85266e-19df-4bb8-8b29-c4eb707b4e10", "sighting_of_ref": "indicator--371f55e5-b1de-45c0-934f-edf9380e316d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3199b6a3-7d4b-4d5e-991e-ebaaa0aacde2", "sighting_of_ref": "indicator--805f143e-93ac-4cd1-830f-1959b2c278bc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27626088-4701-41f8-98c4-4e390b3c70ec", "sighting_of_ref": "indicator--805f143e-93ac-4cd1-830f-1959b2c278bc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3fee5d9-dd72-4c36-bc05-fa16a8a2758a", "sighting_of_ref": "indicator--536f37d3-e8ec-4308-a324-8bc67b663ee3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331494e8-8dd4-4553-b4ff-c488ce976ca1", "sighting_of_ref": "indicator--51adcf03-0e97-4132-9581-1de67b9bc779", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61aa4d24-392d-45e8-8db4-8a44961c882d", "sighting_of_ref": "indicator--ab3b2a63-acbd-4932-a121-c10e0733a059", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8af0dd-3fc5-40dc-9704-e2a17185e869", "sighting_of_ref": "indicator--7025a2f6-22b1-47a3-ab09-bb2588c2fff5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0cf7770-27a9-4078-9c57-e174b7349a85", "sighting_of_ref": "indicator--5d331d79-048e-4fe4-989e-591e267e823f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a442f9f6-c096-446e-9507-7ded9dadd017", "sighting_of_ref": "indicator--19e43ddc-e6eb-4835-80c2-9729a41e632c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bafc019-6e52-4c59-9b44-c21420bc6927", "sighting_of_ref": "indicator--ea91b95b-90b2-46fb-93dc-e54aad8bef54", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907c3fe3-e6eb-4f5d-887a-3fbdf3791c10", "sighting_of_ref": "indicator--4377de04-ccbe-4463-9711-e56d22bffa60", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee094b33-0569-42eb-919a-cfc0856648dd", "sighting_of_ref": "indicator--a3d738b7-3d97-4436-8361-8d8b5ae3b18d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c275bf-c0f7-4e74-8e83-ed1fa59e4279", "sighting_of_ref": "indicator--ce3573c6-2311-453f-b2b4-63978e67abb4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a9f7bd-903b-49f2-81a5-55051e17c40d", "sighting_of_ref": "indicator--ce3573c6-2311-453f-b2b4-63978e67abb4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1bbd6d0-0925-41c9-9639-cc988e80195c", "sighting_of_ref": "indicator--fa9ce1e9-484c-495b-ad51-78031d3d9df7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8f6c88-577a-4cee-bc36-0dc1075709db", "sighting_of_ref": "indicator--d623c6f3-c87a-4fa8-9a0b-1c4755bb9f6a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e74f315-c92e-4264-99e1-4a514eb5b809", "sighting_of_ref": "indicator--d538e251-5775-43fa-80ed-c982d9a29b05", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d654446b-22d4-4072-b6df-86c624fcb2bb", "sighting_of_ref": "indicator--4f0128e1-57f3-413b-b7a8-f21c4e7f8ca7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d574e3a0-9d5f-4624-b19e-73442d515079", "sighting_of_ref": "indicator--1ef06ee2-3cc7-4b4a-a166-35d2e28831ee", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6041cd49-7cea-4eb1-a570-8648a643cfef", "sighting_of_ref": "indicator--d66996d7-38e6-458e-ac9e-9841f3a89912", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6473c060-c4de-47ba-9da1-e35566d67799", "sighting_of_ref": "indicator--9738bb6a-41d0-444c-bc42-379601638a0e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7613c6c3-d47f-4339-9697-41739888993b", "sighting_of_ref": "indicator--3447f603-63c4-464a-9e01-ecc55584b196", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0472b47-4597-470d-b8fe-af5e19987cd1", "sighting_of_ref": "indicator--f9967c80-8e2a-4d78-ba78-2e4e0854ac4a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2af6c84-a690-4d47-a206-106c8503f1fb", "sighting_of_ref": "indicator--9628e649-174d-4d28-b738-1da069581f93", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1844abe8-0381-48bf-904e-3889df615bfd", "sighting_of_ref": "indicator--f2581145-c998-4939-87ed-8d02afebffc5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba61afcc-1f13-4f81-af7e-32270c819f4c", "sighting_of_ref": "indicator--5e5346dd-1142-4a43-95b4-17f65c228ea2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9497c69e-c555-4677-bd03-56d2d4bb20a9", "sighting_of_ref": "indicator--8beeae81-3aa6-406b-a24c-077e4065b9a0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbf3595-ddf3-4ad9-bbf7-b639bae460a4", "sighting_of_ref": "indicator--84e8830d-5f6b-48bd-bcf4-e617de9bf05c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8216c5-46a5-46a1-a7b7-10d93157a2bd", "sighting_of_ref": "indicator--f16598f1-1243-4920-b68a-52f40754cee4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddedfb49-ea6f-41fa-ab9f-61b8583ec197", "sighting_of_ref": "indicator--2c69f3f8-b291-4a9a-996d-76584d27166b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6da7432-08e2-4f69-89ef-8810106cdf00", "sighting_of_ref": "indicator--e1511022-7fdf-47a1-95ad-1ed78ffdd7d6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03dee8dd-f95e-478d-8ce1-40a38f515280", "sighting_of_ref": "indicator--aa91a93b-7b65-4198-9226-84704dc320e2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a55a5bf-819b-4657-a144-9d318367e04d", "sighting_of_ref": "indicator--17500214-10cc-4d8f-8924-f27d6f61bb33", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072d7daa-bcf1-4985-8dd5-e9b9dd7df523", "sighting_of_ref": "indicator--0961b2dd-1948-4692-8a4c-133dd15662a5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57591697-4ccb-4be0-b59d-d2afe4284ada", "sighting_of_ref": "indicator--43b2869e-7798-4d96-bb39-993bc5443186", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfda6bb9-1bdf-40aa-9e5a-a8454f6beeff", "sighting_of_ref": "indicator--a864a2ed-1abc-4dff-95d3-20b3639e50aa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d54762-7165-4c92-825b-7f301ea148b8", "sighting_of_ref": "indicator--a864a2ed-1abc-4dff-95d3-20b3639e50aa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6c5289-49eb-401a-a797-08405eedbabc", "sighting_of_ref": "indicator--57f285dd-921f-4f8a-a352-4eedc4fcb78e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55181108-e204-497d-bffd-25c44cb71a2c", "sighting_of_ref": "indicator--68ee1eb8-236f-43d5-bdff-d3c6eca2c342", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25933bc1-dbeb-4d01-b4ce-c64d076ec984", "sighting_of_ref": "indicator--68ee1eb8-236f-43d5-bdff-d3c6eca2c342", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d299dbea-3a60-410b-939a-5d4b98ed6add", "sighting_of_ref": "indicator--40f1ad23-9536-4a5a-a6c4-15563b929f97", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202593c5-572f-4353-a090-aee9b3e4fec1", "sighting_of_ref": "indicator--f6931a7f-01a6-4465-af29-c69d91b2f340", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da50ab0-587b-4093-adaa-b53d2d06357a", "sighting_of_ref": "indicator--f6931a7f-01a6-4465-af29-c69d91b2f340", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6952a69-c0c0-4e5d-adf7-52ba91411301", "sighting_of_ref": "indicator--4d7dafd2-f4f0-4008-a32e-f601707a4ac9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d395c950-9573-4d50-b757-02873cef377b", "sighting_of_ref": "indicator--4c627483-1b85-43ea-8de8-5903c1ecd137", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60750e9-94e1-4d92-a36f-5c9f439656c4", "sighting_of_ref": "indicator--246efb05-b88d-43e3-b4a2-709e480776d5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ee7708-6f5d-43a1-9922-d07bc3433cea", "sighting_of_ref": "indicator--9a7755db-6ec0-40df-9c14-989f5e53a8f7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64eb1e5-87b3-4ed6-aa3d-2e5c06d7cc23", "sighting_of_ref": "indicator--117a8f55-3e2b-457e-84ae-c6cdd66127b7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ab110d-9e2a-4f1f-bf34-7d5116fe3dd0", "sighting_of_ref": "indicator--a35b8d05-cb35-4acc-b53e-cbc1549f401b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e105cb80-3eb0-4d99-a700-7a7cfe85380c", "sighting_of_ref": "indicator--5ea01f3a-61b6-4e6a-a352-a09bcc8fac62", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddda35d-03c9-4973-9329-1489007d2dc9", "sighting_of_ref": "indicator--35da44eb-600f-47f1-87ab-0344627d63f6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a7667b-1ef9-4ab7-a78f-9d071bf93276", "sighting_of_ref": "indicator--bc2b862c-f0f9-4483-a344-fc57590d8dc3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93be314-a532-4a7e-b9cd-8506a8437383", "sighting_of_ref": "indicator--ea3442b1-9bf5-4f63-8071-45adbf1dcd4b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5d5837-ff65-48c9-94a5-091952ee143c", "sighting_of_ref": "indicator--59e5b47d-3325-4afa-af37-4b58c95c43b3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada24505-be8c-4227-beb9-d1a4f5c3c592", "sighting_of_ref": "indicator--f02c7dab-d395-4ade-9ff0-3dd0c4bf45a1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e97906f-5a54-4939-9472-0e70994b5c36", "sighting_of_ref": "indicator--3e505a8d-81b0-4b2f-ba46-12966138f408", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c570053-7edd-45cc-9405-dca8c63871d7", "sighting_of_ref": "indicator--32865566-1057-4f8c-a692-ae273c8b8f88", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2daf93b6-0a25-4af0-93f5-d48645325cb8", "sighting_of_ref": "indicator--42ab9382-e4e3-4c99-a8d4-4203f21b4506", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc3c1f7-9e5f-4ad1-a256-66b5018c01f3", "sighting_of_ref": "indicator--b568ab58-d119-421a-8419-9b002d9e5d70", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296ec63c-74d0-4175-bdf4-e6f0075826b9", "sighting_of_ref": "indicator--77209b5b-d389-47e1-b3f8-f99f2a467b8b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2e0af6-5059-4b25-be00-02fe5bdc6a57", "sighting_of_ref": "indicator--a907da26-07ce-4edb-92b4-8652a57712ba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19130a95-b37c-401d-983f-ae7592a331bc", "sighting_of_ref": "indicator--db91afcf-b451-4a66-8d32-eb1ecaab302e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d787682a-385c-45ce-9168-1fd7929a7277", "sighting_of_ref": "indicator--15f37636-afbc-4ff8-9363-c9850fe05ff2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ffc805-22e8-41bd-97c1-d295803090a6", "sighting_of_ref": "indicator--ee1ac8d7-89d9-4cd2-9208-1bb095eb1e2a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc9a6e1-b555-4d9a-92b6-3c4dfd1d93a1", "sighting_of_ref": "indicator--b1b42e5d-bea5-4043-9bdb-ff092fb29446", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933fd21e-78aa-49ac-a47f-bf31a44fb101", "sighting_of_ref": "indicator--9052bf50-86be-4ab1-94bf-5df45bb8271a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59db21da-e8ed-4a40-8fae-f50cb7a911cd", "sighting_of_ref": "indicator--9052bf50-86be-4ab1-94bf-5df45bb8271a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0964a1-9200-46f5-a8e8-54c114062b68", "sighting_of_ref": "indicator--6cb5424d-6668-457c-a379-0c3b5937f463", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f6e519-2b49-42dd-b8d0-3c75899f1dcf", "sighting_of_ref": "indicator--4f499d63-f963-4ae8-99f6-1c79555f05ee", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60442f58-046e-4ac7-9856-b73298390278", "sighting_of_ref": "indicator--484f58a6-d6b9-43ff-b2be-6c692d43618a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64163a9-e30b-45fe-93ce-4f24b79470cd", "sighting_of_ref": "indicator--75fc6d58-b45d-4e58-a33e-e214e6935d5f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ff6b4d-5a01-4787-92b1-3f74749227e1", "sighting_of_ref": "indicator--fbf4b5c5-118b-4b6c-80dd-4b69ce740333", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227ffe0e-24f1-4cb8-bc5e-efc10ca6f402", "sighting_of_ref": "indicator--5e5429c4-0a80-478d-a3a1-002e8bc155a5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2daddd-d222-4c40-96d1-770de417e838", "sighting_of_ref": "indicator--5e5429c4-0a80-478d-a3a1-002e8bc155a5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9c99b1-53ec-4d61-b5b1-a6b0e9eca22c", "sighting_of_ref": "indicator--8c38fcb5-1010-4838-a55d-9aed4a9dfe7c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe719c5-5571-4578-ab34-9f8adb2bb33c", "sighting_of_ref": "indicator--612e0be0-5480-4203-adc0-9d5e6258f7b8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30144ce1-b4f8-4e0f-94af-30f43dd2a63a", "sighting_of_ref": "indicator--bcc471cf-1208-470f-8581-b06073dd325e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94a1f48-d0dc-47b2-8c7b-7a94b732e6fd", "sighting_of_ref": "indicator--c89ad90a-34d9-4861-bbff-77ab4d8efe69", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1ec4e3-dbb8-44a6-bc7b-65ea87900a23", "sighting_of_ref": "indicator--f2073df6-cf97-4254-83fe-49232d79368a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd0724f-f74a-40cb-87bb-449dc0b7ba78", "sighting_of_ref": "indicator--2dacc0d5-fe8d-4264-8af1-28809a8b91c3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786e2e3b-f0ea-40dc-ae6b-88745e1b0921", "sighting_of_ref": "indicator--736d998a-dd0d-4b68-b319-f4c8e5ad110b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe94aab-3818-42a4-9ff0-36d750526659", "sighting_of_ref": "indicator--5d5e5a4a-f331-4133-8ce0-725a2b0a915e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781eb6e6-8447-4b46-8434-e000fceb4821", "sighting_of_ref": "indicator--341e9c57-b483-4408-8106-9b47a930cc17", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a28e355-e8e7-473e-9be4-67b0bc6682ff", "sighting_of_ref": "indicator--b72cb3bb-0e88-461c-9061-f07e90024dc9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c6256d-6f3f-481c-89e1-fc9a750f32b0", "sighting_of_ref": "indicator--f87f58e8-43ad-4f48-801f-7610e1ef26d8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7773ea90-fd53-48f9-9ccc-aaca162da4d3", "sighting_of_ref": "indicator--284bb170-9c4f-4bc9-be2c-c291534d7a19", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203f99df-0cf1-4768-b6da-9d1ce8748983", "sighting_of_ref": "indicator--4d2f2f65-b23b-48fa-b5c4-7be39aa97ff6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529fdf35-9b46-4633-ab18-41734329eba1", "sighting_of_ref": "indicator--6b695869-8818-4e27-8523-395059d9a736", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb84c16-7f35-4986-a0f8-c5c8bec93140", "sighting_of_ref": "indicator--6b695869-8818-4e27-8523-395059d9a736", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b73e885-e86a-4025-a802-68f56588e58e", "sighting_of_ref": "indicator--b2f0c045-a4d0-4fe0-af9c-d56905569083", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37463d0-2374-4bc2-8fdc-b57d88d235d5", "sighting_of_ref": "indicator--e1f36ea6-8d99-401d-95a5-2fe39edf1871", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c0abc6-062d-4598-a42c-b761461b5db9", "sighting_of_ref": "indicator--b53d7819-56ff-4cb5-983b-feb4406ce8b3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca9eb01-6118-4f4d-82f0-6b1c90089a82", "sighting_of_ref": "indicator--853927fe-2b9c-4e9f-989c-66cde1d50e9d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260014c1-9a7a-4521-910a-f36f7f12547c", "sighting_of_ref": "indicator--150e01a0-7867-4055-80ed-3b5a24ab7642", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf71d0c-250f-4a3b-af22-8dc6b207d148", "sighting_of_ref": "indicator--e2be924f-9a89-4b10-8ea7-d75c98d0dd56", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84265c4-dff6-482d-bda6-7aa83c508aab", "sighting_of_ref": "indicator--e2be924f-9a89-4b10-8ea7-d75c98d0dd56", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d6fba9-0644-47d2-877b-d2e26485b1f2", "sighting_of_ref": "indicator--5417c04f-d390-41ad-b8ad-f59b13f435ea", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472a0fda-2fa4-45f5-97f4-35e31e22f834", "sighting_of_ref": "indicator--e225e565-8705-4e94-9180-e103385fe78d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb2f4d1-9996-45f3-970c-9471e58e446f", "sighting_of_ref": "indicator--c7cde169-1d47-423a-a23a-f36200bbb8c3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317e4167-dcb7-4f7a-8e95-0d7f16c02e33", "sighting_of_ref": "indicator--308c6e54-48bb-4a49-9f51-e671c3391c82", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd76a9e0-dbda-44c8-ac20-152759b030ee", "sighting_of_ref": "indicator--ece64c6a-6288-4cb7-a0d7-f3d6477a9429", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8868a11b-87d7-407e-b484-fe4af97678b6", "sighting_of_ref": "indicator--82d5a9b2-d92d-46c6-9164-05b73a3e3c2a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f915743-904a-4888-8507-c4685dea9de3", "sighting_of_ref": "indicator--9831fb03-444e-48b8-860f-d351993a560a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698b738c-bacc-4564-b07a-4a93e3838c16", "sighting_of_ref": "indicator--f115d684-eb53-434f-a4e8-1a664d7d6a40", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ef7fc7-3556-4f92-a666-45edce7ee3b8", "sighting_of_ref": "indicator--6266351e-53b9-410f-bc64-98a02e146c63", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfeae827-703b-409e-8c14-ea98a8cbc9e5", "sighting_of_ref": "indicator--5af6f4a9-cde0-4fa0-9735-c9c436ddf730", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7c1f1e-3650-45bb-bb4b-148f5c0a4768", "sighting_of_ref": "indicator--4ad942c6-1825-4ec1-b5a8-3923b433768a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef75adb6-3d75-4a04-b742-fcb0bdcb7b44", "sighting_of_ref": "indicator--a02a5026-7a1e-4297-a12f-ae7db98a9ff8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7569e92-a64a-4975-9cc6-e70da5e9f004", "sighting_of_ref": "indicator--08662eb5-ce62-407e-aff7-1be7920231b7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1199ca-44a5-42e1-81cd-1e487cb4b892", "sighting_of_ref": "indicator--08662eb5-ce62-407e-aff7-1be7920231b7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee04b514-489c-462e-8311-548a7817044d", "sighting_of_ref": "indicator--ed7e1ce8-eadb-4262-8e58-500d87c24906", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efe2844-3340-4b5d-88ff-3def07980a9c", "sighting_of_ref": "indicator--b86153b6-3396-4d2b-8468-01c6ada3fa31", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75511a66-0259-4e7e-9a5b-e9047bb43393", "sighting_of_ref": "indicator--e31226a0-2cb1-445e-a44c-18d65f6fef07", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8512693c-72a1-41b6-a7ec-127d13cc8f9d", "sighting_of_ref": "indicator--e31226a0-2cb1-445e-a44c-18d65f6fef07", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5956d3f5-d831-4946-b568-790ca34d970b", "sighting_of_ref": "indicator--362021da-71be-4497-b98c-8254696dcb60", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3320db81-0dc6-45fd-992c-5440eea5355b", "sighting_of_ref": "indicator--679596a3-d1c4-4fa9-af2b-aaf5854509a2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddafb03-0008-4c1d-a3de-e46d2c832833", "sighting_of_ref": "indicator--529049ec-3c33-4ada-95a5-7cbcafd24653", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71747b60-5477-40e0-85d9-444a8ae27e48", "sighting_of_ref": "indicator--79e5ccd3-dac0-4782-90fd-edfa81b07b56", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1814c5-b490-4b6a-9a0d-686d99a2dae8", "sighting_of_ref": "indicator--d8176b77-6607-4580-9a66-98435b00b8f8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935d56c3-fb7e-4a98-82a3-ba262ebd5601", "sighting_of_ref": "indicator--01dda7aa-6003-4360-b0c5-ddecb542e51a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cc21a0-cbe7-4087-b521-21ef5c264c2f", "sighting_of_ref": "indicator--bd73edb9-4523-4c54-b3ad-70076cfa60d5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e56b215-b4be-406f-8c87-97da4790f984", "sighting_of_ref": "indicator--bd73edb9-4523-4c54-b3ad-70076cfa60d5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4318e370-6ad0-4b88-acce-611e71763139", "sighting_of_ref": "indicator--800d27d4-dfd2-44eb-ae75-14ec0396b20f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b6f809-72a1-49f4-a855-072f97965612", "sighting_of_ref": "indicator--814b25a6-dc44-4d8b-b064-7fd92e48784f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52d4466-49ec-4034-a8f4-1ae50073cca9", "sighting_of_ref": "indicator--e0642d29-5b50-4759-83df-9332a41da91a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af13fd5e-a037-4f0b-b837-0ad90c1217ab", "sighting_of_ref": "indicator--d7526c4c-50cf-4215-b6b2-6a1fff522b12", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab0bc71-5f7c-457a-9cdf-b30d26a9e8a6", "sighting_of_ref": "indicator--ddbe6700-fbd3-4703-bf3e-ebb77c7d1a76", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ecfc63-85b0-4aa0-8a88-401aacf2a6b6", "sighting_of_ref": "indicator--237e0472-1d0a-4ea1-b431-35718629ceec", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7943a5c-2959-40f6-91ea-82609ad0e1ca", "sighting_of_ref": "indicator--9ce97a9f-7f76-44e4-ba1b-38f8f1286813", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97933c94-e8d9-4894-ab0c-1198723c711d", "sighting_of_ref": "indicator--0bbc057f-d047-4702-8f27-1ab5d1c52c0e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37c8e2a-9eef-4155-bdec-aaf6123d1b1b", "sighting_of_ref": "indicator--ac9dff65-55c8-4fba-a30e-e5ebd61f8e77", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5676e1-c27f-417d-a430-502214470d5e", "sighting_of_ref": "indicator--19763999-b523-4f5d-b5bb-7027f4186191", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35dd0a8-2cf7-4ab1-b0ca-730c7c41f9a7", "sighting_of_ref": "indicator--19763999-b523-4f5d-b5bb-7027f4186191", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b58c945-498a-4795-9baa-5481b9f2e378", "sighting_of_ref": "indicator--19763999-b523-4f5d-b5bb-7027f4186191", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86204525-6eb1-4a24-8086-434524cd7d2d", "sighting_of_ref": "indicator--e3e3bc06-2bc1-4544-82ff-d5b278646e63", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2008ec2-919c-400c-be71-808ce305b671", "sighting_of_ref": "indicator--890cb734-c7d5-4161-9875-02b5b0d74ba0", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff5f366-3775-4c46-aae1-2f60d15e7cd8", "sighting_of_ref": "indicator--44c64480-13f8-4daa-9ac9-56c9e384957d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63144d8-ff11-49f3-9173-1ffa5cdba711", "sighting_of_ref": "indicator--44c64480-13f8-4daa-9ac9-56c9e384957d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd41db56-7fac-49b8-8427-ab46ff6512d4", "sighting_of_ref": "indicator--44c64480-13f8-4daa-9ac9-56c9e384957d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421da663-9a31-4eeb-b1aa-18670876de58", "sighting_of_ref": "indicator--04b10997-561f-44e5-8600-c7f483067739", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4554bad6-94ff-4a81-976b-69161d19155f", "sighting_of_ref": "indicator--04b10997-561f-44e5-8600-c7f483067739", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6b5a0c-8100-4980-a675-bbfe1aa74fd2", "sighting_of_ref": "indicator--1c5563ac-6b00-474f-a9b9-c36a398ec19f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9582372-89e6-4745-8c77-2ecff545d75b", "sighting_of_ref": "indicator--1c5563ac-6b00-474f-a9b9-c36a398ec19f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98bb5c4-803b-4757-8092-067fe357c660", "sighting_of_ref": "indicator--c9ad3f02-689d-4cbf-adc7-abfed1b052fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724be6c8-8a3a-41a3-b8bc-d65f83ec2968", "sighting_of_ref": "indicator--2d6dc4fb-dd60-4e4a-80d5-c167c3806085", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d059ba44-c0d6-4225-b42d-db4f3289ea1c", "sighting_of_ref": "indicator--4368b753-8a1e-44d4-bfbb-71498a8280b3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cae5f0f-7c0c-4bb1-8b60-916a561b7598", "sighting_of_ref": "indicator--2b879c5a-418c-4815-ac8e-75c05f46aed3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1ed12d-af77-4e46-9c1e-4976390dae7d", "sighting_of_ref": "indicator--521ab79d-b26a-48ed-a0fd-40bed515a158", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dce3c4d-0b72-4d26-9952-452016df5177", "sighting_of_ref": "indicator--1e0dff85-1f0e-4bc4-8244-f51536266a4a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007e475c-22ff-4c71-8244-c08fc236b34d", "sighting_of_ref": "indicator--0b7ce8e3-dac7-4f65-b420-fd068224f256", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9ba6c5-5b5f-438d-baa3-c197be7dcc82", "sighting_of_ref": "indicator--0b7ce8e3-dac7-4f65-b420-fd068224f256", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fd26d2-e378-46ea-9345-7c015f571455", "sighting_of_ref": "indicator--76e0c0a1-0661-4629-9b4d-dfc132c02afb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2369c1ff-99ba-4b57-b3cf-0b0b06790168", "sighting_of_ref": "indicator--a4608051-5d44-47ae-863f-bb41698210f1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3d4a2b-40d7-46dc-9e2f-697fb34db908", "sighting_of_ref": "indicator--a4608051-5d44-47ae-863f-bb41698210f1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14d0d98-60f2-42f7-a121-c936e30d6cbb", "sighting_of_ref": "indicator--12629305-5e3b-42a9-b080-8847ccb8f312", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5ab6b2-3eca-40da-91d8-66fbea40b73a", "sighting_of_ref": "indicator--12629305-5e3b-42a9-b080-8847ccb8f312", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6852f1fc-9a17-47fd-8efa-0cdc87b9872d", "sighting_of_ref": "indicator--12629305-5e3b-42a9-b080-8847ccb8f312", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582ec882-a45f-4fdb-a9f2-4a87c6e9168b", "sighting_of_ref": "indicator--27a42b89-1b20-4fd5-ab3b-1efa624f35e1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c949db66-477a-4df3-946d-48a42b4b69e3", "sighting_of_ref": "indicator--d572f4d2-8225-4978-afba-9e0b4c966de9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e90931-753a-458b-9c15-51a09cccfe67", "sighting_of_ref": "indicator--d572f4d2-8225-4978-afba-9e0b4c966de9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aceca03-5107-4a06-a4fd-8310ad4f3047", "sighting_of_ref": "indicator--d572f4d2-8225-4978-afba-9e0b4c966de9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045dae37-1151-4c55-be3b-50e9fae467b1", "sighting_of_ref": "indicator--4fe2ebf0-6992-4213-a961-310f8ec0e953", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cc08fa-5df6-4d37-944a-079c185aa768", "sighting_of_ref": "indicator--18fcb588-1424-4680-a075-dc93d6556427", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d8fbfc-83a3-4f7b-8c2d-3c88e43e1572", "sighting_of_ref": "indicator--6e3d3e01-3f1c-4431-83b4-349bcda6d7c4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468096cf-8b0d-4666-abb3-c7b79d389c25", "sighting_of_ref": "indicator--6e3d3e01-3f1c-4431-83b4-349bcda6d7c4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99749062-e7f8-475a-b2bd-f93e01383c3c", "sighting_of_ref": "indicator--6e3d3e01-3f1c-4431-83b4-349bcda6d7c4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2167ec76-c671-4839-a91d-e20ab490d4bb", "sighting_of_ref": "indicator--128edd3d-3743-4869-8e7f-75bc36d2db21", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3fd4c9-f26b-4433-849d-fed533b4ae0c", "sighting_of_ref": "indicator--128edd3d-3743-4869-8e7f-75bc36d2db21", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0c0498-7f4d-4780-8daf-c3eed661c1f1", "sighting_of_ref": "indicator--128edd3d-3743-4869-8e7f-75bc36d2db21", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2de0e7-1c59-40d8-8dc4-3e64eb7d4388", "sighting_of_ref": "indicator--08b4da3d-679f-4254-b231-79f9aa01728b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cfbe1a-7b87-4cd0-bdc8-5c401e1f0f55", "sighting_of_ref": "indicator--817485a4-de25-4e0b-bc7c-b020b1be317e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37bedfd-58fb-42a6-9c49-e142e2c81411", "sighting_of_ref": "indicator--2725bab3-5352-4a82-aa0d-2132c5afc7c1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa44984d-3de6-4d89-aa0a-9bb9821e8ebe", "sighting_of_ref": "indicator--1a0ec12a-997b-48ce-8d79-9c9a5c6c94d2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ce6bb0-e27e-4f29-91d4-bdb3fde29f16", "sighting_of_ref": "indicator--7e4f9333-ebe1-4f49-a0cb-c7e2c3c4341a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034bace4-59b1-464a-8b81-54e648756ea4", "sighting_of_ref": "indicator--7d775cdf-f1ef-4473-ab8e-17a9c8b35aaa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8784db-8d87-4298-8783-529d80ae9517", "sighting_of_ref": "indicator--e177d95c-37fa-47d5-a269-c88ee721fd8f", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca04406-54d7-4722-a197-e689d790586f", "sighting_of_ref": "indicator--938ad5d7-8cfa-454c-b9b9-bf7a20202fd7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31875b23-2733-4623-88c4-86a8e8356b36", "sighting_of_ref": "indicator--e5501aed-ec90-4fb8-a968-759a5c025f00", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5101ab-8061-4468-9fcc-f154d0410e2b", "sighting_of_ref": "indicator--4077c4b9-3e2a-4a80-a7f8-a2ed296f5ce2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2549ef7-bd97-4382-a827-169999477c5a", "sighting_of_ref": "indicator--29cc48ba-0e18-4acc-a9a1-b32079d266bf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c2155e-6934-445e-9905-0835695fd2bb", "sighting_of_ref": "indicator--ec18f5ef-c680-44f3-8229-337a27dcbb60", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a61584-867a-4423-87b6-cea1f89d415e", "sighting_of_ref": "indicator--cc7f09f9-5068-4d19-91dd-e97005529e6f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4ffef4-3707-405f-9f7c-88484d4e4acb", "sighting_of_ref": "indicator--cc7f09f9-5068-4d19-91dd-e97005529e6f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72fe3b8-9522-472c-a0bb-0bf75c69c637", "sighting_of_ref": "indicator--cc7f09f9-5068-4d19-91dd-e97005529e6f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d661410-a7a3-4b73-a4de-f575b023ec5c", "sighting_of_ref": "indicator--71c1053e-9945-49a6-8dd5-05e6c89dee13", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21edfcf2-2502-4f1b-8e0e-013fe36757b2", "sighting_of_ref": "indicator--71c1053e-9945-49a6-8dd5-05e6c89dee13", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4f1304-d1ae-4b22-b203-41c57dd8d2c6", "sighting_of_ref": "indicator--71c1053e-9945-49a6-8dd5-05e6c89dee13", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08745da-f242-4e93-a01e-9519ce6dc61a", "sighting_of_ref": "indicator--cf432828-88da-48cf-8e40-726b56c6c7d2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb0ed78-6eb7-4a84-96c1-d3a9f86d3739", "sighting_of_ref": "indicator--cf432828-88da-48cf-8e40-726b56c6c7d2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2a1d8c-9c81-4b78-a489-0dc404cfdaf5", "sighting_of_ref": "indicator--cf432828-88da-48cf-8e40-726b56c6c7d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276406fa-4b3f-44e9-a609-f7bf47502180", "sighting_of_ref": "indicator--b6c3efe0-0b08-466a-9e93-e1d804761098", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248c3add-3709-4ccd-8ae5-937fc64bfbf1", "sighting_of_ref": "indicator--b6c3efe0-0b08-466a-9e93-e1d804761098", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7723dce-3399-41a2-bf1c-cdd7ce77fefc", "sighting_of_ref": "indicator--b6c3efe0-0b08-466a-9e93-e1d804761098", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f22255-b4a3-4b94-8519-fe3b447844a8", "sighting_of_ref": "indicator--0d5087b4-a850-410b-85c4-68fda5d1e4f3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91f15ad-47a3-4663-9b59-d13ddc79e7fe", "sighting_of_ref": "indicator--0d5087b4-a850-410b-85c4-68fda5d1e4f3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3309a9c7-0a06-432c-b446-ab2a45f89911", "sighting_of_ref": "indicator--c431c1a5-8141-4edc-9b07-b3f255f1df8f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef984d2-359d-4fb6-98a6-66972b714c63", "sighting_of_ref": "indicator--c431c1a5-8141-4edc-9b07-b3f255f1df8f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4803fcc3-e4ee-422b-b422-fa7e1f69ccd3", "sighting_of_ref": "indicator--c431c1a5-8141-4edc-9b07-b3f255f1df8f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1d20df-8084-4696-9860-8afd1a7f082a", "sighting_of_ref": "indicator--9abfb79e-7e10-49d4-8dec-b283a38299aa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d08a2a-2d75-4c71-9676-5a86fc2fba9c", "sighting_of_ref": "indicator--9abfb79e-7e10-49d4-8dec-b283a38299aa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d1ac5c-c21e-468c-9c07-5675c49dbf17", "sighting_of_ref": "indicator--9abfb79e-7e10-49d4-8dec-b283a38299aa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845d4aee-a445-43eb-8490-d2e9b94982c6", "sighting_of_ref": "indicator--dbcacdbb-722e-4c41-aff3-55ca16a0371d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b0ef91-dd33-415b-983b-5e313d614b26", "sighting_of_ref": "indicator--dbcacdbb-722e-4c41-aff3-55ca16a0371d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6057812-450a-4776-bc70-3f46a1543551", "sighting_of_ref": "indicator--dbcacdbb-722e-4c41-aff3-55ca16a0371d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a749aa-7cc2-4627-89a9-5be232c93cbd", "sighting_of_ref": "indicator--7dc1353c-23b1-409c-b53d-9063ef6ae9d0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19650cfc-f379-41bb-8cae-aca2ab2e6d7a", "sighting_of_ref": "indicator--7dc1353c-23b1-409c-b53d-9063ef6ae9d0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21db5cb-bebf-45ff-a52b-fa6be70262fd", "sighting_of_ref": "indicator--7dc1353c-23b1-409c-b53d-9063ef6ae9d0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab5208f0-d8f5-48d0-a495-7a9a367926aa", "sighting_of_ref": "indicator--b96516f3-8950-4e5c-9317-7ba0a8a71ec2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba35b7e-56f0-4259-a6b3-1a41ce1701f7", "sighting_of_ref": "indicator--b96516f3-8950-4e5c-9317-7ba0a8a71ec2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82dbc201-5ec1-44c0-abee-13cd19c0ee48", "sighting_of_ref": "indicator--b96516f3-8950-4e5c-9317-7ba0a8a71ec2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7d14a3-709b-47a7-b19a-e437792b00c8", "sighting_of_ref": "indicator--f2234961-e189-40ea-b6b7-ca1a4dbc6701", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff200b81-fd28-4970-83b8-5ad33120af43", "sighting_of_ref": "indicator--938f3752-8e8d-4372-9bcb-2ae44f8ee954", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd62968-d633-4481-b3d2-4bb529c97685", "sighting_of_ref": "indicator--d4202465-b20f-4e34-b0e8-eb9529dc3af2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e79e849-4dd5-463b-b881-9b8a35f265ad", "sighting_of_ref": "indicator--562b8225-6248-4dac-be1c-c1bb2fabde20", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00321cf3-50e3-4657-b763-4b17036ca2c7", "sighting_of_ref": "indicator--562b8225-6248-4dac-be1c-c1bb2fabde20", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961bf07d-ba61-416c-8b2e-d257100ec5f5", "sighting_of_ref": "indicator--7529a33f-554a-4b15-8222-888115ce421a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2e5216-6633-489b-8fb1-fef8b0a2f86f", "sighting_of_ref": "indicator--b84c7ad8-89fc-4d52-9678-48fc5527d03b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c175c19-4046-465e-8312-59c127b84133", "sighting_of_ref": "indicator--b84c7ad8-89fc-4d52-9678-48fc5527d03b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56a9047-bff9-4046-9fe4-bc7b9566a164", "sighting_of_ref": "indicator--b84c7ad8-89fc-4d52-9678-48fc5527d03b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de74cf0-2acc-40d4-86c8-f06b8fa25a03", "sighting_of_ref": "indicator--6ef70862-4a81-4485-8073-be03f5d2abc1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395d6863-5099-48d6-97dc-16c6946188fe", "sighting_of_ref": "indicator--6ef70862-4a81-4485-8073-be03f5d2abc1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8bf707-5bbd-4297-89cc-92e043d432fb", "sighting_of_ref": "indicator--6ef70862-4a81-4485-8073-be03f5d2abc1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252bcfe0-fb4f-4ebd-86dd-a9a0745126b0", "sighting_of_ref": "indicator--b4d5b305-6531-40fb-8e0a-24d971f3b1ac", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfd6b61-46ef-49e5-9c02-4096d13def09", "sighting_of_ref": "indicator--89837c8f-af77-4c78-8def-7a9b85d81e40", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49cfa75e-a19e-49ec-9476-96df0c482a95", "sighting_of_ref": "indicator--89837c8f-af77-4c78-8def-7a9b85d81e40", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2624796d-81b9-4228-b02f-590606b4582d", "sighting_of_ref": "indicator--89837c8f-af77-4c78-8def-7a9b85d81e40", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d19c8f-36b2-4a6a-a8db-0123d9e154ec", "sighting_of_ref": "indicator--811f0c3e-f47f-4259-997d-bffa2c6484e5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad48f3b0-2a2a-47fe-8418-9cef97d223ad", "sighting_of_ref": "indicator--9e825cef-5ccf-4ad4-adce-8fffb888ec7c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f181fe9-45ad-4bd5-a9f9-006280d29a41", "sighting_of_ref": "indicator--ac929d6c-ce18-480a-bed5-8b3b72e5a747", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b54d05-aa28-4eaa-acf8-35d1b61caf49", "sighting_of_ref": "indicator--38e17382-d501-4c09-a907-76546d9df2ac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56667f1-1927-41f2-83a0-4775c07fcf7f", "sighting_of_ref": "indicator--642fe970-a601-449f-8fb1-b8162bf2d512", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0b2d89-f727-4073-8017-5e2a96a51058", "sighting_of_ref": "indicator--c14887b6-4415-4d27-a8a6-375da8a9ac30", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c711bc-a256-4016-8d4e-25502a0de323", "sighting_of_ref": "indicator--c14887b6-4415-4d27-a8a6-375da8a9ac30", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1362fc-1278-4e13-85a4-579385677900", "sighting_of_ref": "indicator--85948a98-2ba9-4833-9d9a-ce869e8df69d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44575fd-7c7d-486b-925b-1daae8f26bba", "sighting_of_ref": "indicator--85948a98-2ba9-4833-9d9a-ce869e8df69d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13529c2-2385-4784-bd8d-7bfb40c8475c", "sighting_of_ref": "indicator--c316e35f-064d-449a-975a-5278b5033bc9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3680389d-73d3-4c71-acd9-f232b35e393c", "sighting_of_ref": "indicator--791e2920-98f9-401b-a8df-25c472cd6931", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02047a62-4a37-4c03-99c1-ae0dff681ee8", "sighting_of_ref": "indicator--9af0cf74-02a3-49cb-9382-a620e16e341a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c68b68c-d94d-474d-b32c-4a0e53964170", "sighting_of_ref": "indicator--2b713b56-f95b-4559-a089-cc1b3d6147c4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e0b706-5696-4d86-aa42-37a42c0c1ff9", "sighting_of_ref": "indicator--dfb1d680-b513-44b8-96e8-81ca1273c59f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5ded4e-7609-4717-9d0a-275b9f338b00", "sighting_of_ref": "indicator--7ec208ed-8f51-4523-a85d-e14d20172282", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe426c0-cde4-4c5d-9106-9407e79ee898", "sighting_of_ref": "indicator--7ec208ed-8f51-4523-a85d-e14d20172282", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02973d29-d2b1-45b9-876a-2ed42cb57862", "sighting_of_ref": "indicator--2dcd1bbc-1647-4fa6-809a-2a680ae6d1a3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377017b5-f3b3-48be-95f0-2cb322db4a48", "sighting_of_ref": "indicator--2dcd1bbc-1647-4fa6-809a-2a680ae6d1a3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ba2d9e-555f-4a62-970a-0a105f430f35", "sighting_of_ref": "indicator--00520f6f-9a76-4274-9a68-4ef357a02567", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7aff8e9-769d-481d-b88c-06add2fb22b6", "sighting_of_ref": "indicator--00520f6f-9a76-4274-9a68-4ef357a02567", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadbbef8-790c-4c18-bd27-6396f665819c", "sighting_of_ref": "indicator--9ce552bb-f877-4681-8a38-d5b24002ed0e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17892c9-4eef-48ed-a1a2-76dfdbcb8024", "sighting_of_ref": "indicator--f131523b-cbd9-4cb6-8b3f-ca66f19dd675", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f03c6e-dfcc-47af-9673-9269658ba937", "sighting_of_ref": "indicator--80177d81-cd3e-4f99-8e2d-bef1a6eca9ac", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097f924f-3c15-4bf1-8594-50098d08fd5b", "sighting_of_ref": "indicator--64828d2a-b41b-487d-91f4-b81bb675ddbd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abdbd55-bd52-4a13-aa32-de11ece8d13e", "sighting_of_ref": "indicator--10c75048-523a-4b32-a459-d64c2aaa9e84", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40faa45d-9f36-4df1-a9ff-81d388d673a2", "sighting_of_ref": "indicator--a5f77dfc-ba84-4c4f-bac8-b246af35d77d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3841663-6579-4800-8d91-e856363a1cea", "sighting_of_ref": "indicator--31f36c1b-de65-4d88-be4e-e0ee92e31922", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79892435-2317-40b8-a0c7-45b86e59da74", "sighting_of_ref": "indicator--d9fd752b-8a74-49ea-8a59-5e12ab7b408e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27272134-aa83-48a6-b69a-0ff90a91373f", "sighting_of_ref": "indicator--d9fd752b-8a74-49ea-8a59-5e12ab7b408e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0d0d9d-3b84-4f9c-9a10-65d53d766c4e", "sighting_of_ref": "indicator--f2a1936e-a690-4455-b32f-75e2d8d5ccb0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81dcfce-64f4-49d0-9f3c-7f9e30ad7d06", "sighting_of_ref": "indicator--34c0895f-2f42-4c4c-bda5-e8eab6c8bc29", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81edf68c-c231-47ef-8013-4e24bfba8686", "sighting_of_ref": "indicator--f41a7eeb-f0a4-4355-94ab-95d4ee299768", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f224c9-efe9-45b8-aecf-1ba4b934b860", "sighting_of_ref": "indicator--865b6755-1481-498a-a491-cf56d5a089e6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0235d31-7ccd-408e-82b0-cfb30ffaf844", "sighting_of_ref": "indicator--2b47f890-630d-4b69-a2bf-c94b7d8ce538", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd42ac9d-717b-43ab-9775-2d64bed0820e", "sighting_of_ref": "indicator--f9bc9ce5-b366-46fb-8bee-320a987ea0cf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbd51d6-3536-409f-8bd0-17c2d98e8e2e", "sighting_of_ref": "indicator--bb4956ce-d687-4de9-82f6-cae3afee6a0c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6ba7ae-0d95-405d-82df-5186afb81df6", "sighting_of_ref": "indicator--6f28609a-228f-4623-a9a1-1f7bff71d799", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b853ee-e6d6-43c0-bee3-c0fa5a9bda0c", "sighting_of_ref": "indicator--1fde058c-87df-4323-8ae9-caf2e7c035a2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8189fd2-c438-4647-88a4-602526ab5062", "sighting_of_ref": "indicator--da9268bd-e8fe-4511-9633-c491b628ab68", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4728e089-5d16-4003-a191-7be75f8cb8d6", "sighting_of_ref": "indicator--ecc0b300-0a17-401f-980f-4ea5af4e6f5c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faff7546-abe4-4c20-b98e-b17d48d6fdd1", "sighting_of_ref": "indicator--891cfe54-5264-4932-9f29-a6d43b2daf70", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8747f3b7-a342-4a32-bf36-505d4c28b990", "sighting_of_ref": "indicator--891cfe54-5264-4932-9f29-a6d43b2daf70", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3949dc03-e8b3-4710-a5b9-7a9662317759", "sighting_of_ref": "indicator--994c58e2-7f55-440d-9545-34ddc5ae77be", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06cb10d-0987-428c-9e62-bd99f294a64f", "sighting_of_ref": "indicator--7c285744-91ca-4669-8cf7-f0d9863c91e9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5225602-239f-4a6b-bca0-be72670ab709", "sighting_of_ref": "indicator--276dc0a0-d980-4b40-8206-33710920f0af", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bf5b22-5462-40bc-9807-f5fa369ffdf3", "sighting_of_ref": "indicator--517e8775-3e73-4fe6-9df5-be53dee124d9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773b71fa-453a-4258-89d6-88651915ec81", "sighting_of_ref": "indicator--b14c6a27-1519-4566-984f-88cb54014028", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba16205-4a1a-4fcc-a84d-7c7ef8044e5d", "sighting_of_ref": "indicator--732089fd-4002-44f2-a0d4-060615ea75c9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af60e72-0b4f-42f5-b999-bb09fdd75e60", "sighting_of_ref": "indicator--e6b22481-78dd-40f8-93dc-9c8d5775bf55", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1b35e2-9a49-4079-9d0e-0a970778d006", "sighting_of_ref": "indicator--eecfe3cb-7411-4081-ac32-15006a185697", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85588111-bb41-48ed-bdf3-3efd9ed28918", "sighting_of_ref": "indicator--a58db821-af03-43fa-abf7-84b5277b5289", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4011f293-61de-4b42-a987-7484d10c4cfe", "sighting_of_ref": "indicator--fd1aca39-cf2a-4c25-a95e-62aed08748d4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9061ad46-c394-4fd9-a6fc-9a61958dac84", "sighting_of_ref": "indicator--0bde2059-b8ac-42d5-9d29-48e1be02cabb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a87695-f72c-48e2-9bf6-ce973a79d70a", "sighting_of_ref": "indicator--d7ad375a-6595-429c-a1b3-7e7ae1e4e799", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559dca41-e3f5-4bba-9fd5-85175c6a4d4c", "sighting_of_ref": "indicator--bb8deade-cb9b-4650-a76e-d6c287458601", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b32e3ab-a732-42d5-ad7c-b9abb1332802", "sighting_of_ref": "indicator--829d38f5-08f0-4ed0-99d9-7e5915091245", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c16d65-282e-45d5-9c78-e5498f6efe5d", "sighting_of_ref": "indicator--4d40f6ec-2129-4b71-9c97-b0b76c8d8117", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e94590-168c-42c7-b19f-27fb35a4e5ef", "sighting_of_ref": "indicator--4d40f6ec-2129-4b71-9c97-b0b76c8d8117", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f748929b-c6dd-48d2-be32-281b3fa46f7c", "sighting_of_ref": "indicator--b82c7d79-0488-43ad-a502-3a650e8b65c2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91271de9-7ab6-499f-8c06-4f9b88fc5960", "sighting_of_ref": "indicator--6bb8b3a9-5f2a-4591-8514-7083733560a7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b40a40-cf6e-4f43-9008-76e20a4ca456", "sighting_of_ref": "indicator--0268bc37-c0bf-4d64-a09e-ed7231c0c5a5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9947e2de-5c37-4595-8ca2-e3f0e3d52702", "sighting_of_ref": "indicator--0268bc37-c0bf-4d64-a09e-ed7231c0c5a5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891462a0-befd-41a7-a285-8438bc19d1cb", "sighting_of_ref": "indicator--c829905f-f635-4b5d-8d5a-d743b9b31fc4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74c7c6a-fa81-43ac-b918-bba95221558c", "sighting_of_ref": "indicator--d57630cd-bd9a-41c7-89ce-1db678098726", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80dc1b56-e884-43aa-9671-763c53cfaf01", "sighting_of_ref": "indicator--5e472c7f-68bb-4f82-bda6-771f2b8debd4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346d573f-fb6c-4bf7-8ce9-fd3677d80b98", "sighting_of_ref": "indicator--e1963784-95fa-4a8f-89f6-7189c584b5d0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0b6e16-34b1-4d5a-b0f7-136ed6d841df", "sighting_of_ref": "indicator--830333f8-1bd2-48d7-9095-7e0475ee4251", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68ecb6e-8a76-4602-ac58-cde2258ef9ee", "sighting_of_ref": "indicator--830333f8-1bd2-48d7-9095-7e0475ee4251", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa9a81a-da6d-4ce6-8ed6-1048ab78d7c1", "sighting_of_ref": "indicator--e5bda32b-3c3d-4c6f-b46d-3b391add958e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5905250b-017d-4f1d-a72b-2eb652b70550", "sighting_of_ref": "indicator--4e3b1c45-e0ad-46bf-953d-db1b0dc47dbf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e6f5b7-bc22-41fb-9d47-c93e1139adcf", "sighting_of_ref": "indicator--8d38c553-ea64-4141-8234-d4ad2aa4f992", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3821a827-a4d4-47e8-8d22-ed570501592d", "sighting_of_ref": "indicator--309e7f53-890d-4765-977b-89bc5a95ef2d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529c269d-0cd6-49c9-844e-4e62a04bd107", "sighting_of_ref": "indicator--5e2ceca0-5b99-47aa-a192-521b24ae096f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6059d2-19ff-4abb-ae9f-02860ef68b0a", "sighting_of_ref": "indicator--f6d6fd54-831a-465e-8446-0bd0733e3cbe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a7cab7-1cf8-4b9a-a24c-31dc225c4f87", "sighting_of_ref": "indicator--745aabf8-ef91-43b9-ac20-df48abaf01aa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a976a4e-ed33-4983-af55-47f3bb482de8", "sighting_of_ref": "indicator--a525a642-64ad-4364-b6aa-90e39db1e284", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0aba65e-a466-4366-aeb6-7325ffbc1b17", "sighting_of_ref": "indicator--a744d89e-20de-4d6e-925d-70b183ed4cfa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db30ce9c-2f42-4fe3-8f20-b527b6c3081e", "sighting_of_ref": "indicator--ead2c337-364f-4d06-9ff5-34823a4ef778", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd12d93-5c8a-46a9-8911-bd006301e188", "sighting_of_ref": "indicator--b9dcbc76-7f89-4076-ab8e-56ccafc290cc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b348d275-4922-4e2c-822a-bb16553d83df", "sighting_of_ref": "indicator--aa786f76-b246-4cb7-bda4-519669e0448d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee75910a-2a02-4ec8-9491-3f640b96eb03", "sighting_of_ref": "indicator--0ed868f4-db52-48a0-9c1b-a566f36a1502", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd658fd7-a87b-4e61-b660-723c784132d6", "sighting_of_ref": "indicator--4b49dc94-41ad-4250-b6cc-b8980df146c0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b870f70-9348-40af-831e-068f61524d1a", "sighting_of_ref": "indicator--8463811d-50a6-4366-b948-c2d26903a6ab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b6422d-4739-492b-a5cd-69ca967a895c", "sighting_of_ref": "indicator--35837fbc-6885-4d5e-9a98-06907c2d9312", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4399f6f7-c8d9-440a-8667-fe81d87d1c6a", "sighting_of_ref": "indicator--01bc905f-737c-49e5-a050-173ace6b30bf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5698bd22-3bd7-40fb-8aab-da16bae9f1f7", "sighting_of_ref": "indicator--04ece788-0e8b-47d6-9aa5-df4648b4a923", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc043497-ffd3-4436-ab78-fad4c968ef40", "sighting_of_ref": "indicator--61d6ccbe-19a2-4b8a-979b-ffae72ea7d06", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8a159b-4483-4237-b646-45af5f4e648e", "sighting_of_ref": "indicator--61d6ccbe-19a2-4b8a-979b-ffae72ea7d06", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7a9b99-9334-4f48-86a9-94550013005c", "sighting_of_ref": "indicator--234b7686-b393-4204-a3e8-d121f90306d7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324adcf6-ac0b-444e-a5f6-f2a83c9e86fc", "sighting_of_ref": "indicator--52742520-7fdd-4dcc-a007-7cdc0d320d4b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596511f0-cf69-4252-bf8f-509b13bd52dc", "sighting_of_ref": "indicator--59b33525-0645-40c7-9340-8e28c8c6d44a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7332c1c0-cbd4-4d56-ab4e-7b2fb122af08", "sighting_of_ref": "indicator--9dfa6e97-a7f2-4755-99c3-f8d3e959b950", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd293b6-e171-45ae-b067-43ef376b8f50", "sighting_of_ref": "indicator--46e13033-60b3-4056-8c7e-198cabfd7f42", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8533ba-2c97-4eb2-862f-e140aa4b4339", "sighting_of_ref": "indicator--2d39889e-a8b5-442e-be21-872b62952eb7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ba01cb-f2e6-47ef-b55d-44b108324009", "sighting_of_ref": "indicator--b9124f88-635b-42c1-a32c-c10ae8a6a9b1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7298aea4-8fec-4d42-ae42-6a19c7328d36", "sighting_of_ref": "indicator--c35651ef-defd-44f3-96a0-801dadacaf9d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5d48e7-2ac4-4095-9db9-4fa90770b773", "sighting_of_ref": "indicator--114522f9-9805-4a05-96d9-569fb587693b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627ed7d3-23f7-42f5-a643-7d08c5c01082", "sighting_of_ref": "indicator--0865b486-3f24-4fbf-a358-f8cebfc4cc0a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d00899c-e7d8-4bd6-8422-631df6b0bbf6", "sighting_of_ref": "indicator--0865b486-3f24-4fbf-a358-f8cebfc4cc0a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f77e66-90eb-45de-af9c-e8449a699abf", "sighting_of_ref": "indicator--78ccf5a1-f051-4be9-841a-e38bd6d0b334", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f8b585-f849-4660-8f49-4040fee532c5", "sighting_of_ref": "indicator--eaaf27b7-3f1a-4f0b-b01a-b3f48679c176", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e109c9bc-178d-4a37-854b-a4ebbf91d0c9", "sighting_of_ref": "indicator--d0ad480d-b34e-432a-9611-72c83cb9eba5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d62192-a7ba-4c60-8cca-3814928b7c9b", "sighting_of_ref": "indicator--c887ac80-a22a-4e55-bf26-96c53ab51746", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66344137-ad34-4cd5-8a68-ed3557d9f826", "sighting_of_ref": "indicator--9b5529dc-e571-4a30-8ce9-0025727055ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6e7672-b490-465c-959c-f4f9d6d2085a", "sighting_of_ref": "indicator--932ba3fd-7e81-4957-8685-da86c7b06004", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1390d59b-251d-46ba-b299-9d6d64bf320e", "sighting_of_ref": "indicator--9d4647a1-cd9a-40cc-a667-ded41c912d68", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d06e22-d7d0-4599-83ea-e1c6d88dcd73", "sighting_of_ref": "indicator--57996cba-8e04-4648-a39d-977f02eaf143", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bec10c4-f0b1-40c4-aeb3-d4e56dbdbe53", "sighting_of_ref": "indicator--55f03720-ed35-4cce-a84a-e504cc9691a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fc86e3-a04f-47a6-a3e8-bb6bc10ac7f7", "sighting_of_ref": "indicator--8def097f-2c19-4819-9cab-8350075f4611", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ecf30b-a2a4-4696-88b2-de203281aa38", "sighting_of_ref": "indicator--07f16086-811f-43cf-877a-1946c7c99092", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40967ba-ea15-43e1-852f-83887d640cee", "sighting_of_ref": "indicator--398bc024-c1c9-45a6-be3c-54234bb14f69", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91fc5f2-f055-4d8c-ab50-4ee4679c11c8", "sighting_of_ref": "indicator--3522596a-11c9-49fb-ad00-8d651aa77ee7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd07c2f-bd39-4c5a-9676-0be7b3eb3716", "sighting_of_ref": "indicator--8e5afb9e-e18e-46b2-80ba-4348b0f4c6a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86e93fe-913d-4226-8364-4a342229de26", "sighting_of_ref": "indicator--891aafad-a137-4d7f-9516-697ef727df55", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6dacb4-7832-4f44-bc31-9793bc05f625", "sighting_of_ref": "indicator--6a511cf7-0799-488c-a4f5-49db40797730", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925ca36a-b5f1-4cbf-90e2-f2d658569f68", "sighting_of_ref": "indicator--74332664-5e86-47e3-9b0d-f1c421fd2aea", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54617223-c254-4faf-b8e3-e057ac1df368", "sighting_of_ref": "indicator--5f3c99ae-8de9-4fed-8419-dee267239457", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c263bbb-bbd6-4090-9dce-9527163fdec7", "sighting_of_ref": "indicator--0a7c29bd-3eca-4455-bf2f-aa4ec475b5cf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15554d4c-a872-4aae-9ad3-19a9ffc2f1d6", "sighting_of_ref": "indicator--914d3f58-8ef3-4a7a-b00c-af139dceccdc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed3c2b9-5317-45d7-998b-22186848492c", "sighting_of_ref": "indicator--e021b2de-a454-4a3b-afbf-c42d09c9d959", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411504e2-92a8-4eb4-b526-b36148fb56d1", "sighting_of_ref": "indicator--a0cc35ae-0821-4453-9e14-e73b0fd130f4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49deda5b-a233-45dd-974a-1d0515d4c5aa", "sighting_of_ref": "indicator--31df1bce-ae2a-47be-aae6-82d324cb7b0d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf6f7bf-13aa-43c5-acbd-29d30b4f5524", "sighting_of_ref": "indicator--cd26ba0d-6b4e-4bdc-883c-a7b0a82440e1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9604e6da-6626-47a3-bb0d-7a7d99663c9c", "sighting_of_ref": "indicator--e2bac7d3-3a0b-4c1f-bdf1-e0ae8f74ebb9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae108642-bd0b-4043-a0fa-903e2a0cf081", "sighting_of_ref": "indicator--ea666f82-9c93-4d5f-bcb7-f9196ce57f10", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23141785-ea8c-4a81-9d2e-05272b1344d3", "sighting_of_ref": "indicator--d384e16e-32f7-4332-98e7-fbaa442472b3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81bddda-fea0-4238-aaf6-80d6d747db98", "sighting_of_ref": "indicator--233f06de-ebcf-42eb-9e9e-1b6e1f5daa1d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7a8f3c-d4f2-44ab-bb7f-10fe1c062ead", "sighting_of_ref": "indicator--cfdbacd3-db55-4ed2-8d54-b1e530d79213", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0022dd16-c59f-4404-8d30-13b26d7de84a", "sighting_of_ref": "indicator--9439cfef-60cd-47eb-9b7d-6ffd563bb4ed", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7995bce-2519-4d77-b760-eff9c2d2bacd", "sighting_of_ref": "indicator--31778701-c19b-4af6-a628-c641cba99ebb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d446f65-1784-410d-9242-c081e5fa2611", "sighting_of_ref": "indicator--b124490e-0908-40b5-9879-dee46368258f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ace7e0-5720-4f7d-949b-55e6f7969589", "sighting_of_ref": "indicator--7bac8290-0822-48ac-b1ea-b9415781cb0e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eddbdc0-e418-4a4b-bf29-9f057bacb3f6", "sighting_of_ref": "indicator--c7c3af14-e576-43fe-86f7-0c47d7914edd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef820fcd-9ca7-4eeb-b6bd-b9fcd16ab941", "sighting_of_ref": "indicator--8271d247-e670-4fa8-85ab-2426e6fb9398", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f407631-d8b1-43f8-b981-74f4a1334f15", "sighting_of_ref": "indicator--97410260-22f1-4725-a29a-c47e156bccf7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55979844-328c-4c4f-bc36-08baa432ef20", "sighting_of_ref": "indicator--97410260-22f1-4725-a29a-c47e156bccf7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1a6a38-6bba-45ed-9280-0b8294459741", "sighting_of_ref": "indicator--0fd26e59-d0f4-4533-a87b-741134236246", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee26c0b9-65cf-4b2f-a5a3-797fb74fbc3a", "sighting_of_ref": "indicator--57c61180-f68b-4940-9f16-8baf54ae6d0e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b255b0be-6f1e-4a45-a0e1-ef6761c0af65", "sighting_of_ref": "indicator--e872e36e-2d5d-4207-9a74-c1911f2e5485", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29c605d-0e5b-45ac-8aa0-598fd16a52ef", "sighting_of_ref": "indicator--69bdf81b-9a01-443a-b24a-0a01f864d1d4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d06c9ab-973d-4fe9-a8fa-7cdb2acdcf69", "sighting_of_ref": "indicator--69bdf81b-9a01-443a-b24a-0a01f864d1d4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3615f1-a716-4f8e-b795-70296d5f5582", "sighting_of_ref": "indicator--019fa320-2bbc-48fe-8b54-4f3c177588bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1526ff44-cb07-49a6-a953-ba59f35fc01a", "sighting_of_ref": "indicator--49ee8b58-490c-4f32-9f2f-80668f4c2b1c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7d6148-7056-4b5f-8e35-c4674bb3a290", "sighting_of_ref": "indicator--f319cfd6-9896-4ef4-952f-3bd1ccde15b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c667c3-9dd3-4563-96a3-fa40ab0428b7", "sighting_of_ref": "indicator--da419e15-04b6-4404-a552-b18c1ac72d53", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc404dd8-291c-481e-ae67-7a335d0a42fc", "sighting_of_ref": "indicator--ef98b6ce-bf13-405e-a483-3ca6e6e6c390", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b871bc-4325-45ce-bb69-acc5e8f8a1ec", "sighting_of_ref": "indicator--b9f3a36d-42b6-46ac-8856-8aa58b4ce8c4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d959e1e-a9af-4b10-aa84-6084d200fe98", "sighting_of_ref": "indicator--ea8233f1-7435-43fa-a02b-6e4b22be867b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2408f884-b450-4d64-9955-016a1c1f76c9", "sighting_of_ref": "indicator--ea8233f1-7435-43fa-a02b-6e4b22be867b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9cb269-6538-45b1-b539-a5691f16810b", "sighting_of_ref": "indicator--e1155564-ae63-46cb-ab48-3a7b68019701", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95900a25-d1aa-45cf-9164-477579f11e7e", "sighting_of_ref": "indicator--c2f453e8-0a42-40f9-8a05-bcbf6bec1733", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3a132e-ba53-4e46-91cc-6b4ce89d4271", "sighting_of_ref": "indicator--c2f453e8-0a42-40f9-8a05-bcbf6bec1733", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d5de2a-3054-4c60-9878-cd70efd5a320", "sighting_of_ref": "indicator--69ab9e60-53e3-428a-8b4b-79be99c35c66", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224dbfb4-0472-4beb-98b2-c23ff1c09288", "sighting_of_ref": "indicator--6ce49908-7683-487a-9813-9760911dcf50", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cea6d97-6977-47ed-8199-4f9576e6b4bd", "sighting_of_ref": "indicator--e079679d-2082-436a-afe5-891877e6dfe5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29bb8b66-c57f-43a3-a7c8-23aae28c08e5", "sighting_of_ref": "indicator--b8e5e830-9f55-4db3-8a69-1242599ef4ef", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7431216c-2540-4f2b-8536-33c21733f496", "sighting_of_ref": "indicator--a9fecbd7-eb49-408c-8532-c53ecebe9fa9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ca70f6-e0b0-487d-abad-34aedaee0030", "sighting_of_ref": "indicator--eeee5e6a-dc62-4e10-9b97-8154d92c5d36", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b523969f-45f5-400e-ba7c-e6de850518d4", "sighting_of_ref": "indicator--2172ba4e-f04f-4401-8720-730fd45ec80b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732b15ef-3d57-437a-a040-4a477be011a9", "sighting_of_ref": "indicator--b672c899-e8de-498b-82a3-89298774fa9e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60eef29-26d2-4b10-a961-2f69e121bde1", "sighting_of_ref": "indicator--9dc7d0d3-fe19-460a-8c95-ba3708912828", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1001776c-3fc7-4aee-b429-bb7e84c06c56", "sighting_of_ref": "indicator--605c98a9-b510-487e-8f62-88721ca663a0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35bd046-96e0-4f21-8b46-2861647dc6ba", "sighting_of_ref": "indicator--5ebd6315-30b7-4507-9aaa-9a25f6287729", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf46392-58d2-4f31-ac7c-31be02e8d54c", "sighting_of_ref": "indicator--ad807d41-0d2b-4f1d-a475-b48fe2e270b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5c4b4c-698f-47a0-85f6-8459d9d4729c", "sighting_of_ref": "indicator--ad76e7e1-6477-4b78-9b98-3bd7d044d130", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7943bb69-0762-481f-91f8-3c61d926b20f", "sighting_of_ref": "indicator--78019860-d1a5-442e-870d-5ab514688ad0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05a4d08-573d-4f1f-b3ea-1ee2284bef47", "sighting_of_ref": "indicator--78019860-d1a5-442e-870d-5ab514688ad0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04504c81-0027-4030-ad28-765bf50c7cd6", "sighting_of_ref": "indicator--7ec5587b-6afd-4b19-aecf-182ddce95a74", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7ddcc6-ffee-467c-8bf0-06c63b9b22e4", "sighting_of_ref": "indicator--7ec5587b-6afd-4b19-aecf-182ddce95a74", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd6fc1d-4489-4cbd-ab81-f2755c7fb1fe", "sighting_of_ref": "indicator--06f89fad-2f7f-4eb6-9240-28583075301a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c9db9c-154a-4487-b77d-26bd8229a804", "sighting_of_ref": "indicator--16eda203-316d-473e-bc36-4db6c420fd3a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c5aaf7-8c43-45cf-bbd2-22133438ffa6", "sighting_of_ref": "indicator--bd42c6b4-95da-4394-909e-e3ff316c0293", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04f6a1a-d8df-4e27-b962-43e71d96212e", "sighting_of_ref": "indicator--67ec7ea1-03ca-4dc8-ba1d-df010d1536d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8490d29-aac6-49bf-a54e-4af7090ced45", "sighting_of_ref": "indicator--478ab90b-ce29-453d-b748-cb765ca13e26", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc160a2-b4b0-4144-838d-dfbd4f6a9e91", "sighting_of_ref": "indicator--9012d8f8-41cd-4eb8-aa06-54b681262135", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd45c54-2c23-47f3-8961-78c9b84f0dfb", "sighting_of_ref": "indicator--8e750d3e-a3d2-4444-bb9f-510ba9e8572e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1c11f8-1e66-46c5-83b9-5f8b69c88e19", "sighting_of_ref": "indicator--a7e35fec-ecdc-4407-9916-a9c20ee1533d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d331ac55-5a01-44be-be0f-654ed6d0d0ae", "sighting_of_ref": "indicator--14acc622-4c5d-43f1-aae1-26c62873da9e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b30e4a-48ea-45c0-8996-3478596b4942", "sighting_of_ref": "indicator--0e37d1d3-e899-4812-9af6-fbec105a1026", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6ae410-2e45-41fb-b8af-231d7eb274df", "sighting_of_ref": "indicator--0e37d1d3-e899-4812-9af6-fbec105a1026", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60660a0-d121-4e00-a79c-d92bcfcf1119", "sighting_of_ref": "indicator--9ce0ada4-d1af-47a1-916d-398282a06785", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68322b1-ea0e-46aa-9d87-7032639b6a6a", "sighting_of_ref": "indicator--9ce0ada4-d1af-47a1-916d-398282a06785", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e9efcb-719a-4601-b1ed-d5aaa72ec5e5", "sighting_of_ref": "indicator--9ce0ada4-d1af-47a1-916d-398282a06785", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667f8dfb-bbae-403f-97ed-ff316d7b1b21", "sighting_of_ref": "indicator--46a0ec59-cbf4-44bd-bbbf-9f8bb6445367", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf0dc28-7e5b-410b-9d6c-25ed5b32c1f7", "sighting_of_ref": "indicator--46a0ec59-cbf4-44bd-bbbf-9f8bb6445367", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14da6bc-371a-4258-b307-7a122fa31f82", "sighting_of_ref": "indicator--46a0ec59-cbf4-44bd-bbbf-9f8bb6445367", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd3f40e-7e52-49f3-b179-285dd9dad01c", "sighting_of_ref": "indicator--902b40e1-d1ef-4cf7-8064-252fa8557e58", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463cfc3f-8a2d-4f28-a77f-23c7867a4357", "sighting_of_ref": "indicator--902b40e1-d1ef-4cf7-8064-252fa8557e58", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfce98ef-88a3-404d-9eb5-b2a108d05a68", "sighting_of_ref": "indicator--902b40e1-d1ef-4cf7-8064-252fa8557e58", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73eb847-d09f-47d2-a8d8-d0868984ad35", "sighting_of_ref": "indicator--d2ac1e83-9684-49eb-97d2-24009a165dc2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a793d5fa-839e-48c1-82a5-db1c59fe0f91", "sighting_of_ref": "indicator--97d555f3-7042-4787-8684-d8ca3ca10a6b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2043e02c-218a-46b0-8c18-8009aac32217", "sighting_of_ref": "indicator--6af10dc1-10da-4d03-85dd-f69b12ac837c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7af7c0a-e592-4d64-92a5-27bf9a8f381f", "sighting_of_ref": "indicator--5d7612f8-33f3-4bff-956a-00eea1c9687e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35c61ca-feeb-4276-8dc7-8de2287f1253", "sighting_of_ref": "indicator--6d1665a7-08e9-4db3-a398-d8f6de1f22e2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5120fd5-2827-4698-8159-63ad7828396b", "sighting_of_ref": "indicator--0469b6b6-efd7-413d-b9c6-bce893cc3e7d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c184ef39-e48f-4791-a43d-67a17d000da2", "sighting_of_ref": "indicator--0469b6b6-efd7-413d-b9c6-bce893cc3e7d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08574914-b900-4bed-9e60-88ee9ac8d073", "sighting_of_ref": "indicator--3e5bb379-8736-4668-b3c7-51e6c34961f2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9028f8fd-07fd-4624-a77d-4521fb45bee0", "sighting_of_ref": "indicator--3e5bb379-8736-4668-b3c7-51e6c34961f2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561b8cbf-350a-4910-bccb-26a267a077dd", "sighting_of_ref": "indicator--d25e1f9d-1110-49f6-a93c-a2962e967467", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c14ed5-a46a-47fe-98ab-5fab89944327", "sighting_of_ref": "indicator--45bd4eb1-6fe8-4389-a16d-02178653b999", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664f9100-2f35-4328-ba3e-e9bb09f9d873", "sighting_of_ref": "indicator--ba03a30f-efa1-4e99-a86e-968d615d7c9d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5f57cf-54d4-42ed-af8d-2bc0028b73ad", "sighting_of_ref": "indicator--ba03a30f-efa1-4e99-a86e-968d615d7c9d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6f0da6-2b8e-44bd-89ec-f2567f20620b", "sighting_of_ref": "indicator--93cf922d-17ff-4db3-a9c1-4fe4640b08f7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f5619c-f9d6-4864-81e8-95cb7965a9fa", "sighting_of_ref": "indicator--19ea3591-cb0f-46e1-92ad-cf6f683e716c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f212dff-819b-4bf6-bbdf-6a5e00e8ffcc", "sighting_of_ref": "indicator--91eba7f5-029e-4851-bd18-0ef4481de851", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731dcce7-945d-4e63-b97e-117e7823cec0", "sighting_of_ref": "indicator--d76e7eca-6fd3-413e-a3f7-fdc6ee6725ba", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0dded8f-3b56-44b5-89f6-987cd002f37a", "sighting_of_ref": "indicator--d76e7eca-6fd3-413e-a3f7-fdc6ee6725ba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c896f42d-4c1a-421f-8b41-00037cf02ad6", "sighting_of_ref": "indicator--d76e7eca-6fd3-413e-a3f7-fdc6ee6725ba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449a66c2-115e-44e2-8b81-31e3912cea01", "sighting_of_ref": "indicator--bcbe522c-5be3-4018-87d5-acb83a72bec8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e632e99-ed98-46c7-831c-9a3fa6afb71a", "sighting_of_ref": "indicator--7415d55f-bc66-4d54-a6b3-96bdb8fe1231", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4119f229-0228-404c-813a-f35218800930", "sighting_of_ref": "indicator--11b3a658-7dcf-491a-9c94-34ab2d19ba64", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9fcb01f-2da7-48cf-96f8-a3b64581b2e3", "sighting_of_ref": "indicator--41273951-7800-416b-ba38-f1fb36819016", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9cb6fd4-f8e7-42e9-91bc-65a1e4cc1620", "sighting_of_ref": "indicator--25c37515-0b85-4061-811c-5d771ab467d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee9ff98-d37c-471a-b6f6-7aacb2d98d29", "sighting_of_ref": "indicator--d19d4798-0a85-4f3a-856f-6f469029a558", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c21cdd1-2714-418a-8824-506c3d22870f", "sighting_of_ref": "indicator--d19d4798-0a85-4f3a-856f-6f469029a558", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0545bfaa-8857-4f85-a369-4e4c99319078", "sighting_of_ref": "indicator--d19d4798-0a85-4f3a-856f-6f469029a558", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00e3103-229c-4a44-bd39-f43556c3959f", "sighting_of_ref": "indicator--a6e409c7-25c8-4751-921b-139be1d097e3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f48393b-0e08-4718-acca-7a6c5bdb3618", "sighting_of_ref": "indicator--cd8671e3-4812-4b9b-975d-c6d02164725d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb048c1e-74a3-4b54-8f2a-e47b0690ce61", "sighting_of_ref": "indicator--cd8671e3-4812-4b9b-975d-c6d02164725d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba80424-b19a-41f0-9486-1516efe4b164", "sighting_of_ref": "indicator--cd8671e3-4812-4b9b-975d-c6d02164725d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c52e62-6d34-44b1-a703-94d9a779e3ea", "sighting_of_ref": "indicator--e98660bb-e7e2-4cd6-b33e-1c140e3e572c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4eafef-52db-402d-8e13-abd3ade4af58", "sighting_of_ref": "indicator--e98660bb-e7e2-4cd6-b33e-1c140e3e572c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b91c23c-f4b5-4dff-913a-636fdeb7b94b", "sighting_of_ref": "indicator--19053440-e3fb-4f95-8413-36bd23adb86f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29335d71-082c-4b45-bdea-02ce55cc3f01", "sighting_of_ref": "indicator--4f7e2059-2065-412a-8d6d-7a9469916ae9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08a6452-a196-418d-8c8f-2f68a2f23cae", "sighting_of_ref": "indicator--45b68cc6-b547-4093-bfbb-b47832143167", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986529cf-41cb-4c78-8318-b8343a6d6d36", "sighting_of_ref": "indicator--75686cbd-6b87-479a-9222-191fa89e7ed8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b426576-0e70-451f-b549-08118bc0a3e4", "sighting_of_ref": "indicator--a420aa0c-e79e-416d-aad0-30953f21d005", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90dbf8fa-fcf0-400c-a629-ff80195faec1", "sighting_of_ref": "indicator--a420aa0c-e79e-416d-aad0-30953f21d005", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8914c1ef-03eb-41b5-9c4b-e8716b5d3957", "sighting_of_ref": "indicator--a235eadc-281a-44c6-bb8f-fb4e9f42db19", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3dd862-2c66-4e33-8dd4-bd4dca1b60d9", "sighting_of_ref": "indicator--45274b10-1a82-4319-af46-5183381b5ff5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488bb81a-942f-41b3-bcb3-10dd85e30f6b", "sighting_of_ref": "indicator--bb8f2d79-bfb5-4db6-ac33-44f38fb4b253", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fa7fe5-f98e-405d-aaf5-e61951207559", "sighting_of_ref": "indicator--b7fb6729-0edd-409f-8b56-b0f62c5642af", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb03538-3f4a-4926-9a90-da07abe692e3", "sighting_of_ref": "indicator--b7fb6729-0edd-409f-8b56-b0f62c5642af", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f327ae7-d350-4252-a295-407133adfb43", "sighting_of_ref": "indicator--b7fb6729-0edd-409f-8b56-b0f62c5642af", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695960b6-8f5e-4c0e-8c34-34e5f9e56559", "sighting_of_ref": "indicator--2a71bf9a-8a5f-4a79-85a9-2a4973fe070e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67b7e10-fb97-4e27-a061-fe3e774966af", "sighting_of_ref": "indicator--2a71bf9a-8a5f-4a79-85a9-2a4973fe070e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f5ef75-9483-497d-af56-1d8125534a5b", "sighting_of_ref": "indicator--c1973bb6-6cbe-4d14-bcde-9a7425f61446", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a02f7c0-41b7-4dd5-b2f2-6ae06093d5e7", "sighting_of_ref": "indicator--c1973bb6-6cbe-4d14-bcde-9a7425f61446", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14667fc-1cb4-40a9-8d22-259494fdf13e", "sighting_of_ref": "indicator--c1973bb6-6cbe-4d14-bcde-9a7425f61446", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9fc20de-e776-4274-84e4-1384587dc468", "sighting_of_ref": "indicator--c646aaf2-8e1d-41c3-9667-51d862efadc0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeacd583-d371-4070-bdcb-bd6ff3ac1d7b", "sighting_of_ref": "indicator--c646aaf2-8e1d-41c3-9667-51d862efadc0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48d4fa6-a714-459a-ae2e-113921de5d15", "sighting_of_ref": "indicator--2bb6c0aa-765f-465f-9d44-8b70d1b08c21", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff123b8a-e196-473d-94f3-96ece9825061", "sighting_of_ref": "indicator--2bb6c0aa-765f-465f-9d44-8b70d1b08c21", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553da097-15f7-4c14-8bdd-1c75b28cbb86", "sighting_of_ref": "indicator--2bb6c0aa-765f-465f-9d44-8b70d1b08c21", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc3e01d-3eaf-4e5a-b076-fee2ef01dfd4", "sighting_of_ref": "indicator--392c2976-c118-4997-b5cc-e35a589e8b04", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c750111-7984-4bd6-b0d6-f39bdecb85af", "sighting_of_ref": "indicator--818f6d02-adc8-48c9-89ee-5a982c486025", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa3702b-fe99-401e-9843-bbd0d99a4350", "sighting_of_ref": "indicator--818f6d02-adc8-48c9-89ee-5a982c486025", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216d8f80-e202-45a4-8c86-242ef1fe793c", "sighting_of_ref": "indicator--818f6d02-adc8-48c9-89ee-5a982c486025", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed32db60-cb1a-4591-8604-a45f21ef12e6", "sighting_of_ref": "indicator--901a4aa8-ac53-47bd-bff3-e8915e335388", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f794906-9387-491b-98f3-9e8e38b9e8ea", "sighting_of_ref": "indicator--9bc6bde0-a565-479b-b418-84e47dc5e465", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f198bf5b-72e0-4a4c-8b59-bd187df198c2", "sighting_of_ref": "indicator--9bc6bde0-a565-479b-b418-84e47dc5e465", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea00dc5-2ca4-45c5-8956-9fc9ed4a89d3", "sighting_of_ref": "indicator--9bc6bde0-a565-479b-b418-84e47dc5e465", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18274b88-0048-4e1a-9286-e00437d7861e", "sighting_of_ref": "indicator--8d17127a-bdb3-4112-abc5-7d928efd2684", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90cfa9d-21c1-4d4e-932c-483bae31d6a0", "sighting_of_ref": "indicator--8d17127a-bdb3-4112-abc5-7d928efd2684", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a899f544-49a6-408c-9fe8-f2c4b4650e00", "sighting_of_ref": "indicator--8d17127a-bdb3-4112-abc5-7d928efd2684", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c8293f-9eb8-4e5c-a618-301d9bedc290", "sighting_of_ref": "indicator--809d17e2-fbcc-48fd-92b6-3f78e5390f13", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e51771e-d0ca-487e-887e-b3a29f9e3a01", "sighting_of_ref": "indicator--809d17e2-fbcc-48fd-92b6-3f78e5390f13", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ba58f8-a158-4f2f-b1f7-1b6273c68dab", "sighting_of_ref": "indicator--809d17e2-fbcc-48fd-92b6-3f78e5390f13", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0cd775-3d2a-4908-8273-76d7fcf7317a", "sighting_of_ref": "indicator--3659a175-fd23-4fb9-a47a-de09e18f97a7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790edc3b-1fad-4d77-8b9e-e0b61c91258d", "sighting_of_ref": "indicator--3659a175-fd23-4fb9-a47a-de09e18f97a7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c88b84f-c865-44e4-9772-ab07234c5742", "sighting_of_ref": "indicator--3659a175-fd23-4fb9-a47a-de09e18f97a7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e712f8-27ea-40cb-9b44-45d98083db3d", "sighting_of_ref": "indicator--5310ddd9-39e4-488d-a2cb-c5649a6d559e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd020ef-e4da-4a39-94b8-66544573be0a", "sighting_of_ref": "indicator--5310ddd9-39e4-488d-a2cb-c5649a6d559e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54681e97-8482-475e-825f-892e24534136", "sighting_of_ref": "indicator--5310ddd9-39e4-488d-a2cb-c5649a6d559e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616f17b1-8267-444f-a99d-eac67fabffc2", "sighting_of_ref": "indicator--2c28a29f-c24c-47d1-b738-cceb60592d32", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d3b84b-7a25-416f-a4ce-654e9b030b0a", "sighting_of_ref": "indicator--2c28a29f-c24c-47d1-b738-cceb60592d32", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec50fde3-1159-44d6-88d0-7e828cd5fed5", "sighting_of_ref": "indicator--2c28a29f-c24c-47d1-b738-cceb60592d32", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9cc383b-7469-4b12-9fc5-67d145a9ee66", "sighting_of_ref": "indicator--b58b44c6-4805-4a6b-84ae-12d205dcf98d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b713b98f-b911-4957-822c-7364b244ed7f", "sighting_of_ref": "indicator--b58b44c6-4805-4a6b-84ae-12d205dcf98d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235f8350-1c12-4eea-afb0-b86e6d0c9942", "sighting_of_ref": "indicator--b58b44c6-4805-4a6b-84ae-12d205dcf98d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f22d70-f494-4dbc-9054-add800281515", "sighting_of_ref": "indicator--913273b4-41bc-41a4-a2f5-4f150c7c127b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a03792-9d70-464d-bb96-e8a50321a10c", "sighting_of_ref": "indicator--913273b4-41bc-41a4-a2f5-4f150c7c127b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95c1232-f208-4729-95a0-0ee1c913120e", "sighting_of_ref": "indicator--913273b4-41bc-41a4-a2f5-4f150c7c127b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a2f887-df25-46ca-ba6e-67e1b227c7e6", "sighting_of_ref": "indicator--1341c1b2-719b-420c-871f-5d98581dde86", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d67581-98f7-4c55-9edb-e4a8f0fddb9e", "sighting_of_ref": "indicator--1341c1b2-719b-420c-871f-5d98581dde86", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503ff2d3-646a-409b-b1fb-7800e624f890", "sighting_of_ref": "indicator--1341c1b2-719b-420c-871f-5d98581dde86", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bdca79e-ebc0-4fae-8ae9-33965ef5c1da", "sighting_of_ref": "indicator--956da66f-4d43-44e5-8ec9-27cb98b31f9e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed16ce72-3962-4e49-a92a-57fdd8fbe744", "sighting_of_ref": "indicator--df8c3021-ca05-4e43-9f7d-62a9194ae032", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e601869-7480-4a6a-96d6-20f6ef6d3948", "sighting_of_ref": "indicator--df8c3021-ca05-4e43-9f7d-62a9194ae032", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424ec265-8918-4153-b43a-c56e959bb02b", "sighting_of_ref": "indicator--df8c3021-ca05-4e43-9f7d-62a9194ae032", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3229d9df-d736-4b6f-be06-2c8208a1afb1", "sighting_of_ref": "indicator--3fd9657d-7a27-41ce-8e2b-612234522209", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179ea4bf-3458-4a6a-b048-43a5bc875af1", "sighting_of_ref": "indicator--3fd9657d-7a27-41ce-8e2b-612234522209", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5aa1bc-e946-4fd8-a8d1-920be9a55924", "sighting_of_ref": "indicator--3fd9657d-7a27-41ce-8e2b-612234522209", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835a0208-fa70-4b28-9faa-e8d6c2fd6e37", "sighting_of_ref": "indicator--dcaf68a4-127a-4882-ad3a-8d4f633e7cc1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f5660a-d32f-4498-9a7e-f4fbc7d86327", "sighting_of_ref": "indicator--dcaf68a4-127a-4882-ad3a-8d4f633e7cc1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b0d318-6c7d-495f-be45-0bbd96067d4f", "sighting_of_ref": "indicator--dcaf68a4-127a-4882-ad3a-8d4f633e7cc1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01863eee-f91a-493a-8250-1af17b691c12", "sighting_of_ref": "indicator--0203216a-f259-4d16-94b2-3401345469de", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f49760c-5686-48c0-b4fa-984e50961fe0", "sighting_of_ref": "indicator--0203216a-f259-4d16-94b2-3401345469de", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c36b78-ca5b-4f53-b614-11a9eeb9e976", "sighting_of_ref": "indicator--0203216a-f259-4d16-94b2-3401345469de", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e678a1-dfd1-42a5-be83-d5e82c1db8ba", "sighting_of_ref": "indicator--b5754119-c384-4463-af75-1e38dffaadfc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1e9bd5-946f-488f-9e48-e86451832bc0", "sighting_of_ref": "indicator--7478e5ea-3df6-418e-bb3d-dea783baa2f8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb599f4-d48e-4271-a995-32fd4ca0cf3f", "sighting_of_ref": "indicator--7478e5ea-3df6-418e-bb3d-dea783baa2f8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e81661-1b54-42b5-9f4c-cee78dc6ae3e", "sighting_of_ref": "indicator--7478e5ea-3df6-418e-bb3d-dea783baa2f8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbf2d83-6925-46d9-941d-d44277316fae", "sighting_of_ref": "indicator--7478e5ea-3df6-418e-bb3d-dea783baa2f8", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d08a83-76bd-49c3-b37d-221cba8f192d", "sighting_of_ref": "indicator--6011d119-e4aa-4d10-9382-787da70bd093", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af4ca73-d54e-468b-8961-c70fa030863f", "sighting_of_ref": "indicator--6011d119-e4aa-4d10-9382-787da70bd093", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc58a1aa-8200-4f3a-9197-a0ede267c132", "sighting_of_ref": "indicator--6011d119-e4aa-4d10-9382-787da70bd093", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61778462-3e64-447d-b257-f7bcaf98d678", "sighting_of_ref": "indicator--6011d119-e4aa-4d10-9382-787da70bd093", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4532674-06db-4e9e-9695-ee2a97d6c4cb", "sighting_of_ref": "indicator--3c955aa6-504b-4bd6-bfc5-215bf5ca873d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c727d0b-a03f-4fea-a0e4-5e213eb28436", "sighting_of_ref": "indicator--3c955aa6-504b-4bd6-bfc5-215bf5ca873d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf9843d-4e57-4a8c-a299-7863e0108a28", "sighting_of_ref": "indicator--3c955aa6-504b-4bd6-bfc5-215bf5ca873d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d684ba7-ffa2-4b74-a610-b658b7747284", "sighting_of_ref": "indicator--3c955aa6-504b-4bd6-bfc5-215bf5ca873d", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff2251d-2d75-494d-a534-48beec438fab", "sighting_of_ref": "indicator--35eb34fc-4aee-4d2d-ab36-f6118ee1fcb7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d392e3fe-c5ac-4b1b-96e7-e987f00c3d14", "sighting_of_ref": "indicator--35eb34fc-4aee-4d2d-ab36-f6118ee1fcb7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5de1aea-7c4c-47d7-9a65-6f2a2e8bff1f", "sighting_of_ref": "indicator--35eb34fc-4aee-4d2d-ab36-f6118ee1fcb7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e28ecd1-2049-4ee0-8d6c-cc0419721752", "sighting_of_ref": "indicator--35eb34fc-4aee-4d2d-ab36-f6118ee1fcb7", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3e01f4-b18d-45b2-8d64-40fc3f825a8d", "sighting_of_ref": "indicator--da7a9005-c595-47b1-8f07-0f88279a4012", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3412d97-21a1-4e46-ad82-3fceab3d2c53", "sighting_of_ref": "indicator--da7a9005-c595-47b1-8f07-0f88279a4012", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4841dedb-83a5-4a45-bb3b-360c0088d951", "sighting_of_ref": "indicator--da7a9005-c595-47b1-8f07-0f88279a4012", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de70c231-e045-4974-bdd4-66de903ef5e0", "sighting_of_ref": "indicator--da7a9005-c595-47b1-8f07-0f88279a4012", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f57148-b80d-4331-9568-f7a7cf1c0c8a", "sighting_of_ref": "indicator--e5848ff6-ad09-444c-96d5-a11ab1a4cfd4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e3fe3c-ca1b-4049-bd78-283747820017", "sighting_of_ref": "indicator--e5848ff6-ad09-444c-96d5-a11ab1a4cfd4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0e15ec-fb0b-4428-8b80-caf0393714e6", "sighting_of_ref": "indicator--e5848ff6-ad09-444c-96d5-a11ab1a4cfd4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467f87a0-6d28-41a2-935b-dfe70d8d6b87", "sighting_of_ref": "indicator--e5848ff6-ad09-444c-96d5-a11ab1a4cfd4", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9fe9daf-162d-4956-acb8-a862212d7865", "sighting_of_ref": "indicator--640ddffe-78e6-4696-8a77-ef4f9dce81cb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c807678a-dbf1-4c12-b5aa-1201413e93fb", "sighting_of_ref": "indicator--640ddffe-78e6-4696-8a77-ef4f9dce81cb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090cf16b-a8c0-4a75-bada-5d8843779bef", "sighting_of_ref": "indicator--640ddffe-78e6-4696-8a77-ef4f9dce81cb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73eafa1-c305-4026-9e23-93ca93a4eed8", "sighting_of_ref": "indicator--90f58997-6845-4684-93b4-2dd0174fd091", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6989f3f4-e96c-4d67-9013-280178882093", "sighting_of_ref": "indicator--9f2000bf-f2e3-4d0a-8762-531634fe3269", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b106540-c7c9-4ce1-bad9-af4907810b23", "sighting_of_ref": "indicator--9f2000bf-f2e3-4d0a-8762-531634fe3269", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f0d872-bcc7-4044-89c7-f7ac8966250c", "sighting_of_ref": "indicator--9f2000bf-f2e3-4d0a-8762-531634fe3269", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c2289c-6aaf-4c4e-89be-131407ca0f49", "sighting_of_ref": "indicator--5d8fbd6c-60ca-4764-8cbc-eadd5ad4141d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5346876a-5480-40d2-aa60-71dec1c31e83", "sighting_of_ref": "indicator--5d8fbd6c-60ca-4764-8cbc-eadd5ad4141d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a90e64-c386-43a9-b786-9e4a99769a06", "sighting_of_ref": "indicator--5d8fbd6c-60ca-4764-8cbc-eadd5ad4141d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36eb05de-38ab-4b58-b510-925a055fee1c", "sighting_of_ref": "indicator--218a4518-2be7-4a69-a33d-eeceda258b37", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efba7b76-c191-4c36-b53e-268caef1d3c4", "sighting_of_ref": "indicator--218a4518-2be7-4a69-a33d-eeceda258b37", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f3093f-3d8c-4c6d-9473-0d2f845216a6", "sighting_of_ref": "indicator--218a4518-2be7-4a69-a33d-eeceda258b37", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e6a808-9a62-4a5a-bd8a-a35fb3f0370d", "sighting_of_ref": "indicator--35b87ca6-f731-4997-8eb8-e87f13f13d98", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a89ce2-3ac2-472a-adb6-455de889182a", "sighting_of_ref": "indicator--cb3a8f91-1d7f-4f08-b119-86d13649b3a7", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88185efc-e863-4787-8e78-46364565797b", "sighting_of_ref": "indicator--4ec4e7bd-982e-46aa-a2ee-5fbe605cc3c6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e323c2ad-583d-4cca-ba8d-733a308919de", "sighting_of_ref": "indicator--9cc81318-cc30-4dfc-8dc4-b5294d02c9a5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aea48b2-b76d-4f19-b3b5-21b4a40551c0", "sighting_of_ref": "indicator--9cc81318-cc30-4dfc-8dc4-b5294d02c9a5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed1cce1-6e72-4fe1-9aec-6149fab177b5", "sighting_of_ref": "indicator--9cc81318-cc30-4dfc-8dc4-b5294d02c9a5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c4ac63-3e8b-4f44-80e8-d7ebe50bff8e", "sighting_of_ref": "indicator--d979cd8b-9c07-445f-8a84-9a3b7f083293", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c030d02a-06e1-4372-9789-ed761f6b5059", "sighting_of_ref": "indicator--d4addbff-dd1c-4fa2-acac-8baf59361770", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8aea42-550d-4765-9fb2-507f58e095a1", "sighting_of_ref": "indicator--81a4999b-84b2-4ee2-a014-edb0992b9319", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f38ba84-e725-4827-8a25-173ec7c93be3", "sighting_of_ref": "indicator--a76dfeda-6c81-436f-a846-a4c76a131e4d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a58d295-2817-4a0e-90a1-ba9ab3d721ba", "sighting_of_ref": "indicator--158e3605-2dba-492c-a19e-c8d8d67eb135", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fcf4dc-1ea7-4ed7-917d-b1be0fbe46e0", "sighting_of_ref": "indicator--9b15c73c-a8ca-42e9-a64b-82800310e086", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ccb2e25-7db1-468e-b36d-7f71ca72c437", "sighting_of_ref": "indicator--35dd6928-ea6c-41a6-991e-507e33949397", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5386d9-e489-4648-873e-ed18edf80598", "sighting_of_ref": "indicator--ce9da1d5-e1d1-4bdf-9661-94fb0f7cace3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd079523-27b7-4f54-b3c1-cfda58ef261e", "sighting_of_ref": "indicator--c19b1daf-3910-49be-94e6-41214fd95024", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7156b711-062f-42fc-b8c7-5ca8afb87b17", "sighting_of_ref": "indicator--adb9dc5e-2d93-49a9-b0b3-13f365297de0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feee38ed-9a15-4aff-9b42-8e8322a2ea0e", "sighting_of_ref": "indicator--6135e1d7-842d-4f4e-9e49-5ae2fbbf01c8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70c8412-3c3d-44e0-ab6c-f22ddb5d4ad5", "sighting_of_ref": "indicator--d5d7dadc-2a6d-4d5b-976a-822b67b76ed7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de65b497-2c16-4412-9a3e-d34e0340a928", "sighting_of_ref": "indicator--d62cb96c-0f36-4c4b-aa9b-6053d5614b44", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1479183c-f0cc-4fae-a92d-5a31f7f80818", "sighting_of_ref": "indicator--71e3b7d4-56a9-4259-aff2-bfd54587785f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b12492-f5e1-47f7-bf9c-e28ad6f9c339", "sighting_of_ref": "indicator--a9c89ab1-4475-4fea-8be1-ce894157caae", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d90517-e53a-4b82-b0dd-ae7abef05d2b", "sighting_of_ref": "indicator--e1038d12-d456-4de6-a71a-1fbf2cd355bc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68474fc5-ee5e-4454-8980-ef76e419dbbb", "sighting_of_ref": "indicator--e1038d12-d456-4de6-a71a-1fbf2cd355bc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cef96ec-07f6-439b-af2f-a23f517ea895", "sighting_of_ref": "indicator--3b159f32-5cbc-40d8-bd8d-ef872324d65c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fac18f-9db4-4af7-8a99-88fbec87c1b6", "sighting_of_ref": "indicator--9b6f9f33-37b1-4bed-9dbf-384d7d6b553b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4bfc4d-f18f-44bd-9726-a2bee4a482ab", "sighting_of_ref": "indicator--69515658-18dd-4f2c-9ea7-a27a2fcf2f02", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44641729-7f21-4e6a-8123-442a7bbcae0c", "sighting_of_ref": "indicator--69515658-18dd-4f2c-9ea7-a27a2fcf2f02", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c00f93-a301-4d69-9b99-77d8ea2a83b0", "sighting_of_ref": "indicator--1d7987b2-be7a-4634-9892-bc276aa320a9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdb90c7-23d7-4a0f-9c4a-87b3d1c3a701", "sighting_of_ref": "indicator--f50234d3-df53-4cbb-9490-e76c42086e2c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a60281-d6f5-4cbe-97f9-3c3269c21edb", "sighting_of_ref": "indicator--f50234d3-df53-4cbb-9490-e76c42086e2c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6b699f-c582-484e-b11c-58a7e7bcac04", "sighting_of_ref": "indicator--f50234d3-df53-4cbb-9490-e76c42086e2c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7adee53-b5a5-40de-be0d-7cc7c2b1868f", "sighting_of_ref": "indicator--222d8a7d-8fd1-496a-bfa5-a09f39c83daa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb51625-e709-4bc5-a19a-bbd6d29e5e5c", "sighting_of_ref": "indicator--8447dc73-44ce-426a-b6a0-7a7b5dded5f6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543170de-7d3d-4502-a6d0-05692289b465", "sighting_of_ref": "indicator--58daa1e3-b018-4787-855a-fbb9e1e10966", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fade91-280e-49a4-b300-753e0e1c4490", "sighting_of_ref": "indicator--a01dd860-eddc-4d9f-9e42-584c7b6e0ec5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053a13cf-c059-4346-95b0-b35649db0487", "sighting_of_ref": "indicator--18163398-33ad-4c0b-b529-dca6dafa00ef", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d083b525-a96d-4bcb-bd08-2d15ea3b2e02", "sighting_of_ref": "indicator--b9046d5e-344c-412f-b2eb-1e5508846c1f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60eb6b4b-8c13-458d-a470-d8dee408b3c6", "sighting_of_ref": "indicator--22a37c55-def5-42b0-8955-0ddc884a3e24", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee15055-16ce-49a9-b878-db64295bf913", "sighting_of_ref": "indicator--22a37c55-def5-42b0-8955-0ddc884a3e24", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a5de0b-c173-48ab-bcdd-2b871a1e0030", "sighting_of_ref": "indicator--22a37c55-def5-42b0-8955-0ddc884a3e24", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60563815-5399-47cf-90e9-ece8c0f0ac21", "sighting_of_ref": "indicator--ddf11e30-4683-4b11-9a56-9b73eff90b90", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72091740-2f20-44bc-b59e-0593455e0bef", "sighting_of_ref": "indicator--6c01a588-b749-4c57-846d-a22a43542ae3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572686dc-aee9-4ee0-ba63-b049475c20a4", "sighting_of_ref": "indicator--ed5a8f08-478f-4366-965e-e59a58ba8d7a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42dab4b-519e-45ec-89b9-87df256975d3", "sighting_of_ref": "indicator--e5db327b-37c8-42f1-a88f-b25e428b851d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486e340f-f027-4d48-a362-28902f6d1ff5", "sighting_of_ref": "indicator--e5db327b-37c8-42f1-a88f-b25e428b851d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1446bd-a40a-409e-82e1-8882c2f131d5", "sighting_of_ref": "indicator--bf44ec27-b134-4527-ad86-661d6c9be707", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd89ffec-fc6d-49dc-82ea-3b869c42fcb4", "sighting_of_ref": "indicator--bf44ec27-b134-4527-ad86-661d6c9be707", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7667ef-871e-495f-a593-9ed1a4b8e8a5", "sighting_of_ref": "indicator--268b3586-fd68-4983-9f44-b226f625eb2f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a127f780-cc05-4174-80e2-9a1d1430b6d9", "sighting_of_ref": "indicator--268b3586-fd68-4983-9f44-b226f625eb2f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e29292-6fb0-49e3-8ee1-c96c62d74a7d", "sighting_of_ref": "indicator--268b3586-fd68-4983-9f44-b226f625eb2f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6b85aa-926a-4df0-be8e-50458798b50c", "sighting_of_ref": "indicator--72ef257c-6ebf-48d5-96e5-8fea920cc633", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91858fa-7b03-4e68-9b6c-8462fb5e2dc0", "sighting_of_ref": "indicator--72ef257c-6ebf-48d5-96e5-8fea920cc633", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e583cd-93b9-4baf-9007-2a1ddf7f0e05", "sighting_of_ref": "indicator--72ef257c-6ebf-48d5-96e5-8fea920cc633", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb15cc6-ed85-4f85-b7d7-17e142437852", "sighting_of_ref": "indicator--f786a348-cba7-4c1e-9878-bb8a4b2ce67d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2982761b-6f6c-4031-ad07-ee5a45d5ac0e", "sighting_of_ref": "indicator--f786a348-cba7-4c1e-9878-bb8a4b2ce67d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3647849-abeb-4689-a61d-9148bf3e4ebf", "sighting_of_ref": "indicator--f786a348-cba7-4c1e-9878-bb8a4b2ce67d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a447589-f1e4-460d-ac2b-0187ae18adfe", "sighting_of_ref": "indicator--fe0e08bf-84fe-4a96-823e-cfe9b7b38ee2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc260e7-50f0-44fa-a7e0-dbc6c1e9d506", "sighting_of_ref": "indicator--df77a425-c792-4363-9a46-08a62e841e79", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8f01c5-cd6a-43d8-ba9b-20de719767f2", "sighting_of_ref": "indicator--df77a425-c792-4363-9a46-08a62e841e79", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c97e080-ad2d-400c-a0f6-681c8865f78b", "sighting_of_ref": "indicator--df77a425-c792-4363-9a46-08a62e841e79", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c43c68-2d61-459e-8ea5-f2f03119ccff", "sighting_of_ref": "indicator--3968f361-d4aa-463f-85da-a0546959e391", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8ee3cf-96b4-44e1-8597-3830228a04f0", "sighting_of_ref": "indicator--3968f361-d4aa-463f-85da-a0546959e391", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478bbfd1-502a-45f7-a1f2-626438b9e3ad", "sighting_of_ref": "indicator--3968f361-d4aa-463f-85da-a0546959e391", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d661a159-1062-420c-8505-7f1c79fce823", "sighting_of_ref": "indicator--990e8704-543f-454e-b521-2a3304a0ab39", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3292e809-1ee5-4be9-9347-6c1e2b40a027", "sighting_of_ref": "indicator--990e8704-543f-454e-b521-2a3304a0ab39", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bde71a3-d456-4e6b-80c1-9102799c037d", "sighting_of_ref": "indicator--990e8704-543f-454e-b521-2a3304a0ab39", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4516ee-2f8b-4236-860e-c5b00c7066ef", "sighting_of_ref": "indicator--88852537-082a-4b89-bee6-c612079e0a24", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7925922-3e3f-4191-a99e-867b4b881a01", "sighting_of_ref": "indicator--88852537-082a-4b89-bee6-c612079e0a24", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b92121-4964-41a2-8892-e32fc446f2e9", "sighting_of_ref": "indicator--88852537-082a-4b89-bee6-c612079e0a24", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645f5e6c-d888-4cae-ae37-ad05351e147f", "sighting_of_ref": "indicator--15e473c7-0d89-417b-b477-471070410075", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3aba9b-62db-4782-bb71-643dfcffbcab", "sighting_of_ref": "indicator--73f04d80-fbf4-4287-86ad-a3cd5763d581", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c74c0ec-29ac-43d7-be68-e3676c426d1d", "sighting_of_ref": "indicator--879764ea-c233-4782-b7c6-79e7d44274bc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517258ec-f492-4349-83dd-e04103572fee", "sighting_of_ref": "indicator--879764ea-c233-4782-b7c6-79e7d44274bc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e75ca2-9a74-4ace-b2d9-c35df0a7745f", "sighting_of_ref": "indicator--879764ea-c233-4782-b7c6-79e7d44274bc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143819ef-9029-47e0-b754-fa26e29b97f4", "sighting_of_ref": "indicator--4731c83a-bd4e-4907-b760-778b8e542f53", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b09e78a-fd5d-4b09-82c6-4b29247d3412", "sighting_of_ref": "indicator--50a9b546-018d-4472-a7fb-c8d93e9c1e1b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6cf204-c660-4805-8021-210f73ebaed8", "sighting_of_ref": "indicator--50a9b546-018d-4472-a7fb-c8d93e9c1e1b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12121f3f-dd42-496c-b269-d59bd4cb2375", "sighting_of_ref": "indicator--50a9b546-018d-4472-a7fb-c8d93e9c1e1b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4d15ab-3375-462f-8ed7-dcdff76f14f1", "sighting_of_ref": "indicator--9dc37ad1-76f6-4286-80e7-0f4899168843", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccef56c-6c2b-47c0-b3fe-494e4f3066d9", "sighting_of_ref": "indicator--9dc37ad1-76f6-4286-80e7-0f4899168843", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76134d5-a678-478e-acb5-418023bd5127", "sighting_of_ref": "indicator--9dc37ad1-76f6-4286-80e7-0f4899168843", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0235a81c-6ffa-4a90-bb3f-c6b500e1cfd2", "sighting_of_ref": "indicator--b9c629ed-8579-48ca-98ce-a5aaf926cf4f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552e3f2a-d9c0-4699-a649-7469ff0bd0d6", "sighting_of_ref": "indicator--b9c629ed-8579-48ca-98ce-a5aaf926cf4f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ceab89-0a73-456b-878e-0ef8416bb820", "sighting_of_ref": "indicator--b9c629ed-8579-48ca-98ce-a5aaf926cf4f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483b5af8-c709-4afe-9ed8-6d7682e09a5a", "sighting_of_ref": "indicator--6551938a-f449-419e-a5ff-4b59227fea7e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7952d8b8-a2ef-4245-aab6-71fa78db2dcc", "sighting_of_ref": "indicator--6551938a-f449-419e-a5ff-4b59227fea7e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec208fe-cd6e-4c7f-9155-16887ce61679", "sighting_of_ref": "indicator--6551938a-f449-419e-a5ff-4b59227fea7e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f374d7a1-a615-481f-8e33-debf4262db28", "sighting_of_ref": "indicator--b9e3a71c-cf77-434a-bcf7-79c243428682", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b986d8-b7f7-4449-a274-11b7a03cbf62", "sighting_of_ref": "indicator--2d0fa9a9-ee40-455e-8afc-056e51d442f1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c657526-b781-45c0-a3c2-cf1a4f7253c2", "sighting_of_ref": "indicator--f24720df-aaf0-4a24-b951-5547cb6769ec", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca2b95d-9223-43da-8e81-c1a74548b187", "sighting_of_ref": "indicator--5ddd206f-f732-4ac9-869c-b7216cf32566", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c377dd06-f1cc-4a88-a259-b8dff59da771", "sighting_of_ref": "indicator--72bd7115-5d0b-4fcf-ac8d-58382d4229e0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfeea59-d011-4d96-a8a4-34acb9d71389", "sighting_of_ref": "indicator--72bd7115-5d0b-4fcf-ac8d-58382d4229e0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24417c6b-a742-4b49-ac73-1da544d82db4", "sighting_of_ref": "indicator--72bd7115-5d0b-4fcf-ac8d-58382d4229e0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3497a1-ed15-4e75-aa74-9d8e655e06ef", "sighting_of_ref": "indicator--72bd7115-5d0b-4fcf-ac8d-58382d4229e0", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bda299-0108-437b-a2f8-bcaf2533259f", "sighting_of_ref": "indicator--ab86cd97-05a7-48fa-8dbc-04862f93310e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeab5968-b7b1-43cf-845f-cee8c12ce0dd", "sighting_of_ref": "indicator--ab86cd97-05a7-48fa-8dbc-04862f93310e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1557ff18-3a98-4bf9-8fd6-2c71dcd30acd", "sighting_of_ref": "indicator--ab86cd97-05a7-48fa-8dbc-04862f93310e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856aa5bb-c2fc-4e41-9875-f9cd0838d3c2", "sighting_of_ref": "indicator--61a7308f-44ad-4d97-b109-d6b5e3376f1d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ea1480-8db1-445f-9bb2-ec0199d8c3e3", "sighting_of_ref": "indicator--c50ec30d-b3a3-47d0-89e4-8b3892d577df", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cf3efa-adbd-452f-b4a2-93468d8f5052", "sighting_of_ref": "indicator--c50ec30d-b3a3-47d0-89e4-8b3892d577df", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1d8c31-fca5-4d7f-8019-e5c1bbccc39b", "sighting_of_ref": "indicator--aa9c2fb9-6c55-46a0-9889-b1becf166525", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d146b93-642f-47c5-a161-d978af1c7902", "sighting_of_ref": "indicator--aa9c2fb9-6c55-46a0-9889-b1becf166525", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9314a283-564b-4fad-9651-8aba92091a02", "sighting_of_ref": "indicator--aa9c2fb9-6c55-46a0-9889-b1becf166525", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73561701-1d7b-4e45-ade9-1f90ce983834", "sighting_of_ref": "indicator--97d181a3-6772-410b-80d1-30c52e45589e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf82b677-f66b-45cf-9247-28fb4197b469", "sighting_of_ref": "indicator--97d181a3-6772-410b-80d1-30c52e45589e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff549390-6d65-4ba6-bc0c-89230759f5d9", "sighting_of_ref": "indicator--97d181a3-6772-410b-80d1-30c52e45589e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eda50f1-577f-44c5-b8f5-976744b237be", "sighting_of_ref": "indicator--a9a97841-615c-4c9b-a0dc-10adfb4392eb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8dd97a-eaea-4b56-9834-6e3902aa3568", "sighting_of_ref": "indicator--a9a97841-615c-4c9b-a0dc-10adfb4392eb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bd7bca-3209-4cc7-97c8-c1613c088ab7", "sighting_of_ref": "indicator--a9a97841-615c-4c9b-a0dc-10adfb4392eb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc962e1-ef4f-4568-9b78-994810f4ac47", "sighting_of_ref": "indicator--2527aca5-e8d1-46f0-aa10-63cf7afb03ab", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57e339c-ecda-4584-96d9-e78c98f4a38e", "sighting_of_ref": "indicator--2527aca5-e8d1-46f0-aa10-63cf7afb03ab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556ffc2c-ae5c-4624-8fbd-32769d2c8c24", "sighting_of_ref": "indicator--2527aca5-e8d1-46f0-aa10-63cf7afb03ab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b98bcf0-1f08-4edd-bd14-32b71ba10ca0", "sighting_of_ref": "indicator--5e987787-7f3c-45ff-8aef-dfdc652f4bbd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fe924c-eadb-43b7-95db-ee11277e6c0b", "sighting_of_ref": "indicator--5e987787-7f3c-45ff-8aef-dfdc652f4bbd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcfafb0-1480-4985-95fe-4adbd17cf0de", "sighting_of_ref": "indicator--a48484bb-49fa-498c-b498-5c23210a9437", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893cf804-cf82-4d62-b1d5-50eab725f145", "sighting_of_ref": "indicator--a48484bb-49fa-498c-b498-5c23210a9437", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7576683c-cdbe-4120-bfab-dd3ba10a703e", "sighting_of_ref": "indicator--40c3caa5-917e-494e-86f8-cd31815e18ce", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a52c275-4dac-470c-b313-f2aff281ba90", "sighting_of_ref": "indicator--40c3caa5-917e-494e-86f8-cd31815e18ce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbd0b70-029a-4b66-9bec-062d8130ae05", "sighting_of_ref": "indicator--40c3caa5-917e-494e-86f8-cd31815e18ce", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b467f0af-c588-4fa5-a05c-521c9f282b3e", "sighting_of_ref": "indicator--3c767056-c295-4a1c-b329-cac2d17fe60c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8442649e-34f7-416c-b7d7-daba06691cc9", "sighting_of_ref": "indicator--3c767056-c295-4a1c-b329-cac2d17fe60c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235eabf6-7fa9-4f1e-b94e-779f2e0f6c84", "sighting_of_ref": "indicator--3c767056-c295-4a1c-b329-cac2d17fe60c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6a80ed-a8a9-47a2-836d-7c4de49ce73c", "sighting_of_ref": "indicator--03168998-26e3-4b36-9024-47c1c25586f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf8fa76-4e8c-448b-9363-3585c5195212", "sighting_of_ref": "indicator--e1a1a5dd-612a-4f17-98fa-a19db15a6f14", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d319e7aa-51f9-46a4-9eef-475273b45149", "sighting_of_ref": "indicator--c33c4af4-7d73-4885-8b57-6f547ed4dcf2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f30471f-d184-4cd4-86fa-4abf11f56033", "sighting_of_ref": "indicator--9d80ebbe-5b2e-4fd5-a034-680c2dcd6321", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9468e14f-481f-4c53-a15e-267fb084485b", "sighting_of_ref": "indicator--9d80ebbe-5b2e-4fd5-a034-680c2dcd6321", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec3892c-2173-4d66-9739-6c5fe2645cf4", "sighting_of_ref": "indicator--a6bb32cd-bacb-4e35-a36b-33c1cb6b142a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834a6c37-69dd-470c-b0cf-5153a23c75b4", "sighting_of_ref": "indicator--4f1b874d-4446-4e53-a481-97b0d7cb1767", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e93e49-85eb-444f-959c-1021515f539b", "sighting_of_ref": "indicator--4f1b874d-4446-4e53-a481-97b0d7cb1767", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef25902-dc9e-446c-91c7-85ada7fe5011", "sighting_of_ref": "indicator--4f1b874d-4446-4e53-a481-97b0d7cb1767", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cbee5db-e2fb-461e-a292-29d294f6f300", "sighting_of_ref": "indicator--b232a662-461e-45b4-a5f4-6cf10fdc04c8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f065af-6102-42f5-9547-8e3e6332de69", "sighting_of_ref": "indicator--b232a662-461e-45b4-a5f4-6cf10fdc04c8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21b339b-c0d8-4f32-8e5a-5b4a6f7fc975", "sighting_of_ref": "indicator--b232a662-461e-45b4-a5f4-6cf10fdc04c8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8314cc7-6e4d-4474-b48b-884fcbefcd1b", "sighting_of_ref": "indicator--ce8431c3-d633-42fa-80c6-c2508da76aec", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53304b9f-ce5d-4b18-8ddf-58cb7d769966", "sighting_of_ref": "indicator--ce8431c3-d633-42fa-80c6-c2508da76aec", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004a546d-b40e-496b-a26c-ed1e5f10b0e7", "sighting_of_ref": "indicator--ce8431c3-d633-42fa-80c6-c2508da76aec", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3232b7b7-6fc8-4331-8be1-ed7c1717db4f", "sighting_of_ref": "indicator--3697e178-733a-4722-b80f-3b2ea90d6b2b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cfde14-b9a2-4b0c-84ec-4762176554d7", "sighting_of_ref": "indicator--3697e178-733a-4722-b80f-3b2ea90d6b2b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98aa5071-7b99-4296-8e0a-259edfecbd8f", "sighting_of_ref": "indicator--3697e178-733a-4722-b80f-3b2ea90d6b2b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b925c6d-d964-421e-8a55-3763d37967fc", "sighting_of_ref": "indicator--ce74fa9f-9b07-4954-8ceb-a0f4bc7e1583", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf407c97-68db-4ec7-ba91-4db7f0f81dff", "sighting_of_ref": "indicator--a19b5c42-1735-425d-8951-08db1291ba68", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dbbcd7e-54a2-4b70-a0b0-d9bd8e6fdd3c", "sighting_of_ref": "indicator--54e0db22-4ec3-4f85-ae06-1dc969016afb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31872e9f-1b14-49dc-8510-6bd6bb240ac0", "sighting_of_ref": "indicator--54e0db22-4ec3-4f85-ae06-1dc969016afb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e05b55-516d-4a41-9698-6f4891d14d50", "sighting_of_ref": "indicator--d3d1fc69-eafb-4975-bacc-1e10ea8059e7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96b73da-a7ba-4c30-907c-227110a1b858", "sighting_of_ref": "indicator--c0ae72f5-0114-4ceb-bc6e-89cb849da39e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3292dae0-7568-4da8-b7f7-d6fd1e5d054a", "sighting_of_ref": "indicator--c0ae72f5-0114-4ceb-bc6e-89cb849da39e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910391c2-7229-45b0-8eb4-b729e9ea4c49", "sighting_of_ref": "indicator--c0ae72f5-0114-4ceb-bc6e-89cb849da39e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6292066-5a9c-4f71-ace1-a45e03e2dd0b", "sighting_of_ref": "indicator--f8bab1e9-db8c-4683-9359-262fe86eb777", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81b2569-3518-4712-b17d-bb0b77a52232", "sighting_of_ref": "indicator--4e7a23b9-2998-4d27-a2b4-94340ec30ec9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--affbe81e-82da-46f6-b7b2-0198d6e49771", "sighting_of_ref": "indicator--f42283b9-a4d7-4037-b9e8-6ff7297c7208", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d77d3f-a5d5-443a-b60d-6be52146ee82", "sighting_of_ref": "indicator--f42283b9-a4d7-4037-b9e8-6ff7297c7208", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1359d51e-3bcf-4b40-b8ca-d861a68502be", "sighting_of_ref": "indicator--f42283b9-a4d7-4037-b9e8-6ff7297c7208", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f65e48-873d-4955-b359-7decd572cfcc", "sighting_of_ref": "indicator--508b9e8d-fc60-42f1-8afd-f33779bd5c42", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ff3f77-73fc-4585-a150-2cc2294d4973", "sighting_of_ref": "indicator--4b941516-4a91-4b47-802f-fba8443838c9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ddf7ca-78bf-43a2-8a12-314f4edaa0e4", "sighting_of_ref": "indicator--4b941516-4a91-4b47-802f-fba8443838c9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcb7d9a-1969-4970-bb8f-34edc50038c4", "sighting_of_ref": "indicator--0ab33768-6f31-4fbe-8eae-30f1934f7d40", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815fe89d-044f-4d62-aa07-2ad432a987eb", "sighting_of_ref": "indicator--0ab33768-6f31-4fbe-8eae-30f1934f7d40", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca65ada-0553-42b0-b212-c962f4dc1358", "sighting_of_ref": "indicator--0ab33768-6f31-4fbe-8eae-30f1934f7d40", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfb62ee-fd0e-4bc0-bf95-22e99e430fc6", "sighting_of_ref": "indicator--131d8294-ecbd-4779-803c-23b59fb4798e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da586b65-19e1-4963-8660-54aa413cb735", "sighting_of_ref": "indicator--e07a058c-e089-40e5-bede-8abddcf8f008", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f574dd1f-90e2-4091-aae9-cf8731d310e8", "sighting_of_ref": "indicator--dd970e25-4ab2-48d4-bf69-46b8ef169bc9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0ac491-51cf-436a-a2e9-480e1cd8a1e1", "sighting_of_ref": "indicator--dd970e25-4ab2-48d4-bf69-46b8ef169bc9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b56aa5e-b3b5-4789-8bcc-417d25d827c3", "sighting_of_ref": "indicator--dd970e25-4ab2-48d4-bf69-46b8ef169bc9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d995de-6968-4ca7-b6c5-93e23ff54589", "sighting_of_ref": "indicator--5375be85-cf98-49a8-9563-e27c5c28c5b6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b2ed15-093a-480a-8e9f-4702547ac51d", "sighting_of_ref": "indicator--5375be85-cf98-49a8-9563-e27c5c28c5b6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f380728b-665d-4473-9220-6126c80e432f", "sighting_of_ref": "indicator--56bd8d18-b776-4db4-b866-f1341d18271f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4250be17-94d0-4005-8a4f-22cb9378689c", "sighting_of_ref": "indicator--6f91c3d0-2d6d-4394-ba10-adff74dd80e3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dca36d4-e303-4cc0-8691-e5502f26b080", "sighting_of_ref": "indicator--6f91c3d0-2d6d-4394-ba10-adff74dd80e3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230d597f-f7ca-4745-b6bf-2a816386da32", "sighting_of_ref": "indicator--6f91c3d0-2d6d-4394-ba10-adff74dd80e3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5554034-1272-401a-9e18-a2b1b6a1e42c", "sighting_of_ref": "indicator--3114e470-4afc-41e6-a329-1a5d44e0fc81", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f93c59-4d85-430f-8522-4f55435809e8", "sighting_of_ref": "indicator--3114e470-4afc-41e6-a329-1a5d44e0fc81", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3541934-99ae-409f-a902-90bbc650f6bf", "sighting_of_ref": "indicator--3114e470-4afc-41e6-a329-1a5d44e0fc81", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246649ae-f548-4492-8006-b33dd8e0d465", "sighting_of_ref": "indicator--9d2abafa-38f5-41a5-a13a-75f4a4ecb781", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6291f0-802d-40cc-890f-7acc23b1b861", "sighting_of_ref": "indicator--9d2abafa-38f5-41a5-a13a-75f4a4ecb781", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d4d73d-2956-4dbb-ba9b-92e06dd73aab", "sighting_of_ref": "indicator--9d2abafa-38f5-41a5-a13a-75f4a4ecb781", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b712bb-f1d8-4391-9847-bda57087c6a5", "sighting_of_ref": "indicator--16fdac4b-4277-4ff5-871c-a78fdc4ca092", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e40bfcb-4520-4571-b30f-9402af87ff79", "sighting_of_ref": "indicator--2d069c4f-7a6a-4cda-9acd-511881ec3a3b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805074be-d686-4155-b58e-43a98e2b155c", "sighting_of_ref": "indicator--2d069c4f-7a6a-4cda-9acd-511881ec3a3b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51da5f82-0f5b-4c9c-b509-beb28bda553a", "sighting_of_ref": "indicator--1509c02a-e819-443b-9aba-075b74e224b0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebeed3d-73c9-4a4d-9fee-b3d9b4c7a31e", "sighting_of_ref": "indicator--5d0a5f15-be9b-43e1-8c60-ad037667b9d5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a103a2e-eac2-4e63-b89a-8b7a993e8983", "sighting_of_ref": "indicator--db61da6c-b539-405a-9bb3-29edca9e339b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e31dfae-8756-4cca-967e-9d4f7292692d", "sighting_of_ref": "indicator--15f50bd6-0453-4796-a039-a73ef7eb071c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8daa31-9671-4e2d-9ad9-a6f23b1522f7", "sighting_of_ref": "indicator--1deaf6c1-5efb-45ff-8ec2-b99129481051", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d193aa3f-903d-4b60-bd04-58ed6075c3dc", "sighting_of_ref": "indicator--022b5e34-8136-4a05-a45b-640b02aab23f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07e1fac-5532-4ab2-badc-cbe3afa63892", "sighting_of_ref": "indicator--183c828f-c77d-4181-a84c-bb5b2543bbd1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816435e1-7cce-4a6f-a5ea-ef834127da79", "sighting_of_ref": "indicator--f63a6fc2-e43b-48cc-9240-5406fb08603e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69517d2d-8eb2-4d2e-845d-51673fa52d36", "sighting_of_ref": "indicator--82935d15-0c96-4a6b-8272-ca5d0b3ba8ae", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8b49c0-f74b-4685-b0f5-3ded192f0cea", "sighting_of_ref": "indicator--82935d15-0c96-4a6b-8272-ca5d0b3ba8ae", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3d25c1-6512-4813-b004-d34266f018e4", "sighting_of_ref": "indicator--7ecddaa7-6648-40d7-abcd-c9d25a0ecbd1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0099e59-a95a-4bd1-9204-65c35188a8a4", "sighting_of_ref": "indicator--7ecddaa7-6648-40d7-abcd-c9d25a0ecbd1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae172c6-78b6-48ac-9186-839139d4aad3", "sighting_of_ref": "indicator--6f391906-1be7-455c-8445-bbd1e1444206", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba444438-2221-4195-8858-69cfc0092efe", "sighting_of_ref": "indicator--6f391906-1be7-455c-8445-bbd1e1444206", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2ea85f-29a8-4b3e-872f-070ef3f9d673", "sighting_of_ref": "indicator--6f391906-1be7-455c-8445-bbd1e1444206", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e454e3-7f5f-4a97-9528-f345f3e11adb", "sighting_of_ref": "indicator--685a300c-6653-4996-97c0-7d8d8cfa5f2f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699c07b0-88a1-4d2b-9225-23154a985729", "sighting_of_ref": "indicator--685a300c-6653-4996-97c0-7d8d8cfa5f2f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04fd54df-56c2-4f43-9119-d0689ff8d3bd", "sighting_of_ref": "indicator--685a300c-6653-4996-97c0-7d8d8cfa5f2f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34379bb2-1a33-4362-a5ed-64ab630f25ff", "sighting_of_ref": "indicator--65891eec-933e-4c03-809f-f0bc99b991dd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d3a2fb-3eae-456d-9af7-39a788377b4b", "sighting_of_ref": "indicator--97260ea4-085c-4f96-8116-b4a92f51fa58", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed67400c-cbab-48aa-8bfe-18eb15d8e5bd", "sighting_of_ref": "indicator--992f8815-8877-4824-8e9e-62c5b5a9b6e0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f21fa5-3be5-4bc9-badc-a57e57b4f187", "sighting_of_ref": "indicator--992f8815-8877-4824-8e9e-62c5b5a9b6e0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9e1f27-170c-4350-ba43-5c934f31276e", "sighting_of_ref": "indicator--51e7f0f4-612a-44f2-8b78-59c2179aa002", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818a2505-fe75-4e49-850e-f518de6a4d7a", "sighting_of_ref": "indicator--ff7c081f-62ba-49df-a408-8c1b65e882cc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3978ba-d789-49cc-894f-894ecba0e4cc", "sighting_of_ref": "indicator--5ed7b75f-3b19-4ae9-bd13-fb48f06c9f1b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0718e0f5-f2f8-4f9e-9241-24db41f5f789", "sighting_of_ref": "indicator--5ed7b75f-3b19-4ae9-bd13-fb48f06c9f1b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bd1245-638d-4d22-b2e7-584c744e4ddb", "sighting_of_ref": "indicator--5ed7b75f-3b19-4ae9-bd13-fb48f06c9f1b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9cf2fd-55c7-4d0f-9137-b40ee831a7d4", "sighting_of_ref": "indicator--8472f745-42b3-4cae-bd81-6bdf58547143", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35c4d8b-40c1-4f0c-8108-10db511c71a3", "sighting_of_ref": "indicator--d50633ff-2f7c-4650-9601-3f54eb5b4b69", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a680d4-b9cf-4cbf-97aa-bf7f67f72138", "sighting_of_ref": "indicator--d50633ff-2f7c-4650-9601-3f54eb5b4b69", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb613404-2e70-41e2-8c8b-638c1f7c726a", "sighting_of_ref": "indicator--9f5e131b-d8c9-44a0-90d2-df7fb8e15a7f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0044dd2-f772-4f26-a6a6-d619a0cd81dd", "sighting_of_ref": "indicator--bd79c6fa-8cf9-457c-8e40-27aa5b9524f6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262ccefb-a136-4244-8053-927152cad624", "sighting_of_ref": "indicator--bd79c6fa-8cf9-457c-8e40-27aa5b9524f6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055c5574-bead-4b68-b482-1e890b7a0cfd", "sighting_of_ref": "indicator--bd79c6fa-8cf9-457c-8e40-27aa5b9524f6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c8446a-1093-446e-a29a-4056e688bd00", "sighting_of_ref": "indicator--734ea6bb-45b9-4c09-bbd6-102add29ebff", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8a0fb2-f1fb-4ff9-b351-0e490cb31975", "sighting_of_ref": "indicator--734ea6bb-45b9-4c09-bbd6-102add29ebff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cddf70-11b7-4c45-8d75-ab4ef81fae84", "sighting_of_ref": "indicator--734ea6bb-45b9-4c09-bbd6-102add29ebff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf4cd2a-080e-457e-aa90-2f3571f52c17", "sighting_of_ref": "indicator--6e3c17be-599d-4413-ac48-2aa904206826", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1a186d-125d-4836-9f3a-0e7b21fcf379", "sighting_of_ref": "indicator--6e3c17be-599d-4413-ac48-2aa904206826", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60608c00-1c0d-4245-88ab-a41d9d7df010", "sighting_of_ref": "indicator--6e3c17be-599d-4413-ac48-2aa904206826", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac5636d-84b0-4973-bd5b-5bbf3f2c650d", "sighting_of_ref": "indicator--3d96124d-4e33-45d3-a6a0-23c08114bd86", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668531fb-87a0-4f27-9d70-e3f4880585af", "sighting_of_ref": "indicator--3d96124d-4e33-45d3-a6a0-23c08114bd86", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f2bd8e-5982-449b-8878-c6f5350de728", "sighting_of_ref": "indicator--3d96124d-4e33-45d3-a6a0-23c08114bd86", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e4e4d7-6a0f-4296-812a-e261f5fae393", "sighting_of_ref": "indicator--a4fd03c2-90f3-4118-936c-ef5f776cb809", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b34e363-8864-49eb-af9d-7f5e12ba87fa", "sighting_of_ref": "indicator--a4fd03c2-90f3-4118-936c-ef5f776cb809", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbcca3c1-9a2e-4b97-b31e-5653275acb31", "sighting_of_ref": "indicator--a4fd03c2-90f3-4118-936c-ef5f776cb809", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd215dce-2119-4a18-bea3-17acc8525592", "sighting_of_ref": "indicator--88659d9a-d2e6-4319-a58e-3a24369a5d6a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9acd34b-52eb-4058-a500-0cbb0729df17", "sighting_of_ref": "indicator--ff777463-7f8f-43a3-9605-9378c2b964dd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b163267-ecb4-4e87-8861-ce8ea73c3164", "sighting_of_ref": "indicator--b5de7bd6-776e-4c55-88c2-094ff554096f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c8216d-ddb5-48ed-8500-8ba8fcc68db9", "sighting_of_ref": "indicator--d9cf2182-98fa-4174-a841-c7ec929462ce", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a077882f-e95e-4586-9470-39916bf87e5b", "sighting_of_ref": "indicator--d9cf2182-98fa-4174-a841-c7ec929462ce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0dfdf5-90d1-44dd-8546-aab30b4dcc77", "sighting_of_ref": "indicator--d9cf2182-98fa-4174-a841-c7ec929462ce", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3950d6-b205-447d-9447-65187b82c454", "sighting_of_ref": "indicator--2d0b4d97-1b05-4340-8565-8e51431f5b4c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8591b3fc-5c0e-4b0e-81ef-3435176e3b31", "sighting_of_ref": "indicator--2d0b4d97-1b05-4340-8565-8e51431f5b4c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef3d3ca-e8f7-461e-9cd7-a277809f65d4", "sighting_of_ref": "indicator--275fe84d-5157-4659-84e8-da77826df974", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f08408-a59e-4817-ad06-1e0e74fe642f", "sighting_of_ref": "indicator--b97341c9-5bd9-4218-a688-1ac631df7f3e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73730b52-7904-4c20-b168-47efdb335471", "sighting_of_ref": "indicator--b97341c9-5bd9-4218-a688-1ac631df7f3e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c079429-0460-4cc6-9694-13754d462bce", "sighting_of_ref": "indicator--b97341c9-5bd9-4218-a688-1ac631df7f3e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c72456-b2bd-40af-9eb0-a58bebdaaa1d", "sighting_of_ref": "indicator--221abb3e-d814-483d-a409-c20de76c9872", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bb5e08-3a4b-46f5-977b-4e93f53d5bb1", "sighting_of_ref": "indicator--221abb3e-d814-483d-a409-c20de76c9872", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9d5f9e-69f2-443c-9452-b8044d04b331", "sighting_of_ref": "indicator--221abb3e-d814-483d-a409-c20de76c9872", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a4c195-fa73-4774-8d67-ee415c467a30", "sighting_of_ref": "indicator--155c9365-b93c-4c42-9aac-0715edf6aa3e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2e11f7-9d42-47c7-b3a5-343520262342", "sighting_of_ref": "indicator--155c9365-b93c-4c42-9aac-0715edf6aa3e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a3c970-a79c-4245-be27-a91a4b8a32b0", "sighting_of_ref": "indicator--155c9365-b93c-4c42-9aac-0715edf6aa3e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d492c2-e772-40bb-99d6-c47af7400e6e", "sighting_of_ref": "indicator--013e89e6-4dde-4b50-bdcc-68e75512d54c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d93d99-ba30-465b-89f2-d2a935db5f39", "sighting_of_ref": "indicator--013e89e6-4dde-4b50-bdcc-68e75512d54c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78dee510-2dff-48cd-83ac-199604835a4f", "sighting_of_ref": "indicator--013e89e6-4dde-4b50-bdcc-68e75512d54c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b926914e-bf36-435d-b2c6-7bbad3862627", "sighting_of_ref": "indicator--08c93325-1b7a-4f8d-b090-8cd0556c54bf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcaf2508-5a55-41fe-8702-ba0a9f7df820", "sighting_of_ref": "indicator--08c93325-1b7a-4f8d-b090-8cd0556c54bf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0134171-d139-4d39-b8a8-2708d914e293", "sighting_of_ref": "indicator--08c93325-1b7a-4f8d-b090-8cd0556c54bf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1b91ea-58b4-45f0-8db4-c78f105dd6dc", "sighting_of_ref": "indicator--3a1e6e56-e871-4a62-aac0-1b05451e939b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7f9cfc-9c9f-4884-a182-ce458e985260", "sighting_of_ref": "indicator--3a1e6e56-e871-4a62-aac0-1b05451e939b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b7b835-6abc-44fc-af58-1103d62913ea", "sighting_of_ref": "indicator--3a1e6e56-e871-4a62-aac0-1b05451e939b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b818422-8753-4013-8db5-dae839cfc969", "sighting_of_ref": "indicator--d25679f5-ffb9-4210-9e31-3bdabf02b5ef", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ececae6b-97fb-4f13-a200-7fd3477c18eb", "sighting_of_ref": "indicator--d25679f5-ffb9-4210-9e31-3bdabf02b5ef", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de1a2f4-ca7f-4cdd-b736-81805b67a7bd", "sighting_of_ref": "indicator--d25679f5-ffb9-4210-9e31-3bdabf02b5ef", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a564adcf-8a8c-42fd-a12c-d7086fc9f5ac", "sighting_of_ref": "indicator--af3c8a87-dccd-4da0-988b-f2c02ef015ae", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfea8157-00dd-4cbd-902f-1531dbbc8bd0", "sighting_of_ref": "indicator--af3c8a87-dccd-4da0-988b-f2c02ef015ae", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2a8e34-00de-478a-b2ea-2d4b292a88f9", "sighting_of_ref": "indicator--9ab8f8eb-e4ef-49b2-99cf-6e13dd041c81", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7f0178-6582-4c30-bb32-49577a73fa29", "sighting_of_ref": "indicator--9ab8f8eb-e4ef-49b2-99cf-6e13dd041c81", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5cea0f-7beb-4345-8384-5a87300d0d23", "sighting_of_ref": "indicator--8e50f652-1e7a-429b-9e29-b6b371fe288f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c734edb-feb6-4c7a-9161-cd51e8f852bf", "sighting_of_ref": "indicator--639858c9-1b70-4a08-9343-27658a61ba77", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e6d9d3-ebc0-4df5-ad46-9f3b919ded63", "sighting_of_ref": "indicator--9d9ea82c-2663-4e25-8ea6-69abdf15d2c4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772bbfc1-8e4f-409a-a527-d34d501023cc", "sighting_of_ref": "indicator--32e9b6bd-3524-42e3-aa25-2bf7afeff30f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a701b4-7f16-475c-b8f3-2f7fe5669cfd", "sighting_of_ref": "indicator--46ed97fd-e57e-4fae-a280-c45b9c562b92", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d398c13b-f615-4e6f-83d3-061508e967d3", "sighting_of_ref": "indicator--46ed97fd-e57e-4fae-a280-c45b9c562b92", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb5af64-6d5c-407e-a99b-51ec4ca6de76", "sighting_of_ref": "indicator--46ed97fd-e57e-4fae-a280-c45b9c562b92", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f7fec9-8590-40d8-b480-5ca4e2188cf5", "sighting_of_ref": "indicator--a7b71352-f945-4643-a77b-b27df02cb9ee", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b08bb16-1b13-40f4-914a-bda206bd588e", "sighting_of_ref": "indicator--7a007834-0eb3-4e41-9e39-542d62b46d20", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb8e083-8c3a-41b8-b0cf-af46430d09be", "sighting_of_ref": "indicator--23401040-74f8-4695-b0bd-b89066a676aa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05fcc7db-8e78-46c3-8b82-9d9903cb8d08", "sighting_of_ref": "indicator--eebfd7b2-5f15-40d0-896f-d57a12cf7151", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfe09cf-d8ed-48b1-8de9-7c72602a020e", "sighting_of_ref": "indicator--066f031e-6208-48db-b0cc-0539f49a9cea", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c18ac30-dde8-4774-86d7-268a336e2c9e", "sighting_of_ref": "indicator--7a28ce93-51b8-484d-b14a-1ce99d974a9f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73ef33b-7f8d-466a-a2b8-7de45132df49", "sighting_of_ref": "indicator--7a28ce93-51b8-484d-b14a-1ce99d974a9f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902fd6f6-e448-4981-bed4-2d65ce45d0c2", "sighting_of_ref": "indicator--0dfd5bdb-0e00-4029-9039-3e442094191d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e662eb-4fe5-4171-9a02-91f11823f71f", "sighting_of_ref": "indicator--0c2a58a2-61b2-48b7-976a-e991a174a854", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0587be9-3598-45a5-8b64-45cface70df9", "sighting_of_ref": "indicator--d86b1cea-5382-4e8a-ba7c-71dd18223eb1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5592dda7-e028-4077-aaf2-0736497b5c4c", "sighting_of_ref": "indicator--f683b1be-9596-4067-b5e9-72917d940620", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d6e9be-2492-463f-9a73-036d024ae3c8", "sighting_of_ref": "indicator--f683b1be-9596-4067-b5e9-72917d940620", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f347453b-f5fe-4d27-bdd9-99f8e5cfc5f9", "sighting_of_ref": "indicator--f683b1be-9596-4067-b5e9-72917d940620", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211a7649-1efb-4095-b8e7-9428de679781", "sighting_of_ref": "indicator--a5bae5f7-434e-48e1-b081-25236adcdb00", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9da7402-4102-44f1-9886-b938f55f39c8", "sighting_of_ref": "indicator--a5bae5f7-434e-48e1-b081-25236adcdb00", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc10fce6-26c6-48de-b7ea-d9b7ee7a46a8", "sighting_of_ref": "indicator--a5bae5f7-434e-48e1-b081-25236adcdb00", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645a6e8a-0a6b-480a-9326-b0a931122043", "sighting_of_ref": "indicator--b7cf9244-a134-4fc7-bd63-45c8bdcd82d4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2ea798-5f59-4a2f-9cdd-b16eb328cad7", "sighting_of_ref": "indicator--b7cf9244-a134-4fc7-bd63-45c8bdcd82d4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fda9d8-a2a5-4eb0-9968-b26aaa59d79f", "sighting_of_ref": "indicator--a5e3f025-7109-4451-934c-119551465af9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142d9df2-6211-45f0-acdf-50055f126f09", "sighting_of_ref": "indicator--0da1c665-9296-487f-9d57-61500c8d94be", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1888cb9-ce7b-451b-8977-ffb79716db38", "sighting_of_ref": "indicator--0da1c665-9296-487f-9d57-61500c8d94be", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fa34c1-7525-4098-914e-f56c38eb76b2", "sighting_of_ref": "indicator--1652f932-c68e-4261-be85-fa05ad5eca8a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9f3632-258c-4c69-8ceb-535231b89bd9", "sighting_of_ref": "indicator--ffc4593f-89c9-4874-b51b-89d85dcf4496", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d23ef1-1e4b-4de9-b04f-af5954e810cc", "sighting_of_ref": "indicator--63e860b7-46ce-44e0-afb2-0e56b02e1100", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4dd26c-6cd1-4196-a5d3-5150de8148e4", "sighting_of_ref": "indicator--9de67fc7-9351-41bd-85e3-d1b88b6370aa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1617f185-5d53-457d-bfce-90031fc60736", "sighting_of_ref": "indicator--af155374-ae23-4b78-88f2-e5d00d278cf8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5b1acc-5594-4d26-b838-61e67e0c34bb", "sighting_of_ref": "indicator--af155374-ae23-4b78-88f2-e5d00d278cf8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979d8006-8f06-4146-bd6d-c0f63a1eae63", "sighting_of_ref": "indicator--af155374-ae23-4b78-88f2-e5d00d278cf8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c24ce2-f914-4986-a46e-dc5a61778855", "sighting_of_ref": "indicator--2147440a-89cd-4059-98cb-6a56555ce0a8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f7f07f-a0d6-4beb-9ceb-7983c02e13cf", "sighting_of_ref": "indicator--2147440a-89cd-4059-98cb-6a56555ce0a8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704c4690-0125-44b6-84ec-560922e45a29", "sighting_of_ref": "indicator--50ad98d0-35b0-4785-87ab-e033d155ab2a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2afa65-d2b0-4e02-a6c8-26e9d7200a35", "sighting_of_ref": "indicator--a5dfb7c9-daa7-45c1-9312-1a9bb4f79495", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa664f4-8cba-4a26-87ef-54ba611d2a5b", "sighting_of_ref": "indicator--e1a9144f-cd33-45d8-a786-fb74e5d8aab2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a2aeb9-6c98-4f4e-b777-f18a924108c9", "sighting_of_ref": "indicator--1ea4eb2c-31d0-4687-aa5f-2ab4cca083bb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c616cf4b-e8c7-487f-9fe1-bdd4b661c367", "sighting_of_ref": "indicator--36597a19-8dbb-4e7d-8f4e-f37c3f6eb62d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3481e3e-1cf5-49b6-a4d1-9fa2fb137939", "sighting_of_ref": "indicator--cb632901-e618-4a80-8473-c40ed74aba31", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f99697-a324-48bf-bad1-8a2addb83bfc", "sighting_of_ref": "indicator--7fb9ec46-ef76-4d84-b52a-2896f3b7cdba", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385783f6-a518-4cc7-b30d-ca7c47a8b735", "sighting_of_ref": "indicator--bff2297d-bbd8-4019-ac4b-108866edde8b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a3d043-a26b-4faf-9703-2af9e7202e31", "sighting_of_ref": "indicator--bff2297d-bbd8-4019-ac4b-108866edde8b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f853c4a5-1b5b-45a1-a6c4-08b348925bef", "sighting_of_ref": "indicator--9b109629-6294-4c80-8cdd-cd54de3d892e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb66f4e-04d2-424f-a7cf-e48d5a4bf23c", "sighting_of_ref": "indicator--01886092-c85d-4f16-87ee-779a544da2a6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761780b3-6425-4148-ad40-9da944fec09e", "sighting_of_ref": "indicator--52798cc8-a3ca-43c9-951e-2a72388e06c6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ed6f7b-b39e-4e7c-a8b5-dae71567b4a5", "sighting_of_ref": "indicator--52798cc8-a3ca-43c9-951e-2a72388e06c6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9777c114-5d8a-4021-b7ef-290a4d0dacad", "sighting_of_ref": "indicator--f273f662-ff93-4349-9e59-565eddaf0c38", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9281cf2a-07d2-4ded-af45-ee7d81db2028", "sighting_of_ref": "indicator--f6b466c2-ebce-4cb1-adce-e536a3d6e2bb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318c56c0-d8d4-4546-9da1-bea6f998e002", "sighting_of_ref": "indicator--6eb1d61a-bcaf-43f1-8b40-bb9f4e17073a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1d61a6-3355-4350-8410-9b947b53e632", "sighting_of_ref": "indicator--51bd864c-41d2-46d6-8c92-29e015c59a1d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b84413-3b99-4745-b8f0-9862395ca1b7", "sighting_of_ref": "indicator--ce45eec7-bb57-4191-9497-63e0f710c811", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289ff0b2-c4ac-446e-9d5f-66e142132443", "sighting_of_ref": "indicator--d88fed94-b2c3-4ce6-a9a6-032e317b84fe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c1164f-e0cb-40b9-a764-a038c0f6db19", "sighting_of_ref": "indicator--7f3b0396-6483-4922-bf60-5ccfec354156", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5771e8-dc23-4ca1-8e10-6d710e9f2e05", "sighting_of_ref": "indicator--7f3b0396-6483-4922-bf60-5ccfec354156", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5bc611-50ae-4bb0-adf4-ce92bdce42d2", "sighting_of_ref": "indicator--d1cb59c5-d742-42c6-98b6-e3fa193e7833", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816d4d4d-6470-4cc8-a40a-b216d70d17b2", "sighting_of_ref": "indicator--d1cb59c5-d742-42c6-98b6-e3fa193e7833", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6509c1-551d-45b7-a960-83a560978722", "sighting_of_ref": "indicator--d1cb59c5-d742-42c6-98b6-e3fa193e7833", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d64c9ae-1ecd-4339-b3ce-cbc17d1ea69a", "sighting_of_ref": "indicator--74656141-6c7e-421d-b179-e366b5d89b16", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695476e1-8a05-4ea5-8f17-588a76b47054", "sighting_of_ref": "indicator--74656141-6c7e-421d-b179-e366b5d89b16", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0465633f-bd11-4b70-b644-f091a4d8e699", "sighting_of_ref": "indicator--74656141-6c7e-421d-b179-e366b5d89b16", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491fddbb-a1b1-48d1-9ac2-ee36276ae5aa", "sighting_of_ref": "indicator--d6b74340-f447-4986-9dae-433817c126a2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccbe152-0fe7-47ab-b675-e67d4ccd2d5e", "sighting_of_ref": "indicator--047b5bc2-893d-479f-a7ad-91ca7979ee64", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a93e0fd-13be-4856-92ff-b1c9f29c2667", "sighting_of_ref": "indicator--2af61d63-dae8-481a-850b-e8c565a5069c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71acaa21-d2f4-4be2-818a-57c70b417474", "sighting_of_ref": "indicator--2af61d63-dae8-481a-850b-e8c565a5069c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9d0ef2-c82b-4f2a-bbc2-65e4aee40bd1", "sighting_of_ref": "indicator--2af61d63-dae8-481a-850b-e8c565a5069c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7175f5e1-2cdd-4e76-8ea3-4ef9fab1e0dd", "sighting_of_ref": "indicator--a929a58c-024c-4d28-84a8-6c119c52cb4c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182e8449-8cd8-4e1f-bab3-dea9456dab2e", "sighting_of_ref": "indicator--f8483cbc-4699-4786-853d-1fffa9521ab4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a078f496-6745-4728-a9c9-fe8950ee7f90", "sighting_of_ref": "indicator--f8483cbc-4699-4786-853d-1fffa9521ab4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dbcf558-7ed2-4bc1-9c2d-1ed76adf2058", "sighting_of_ref": "indicator--5afee6b8-85a2-47c9-bde1-0c156a023c0e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2c4e3f-4879-4bee-ac13-a3f61512b047", "sighting_of_ref": "indicator--5afee6b8-85a2-47c9-bde1-0c156a023c0e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb01507b-9f34-46db-8d15-14ce224e7a53", "sighting_of_ref": "indicator--1468b3f6-fe50-499f-8072-7f96876b48bb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89580bbe-b059-4039-9b2b-4726abf40be8", "sighting_of_ref": "indicator--1468b3f6-fe50-499f-8072-7f96876b48bb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fc5697-12db-44c4-9f5a-3cb0650e35d0", "sighting_of_ref": "indicator--39fb92ae-8ab1-4659-a374-6626ebdc688c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d79f03-1e13-4096-b6a1-6808aaeccf49", "sighting_of_ref": "indicator--39fb92ae-8ab1-4659-a374-6626ebdc688c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa8690b-9749-462b-9db7-f3d6ff981251", "sighting_of_ref": "indicator--b018495c-fdaa-4774-b00b-378d8fafbaf1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ef87be-9974-4709-b59d-373095e30a86", "sighting_of_ref": "indicator--b018495c-fdaa-4774-b00b-378d8fafbaf1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4043491c-601b-4fce-a0f0-0acf28481af0", "sighting_of_ref": "indicator--15e5d724-a36d-446f-8094-2a2a7c4043d2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13738b93-8373-40bc-b6ef-58fd11cba984", "sighting_of_ref": "indicator--15e5d724-a36d-446f-8094-2a2a7c4043d2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc29d97f-3299-493e-96cb-08a57d520c5f", "sighting_of_ref": "indicator--36540dfe-2476-4343-a6d6-9e177ca1bbd6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e43d97-73e8-40d7-a160-65a0d9ef0cef", "sighting_of_ref": "indicator--6a62e26e-2fbe-4ed5-adcf-2896c469b62c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f32702-1efb-45be-a173-9f6e7f7dbb1e", "sighting_of_ref": "indicator--6a62e26e-2fbe-4ed5-adcf-2896c469b62c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0855818c-6ca1-4d60-8186-d6d365fcbdd3", "sighting_of_ref": "indicator--6a62e26e-2fbe-4ed5-adcf-2896c469b62c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e391ab1b-c43d-4096-a6cd-44315a34872d", "sighting_of_ref": "indicator--1c49299f-4f02-4866-8b5a-eb8015b5a364", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b20595-811d-41e3-8635-3ce21817569e", "sighting_of_ref": "indicator--b4d140e6-e166-4223-b5fb-e159250d7127", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c731e49-2e25-4d08-8165-3c4a2154be1f", "sighting_of_ref": "indicator--c5ba06f5-1301-4d6e-b405-938236aa698a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1ef943-c2a9-443b-9d6e-e258187bd9c5", "sighting_of_ref": "indicator--c5ba06f5-1301-4d6e-b405-938236aa698a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a7629f-5850-47db-a0e3-67dcb4070eb5", "sighting_of_ref": "indicator--c5ba06f5-1301-4d6e-b405-938236aa698a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2949456d-a46a-4122-aba8-7186a0208918", "sighting_of_ref": "indicator--a418a8f6-b2b5-41ad-85f9-26dcdf7766c2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412a4f5a-3290-4b27-825f-1c27cf0b3dd4", "sighting_of_ref": "indicator--a418a8f6-b2b5-41ad-85f9-26dcdf7766c2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4482cd39-99e1-4003-ae52-a8fff646110e", "sighting_of_ref": "indicator--a418a8f6-b2b5-41ad-85f9-26dcdf7766c2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e06e53e-2c2f-4ab0-87a4-df056bcae3bc", "sighting_of_ref": "indicator--b3cc6224-7ebf-4e14-b3d8-e059b71c5e82", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26b6665-de6a-4d4b-9e14-e40a365e9fd3", "sighting_of_ref": "indicator--b3cc6224-7ebf-4e14-b3d8-e059b71c5e82", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad0fa70-ed30-4c81-964f-794be8c2a3a9", "sighting_of_ref": "indicator--b3cc6224-7ebf-4e14-b3d8-e059b71c5e82", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c38021-75f9-4eb7-92f7-87f2ef46f605", "sighting_of_ref": "indicator--152b667c-0057-4c15-aee2-fc702d923e6a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e067eb94-c0fc-40e1-9f15-1c5505e4638f", "sighting_of_ref": "indicator--152b667c-0057-4c15-aee2-fc702d923e6a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5233002f-bdc2-4590-85a9-4e4f7ae282a8", "sighting_of_ref": "indicator--2a788fc4-1109-4f12-a3ba-1d48a58df8db", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4cc7ce-543c-4dc5-9f34-071548a91c45", "sighting_of_ref": "indicator--2a788fc4-1109-4f12-a3ba-1d48a58df8db", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14206cb3-5891-4d40-b9cc-47c276d2fa3d", "sighting_of_ref": "indicator--2a788fc4-1109-4f12-a3ba-1d48a58df8db", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4323a4b-d6d7-4346-9b90-e5d84ecc78cf", "sighting_of_ref": "indicator--0fde7ac2-99c4-4c34-b126-3678e58c5d7c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14a1eda-6573-4bcb-beee-f6864ee1fab4", "sighting_of_ref": "indicator--0fde7ac2-99c4-4c34-b126-3678e58c5d7c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdd4088-0d1c-4da1-8945-d1f81006ba5b", "sighting_of_ref": "indicator--0fde7ac2-99c4-4c34-b126-3678e58c5d7c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92f9723-1e0f-43df-93b3-161f8f8bd402", "sighting_of_ref": "indicator--a48e0101-c83e-43d9-b555-5646a8fc850c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d698bc2-3bba-443f-b532-28998a91b2bc", "sighting_of_ref": "indicator--a48e0101-c83e-43d9-b555-5646a8fc850c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf99b8b-d5fe-4511-b984-05cb9a71ac5e", "sighting_of_ref": "indicator--eac3f5a8-1963-4eca-9f4f-16dffb1d0f56", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3009feab-f6bd-4f98-a28f-8c0921363126", "sighting_of_ref": "indicator--13404c80-924b-4a00-82f2-53ffc8bbf0a4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd4ffab-9873-4d43-b051-e72a13f760a2", "sighting_of_ref": "indicator--13404c80-924b-4a00-82f2-53ffc8bbf0a4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfcb516-359d-4516-a1c0-540a508369ae", "sighting_of_ref": "indicator--13404c80-924b-4a00-82f2-53ffc8bbf0a4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2470c1-33f5-4710-a3b9-e7b1143bb5d1", "sighting_of_ref": "indicator--f1d3198f-9016-421b-bcc8-6c6dd6c53cba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb3c0db-ac7e-434e-82a4-d969fcf0c513", "sighting_of_ref": "indicator--c748b5d0-6e44-4ca5-ab0d-dd6edc08e009", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88a28b8-a978-47a7-ba15-e50907eb191b", "sighting_of_ref": "indicator--c748b5d0-6e44-4ca5-ab0d-dd6edc08e009", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4078930-5c38-4d08-8a76-414606c2b56f", "sighting_of_ref": "indicator--17b46858-b9be-4ada-b927-6df271e711b9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0773412-9399-49cc-9b28-f41eda6bc831", "sighting_of_ref": "indicator--c0343040-e9d0-491a-b04d-1f5b32e6cc11", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8494f5d3-3446-4d9c-8500-c3c25a0b7ea1", "sighting_of_ref": "indicator--e5669ade-7f3e-4d08-817f-42f490b27c50", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b40e98-2c1d-40c0-af4e-e19933eb8214", "sighting_of_ref": "indicator--e5669ade-7f3e-4d08-817f-42f490b27c50", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da00c8d-18cb-4be2-988b-4e210aac45fa", "sighting_of_ref": "indicator--f92f839d-1dd6-4405-ad12-7b409a2dad98", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312827fd-ee59-4910-a13d-fe8d44b54864", "sighting_of_ref": "indicator--f92f839d-1dd6-4405-ad12-7b409a2dad98", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1a85c8-ca68-4737-a0b3-51343cb35392", "sighting_of_ref": "indicator--f92f839d-1dd6-4405-ad12-7b409a2dad98", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7116fcaf-5299-4fe2-bd99-fdb5c48f820c", "sighting_of_ref": "indicator--07e95a71-b9cf-4633-9778-c31813f3f365", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e37a15-3fa8-405b-a9ea-1df3ee5b1e95", "sighting_of_ref": "indicator--07e95a71-b9cf-4633-9778-c31813f3f365", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc4aabd-6bc0-4b4c-9082-0c60b869e791", "sighting_of_ref": "indicator--08a2931a-4d7f-4f4a-a1a7-653a5a354797", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb6b265-9732-40d9-9eb5-67a347795d85", "sighting_of_ref": "indicator--08a2931a-4d7f-4f4a-a1a7-653a5a354797", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6296d4f-4ab5-463f-8855-7ce5323cbb6a", "sighting_of_ref": "indicator--92d35594-c006-467c-b3d9-b67c40bad5c4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db8615c-c2e0-48c2-a1a8-6a0fa85db62b", "sighting_of_ref": "indicator--568c127a-328b-4109-adf4-7f76287bd466", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48cc885-8cb8-4e53-99a5-e908616ee60c", "sighting_of_ref": "indicator--568c127a-328b-4109-adf4-7f76287bd466", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7660185-c1ce-4907-8387-80324e1dc149", "sighting_of_ref": "indicator--568c127a-328b-4109-adf4-7f76287bd466", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc27d3a5-fb21-40ca-b5b3-305365eeec3f", "sighting_of_ref": "indicator--c480085a-0c08-4ce4-9351-04b7fc9625cf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8205396e-6d12-4359-822d-8f2968ffe6ef", "sighting_of_ref": "indicator--4b980575-b95d-4bf6-9cd2-bd2267b110c5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8782df-2e7d-4824-9598-52c185967703", "sighting_of_ref": "indicator--4b980575-b95d-4bf6-9cd2-bd2267b110c5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ee5e7e-ffda-4f2c-886e-4fac43c5fc57", "sighting_of_ref": "indicator--464e8103-33fa-4489-87ab-8297b25e3755", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b55427-cadb-4503-a043-122ec45de6ad", "sighting_of_ref": "indicator--ae82d370-3796-4aba-9854-3aa671ee9e50", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91117a59-6c4c-4d6b-b670-380e4145e9cd", "sighting_of_ref": "indicator--182d0c43-f17e-404d-898f-837528961c56", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05d70ba-d1ec-4e24-9063-71918b4c8292", "sighting_of_ref": "indicator--182d0c43-f17e-404d-898f-837528961c56", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ba873f-a39d-4251-8b54-7d92844aafe7", "sighting_of_ref": "indicator--c420ab91-2ad8-4df1-89e8-8a44a67a2828", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c5a2bf-4684-4477-8682-c2b30a96a573", "sighting_of_ref": "indicator--c420ab91-2ad8-4df1-89e8-8a44a67a2828", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60627a3c-d5e5-44b7-b9bc-afd2dbc2fe13", "sighting_of_ref": "indicator--c420ab91-2ad8-4df1-89e8-8a44a67a2828", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444ad2f9-3d60-48ea-a5f7-942404a97898", "sighting_of_ref": "indicator--9bf896c6-967b-4342-8f33-cab26f410106", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a805be1-5a11-4ae2-bbb8-16f2eccf8ff7", "sighting_of_ref": "indicator--3741e92a-7daf-41b1-bc3e-02f57dca920f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6157c2c-383a-4896-acf3-ce2c48f9f304", "sighting_of_ref": "indicator--3741e92a-7daf-41b1-bc3e-02f57dca920f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661911d4-c8e9-40e2-8ec3-e59a8dbe3c54", "sighting_of_ref": "indicator--a9eee386-6eac-4ee1-beff-f217f3b9a734", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915547ef-e883-45ae-af81-b1e856cc627b", "sighting_of_ref": "indicator--a9eee386-6eac-4ee1-beff-f217f3b9a734", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2188d4f5-4d9d-4371-812a-867724232205", "sighting_of_ref": "indicator--d10553ab-d031-4dbc-bf98-a45d881d9750", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f236e1de-9b0e-4878-9cb5-f66aaad95338", "sighting_of_ref": "indicator--d10553ab-d031-4dbc-bf98-a45d881d9750", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4677b1ec-609c-435c-a77d-583b0e493f28", "sighting_of_ref": "indicator--c3f21d32-a248-4ae9-8326-7c72045fe487", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2a7c6b-1e0e-4ff6-ab96-c84f6bcc2e09", "sighting_of_ref": "indicator--c3f21d32-a248-4ae9-8326-7c72045fe487", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db8a6b2-5c3d-4310-b33f-348b732ad6e3", "sighting_of_ref": "indicator--0e30f5d2-74d2-407b-822b-2e79f09df915", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2d888b-4d03-4db9-9867-40fbda3fb334", "sighting_of_ref": "indicator--0e30f5d2-74d2-407b-822b-2e79f09df915", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444b1e5a-6801-4a18-a1f4-898b7339aeb0", "sighting_of_ref": "indicator--35bc7703-2ad6-40f3-b68a-97b4bd4af78c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc58d9b-e440-450c-a190-016ce1f31a0c", "sighting_of_ref": "indicator--35bc7703-2ad6-40f3-b68a-97b4bd4af78c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4548138-7f3e-463c-8acd-be18f527c063", "sighting_of_ref": "indicator--35bc7703-2ad6-40f3-b68a-97b4bd4af78c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15197f8-13cc-4eaa-ae1e-c90ba1dfa980", "sighting_of_ref": "indicator--b8251913-630d-49fe-ac20-b51007c03776", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9fbd60-9f52-4b79-b920-6d7075b021ae", "sighting_of_ref": "indicator--d1fbdab2-dc05-462c-bc20-2cfbded54e0b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc4c3c8-ee93-4437-93d9-9a2a41056a07", "sighting_of_ref": "indicator--d1fbdab2-dc05-462c-bc20-2cfbded54e0b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8db0259-55ef-414d-84e3-205c278be963", "sighting_of_ref": "indicator--934dd54e-e6bd-42f3-894e-cd55d712ab0e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973f6b5d-c3d6-49f2-9911-4cf21db63d12", "sighting_of_ref": "indicator--3a917772-0a56-446a-a585-ae7b82f94ee7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6eb681c-7845-4979-9b54-779c9f7dbeae", "sighting_of_ref": "indicator--a609998b-9186-4bc0-b1b2-e3f03a9e0e28", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a928ae1d-96c1-4fc8-8f7f-6b737e5b7dea", "sighting_of_ref": "indicator--a609998b-9186-4bc0-b1b2-e3f03a9e0e28", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be53f504-d39a-41f5-b3d0-f942bf1fc047", "sighting_of_ref": "indicator--4494c5fe-1472-4004-8ec9-68e0460ce3ca", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23059e0e-27a7-4753-904d-62ba2e64d7a2", "sighting_of_ref": "indicator--4494c5fe-1472-4004-8ec9-68e0460ce3ca", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017970d5-58ed-48cb-8764-b83049b3ee2f", "sighting_of_ref": "indicator--f0872b0d-cc38-4045-b5e1-1d4ea6ada617", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285b307f-396f-440f-a638-7ff73ac04377", "sighting_of_ref": "indicator--f0872b0d-cc38-4045-b5e1-1d4ea6ada617", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512f42e6-cb52-4d69-9544-0fa9c557957d", "sighting_of_ref": "indicator--f0872b0d-cc38-4045-b5e1-1d4ea6ada617", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f925160-0980-47f7-946b-aa41f5e6a5e4", "sighting_of_ref": "indicator--1679ed14-6348-4827-a9a7-66ff681a0087", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2587987a-21e0-4d0f-b2a8-37ccc77aecb5", "sighting_of_ref": "indicator--3fddfff8-b33a-40d5-8b55-2fbf8f440b90", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5467d99-2bd0-4689-80e2-9a041b99c084", "sighting_of_ref": "indicator--3fddfff8-b33a-40d5-8b55-2fbf8f440b90", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d164508f-a9e4-4b3b-8c19-eca6bd871fa3", "sighting_of_ref": "indicator--f1e34e0e-1b4d-4491-80d6-90655e42b62d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d492c6b-9ea0-4511-9119-3becc56af51c", "sighting_of_ref": "indicator--f1e34e0e-1b4d-4491-80d6-90655e42b62d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08198bf-4871-4182-b963-c7ffc4f0ed80", "sighting_of_ref": "indicator--a35db42b-5572-4a26-8843-6ed1199e5a6a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59d452e-e129-40e6-8f80-fcf4509f64e7", "sighting_of_ref": "indicator--d2353c21-cb96-4757-bc09-bb0f255280f5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c182339-e819-4de7-8947-807a6c26b019", "sighting_of_ref": "indicator--5eaac8ed-84bc-437f-bdbe-3d2736cab136", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d8c28d-14e7-4b4c-8711-83f3021cd12b", "sighting_of_ref": "indicator--3cc81519-8e46-4fe3-b719-b6efb3602b3a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b2d805-ad7b-4154-9ffa-98de3ef4c1d3", "sighting_of_ref": "indicator--3c46bc70-3590-467e-ba6c-cf050d85af8a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd0b07d-546c-4e63-9919-6b2ce0c74ead", "sighting_of_ref": "indicator--3c46bc70-3590-467e-ba6c-cf050d85af8a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0247d64c-b93c-4047-adb3-c2995a52c864", "sighting_of_ref": "indicator--3c46bc70-3590-467e-ba6c-cf050d85af8a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695d0f71-fe7a-4ee4-8149-e4166cc99c93", "sighting_of_ref": "indicator--2d19ee23-41a5-4528-9496-2c3dd1d3ecdc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6d5685-8ba4-4209-bcd2-4e9be28fd8df", "sighting_of_ref": "indicator--f5f02dee-7b3b-4e6b-b20f-3761d0995e06", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe255d5a-f80d-4a2b-a525-544a8169ce8c", "sighting_of_ref": "indicator--d6b56192-08de-43ca-bf9c-545c4bb2ad2b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e19ed2b-9869-4d96-ac62-4239b1c5b2d1", "sighting_of_ref": "indicator--1b8d026c-7a1f-40cd-93f6-aede0c95b443", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149eed15-9fcc-46e9-a56b-971f03be8bb9", "sighting_of_ref": "indicator--613ffa7b-69a3-4fe7-88e8-451951d288b7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de093126-9f2e-4b30-8ff9-f3d4743d72b6", "sighting_of_ref": "indicator--98775895-04e4-4dbc-8e90-4e09f6c09512", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505536d6-22af-47ba-9668-1e79ec9b02e3", "sighting_of_ref": "indicator--98775895-04e4-4dbc-8e90-4e09f6c09512", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91c584a-4ebd-4e10-9fdb-b829c418347e", "sighting_of_ref": "indicator--fdcb8242-65e4-4deb-bccc-602b6e9eec9c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af6b7b1-5847-4450-b668-b3a6217e0af3", "sighting_of_ref": "indicator--fdcb8242-65e4-4deb-bccc-602b6e9eec9c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc4b8fd-ca6a-4cff-9c0a-9c5973df2a29", "sighting_of_ref": "indicator--fdcb8242-65e4-4deb-bccc-602b6e9eec9c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3555d7f0-22dd-46e9-8b9a-056c4b4a4c9c", "sighting_of_ref": "indicator--c621b8c9-6a17-4b50-99fc-b71ba4938794", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b2a68e-82d8-451d-83df-bd8dfbf74713", "sighting_of_ref": "indicator--c621b8c9-6a17-4b50-99fc-b71ba4938794", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb218cc9-a97f-4e1a-ab94-621708973742", "sighting_of_ref": "indicator--c621b8c9-6a17-4b50-99fc-b71ba4938794", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee96886c-ddfa-42fb-8d4f-071334391061", "sighting_of_ref": "indicator--9d527532-57d4-4e92-ae7e-7c931ccb6845", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8040ef93-8706-4780-8819-b8fe180dcd9d", "sighting_of_ref": "indicator--a912278b-07d7-40a6-94d1-7db6992724a6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b809e7-a8b3-46dc-a755-02049aec435b", "sighting_of_ref": "indicator--b383099c-4900-4d08-bec9-a9dcc05663c0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c510eae5-684e-4043-a1af-70c46cee376c", "sighting_of_ref": "indicator--68bad3da-5fb3-4dc5-91c9-f7392af06a24", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de241674-27da-4a2c-9f3d-88482ebc20b9", "sighting_of_ref": "indicator--8767ce04-f862-44da-8abb-98ef4c15e61a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829a2bda-439f-423d-9b67-e08d13879177", "sighting_of_ref": "indicator--8767ce04-f862-44da-8abb-98ef4c15e61a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5862ec13-2033-4463-9f57-5b7166f45e6e", "sighting_of_ref": "indicator--44b54145-9923-4b1e-878b-41d5b830ee20", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7aec6d0-f329-4ac5-9864-570ab389af3b", "sighting_of_ref": "indicator--655dcf0a-c959-4bec-9c1d-57dc50dcde5d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0396723b-f423-4c92-9168-4b6bb4c23d8a", "sighting_of_ref": "indicator--a4ed07a7-ee44-4968-b7ed-636e803546e7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d35359-f203-483e-ab38-3794fbd09063", "sighting_of_ref": "indicator--3090711c-2c17-4c54-bf1b-e6bca86597b4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478f1c71-cd61-45e9-b62e-8f03e849f302", "sighting_of_ref": "indicator--732f2ec4-3a35-4c0d-b323-28504000a71f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9bbb17-714a-4b27-b653-4e3e8f7e5adf", "sighting_of_ref": "indicator--b8fe438e-baad-4cb0-8d67-752643b47604", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32702e47-e91e-4fc2-b14d-f4d68c8a788b", "sighting_of_ref": "indicator--b8fe438e-baad-4cb0-8d67-752643b47604", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534ca7c0-f932-46e5-b4ce-588eccc440e5", "sighting_of_ref": "indicator--b8fe438e-baad-4cb0-8d67-752643b47604", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09fcf55-8435-42f6-a292-3bcd246876a7", "sighting_of_ref": "indicator--f02d7490-dba2-48a6-833c-dd98eac9909f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288c0ca9-6986-4c33-a6f8-c72fbdfe03ba", "sighting_of_ref": "indicator--f02d7490-dba2-48a6-833c-dd98eac9909f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1338bf3f-b84a-4b95-90a9-b91e5ff37d10", "sighting_of_ref": "indicator--e2a2e949-4dfa-4435-8e6c-76eff6f814b6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf9639e-e698-4a5a-b381-0f02dda1f93d", "sighting_of_ref": "indicator--13d41f98-246b-4567-be97-82b8534d1452", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80ab7a6-b461-4793-82e0-a47d89e84648", "sighting_of_ref": "indicator--e47fc1f0-6103-4de2-93d8-3c7a7eee69e9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be46b79-c62a-4ec7-a44d-25f705a9f1bf", "sighting_of_ref": "indicator--e47fc1f0-6103-4de2-93d8-3c7a7eee69e9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9aa6540-b673-4ace-bea3-d793b91edf82", "sighting_of_ref": "indicator--1796babe-5dfb-486b-bda6-332e46af3e2d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45cb2ed-2627-4816-9dfb-8ba1c264f089", "sighting_of_ref": "indicator--93f02a9b-8834-45bb-8cfa-1e40d23f2f2b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd1b6c7-6d8d-4678-be08-18bb241e8704", "sighting_of_ref": "indicator--5a4b8a07-e67e-48f2-82d8-e544038f183c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9e4bf5-1b22-4d37-8338-5590e2278181", "sighting_of_ref": "indicator--1ebd6f4c-04ae-44d5-bedc-7e0128818b67", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c946cd-dd55-4d4f-815b-ca3470d9940b", "sighting_of_ref": "indicator--ef8abe5f-f1b1-40a3-80c6-1c9717abbf58", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88feb4b2-9093-420a-9a58-8f39a67304eb", "sighting_of_ref": "indicator--ef8abe5f-f1b1-40a3-80c6-1c9717abbf58", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4262edd-d788-44e5-ac90-b50f1221363f", "sighting_of_ref": "indicator--c63cc69e-f2cc-4494-b294-700f6f31f8c6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff447e4-77dd-47e8-affe-c0717a79368f", "sighting_of_ref": "indicator--55347a29-1ad4-4d86-8675-572d9125d6f7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d6167f-0e0d-4a11-a544-3058e1dcd974", "sighting_of_ref": "indicator--b7acb751-7548-40c6-8f6b-fdb5ba7e49aa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8a4034-d561-4f1f-be84-b01fd5008e7c", "sighting_of_ref": "indicator--8428ca82-bc50-42f1-9da2-4a1803f9a5fd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2986828f-c7ec-4e69-82c4-27e662c14754", "sighting_of_ref": "indicator--d8a138bc-f3e9-4cad-80f1-c8636899c0bd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0edd14c-2fcc-4919-a3c2-0729018b3af7", "sighting_of_ref": "indicator--059ff533-429d-43d5-9e80-54284f17cb98", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21256ea1-d6fb-4442-b9f7-5c8d715852ba", "sighting_of_ref": "indicator--89b539cd-08a5-4fcb-81a6-74ac3c75a236", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5430ba-349e-4e4e-b0ab-56eefd807c48", "sighting_of_ref": "indicator--abc6fa62-63f0-488d-b1ef-66f29a8575a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cadebe3-dd56-4355-a3ae-bf697b514e19", "sighting_of_ref": "indicator--37d35761-f834-4a20-9d6c-b8f38c536c3a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bdc5f3-307c-46d6-849e-822627a31ad2", "sighting_of_ref": "indicator--25b03319-d513-4d7f-a101-1b1ea98b3d62", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ce2686-8b61-4290-84df-f366cc3c165b", "sighting_of_ref": "indicator--2c87663b-100e-405b-8e6f-8890020e1dea", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf85272-899c-4394-ae9c-f4619137220b", "sighting_of_ref": "indicator--2c87663b-100e-405b-8e6f-8890020e1dea", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb353e1-5754-4882-b934-40597a9bbb8d", "sighting_of_ref": "indicator--04137bc0-5cbe-42d5-93cd-c8108997b797", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83f5dec-d8d1-49bd-a0a9-3ac0f8d86121", "sighting_of_ref": "indicator--9790ebc9-e9de-4f07-93ab-f421c4acd952", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc74a7f-6232-4798-8048-8fa6f9d5a71e", "sighting_of_ref": "indicator--c544bf2b-b8fa-4abd-ac64-371b08076ae1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30a55a7-ad6b-43a6-8eec-e7dcfbc55f51", "sighting_of_ref": "indicator--c544bf2b-b8fa-4abd-ac64-371b08076ae1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b165cb2b-956c-4334-8906-bc1ccec5417a", "sighting_of_ref": "indicator--c544bf2b-b8fa-4abd-ac64-371b08076ae1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf91e967-5093-4a73-8840-7fab5be470e9", "sighting_of_ref": "indicator--f9a460d1-4f9c-4263-9873-45036be897be", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf6a7e1-e441-4ebe-8191-4528002f19d4", "sighting_of_ref": "indicator--6985c445-3297-424b-9ee3-b0a92455af78", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa5ae95-de8b-4a49-a90d-185637a5b298", "sighting_of_ref": "indicator--c481cf93-beb1-41ad-8384-beeda1e76d5c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23fe2a0-1d01-4d9e-a1f6-9905ec76dda4", "sighting_of_ref": "indicator--86c459b7-722b-4fa9-8e5d-d89375c67020", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870e20c5-5adc-4759-b93c-05b3e72d5454", "sighting_of_ref": "indicator--75256369-83c8-468b-9ece-105a6f7f11a4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84e4043-23f7-4444-9b95-837956bc4520", "sighting_of_ref": "indicator--b3e208b2-a661-4c67-bc47-9c1f245febb9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe96be65-f88b-4d10-90f2-57bf5244a5a5", "sighting_of_ref": "indicator--ef8244b8-59c5-48d5-8086-a9aad6d4e330", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c543d9-0a6a-4d6d-9fd8-1b5ad3fb571f", "sighting_of_ref": "indicator--45ead787-ddce-4b6c-bafc-b34fc3a26ff4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a043a3c-1799-4481-8b73-74e47133bf6e", "sighting_of_ref": "indicator--876bf266-2762-48a3-a81a-212ca862c45e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdab3343-6a92-49a0-a105-ec9479456882", "sighting_of_ref": "indicator--b7ae5bcf-3c83-441a-8125-d99b8a7c7857", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f07e909-0476-40fc-81d8-65a7120d4238", "sighting_of_ref": "indicator--3344eba6-5a8d-4260-a3fc-60faaa97e515", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca0baa4-06ac-450b-a52c-f9946b66df67", "sighting_of_ref": "indicator--eface312-d20a-452f-a3cf-d13f8cb406ef", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335c4a54-9dc7-414a-a584-9a29320c724c", "sighting_of_ref": "indicator--40a5079c-c581-4a8f-b3aa-32b6d6ded487", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee941ae5-37e6-4490-92a0-696a38c940fd", "sighting_of_ref": "indicator--d305bb5a-64c1-4122-b7f0-b4a1e0515db8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcc807c-b9f3-4860-ad31-ea514e94c101", "sighting_of_ref": "indicator--d5dd19ae-2d3c-4692-a9bc-1eb9effd408d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafc5aa1-94dd-4380-9669-fdc65197e5c9", "sighting_of_ref": "indicator--fcedb215-454b-450d-90bc-ce256783f6d0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dab0c71-9bf7-421c-8ea0-d1bdabd128a9", "sighting_of_ref": "indicator--5d10105c-9791-4d3e-bb52-ec30be1a3046", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50077eaa-372e-4445-919d-b1734166694c", "sighting_of_ref": "indicator--44f0e8d5-2496-4bfb-a58d-b603ea021ce2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f45379-bdcb-4b29-8c27-75cc48c57d57", "sighting_of_ref": "indicator--64550a64-9c18-49dc-8b73-ee87f16df388", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec39a3a-da2c-4490-95b5-a2bf9b8689bf", "sighting_of_ref": "indicator--7f97448b-a2cb-4b37-b606-4842ef5a4819", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2627e1c4-4fc2-4a47-aca1-294bc1e4cac3", "sighting_of_ref": "indicator--249de80e-42c8-4711-9f77-19cf587ce49f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb7fd68-dd56-45c3-8f74-e4f2d537e846", "sighting_of_ref": "indicator--26aa07df-ac0c-4dd9-a962-f738193d92f8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452fb537-7340-4009-bc70-a8234740d1a9", "sighting_of_ref": "indicator--a523fbb3-1e20-4942-92f4-d0bc9977bcdc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ae508a-5a74-42cd-ba9e-3f3f4e4d6eb2", "sighting_of_ref": "indicator--2718d1f3-b20d-4658-92cc-0129bc599f3b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564df28d-6408-4714-8f5d-f3ec32aad87c", "sighting_of_ref": "indicator--737407e5-09b7-4ba4-b950-65cf2391fe30", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d42723c-b8d3-4de4-9fba-ab9d81b43c0d", "sighting_of_ref": "indicator--a71207eb-d9bb-43a8-9da9-0e14562a2286", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206d6735-b24b-4e42-912f-62801aae10c9", "sighting_of_ref": "indicator--0d0f9698-fd34-499a-8779-1cf96edac12c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd76b9b1-4637-4deb-bb9a-eff83b346be4", "sighting_of_ref": "indicator--bd163e73-0eee-4ad1-b835-481345a9fb5c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659b3774-33c4-4c01-8710-ad6dc22469b3", "sighting_of_ref": "indicator--0d4e4225-b7cf-4cf4-a132-3837e7a44c05", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ac190c-40bc-4fc2-a3d4-60d24b6235d3", "sighting_of_ref": "indicator--88ee31aa-c6a9-4b39-9ba0-1ce803b0ad78", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef327eff-a336-4af4-8685-19b7c84444b9", "sighting_of_ref": "indicator--dbea4efd-0d69-4e20-8ad2-afad99bdb05b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32be7b8-3076-49f2-8024-3463d0b682bd", "sighting_of_ref": "indicator--aa8b35d6-0c00-48e8-b6e9-ba36f2e5ab84", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cba1f3b-8da9-4275-8ade-871983109c7c", "sighting_of_ref": "indicator--39bc4e36-3484-4e20-992a-be8456b44fa5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ed9fb6-66cc-41c4-9c72-d452f140ce28", "sighting_of_ref": "indicator--cbd57dba-169b-4fb3-a205-f95a03a9c5ae", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7791a9-2d96-4fe1-980c-131737fa81ab", "sighting_of_ref": "indicator--cbd57dba-169b-4fb3-a205-f95a03a9c5ae", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65504ef8-12ac-49e7-ae0c-f5c7e5cf1294", "sighting_of_ref": "indicator--cfc130bd-06d3-4a48-8fc4-61412accba87", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0cfc07-de4f-48c6-a80e-1404d68bd7d9", "sighting_of_ref": "indicator--910b3a79-cd30-4f17-b26b-cc602aa1a33e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db49b76-33ab-431f-89d3-7b47cf16ddaf", "sighting_of_ref": "indicator--82316f7c-3f06-47ff-9495-1331c682f59a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5a6c12-6059-41c5-8239-8f6cf859e672", "sighting_of_ref": "indicator--7d12cfec-86ac-4afe-b154-dafb736b3129", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8581bb0e-924e-4863-8dc2-64fb7086659b", "sighting_of_ref": "indicator--e093d7cf-64a1-4ae3-87f4-4860959c4543", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10a4b53-4eec-4fba-b5f4-aaed3386b6b3", "sighting_of_ref": "indicator--0ef372e4-5557-41ec-a16c-b902a98244ed", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40045b4d-338d-4a14-add5-e5ae2b042aa8", "sighting_of_ref": "indicator--d7462794-c8b7-46a1-be4b-75b392c01c81", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1421fd25-4ff1-416a-9220-565fcf001ae5", "sighting_of_ref": "indicator--4a82a04d-b016-433a-81f4-0c3983de8841", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3996a8a-683c-4360-9005-608d9a670fff", "sighting_of_ref": "indicator--4a82a04d-b016-433a-81f4-0c3983de8841", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55a07dc-e686-44a2-b6e2-66bbedefb509", "sighting_of_ref": "indicator--cfa82435-ed3b-4297-a7e3-e84fa50cafc9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c81d26-182f-48f3-a904-843b00defd52", "sighting_of_ref": "indicator--f405901e-155f-460c-9187-9f1003e22aed", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d797166f-7da2-4213-b559-0ca42f94ca6e", "sighting_of_ref": "indicator--4729bbd5-5dee-4474-975b-ff705455efa9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bcc588-c450-4b06-a31b-e57a8ea99957", "sighting_of_ref": "indicator--a452f499-848b-44bc-9ba9-c38ba4b69275", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce875c1d-0b9a-4ad7-81ad-7c9b1a310144", "sighting_of_ref": "indicator--6084620f-9235-48cc-9e78-68e5bca1c79e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6a5719-8acd-47bb-9e5a-393e31ff5a9f", "sighting_of_ref": "indicator--fc4ede8e-f583-48e7-b806-8102deb0b013", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8923dc-3281-495c-a501-2a8bba62f02d", "sighting_of_ref": "indicator--2dabd02c-e4ec-4e2a-9df6-ccc0fa5927f8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db83eaeb-5799-4e02-ba9c-8bc741cc5450", "sighting_of_ref": "indicator--0775d762-19a0-4f75-bb9a-fde0bbaaefa6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ec0c33-8f7f-40af-8139-027d3cf5251a", "sighting_of_ref": "indicator--c2c00c4c-7655-403c-a92a-3218a93a2a9a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3cf50f7-15a2-4b77-86e5-dfcad04ac5c4", "sighting_of_ref": "indicator--6cc43f7d-7bea-4ad5-9448-8302850cdc97", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab44f690-b061-448e-b12c-3c3205eeace6", "sighting_of_ref": "indicator--784517c4-1a97-4bc2-a4e7-6a7931293f1c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f449d978-666b-4683-93ff-4992eb50ce6d", "sighting_of_ref": "indicator--ebe2d4b1-fd42-4af6-abb7-c7bbeee7019b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee65cfbd-8f6a-4580-9d97-999c69a85b71", "sighting_of_ref": "indicator--ebe2d4b1-fd42-4af6-abb7-c7bbeee7019b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60128dd7-4d32-45dd-96c1-679371d27e81", "sighting_of_ref": "indicator--95e2ed11-d76d-4554-9537-61eae8d3dca1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc56864-9b9e-44e7-acdf-1f888b426c91", "sighting_of_ref": "indicator--f9ffb95a-73cb-45b3-96bb-29e80a4d56c6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2ed1c7-8134-4f16-9b11-5320dddfa986", "sighting_of_ref": "indicator--aad34b9e-5139-430a-80c5-616cb4106b8e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a5ec4b-3f00-4397-a73f-033abc18cbfb", "sighting_of_ref": "indicator--4b37c882-4606-4d85-87b2-90f496ca13c6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7c81a2-f0d5-48de-949d-0f25a7b0bdc7", "sighting_of_ref": "indicator--16a43829-666e-4195-afad-f4fb5374d01e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8debd914-90b2-42b5-9a7d-e0109cd9124e", "sighting_of_ref": "indicator--f4357def-7a7c-478c-8d4f-7c6be2ccd7c8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba9859d-d72a-43b9-b835-c79c8e1df16a", "sighting_of_ref": "indicator--50fa89f3-94d8-4711-a6de-4e4e99718902", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53d7edd-b3a5-4ec8-8792-e807a293c51a", "sighting_of_ref": "indicator--80512cd2-0c48-488e-be62-823ea129bfb4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f53a96-a6e8-4200-8ae8-5e5d9b747e50", "sighting_of_ref": "indicator--5ba51171-e02c-40f4-ae1d-cd1ada818f01", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca86269-05d2-400b-baee-eebae83e710b", "sighting_of_ref": "indicator--2c231ee3-70ee-42a0-9351-221e93157644", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a639bfa-816a-42da-85fc-0c78dc286ca7", "sighting_of_ref": "indicator--2c231ee3-70ee-42a0-9351-221e93157644", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90c44bc-4c86-4434-8e46-02a33a65f6f4", "sighting_of_ref": "indicator--cc426d82-2840-4399-a613-25f0225943cf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce485ae3-27ef-48dd-9570-d58062dcff4e", "sighting_of_ref": "indicator--fbe45e09-4eb9-4cc2-906c-1c1357118fc5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da94234-2231-465b-a91d-607465b4ff1c", "sighting_of_ref": "indicator--857ae3c2-4908-4770-a174-512de123b32e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ff1e8b-7cb9-446e-acb7-35a6c4a5513b", "sighting_of_ref": "indicator--f29a448a-9ef1-458c-9e3e-0ed590b83159", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a52375-2af7-4704-95e0-083a0f1b0c3d", "sighting_of_ref": "indicator--5ba792dd-7365-4490-afb4-a3be4ae97590", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9940f72e-17d0-4536-ae04-c88d28045c7e", "sighting_of_ref": "indicator--db36da43-2e68-4fea-867c-6dbe77049da7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd8636f-40ab-4a22-9366-183a242fd645", "sighting_of_ref": "indicator--e9fd659c-f685-4476-bc39-726f5fa0b9a8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a16915-124d-4300-b372-eb28faa4eb67", "sighting_of_ref": "indicator--f2e159f3-1f55-4eb9-96c5-c68c72ad19b0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42e44c4-7d93-434b-a905-5b4e1234057c", "sighting_of_ref": "indicator--b02e8282-43cc-42a2-875d-3cd6f92e5ce4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca71115-2718-4d72-b2ed-c4ab36ffb3a1", "sighting_of_ref": "indicator--c1ea01a0-a8d5-468c-a039-fe3a7797b7c9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f61597-245f-4b9a-96b4-f6cba9c66490", "sighting_of_ref": "indicator--ca2fd392-a5be-42b6-a26e-1e38c550924b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbd6d47-971d-4ea0-9380-a44a8030d97a", "sighting_of_ref": "indicator--b140e8ed-9d43-48de-9595-86cc21d44fbf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0494a0fb-2016-4b70-bd0b-b7630141d14b", "sighting_of_ref": "indicator--12110398-a4fa-4f62-8c45-119978f37a15", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64dfa63b-736b-4bc3-9486-73a699fc5c9b", "sighting_of_ref": "indicator--c05cec2c-05d1-466d-927e-7dde98219b22", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1513961-bb67-4c0e-986b-3df2977ab8cb", "sighting_of_ref": "indicator--2176f5df-61d8-40aa-8aa0-e579726b8eed", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8328baeb-e204-4616-ab86-28b5aaef89e8", "sighting_of_ref": "indicator--3d9f651f-6fa1-45b4-a31f-bfd35d244c7d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e6813f-71f0-4674-9660-a59f92a5d488", "sighting_of_ref": "indicator--d628d783-0d72-415c-97b4-039515a76c9e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ada1026-85ca-4318-9293-4f18e4f8f8c9", "sighting_of_ref": "indicator--163f3865-5df5-4869-aa40-f43397c087ac", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694a5b71-5fcf-4224-aa73-5bca7efa1cba", "sighting_of_ref": "indicator--b121c151-7ff0-42e5-a767-9cce7cb51f2c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1438e1fa-f376-43d3-b162-940b8bdb6195", "sighting_of_ref": "indicator--b121c151-7ff0-42e5-a767-9cce7cb51f2c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01042b47-e988-4819-b15d-3a8129d2f6a6", "sighting_of_ref": "indicator--9bea03bc-8d17-4591-a61e-4825a727150e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bd242a-1c71-4c3b-9b76-da083f36e970", "sighting_of_ref": "indicator--b8b7678f-2e13-49a6-841a-b801f90f513b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769e16db-781b-4399-aebe-5088ef198065", "sighting_of_ref": "indicator--a261d614-fe7d-497e-bd9a-080afdf7ff61", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72450e22-7b86-4057-a4f9-134709666510", "sighting_of_ref": "indicator--2748812d-8e4f-4a7a-aed3-8aabae94825f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe87182-2beb-45e0-bb07-5649783a90ee", "sighting_of_ref": "indicator--59f4ee47-ee1d-4465-9b53-b404324cc577", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6efe42-949e-41a9-bdbe-d6b35e794ebe", "sighting_of_ref": "indicator--16e592d4-622f-4d54-9f3e-749f5c9d3ffd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8341bb88-7170-4305-8732-831c240408be", "sighting_of_ref": "indicator--31817867-c235-46e3-98da-1101fbfbe078", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86680cc6-b6de-4612-97da-14e921a4c65a", "sighting_of_ref": "indicator--6e1b279b-9f98-463d-9a2a-b297d261d609", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29adc55f-f2d6-4db6-a938-46c26c7b8549", "sighting_of_ref": "indicator--a7eefdf6-6912-4c6b-a9e2-92fe13bcaca9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d0d90a-ba67-4cb9-a947-b881798924d3", "sighting_of_ref": "indicator--b85cbc84-4e53-4ad3-b3b9-2c381b983bb1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818ef256-273a-4097-b2ad-444ca5bea2e7", "sighting_of_ref": "indicator--f4c665f7-ea72-46a2-83e4-e9dbe27b6c73", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4108bc5a-759c-4af8-a93f-8963c07d2f3f", "sighting_of_ref": "indicator--c553ca98-dd0b-4137-a979-2088aa320e08", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c03c4d3-df1c-48f3-9f27-5ac197beecd3", "sighting_of_ref": "indicator--b1e7b25b-32b3-4d4c-b04c-7e0cc4e6b01a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f44eb76-f4c7-4045-a3cd-f3372e337c75", "sighting_of_ref": "indicator--1edca3da-433f-4c19-8e12-9845cb202511", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5cfc0ce-ac01-42d2-98df-fd4250a4489f", "sighting_of_ref": "indicator--7f27128c-37df-4fe8-8dc7-3f028172c68f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2df1bc0-43fd-4b8f-879f-b99c7c7b35cc", "sighting_of_ref": "indicator--5534e48c-3222-4322-9f50-78887983d629", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36adf9d-56a0-451b-8dd4-fbdaf179756a", "sighting_of_ref": "indicator--0ee524ef-7293-4598-8b35-1bce3bde0693", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68df55bd-9bfd-427c-b379-2d08abafa66f", "sighting_of_ref": "indicator--3aaa8ef2-ce7e-422f-8e8b-28979b1b7e9b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677b364f-c403-4ab0-8139-c8c6f1c17c59", "sighting_of_ref": "indicator--5319ab67-f448-48b7-a4f7-20431b1a269a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb4dec4-7f27-4e5e-904e-9fcb418debcc", "sighting_of_ref": "indicator--e675cc53-ea3a-40ef-bd8f-d0d8152f7f4f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dceec9c0-062f-4e46-85ce-4c3ee87c44f7", "sighting_of_ref": "indicator--9905bf2f-8bdf-47ae-acc7-ae66f7b59b17", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ce04c8-9f2e-4286-96ab-c2e37b284a85", "sighting_of_ref": "indicator--9905bf2f-8bdf-47ae-acc7-ae66f7b59b17", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af6f0a1-6333-4ee7-bc2f-dd4d74d99ba8", "sighting_of_ref": "indicator--09279b33-f37b-49e5-a7d5-3c9b6956a1f5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4757a7-1507-4cbc-bcdc-43a2f49ace42", "sighting_of_ref": "indicator--a55e5f98-b128-43a5-9b0f-d8ca5e500257", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46556190-b03b-4c4d-9ae3-6ae2e21f1646", "sighting_of_ref": "indicator--9aea1073-5c44-4972-944d-e9ccc114ca88", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66206498-3a02-4fed-8739-ce25c9926d59", "sighting_of_ref": "indicator--80ef0e67-322f-423d-8026-73f91aa0bf4a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984cbc90-7100-4204-bf9a-e57faee98643", "sighting_of_ref": "indicator--1de54e28-38ac-48cd-8a45-c5b91e600f99", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7996ac39-9df4-4877-83f7-0d8ab963d1df", "sighting_of_ref": "indicator--a2c391d9-19c3-4864-8b68-36fc99d5d0b0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c157eea-6d70-4f05-817e-09953df19bad", "sighting_of_ref": "indicator--0eba82e0-9711-4887-83bf-19b85f9b7626", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5d06f5-cd86-41a7-8fdb-9c6cec897897", "sighting_of_ref": "indicator--1c3c99b8-0940-4fd7-b270-dc1cbf24c343", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4772d94-56b9-4d24-8b31-05d28356e39c", "sighting_of_ref": "indicator--1e4b6b92-1627-4d93-8f7c-b86512d32e56", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b836cf4e-b6af-45b7-9b81-7d9a1e409491", "sighting_of_ref": "indicator--e78d2d6d-8005-4fd1-a4ae-fc3d8023a38d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25005b3f-0376-4f62-9d80-e56e28e5aff3", "sighting_of_ref": "indicator--cf84d1b7-46b5-4fc8-b8aa-e2744a19e0f4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8939c64a-15c2-4b1d-9795-bd81e94190a9", "sighting_of_ref": "indicator--3485fa11-5804-4ba3-8073-52768bb7deb5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6799941c-98c2-4b9a-8451-c1ab77e1a4f3", "sighting_of_ref": "indicator--e762479e-96e6-40c2-b5a2-0a47d4f64280", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe7f6df-372c-4980-855b-2698f674bcff", "sighting_of_ref": "indicator--32bc9477-16d0-4267-9233-d41373d214c0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5095446-0c54-4eca-9f66-7daa1c2b0d51", "sighting_of_ref": "indicator--bad22894-3bea-4fd0-a39a-43db4be4b5ca", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a785860f-e397-4299-83fe-d1eabbaa3563", "sighting_of_ref": "indicator--7b15b4ac-2bcd-4649-81bf-81eb008c7811", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dffa0611-9773-4f25-9b7e-de024975af8b", "sighting_of_ref": "indicator--3b72969a-fb74-4950-be36-dcb1291e3b5c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c4530a-9157-41e1-bd88-fbbd7abd7703", "sighting_of_ref": "indicator--cbc5a481-88be-4ef3-bad1-fc5444e40079", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373430b7-747c-4863-8f61-a9ab0e03f153", "sighting_of_ref": "indicator--bcf0d490-f460-4584-9f42-26296810f3ab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda70216-3c6b-4f19-8896-58663784a559", "sighting_of_ref": "indicator--16e16caa-9fe6-48d7-9ce8-a29ea4ee33e8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2bf5b0-1b49-435b-a13c-00a8487d9fd9", "sighting_of_ref": "indicator--fa5efcdb-7e21-4c02-9757-d8134bcfc180", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b624944a-e953-42a3-8e08-c7b992e5f38d", "sighting_of_ref": "indicator--a0c5501c-6efa-4d4a-aba0-2991ec62722a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ec8ba4-458a-4bce-b788-be661ea18a17", "sighting_of_ref": "indicator--ef372114-deda-45cb-9dba-fdf681028fce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0930703f-e6cf-43ee-b75a-77c61e180e80", "sighting_of_ref": "indicator--a8c0346c-ddee-40ad-9449-e2dc31ca0574", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a588f35-232b-4de5-8418-4c743958c947", "sighting_of_ref": "indicator--7a322b8c-338a-4f9d-84a6-aa41eca7aa01", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7851907c-f623-4a3c-82d8-d86748d6d9ae", "sighting_of_ref": "indicator--9ab4f01d-b3e5-4c17-a8de-2e871c15bfc6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9f019d-cef1-4660-bac6-ad8e6eae4052", "sighting_of_ref": "indicator--446f09dd-868a-4960-87a8-19c49a0bdf48", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e16307c-265b-42a9-b008-0acc97d50670", "sighting_of_ref": "indicator--18107b5d-9a23-484a-a6c6-4eca5dc04531", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506fc18e-4d39-4f75-8cd3-8a4211b30bf4", "sighting_of_ref": "indicator--51111cd5-43d6-428c-baa9-d92e402d03fe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e69bdaa-d45b-4474-8111-545e70b7531e", "sighting_of_ref": "indicator--a4852125-a2d9-475a-a479-107035e61562", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240a3102-9770-48c7-b60b-e25c18b0f9d4", "sighting_of_ref": "indicator--a4852125-a2d9-475a-a479-107035e61562", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa84dd39-2c1b-4780-bcac-07990ffd0ba5", "sighting_of_ref": "indicator--7aaa1bb6-85ee-4ee1-91bd-9c0fb05c0248", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51dedc3b-aa80-4174-b683-3265fd7a99a7", "sighting_of_ref": "indicator--256ef313-0bf8-42cd-a225-55814ff8f75f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d40d82c-8fff-4c31-a906-29fb1082abfc", "sighting_of_ref": "indicator--7975c3d6-d0f6-41aa-a6c6-9238bc483f2c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75e4802-cf47-4ed8-b458-a9bf349bb86b", "sighting_of_ref": "indicator--91addf64-a775-4815-b5e7-26240e275067", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3b478f-fe11-485a-a634-9017f7176c9c", "sighting_of_ref": "indicator--4054832f-4672-4301-b125-801d079d2ba6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0411fff5-45d1-47ca-8c04-bdd3508c44c4", "sighting_of_ref": "indicator--5b7fad35-8517-479b-978a-25100f857d84", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4118e2-3894-44dc-85ad-150d255fa285", "sighting_of_ref": "indicator--fee9e0b0-040c-4ec1-9b3c-b74a4b2084e8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c26580c-9bc9-4268-9d43-500dd20d9654", "sighting_of_ref": "indicator--65e027f5-7bc6-44a6-98e8-4e28a7ebf709", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c058e31-118a-4042-bf04-870362511ee8", "sighting_of_ref": "indicator--19279ebd-570a-4ed3-9e67-61b63cb49d32", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6949cf13-29d2-430c-941a-8bf98386c2ea", "sighting_of_ref": "indicator--54bc5fa5-6d2b-49bb-a37a-aa7c0aeff9f6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54746ba4-f3e3-4373-bb0f-a5d167c2bcc9", "sighting_of_ref": "indicator--30a45bb0-955e-4215-8b06-9f05f41de34d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9e3990-370e-4ead-bb89-bbeaf9a6e9f6", "sighting_of_ref": "indicator--27fa401e-d55c-424e-8150-8cf30597c8df", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c72108-9eb3-45b9-9161-52f199de208c", "sighting_of_ref": "indicator--77e183e2-6546-4545-8967-14e30d1e6094", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ef2507-95fe-4c28-962a-6e4401734c82", "sighting_of_ref": "indicator--77e183e2-6546-4545-8967-14e30d1e6094", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8ce74c-cc39-4090-85fd-a7d3ea6363a4", "sighting_of_ref": "indicator--e9b1ccb2-2a9c-435b-a5eb-ef981d24662c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4341fe-63ed-4db7-882b-8efd28d06f61", "sighting_of_ref": "indicator--64c00ac3-c11c-4438-8cb9-a5fa6d426df3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffe3c73-a95b-4d53-bff9-3566464aee9c", "sighting_of_ref": "indicator--9efa92b4-0db0-4bf5-a8a9-cd70f0c2e1c3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e16590-8371-4008-ab81-fbe6263aeba2", "sighting_of_ref": "indicator--9efa92b4-0db0-4bf5-a8a9-cd70f0c2e1c3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead59029-411f-4aba-98ee-7c8b41e8b2c9", "sighting_of_ref": "indicator--34de73ed-00ff-430c-ace7-decb92f5a09c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1087a840-38d1-4f52-9953-d2d6aaaaf777", "sighting_of_ref": "indicator--dbe120ec-0711-4bec-a83c-152342996de2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b9c337-a5ba-4e24-a0c7-7c53deff39e5", "sighting_of_ref": "indicator--dbe120ec-0711-4bec-a83c-152342996de2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c100b8-e3f9-4ae8-9c4c-ea64a40d491f", "sighting_of_ref": "indicator--91a17735-48d2-4f47-9e05-ede7f46689ac", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6972788f-a931-4062-86f6-41c7e1ceb622", "sighting_of_ref": "indicator--4d3f8ac6-fab1-423f-bf5d-59ccf4be3ca6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47b87ef-1de5-4a40-bbe9-100b0525ea16", "sighting_of_ref": "indicator--2cd99501-085a-4de7-8d78-8ca4995db13e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005bc244-1bff-4c23-a870-0d7863b15e36", "sighting_of_ref": "indicator--d5843087-a072-4112-8be1-a360071b6c71", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ad7098-6fd4-4124-a676-0eaa31b6aa97", "sighting_of_ref": "indicator--51503c15-2c44-4652-b1d8-f0af0e0c4233", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fdb37f8-d917-4c24-932b-471d4608dbd0", "sighting_of_ref": "indicator--51503c15-2c44-4652-b1d8-f0af0e0c4233", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2eb08e-8d0e-43f5-b647-1d26f4070530", "sighting_of_ref": "indicator--63e800f1-ca7f-4d61-bc3f-898fbed7ca41", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db304025-2941-49f6-a7e0-de19f59a79c6", "sighting_of_ref": "indicator--a04b0c6a-60e1-424d-b8b4-ef5d91c6299a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3886a52-cc65-4454-91a0-adb1cbb8bb4a", "sighting_of_ref": "indicator--f041aea5-a7d5-44ff-b8cc-30b4249ebc37", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1ca66a-9467-4f59-8d16-946fae4b06d9", "sighting_of_ref": "indicator--807dbb05-de0d-4ff4-81f2-a1325f39854a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a275a318-039c-4bdb-b22d-db34fc5ae918", "sighting_of_ref": "indicator--56052816-3bf4-4526-b104-37cf30a89f2d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31747b1a-83b3-4a86-93fd-1e4b64251a0e", "sighting_of_ref": "indicator--dd67c7fd-ca35-40e1-a650-e9794444bf3f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fd2f78-fd4c-4c9d-ab19-e2ea8fed0ebd", "sighting_of_ref": "indicator--d00a7a62-fbc1-4823-82e6-85efa572f586", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f7d5b6-8f99-405b-993e-cc9199e2922a", "sighting_of_ref": "indicator--d00a7a62-fbc1-4823-82e6-85efa572f586", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e729c578-bd16-4078-9fc5-b8ccd99e7a2d", "sighting_of_ref": "indicator--668d3c71-4b12-439c-a3b5-ec7585e3c4c1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bf6848-da7a-466a-8273-6080571cf8e9", "sighting_of_ref": "indicator--50427401-3776-4305-bd40-20d021f1dbe5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6918d1d3-9817-4073-9ce2-806aa99e240b", "sighting_of_ref": "indicator--24f80efe-b81c-4f15-b1cf-8ef5c92518c2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00aa994e-fc56-424a-8ca0-c54846c45824", "sighting_of_ref": "indicator--92fcbe70-2b77-434f-8326-ca77d36f49b4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9915f6-6cf5-4679-8205-5d26a639fc1d", "sighting_of_ref": "indicator--66b7f67f-3e54-486f-8183-2a357b9ef4b0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd8e74b-fb33-4af4-b263-365d74d50348", "sighting_of_ref": "indicator--922139d4-1483-4c5b-8ddc-c6d81cbb151b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37ef454-1a6d-4792-bf3f-e7c427e0957a", "sighting_of_ref": "indicator--8d408be0-4171-4d0b-ae91-18b4bf99b131", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7382a8e-e54c-4a91-8eb7-7d076fdc0a7d", "sighting_of_ref": "indicator--5a76f4b0-8f13-4c39-a2fb-c348660c780c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b861912-8bc5-4ae2-9e98-fd3b629ea887", "sighting_of_ref": "indicator--30cf5595-bccc-4754-a50b-7891f0499721", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153bb47d-53b7-4c99-bba0-1b3521b4f48a", "sighting_of_ref": "indicator--2efb05ed-ffb5-4e07-b626-df255897c65e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb963ae-08e2-4f88-8ac8-51c448a9c675", "sighting_of_ref": "indicator--053aa65a-90cf-40f1-a681-d5f794487c00", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f743ef5d-cfc2-47ce-b89f-fda8ee02786a", "sighting_of_ref": "indicator--575709a3-8e52-4025-8d35-441181c90f4f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87e2125-4af6-4985-9560-5a8cc9b2b932", "sighting_of_ref": "indicator--dd8aad8b-4091-4c6a-9393-45ef42e55300", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5775f9e5-3ac6-40d7-b5de-1060b5460526", "sighting_of_ref": "indicator--51c7e24b-2f7e-4006-aa5c-6b9de50e7342", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbffe82-f65d-48ac-bf98-6e1d6689b086", "sighting_of_ref": "indicator--7f206563-25da-4f8f-b4c5-86048e84dab5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1c9682-a1a2-4e32-92ae-f790e9c60624", "sighting_of_ref": "indicator--7f206563-25da-4f8f-b4c5-86048e84dab5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c4f5b6-8f93-4549-ba56-d35b159c9385", "sighting_of_ref": "indicator--b5309c6f-f480-42bc-a5f8-4f38eec76a32", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f367bd2-cb1b-4df7-8525-213a3d21852e", "sighting_of_ref": "indicator--06aa0fa0-5458-4190-bee6-7db402ea6e0f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea851e8-b052-48fc-ad61-759e42e6f31b", "sighting_of_ref": "indicator--c3565124-bddc-4baf-bb00-9473d667dc8d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d42af91-f67e-49bf-971a-36cdffba5f66", "sighting_of_ref": "indicator--280620f6-f86f-4ba8-9312-fa34e49adde5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100d55eb-76ea-4e79-8891-2ff8f1fbb429", "sighting_of_ref": "indicator--d6170fb9-e6b8-434c-8819-49d3da5e1822", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410aea1e-3cfa-46b4-89f9-dada05c0c2b1", "sighting_of_ref": "indicator--92ffa7e0-ad02-4817-85af-ff52927992f5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a385e94-5614-4bbb-9a08-2914cb57cef1", "sighting_of_ref": "indicator--99646e6c-998c-42b8-ba41-793434d600b2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc092c9-61e0-40b2-b4e9-ae66f3dd5e58", "sighting_of_ref": "indicator--b0a77808-a3b2-4cc4-89f0-e55d655aa9ed", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b9a5b1-f4bd-4b13-805a-3d2a8234df24", "sighting_of_ref": "indicator--69f738b1-2d89-492b-8611-3d1d60361c7b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b581a751-00af-44f2-92ad-c620a56a5a91", "sighting_of_ref": "indicator--46725a5d-199a-481f-b505-b2fd215e2ff5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda0fa0b-c4c4-4098-90f8-f168b2bbcd97", "sighting_of_ref": "indicator--46725a5d-199a-481f-b505-b2fd215e2ff5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03925d20-8e5c-46a9-b9a9-2dc0daef92a2", "sighting_of_ref": "indicator--5a3def1b-9a28-40bb-b468-5269a0822727", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690cd896-68f0-4045-9cda-8b5ee5a4f14c", "sighting_of_ref": "indicator--0d0be8b0-97aa-4e13-9ad2-3b0ddcf8233b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a45989c-c3bf-48aa-b7bb-2f679e5a7809", "sighting_of_ref": "indicator--34e96b43-8fdb-4c82-9226-424a47dce439", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff68fc7-8e93-4140-bd40-aea8ae2c7bc8", "sighting_of_ref": "indicator--dd806c8a-d5c1-432d-8114-7b3e307ca79b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7541df9e-15e3-4857-bd02-6754250bc5ab", "sighting_of_ref": "indicator--3c3311e1-9a69-4690-a5ff-f5931ec0c778", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dee7d30-6e52-499d-89a5-de41f240cffe", "sighting_of_ref": "indicator--258ec623-dae9-448e-b1fe-01e0b895308c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddedd40-937b-4d26-a34d-510576f35a78", "sighting_of_ref": "indicator--a1cd49e3-b7c4-455c-899e-ae88e5db1add", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcd8be2-8c98-48fa-9179-362bb3734ae1", "sighting_of_ref": "indicator--70d895e2-b702-4258-b820-be4c2154c408", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7752e4-8bf9-4726-b219-63db61be40b1", "sighting_of_ref": "indicator--2ac46074-39d9-4802-b3b1-158e39f3050d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258f4f9a-d8c1-4d1c-b70b-117a25255d2a", "sighting_of_ref": "indicator--4ba7cf25-f1cb-4b87-b121-e2be9561e547", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a510d2-ebb7-403e-9b15-d09a22e49f6d", "sighting_of_ref": "indicator--0334b479-20a7-46e3-80ef-07cc3ba65e59", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e58990-7e2f-4ce7-9e31-2e5c4f9adbe0", "sighting_of_ref": "indicator--0334b479-20a7-46e3-80ef-07cc3ba65e59", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113c4ae5-182a-40b3-99d2-bc09d31196c3", "sighting_of_ref": "indicator--b72639ac-7ee6-419f-9aae-dc479af74049", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c728e94e-1335-4d06-9159-393f6dd99bd8", "sighting_of_ref": "indicator--eef4d858-cdc2-495b-9851-6a03e692f02f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22076489-135f-41bf-b458-8ab18a91cf6c", "sighting_of_ref": "indicator--7b500ff3-7de5-43c2-80b6-2e2664a44f55", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f416d942-84da-43a7-8186-9ab35f8fe63a", "sighting_of_ref": "indicator--dbb7961a-32b6-4ad3-9d27-588fa03520b6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e32e1b8-6abd-44ab-9a29-c9b8b17c20e3", "sighting_of_ref": "indicator--493fd9c8-9841-4e43-9820-af5fdc5c96a9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f14c1e-d3fd-4b6a-929d-b4299334042d", "sighting_of_ref": "indicator--7d3b4f69-a769-4ef8-a67a-1623e9977d51", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbfe448-63f1-4d64-9a71-0bd7264f0d10", "sighting_of_ref": "indicator--c2a16f0b-0765-47ec-b87d-7427f100d6fc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba6ee56-1683-433e-ad85-037ee8067791", "sighting_of_ref": "indicator--f4111d0c-e0b3-44b8-9bee-4291bce99736", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a05c521-d204-4404-8bca-39ff67bcab75", "sighting_of_ref": "indicator--fe32d066-cfa4-491f-aba4-20bc218fc2cf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6dc42ab-7fcf-4048-b3d5-d9dfbc351203", "sighting_of_ref": "indicator--5a11fca5-1dad-4e9d-b631-72d677aa6a33", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5a7c0e-fc51-49c3-9469-71f943e60ead", "sighting_of_ref": "indicator--645af4ad-603a-4707-a210-7afcb9cd3830", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681e97c9-4a9b-485b-908e-bde88506bd37", "sighting_of_ref": "indicator--34a53812-cb5c-4595-9646-8d8721de40eb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02edf7f7-a407-4d3f-b864-a5de3e3f11f9", "sighting_of_ref": "indicator--c958083e-d8f8-43bd-9bd1-888e79b3eb5f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ead1998-54c6-4624-909d-117b64b4bab6", "sighting_of_ref": "indicator--90491846-9e8d-4c79-af91-90bd68077104", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee2f667-08d1-42de-9bf7-0cecaf6bf149", "sighting_of_ref": "indicator--1539ba39-a973-4128-8b40-56e66eeff04f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e784f6f-0fe1-47d8-b0ef-493a4051cbaf", "sighting_of_ref": "indicator--76700be6-e154-446a-96f5-d41dc3ff1c47", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325e41d1-4636-4c8a-9806-4fbd4a0a423b", "sighting_of_ref": "indicator--496f25e3-0c7b-4adf-9d32-9916895ef197", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca486d0-75e7-4f34-939e-d86595d22b1c", "sighting_of_ref": "indicator--8cfd3ac2-4c02-4e38-be20-2866746ea266", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5810b494-a643-4551-a68c-713d469e98e3", "sighting_of_ref": "indicator--8cfd3ac2-4c02-4e38-be20-2866746ea266", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbef9127-304b-403f-ac85-0f385ba16d1c", "sighting_of_ref": "indicator--85b4244f-ace6-42aa-bf2a-405f75d54014", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1eb781f-263f-4233-8f56-d9f9a670aba8", "sighting_of_ref": "indicator--22e656f5-b92c-43d8-8f8e-ff2306176024", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed454ba-7df7-4b5b-934c-fa844b95fbe7", "sighting_of_ref": "indicator--0262f929-99e7-4e14-b119-2390d7e03f61", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3424bb81-4ec6-449c-8cdb-a3733d36144a", "sighting_of_ref": "indicator--30acc7bd-ab67-4d13-84b2-164436b8ec67", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b119c55-f83e-4b07-b8b9-2b33367744b7", "sighting_of_ref": "indicator--fd71407b-a712-4962-a8b5-ca5aa700a12c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83297694-445e-41af-8afe-9d320d1513e2", "sighting_of_ref": "indicator--fd71407b-a712-4962-a8b5-ca5aa700a12c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d18f3b9-2cbd-4f67-98ba-92ca7a4ddcdf", "sighting_of_ref": "indicator--52103136-5a01-4bcf-b709-fe4772048e87", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddefd71-e072-47e9-add6-95e643cb30e3", "sighting_of_ref": "indicator--4e29091b-7ba3-42d7-adbc-0ed1c7f68fab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d75af2d-21cf-4a2a-a270-77f34e91c6d1", "sighting_of_ref": "indicator--0d773c0f-51f6-4dd6-9cea-5a71ff57ce76", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60221716-2705-4603-856e-d6e1026a88a8", "sighting_of_ref": "indicator--0d773c0f-51f6-4dd6-9cea-5a71ff57ce76", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c530ede1-0d4e-4ce8-be0a-52b6a266548c", "sighting_of_ref": "indicator--e09389c3-d54a-42ab-b33c-9166d3a77f88", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a72150-b105-405b-9fa8-8daf7288cbf9", "sighting_of_ref": "indicator--c6feb2b6-eb41-4b22-9f20-40af66ad6281", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e80da5-ab04-41de-867d-53bb803a57f4", "sighting_of_ref": "indicator--953468ac-1bec-43ed-bc97-76c3d8f3ba5c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3a7c3a-622f-4b0b-9bc5-02a7d4105467", "sighting_of_ref": "indicator--953468ac-1bec-43ed-bc97-76c3d8f3ba5c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d75352-6254-40bb-9f98-683cfd2510b4", "sighting_of_ref": "indicator--20aa0f89-a51b-43d9-bdfa-810b9db232c5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015b7fae-bb97-44d0-82a9-793fa5c611e7", "sighting_of_ref": "indicator--a6b85679-03ee-4083-8f95-560c0b53e8e9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36050f0-b153-410f-91a5-ec46301cb770", "sighting_of_ref": "indicator--debaf878-4dd5-47bf-aea6-4c90557f201c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e7cd84-8e3b-42f2-b3a9-cf2e8b015a20", "sighting_of_ref": "indicator--efa012ff-2629-4ac9-b8a4-6ba3af3f877c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca64b872-3ee8-4c48-9d28-d7e3b45f601c", "sighting_of_ref": "indicator--011fb3a3-52ef-45c5-8283-254eaa9274f5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0370d3-ea3a-48ab-b19a-f3f171409d28", "sighting_of_ref": "indicator--69b80167-0325-4767-b530-efe71a02683b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38402833-ffb6-453e-b343-a1fbbb4798ec", "sighting_of_ref": "indicator--8c44c732-18b9-4195-8efb-4a68c100d3b5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324b6317-b46c-4a18-b013-21a12ffad135", "sighting_of_ref": "indicator--5a14ea1c-5fb6-44a3-b042-09a87fa00132", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6efe8013-ba38-4bf6-8e9b-bdbef8151f43", "sighting_of_ref": "indicator--205e1904-14f0-444d-8276-3119b1a91edb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6661fc54-d48e-4dee-abf6-274638bbbab2", "sighting_of_ref": "indicator--205e1904-14f0-444d-8276-3119b1a91edb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5889f651-3f92-48bb-ae4e-fc10d89e568e", "sighting_of_ref": "indicator--64f3edba-6ca0-4441-8d6c-aaa0d9f45a74", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4fcf37-7308-42ff-8fc9-45b2867100e9", "sighting_of_ref": "indicator--1aa55739-7554-462c-9767-f0ab23be284a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c929280-bde7-4204-b741-ac20d5290c79", "sighting_of_ref": "indicator--ba1dad0d-a79f-428a-b557-56ea77d994db", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cec8d7-ed33-443f-afa2-a3b3d7b76276", "sighting_of_ref": "indicator--e1e4d355-7cb6-4256-a1dc-9331174e3acf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3532ac2e-a6c0-4f6f-8605-43869bd0bdc6", "sighting_of_ref": "indicator--5aa9320c-5973-467c-8726-768a0dbcf2ae", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5046a4d0-01da-43b7-be20-2787079340b7", "sighting_of_ref": "indicator--1e09ea01-4dfd-4dd0-8384-cb24933e654c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0bf5a3-a182-4fe9-8f0f-59b5d0744ecd", "sighting_of_ref": "indicator--2353b8ce-b71f-49ed-8a90-de506dd520e6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a810aff0-db8d-4d7e-aaef-4e5b3a5695d5", "sighting_of_ref": "indicator--1aa373aa-6493-495e-a1b7-505bf4183254", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19438266-0e21-49a8-a194-7758cf59faab", "sighting_of_ref": "indicator--9fa83246-15d7-4591-af89-e8c371309bd0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d709f900-3125-43d7-ad3c-0720b6f8f4bf", "sighting_of_ref": "indicator--ac05a899-af0e-4358-ac5a-a191f4bf7ce1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b073719a-a27c-49dd-be91-96ef936f8b7d", "sighting_of_ref": "indicator--b167aeb4-efbe-40de-bc66-13efaf640db4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945c6439-08e7-4d98-898a-813c51adae25", "sighting_of_ref": "indicator--b1a28d29-fe26-42cb-81c5-07b77d56a7f0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3afa319-2c21-4bdd-8a6f-7c7923615f20", "sighting_of_ref": "indicator--b1a28d29-fe26-42cb-81c5-07b77d56a7f0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9838f2c-b430-4fb2-83a0-c8e9e6bddf9d", "sighting_of_ref": "indicator--91ac400f-aa06-497b-8d0c-57126f72414c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf96ffce-94f6-4348-b5f1-71ebdae402e3", "sighting_of_ref": "indicator--e59bea61-5c05-4302-8a36-b48d5fee4724", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc36aff-1243-4701-bdfe-53a805b524f6", "sighting_of_ref": "indicator--42ecb9af-f08d-4835-99d8-ca66d30890d7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c43934-5150-4579-8d20-321371f754aa", "sighting_of_ref": "indicator--548f0bf1-5222-4fd0-b9bb-26b8bacea1c7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7026098-0d27-4dd2-aa9e-d0dfc6e5e12a", "sighting_of_ref": "indicator--a70304c5-9e6c-4a4f-a2d9-45b3a2ea5304", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30798c8-7042-4a90-a854-6da767e29d8d", "sighting_of_ref": "indicator--320b9175-88aa-4592-9137-9e55e3a679ea", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdd7575-ebfb-4ced-a1f9-c82d43ab8334", "sighting_of_ref": "indicator--b36ea5bb-0152-4041-a8fc-3e2fbb4f9fb7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a69ec0-16ff-441a-a4da-56021c284f32", "sighting_of_ref": "indicator--bc912f72-f4d4-43ff-a442-2dd110d07913", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252fb960-38d6-40ce-bc53-9f2fcc607a71", "sighting_of_ref": "indicator--b8b0b418-5642-4df4-bbe5-6a4b29c5664a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8e680f-6066-430a-be23-bff4d2f4f1d0", "sighting_of_ref": "indicator--d0886d96-6d24-4e5f-9918-9c8abc16dc73", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233f7082-9702-46f9-b213-f7dac8f2069f", "sighting_of_ref": "indicator--eca6c3a3-dd4b-4de9-84ee-ca7b59d6ae8f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ed93e3-7cf0-40a7-994c-0ad90e37aef5", "sighting_of_ref": "indicator--4d3086f6-4fad-4f9c-ac86-af6c8a54485a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9f6949-edd8-4f9c-b913-61f2f91210eb", "sighting_of_ref": "indicator--881a47c7-4f61-4123-99e0-1ffd7b621627", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891c5fd5-00dc-4170-a62a-ec7082b3e604", "sighting_of_ref": "indicator--48215618-838b-4a6c-a3d0-309d04e16eec", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f3707b-a0bf-4738-b927-d910148cdfb2", "sighting_of_ref": "indicator--c3304bb8-fb3b-4b98-9f1a-6ac31812f38a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b7f0ea-0173-468a-915a-455cfaeb57c3", "sighting_of_ref": "indicator--0ccd2aaf-ccdd-49f9-9df9-fb1e2cfc4e9d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c164a3-52f7-4ab7-b591-1fd52a625365", "sighting_of_ref": "indicator--5497d7ea-e727-4e12-a905-7145ec909d6c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2c69ad-e568-41d2-943b-7c44cc458d06", "sighting_of_ref": "indicator--d4fceef3-c015-491b-b5f7-2743e9895460", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4119dcb6-236c-418e-91c7-e832765d1fe9", "sighting_of_ref": "indicator--1e9053d9-a566-41d7-9f2a-2136db39c2ed", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e03f1d-4e40-4768-8360-c944d9e92e8b", "sighting_of_ref": "indicator--4435d74e-95cf-495b-a461-5d30072d4d6c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e3f85c-a086-4cb7-9b48-d5115ad1b708", "sighting_of_ref": "indicator--22c30413-99ee-41d2-a19d-eed02936d336", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86cac47a-04a2-4bdd-99f9-5055b47cdbbd", "sighting_of_ref": "indicator--70205420-095d-424a-9887-56e2c38a6e38", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aeab277-36c1-4289-a2f7-d5ab94ec5ada", "sighting_of_ref": "indicator--4f1666e9-04e7-4d37-ad48-cfac521afc94", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0c1412-0933-4729-88d5-cd04c357e83e", "sighting_of_ref": "indicator--0d52460a-a232-4910-a1c1-d944b75da160", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae7c9b5-cd20-4d52-a3ac-24679d01dad7", "sighting_of_ref": "indicator--500422d7-29d7-475f-bd32-b0e1bcc747c6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c46e8a6-4914-41be-bc8c-00d64dc9a078", "sighting_of_ref": "indicator--500422d7-29d7-475f-bd32-b0e1bcc747c6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ae65ab-25dd-412a-90d9-b62c6fa6e1ec", "sighting_of_ref": "indicator--e112daed-333f-4df1-9f02-042c84bcf031", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0399689-118c-47c3-9a61-9fe5a17bd2a4", "sighting_of_ref": "indicator--e112daed-333f-4df1-9f02-042c84bcf031", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a388c44-9abf-4006-b457-92fb8073c4ea", "sighting_of_ref": "indicator--db779e8d-474d-47cf-9f26-22d8716b3a2c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d46848f-d445-4edc-8895-954054c93dca", "sighting_of_ref": "indicator--6cd5e390-ba14-487d-b4bc-8e3fd2a6c1c3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f401c7-0370-4ea7-b63f-7dc9c504cd2f", "sighting_of_ref": "indicator--a53fb263-0662-4405-94f1-971cd94247c0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f27662-17ba-4a3f-a465-87841d518898", "sighting_of_ref": "indicator--1d9929c4-1469-4c30-851e-05902f6e27bd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc60aa5-1d0b-4653-8d84-2482853137b6", "sighting_of_ref": "indicator--fd23063c-6cf3-426b-89cd-a9885348b52d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4211cc5-8cb6-468c-9e3e-85723dace4cc", "sighting_of_ref": "indicator--fd23063c-6cf3-426b-89cd-a9885348b52d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff04760b-ceaf-4b4c-bdc6-4007e6f2949b", "sighting_of_ref": "indicator--f6db0951-7d2f-4a84-91c1-9f7ef81daa4e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2b0cfd-e209-49e3-92d3-28a246f19a0f", "sighting_of_ref": "indicator--eef15486-2433-46ea-9175-3bed793b9e79", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181600aa-a122-4d8c-baa5-0c5a369c9d1d", "sighting_of_ref": "indicator--eb4c8c77-eca3-4d7c-985c-ecc1be7ebdf5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23536ab3-169c-4dcc-94de-4b860b4addc2", "sighting_of_ref": "indicator--464b0ba8-0332-4b53-86fc-abd93041f2b6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdcc687-8932-4f3f-af19-1475ac64750b", "sighting_of_ref": "indicator--d9fe8980-4816-40d9-bc61-ee71171d0dd5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e864a467-ae3b-4543-8c78-60c35f55afb3", "sighting_of_ref": "indicator--6af428df-59ce-4984-818c-dbcd617c6bef", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97644ad4-8701-4615-ab60-703c9291e6ed", "sighting_of_ref": "indicator--73fa8270-24fd-47c8-83ac-324ccd2ebd47", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297bbd7d-f1ee-4fca-abf4-b79a77ef23b0", "sighting_of_ref": "indicator--4d4ef3e7-7a2a-465e-8c5d-4c73dddd1bc2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085bfaa0-c1ef-40cd-ae39-a4d8e1512fa6", "sighting_of_ref": "indicator--4d4ef3e7-7a2a-465e-8c5d-4c73dddd1bc2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fc3746-ab38-4f62-9dcf-6102c724ffdc", "sighting_of_ref": "indicator--7db9692f-5a7d-4816-94ef-7be95f3c3683", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67354fc3-8504-40cc-a1db-8d6f49c8cb82", "sighting_of_ref": "indicator--35923011-91c1-4b97-8f93-8a3202b232a5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f676928-f9cc-488c-89b2-1c051dedccd1", "sighting_of_ref": "indicator--14dfb66a-4f36-43e7-ad09-bfbed670f307", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d68dc1b-5c55-418c-93c9-42deb53b6385", "sighting_of_ref": "indicator--f6893d08-437a-4185-bf66-3b6422d67d88", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2a366b-51e4-4db3-9962-533a19a15489", "sighting_of_ref": "indicator--49e4abb4-f94d-4b8c-af34-2ef913d410e9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b090d114-1436-49ea-a27e-635c3d9e2b3b", "sighting_of_ref": "indicator--96e50a2c-6479-4437-8d18-53e398e416b3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b53175a-c15f-4c50-bf48-5a816e9f70e5", "sighting_of_ref": "indicator--ad76c6bc-2d9f-4bcc-be65-533215d72310", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ce15ae-e274-47f1-a412-1b2a47f703ce", "sighting_of_ref": "indicator--ad76c6bc-2d9f-4bcc-be65-533215d72310", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8842e9dc-1108-4682-b7d3-dc9ca508e36e", "sighting_of_ref": "indicator--a8192ac8-8b04-4e2e-bd67-027386ce225e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14499f7-30c9-40b1-aded-e30f2d50dc48", "sighting_of_ref": "indicator--1ca6d7d8-8dcf-4179-8af2-2782c4da7932", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9257640-c61e-4a7c-95eb-76607bb2f8d0", "sighting_of_ref": "indicator--b799ce22-4de0-46e4-a576-6f679099626f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7fd258-6f7d-4269-8e06-1147be3a4383", "sighting_of_ref": "indicator--3b7df735-70a7-4554-81d1-dd74e801c9fc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9781b677-b64d-47e1-bd2b-7eae6e97ce78", "sighting_of_ref": "indicator--b611333f-ecc6-4f93-a78d-33c2da820b6a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b47d276-e373-4650-8598-2d1d79c96a52", "sighting_of_ref": "indicator--f284976f-fbd9-4a99-8b0c-ce85d4c4ee05", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c84cfc5-e89f-43f2-be24-ea9569a1ecdc", "sighting_of_ref": "indicator--84aff2dd-b146-4dbb-9576-42ba3ac1124e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed38abd-01e6-4668-a5bb-d5850826c2b3", "sighting_of_ref": "indicator--84aff2dd-b146-4dbb-9576-42ba3ac1124e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6f8f80-2a06-4966-88fc-1f2842795cec", "sighting_of_ref": "indicator--84aff2dd-b146-4dbb-9576-42ba3ac1124e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5479fa1c-f537-4654-bccc-f2cc24b61c4a", "sighting_of_ref": "indicator--3ce03ffa-7c18-4d9e-ab8b-392bc8c55fed", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535095a9-24f0-4825-ba64-553cccea953f", "sighting_of_ref": "indicator--9f28c790-b359-46bf-818b-a472367aa048", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1298583f-c474-44f9-80f5-e38de8e1cbe5", "sighting_of_ref": "indicator--14d8ee46-7c3c-4dfd-8b9f-fb81ca374590", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f485d2c4-eb50-436e-aef6-afec49ce9a3b", "sighting_of_ref": "indicator--0aec2ab3-85ec-4b0e-9ce1-020587e43dec", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a694013-4518-433f-a99f-7d56fdf6b0b6", "sighting_of_ref": "indicator--9db3f59f-61b7-474e-9664-d04b321e7f0f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb3eda1-d463-44c6-a099-64eea89e0468", "sighting_of_ref": "indicator--3c1734e3-9121-4a46-8c25-f8c14571df1f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378247e1-a962-4eb7-a9eb-25659d070dda", "sighting_of_ref": "indicator--f41ec1e9-ded0-42ed-988d-2a2969aea854", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163de201-06d2-44c6-827f-76149f72ad88", "sighting_of_ref": "indicator--fa933438-6be9-461d-8850-c5ad4cd26338", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd837f0-a836-4bf6-b86e-39b7d8a541fd", "sighting_of_ref": "indicator--a2ab4ed2-944b-47b2-a85e-d915940fd82a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2f36f2-89b5-4cbc-9701-fbeb462fef69", "sighting_of_ref": "indicator--65ff81d8-49ef-436e-8796-fda839f0fa54", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60926ef-7978-417d-b6ed-a74c30fc3580", "sighting_of_ref": "indicator--c3db06c0-27c7-4e02-ad8a-2bc8bf89cbaa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b47aa70-3142-46ae-a08b-668288684c74", "sighting_of_ref": "indicator--c3db06c0-27c7-4e02-ad8a-2bc8bf89cbaa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc0e00f-e994-405a-b626-276610a1fbcf", "sighting_of_ref": "indicator--48de1dc6-807c-4f6b-aa24-862e7bcbb8b8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cfb42f-d70d-47a3-a92f-c40f831c335b", "sighting_of_ref": "indicator--f35625f9-0efd-46d1-94eb-2f65d74a60b5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea05d1c-197b-4f71-8e79-ed7ce500b41d", "sighting_of_ref": "indicator--4e7628e2-3776-498e-acb0-87329910f5ed", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cb424b-146a-4160-9526-196a6a2ce8aa", "sighting_of_ref": "indicator--6a64d89b-0be5-4610-963e-6bb940595efb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593ede59-735a-4357-8b2f-1b54bf4170e3", "sighting_of_ref": "indicator--16c9934f-b325-4e72-98f9-7ba19ae7a575", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edac82a6-7ad1-4ae1-b58f-d91bb46840e5", "sighting_of_ref": "indicator--3b6c7d3f-ccc3-4e0b-a4c1-f620e9ad1e82", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9e814b-af86-44dd-81a2-16cd4c3af4e4", "sighting_of_ref": "indicator--274756cb-a00c-4632-9f16-44bbe263b2f4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b9d5fb-a8bb-427f-b1eb-25a1a4b9e935", "sighting_of_ref": "indicator--c2c4237b-7d0f-4156-a9c5-c490a5ca38ab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa1d013-5ea8-4eb9-a9fb-0a43a481a811", "sighting_of_ref": "indicator--7bb683d4-6dc4-4e52-8572-baaeb87fd10b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11e0a00-2df7-4a39-904c-548b9f97c7d1", "sighting_of_ref": "indicator--25e49190-45a0-46a9-8090-f2c832c44a0e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5292f618-9d88-4ee6-bfcf-a73780250ff0", "sighting_of_ref": "indicator--4480015d-0887-4e16-963a-de2a932d5756", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f6aaae-7276-4f8b-b6a0-a98fb6960eb9", "sighting_of_ref": "indicator--7b0e57c3-8a98-47dd-b895-675a05832f39", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4faf455-4b66-4dc0-bec7-a61b8978af8b", "sighting_of_ref": "indicator--6a900190-aeec-413d-9e5e-53522a333d79", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a84dc5-ffe6-4160-8f23-8d2f374f48c6", "sighting_of_ref": "indicator--7b0a9c4d-88c7-48a0-9036-0d961e626915", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffba6131-a8d3-4217-83e3-196e5511adf2", "sighting_of_ref": "indicator--c380393d-ee3c-4ac0-b611-ba2eeec64db7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61cf5e43-9687-4f4f-b8c4-817074f6c537", "sighting_of_ref": "indicator--a7ca1644-380c-41f9-8c6e-2c6cdbb99cf8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0564e7b-cfa6-49db-b3e5-14e3d7f0f4b6", "sighting_of_ref": "indicator--4706d746-61c5-499b-8de0-ae96686f2426", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6356d4a0-0f7d-498a-a201-a826b91588c2", "sighting_of_ref": "indicator--d978ce4b-c9cc-4394-9ac2-b5327ba39e34", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b250b01b-a199-4895-8d2b-e9482403ebe3", "sighting_of_ref": "indicator--3a73ce3e-ede5-4838-86cd-c05e9693f039", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18c8ccc-8fe5-4699-981d-086e597b1930", "sighting_of_ref": "indicator--5f1a8ecf-3fc7-41ed-a60b-651c572484dc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7ae00e-fdfa-49af-9644-27656f443945", "sighting_of_ref": "indicator--5f1a8ecf-3fc7-41ed-a60b-651c572484dc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c793190-828f-4e02-910e-476452a3f3b8", "sighting_of_ref": "indicator--0d0b7be9-d6f7-4c6f-9aeb-9694c08ebef5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366b1ab4-cb7d-49bf-a2fc-b3b84e9b9d84", "sighting_of_ref": "indicator--385ff994-8162-4918-a02a-0c6297021b9e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c024f0-1ba1-4ff8-a376-757cba75da06", "sighting_of_ref": "indicator--01291172-2452-4450-bed4-c94fa8ab8e5e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e1a323-efd6-44b4-9cb0-bcf21540b37d", "sighting_of_ref": "indicator--0f75b9f7-eb24-481d-8cb8-a0b2e13dfa19", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b852b58-de66-4583-803d-5c1aae34f4c4", "sighting_of_ref": "indicator--f9365938-781f-4969-9c31-e01ca661ba9a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1ec094-042c-4379-9dc8-5bd13baa8b18", "sighting_of_ref": "indicator--8649c5e6-f38e-4b85-a642-0dbb1379f139", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cef753-2412-402a-afad-0de799579963", "sighting_of_ref": "indicator--a01fab40-3ebc-43ed-af86-b7a5e663de62", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19d9ed8-0e7f-4336-99e0-f2a84ac617cf", "sighting_of_ref": "indicator--cabf09d8-1df5-41a7-b39d-d46644a9d75c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d701d638-dd79-4ecc-a033-9a4fc5849035", "sighting_of_ref": "indicator--f673b815-b26f-4076-b930-8d5854000afb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b171db22-b70b-4bb9-b67d-846f6a77f890", "sighting_of_ref": "indicator--59b15910-25f8-4726-9a72-c00d63804956", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd17709-5c45-452c-a5b6-13213c0b8eed", "sighting_of_ref": "indicator--ac35d18d-dda0-4c09-a8ad-5287592c7c02", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62acb04-4d56-4544-852c-9829d5060ca2", "sighting_of_ref": "indicator--dd8e05ce-d36b-4b9e-8ec2-71ee169ee5b3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd916aee-fff9-46f7-b93c-47ca9f07cdb9", "sighting_of_ref": "indicator--9eaefa7f-ad37-42ac-bd37-2beb4498bd71", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbade9e4-035a-44f9-872a-f2bf0d9161be", "sighting_of_ref": "indicator--35c56d40-daa0-478e-bb64-9a9156e3a298", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb49b55-a9f2-42fd-ba12-10ed974927ad", "sighting_of_ref": "indicator--91745011-9b5b-4b66-95cd-eb272a5da23e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d57f67-dab6-4d61-b0f9-eab0e712dac7", "sighting_of_ref": "indicator--b7a6a883-83f8-4eef-a7ce-03c338689c57", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c1f0b0-9ed9-4e5e-8c13-d8c32dc0b591", "sighting_of_ref": "indicator--b7a6a883-83f8-4eef-a7ce-03c338689c57", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fd8fe1-cfe5-44eb-a350-7746e5ce232e", "sighting_of_ref": "indicator--a12b99cd-c63c-4713-ad21-cdffa67d7645", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7831bf6a-3ab7-49f8-aefb-5b35815b0ac0", "sighting_of_ref": "indicator--3aabe12a-c61a-4f02-8fdf-e4f95154d074", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ed3c54-a203-4e9a-bcae-c0adb015736d", "sighting_of_ref": "indicator--fc67816a-719c-4950-83b4-c26a6ab037fd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb7a06c-7f94-4745-96c9-acb94d98dd21", "sighting_of_ref": "indicator--23d7a024-7d8c-4997-b5da-0e84be669fb4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc250416-62ea-43e0-8a71-a66177517960", "sighting_of_ref": "indicator--5de54f87-bb7d-4c34-ab33-5c81ecde59c3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b6b86e-dae1-4252-a747-7447e9ec0e4e", "sighting_of_ref": "indicator--79e6c09e-17b9-430c-bec8-6477c08d2e9a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1bcdf03-386f-4aa4-a9e7-523242f8f7f5", "sighting_of_ref": "indicator--72199147-222d-4c15-a6df-f0fbcc3b8be2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f756ef22-344b-492a-936e-516a305e0f84", "sighting_of_ref": "indicator--f387eb7a-cf68-4b7e-9b4f-5a3ccab7ac8d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e062f87e-a68a-4ce7-9af1-b9a057553690", "sighting_of_ref": "indicator--f387eb7a-cf68-4b7e-9b4f-5a3ccab7ac8d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a123f8a9-c137-41a7-8e83-6edfd0286487", "sighting_of_ref": "indicator--b3680114-d2f9-4299-9540-a10f22051280", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe4a46a-00e2-4bb5-98eb-d7bd8a7901e1", "sighting_of_ref": "indicator--f4f31360-313b-48c2-942f-7bfe0815cd4f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abbcc43-3375-4a8e-a750-8da56a4802ba", "sighting_of_ref": "indicator--e23f6dac-0042-420e-a40f-f0696bb9ec54", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413075de-d582-47dc-9c6e-44433fb9eef6", "sighting_of_ref": "indicator--5a5311f4-7a22-4fa4-9203-8fb0055a4615", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c313b5-b836-4f09-a25f-4b7e254dcd65", "sighting_of_ref": "indicator--f66a13be-8ed7-4e2a-a49f-608b366e9c93", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85452ac8-ab89-4b9b-aad0-084a39d462b8", "sighting_of_ref": "indicator--f9f9b2e9-175f-4857-b936-76e17b3db064", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ec7520-57da-4e70-95c5-6d1237d497ec", "sighting_of_ref": "indicator--70f6efe9-11c0-487b-8421-c0fe50c959da", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef53787-5200-4756-b853-adaf476965b4", "sighting_of_ref": "indicator--1187c7e2-8e8f-4f70-ad5d-0e21cc7e9b9c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6d41ee-6e3a-406c-8b7d-22a6e1869911", "sighting_of_ref": "indicator--3dfcb7e2-ec24-4cbf-b69d-b1b50c418c7d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc435605-12e5-4b3d-9d78-24b9c8ce6abd", "sighting_of_ref": "indicator--26ccadc7-794a-4c0d-98ed-6ace41a95ee7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e0d84a-50db-40b6-88ad-00a4207544b4", "sighting_of_ref": "indicator--48669ff0-0298-4377-8403-03c4908c2401", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a903478b-18a6-45fc-9ec0-f55173afaf03", "sighting_of_ref": "indicator--b15a372d-255d-4fa4-9bf5-45b20340e42b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d65a9c0-a71b-415e-a8c5-846760433826", "sighting_of_ref": "indicator--c9e20248-2ea9-46d0-82aa-24519e6fbeb8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea8d20a-7c53-4b40-87c1-9880df8c1512", "sighting_of_ref": "indicator--c9e20248-2ea9-46d0-82aa-24519e6fbeb8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce73e66f-4a1e-4353-8af9-e991146a2d35", "sighting_of_ref": "indicator--00ab654d-8ae2-43dd-8414-2e6cbd72236f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a121d844-6910-4551-b9a8-5243cc98ca98", "sighting_of_ref": "indicator--4f2fb3f4-d4e0-466d-b539-5de08f310658", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37544f4f-cb44-4eb3-b609-7349e200d016", "sighting_of_ref": "indicator--0cf11452-4541-4bae-b5c4-d603977ae509", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11db545a-1c0a-43bd-81d8-09818d550026", "sighting_of_ref": "indicator--e12f8d9b-d18a-485a-8b4b-68fc45083529", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09023110-efde-498a-beb9-9ec1bc7330eb", "sighting_of_ref": "indicator--b6035a0d-e234-4260-91ef-eae38ec3394f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd6bae1-7239-44fd-9c9b-883993a23d56", "sighting_of_ref": "indicator--b6035a0d-e234-4260-91ef-eae38ec3394f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014ab850-469d-456f-8dd8-fd4706d3e4dc", "sighting_of_ref": "indicator--a2bf9966-2535-4513-9fb8-491cd0eaad7c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8633abd9-c071-41f1-8a19-c78872f7f5b4", "sighting_of_ref": "indicator--cff8228a-546c-49c1-8ecf-ff3fa866062f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2581b5e-1b12-47a7-835f-feefd4c652f7", "sighting_of_ref": "indicator--f1e7d85e-f23d-483b-a7de-bbc85262a059", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cd887d-6c8b-406a-9b24-b2f30436fba9", "sighting_of_ref": "indicator--b14bb71b-2969-4663-a0fa-0d5cce892711", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46544e16-5585-4f78-ac7f-c1764a38ecd8", "sighting_of_ref": "indicator--b14bb71b-2969-4663-a0fa-0d5cce892711", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c36823-7223-4906-a1d4-59045cced7c7", "sighting_of_ref": "indicator--c344b75e-0c62-49ff-93c5-e935b2d18f26", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ae1cd0-3034-4fd8-aea0-3860d65b6920", "sighting_of_ref": "indicator--2cce8dcf-8877-4cfb-84e9-e0e2dba7d0cd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa74ea67-b511-49f5-8b2c-d5ef2f72a75c", "sighting_of_ref": "indicator--cc3ab72c-2fe7-4e49-a055-ac335d241c5a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8014d04-1e3e-44bd-b396-0c46902ee433", "sighting_of_ref": "indicator--7b0d3893-6921-4a73-8e14-b2ad78623a99", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70412642-9b59-493e-851c-e125df9075f6", "sighting_of_ref": "indicator--1f8b5115-128a-4180-9775-b3802b431965", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be64d87c-1eb2-4642-bfa2-668182da7ed2", "sighting_of_ref": "indicator--14369cac-c8b9-44af-aeec-a40d808299da", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb88ea2-e8bf-4ea2-9349-a9fc3de1e6d6", "sighting_of_ref": "indicator--ca8d6a6a-e4d3-4925-b7b4-bb0c501f6a96", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4c043f-4d6b-40be-89df-256c63e446ba", "sighting_of_ref": "indicator--13156165-a894-4b82-85dc-298c11657363", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7473f34e-69ab-4914-8af7-c04625c8ad8e", "sighting_of_ref": "indicator--66bf0f7c-3093-491a-876a-5af0672edca2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73884706-50b6-4510-8353-bf96dc006649", "sighting_of_ref": "indicator--7c69fe58-7e3e-446f-aa40-eedbf56e5927", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a50c769-6ede-4b0a-acfa-ae47d207b395", "sighting_of_ref": "indicator--a324aaa1-8964-4cf2-b9ef-df01d05197cf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb53647f-b9b7-46ac-a3ef-2f4dbba280b5", "sighting_of_ref": "indicator--d9544c4f-837c-4fb2-a788-61af4fbc71bb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96d56cb-4a33-4e89-8d19-f4de2be6d803", "sighting_of_ref": "indicator--cddd47b6-8e20-4361-86f7-230e2ef2d65a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc8b05a-10aa-4860-94da-1f5b89e5e4f7", "sighting_of_ref": "indicator--c443d78c-d209-4a7c-84ac-c62ed84bab0a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2d3f83-2ec3-4713-afe6-f843ba80c79d", "sighting_of_ref": "indicator--8b20b164-ee9f-4f66-a436-02ac2f23a5ae", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba679e47-21da-43c2-8f93-4939c1b9ad36", "sighting_of_ref": "indicator--c6735332-310d-4b26-8e04-11208762b237", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43914adf-eeb0-401b-83aa-ca7b1d01f376", "sighting_of_ref": "indicator--7c342f7e-e8f9-44be-a529-f276e213144c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e24b0fc-72cd-44c7-a809-4a3a83640830", "sighting_of_ref": "indicator--4373c9ea-7166-427c-ab78-8efed62a4d13", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac95641-904b-4f2d-b449-85e5fc0a0fdc", "sighting_of_ref": "indicator--00c2786c-3c89-43a5-b19a-c445c67014f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8184455-87be-4e41-924f-5dec8ddd6929", "sighting_of_ref": "indicator--a9d79432-3303-434b-897b-45e93ed5ed13", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69786dbe-b156-4b98-be12-faf76c975eb9", "sighting_of_ref": "indicator--9e1e0641-990b-4d3f-9bc8-9966f76f149b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64009450-270a-42b4-aa34-9b771c5d3262", "sighting_of_ref": "indicator--8840c2e1-2f31-4b54-875b-818bb25103f6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f167ce-5691-44e4-a5dd-5f090312d892", "sighting_of_ref": "indicator--8840c2e1-2f31-4b54-875b-818bb25103f6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9098a8-b10c-4ce5-9569-9480f75ea369", "sighting_of_ref": "indicator--13a60b89-d28d-4aad-8965-4e8324646c3f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e002bd-e248-4e00-8798-bfba913b8390", "sighting_of_ref": "indicator--f9248189-54e8-4093-ac30-7ea2ec764259", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496a6e88-8663-4312-9e63-540438740d88", "sighting_of_ref": "indicator--2d277191-ad4c-4108-aa7c-77f40a575cde", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f8d2ca-4fc1-41a8-a779-1f4a0f910c59", "sighting_of_ref": "indicator--86e101f1-6dcb-4453-b016-6e9a02fac77e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebd2d9b-fe7c-492e-8c04-e497767b2bde", "sighting_of_ref": "indicator--7e7bef8f-bd8f-4406-9ea9-771c6e57c566", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1f2bc4-cc91-4c6d-ad94-e175a558c09f", "sighting_of_ref": "indicator--4d091be1-2bff-4e63-8e74-5b22afeab8aa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8369556a-055d-4899-962d-48a0bb4f5d2b", "sighting_of_ref": "indicator--7339e3dc-73ab-49bc-8c2d-fbcdc0cf21f3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b582b6e-43a2-4b97-b85a-dd9c447d2544", "sighting_of_ref": "indicator--1845d43f-123b-4fff-bedb-26d7f85de6f1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a00960-85fd-479f-ad49-60d38e484444", "sighting_of_ref": "indicator--0acfae2e-a03f-46fd-94e7-fd21deaf811c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf77bee-0a1e-4de3-a664-143ec87740d3", "sighting_of_ref": "indicator--d2d7d819-7e04-4a1e-8eb5-7b9dc9c0a52e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed0764a-4d7d-43da-8d33-b92151db5d35", "sighting_of_ref": "indicator--0d0484ba-598d-4e7c-8879-07d6be338435", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9f9df6-c674-4acd-8cd0-4640269c9282", "sighting_of_ref": "indicator--539f3ee3-4c4c-4cee-8ad3-89c24d5d12ac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4a3453-39c6-41af-ac01-e83a6075e4ad", "sighting_of_ref": "indicator--b5e0418f-4dd1-47be-8b40-bdf274f9b6fb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5ae93b-8c96-4f37-9a8a-d8157c0f4bcb", "sighting_of_ref": "indicator--40238347-d52e-444f-a618-1e7de02b5cd1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc64d346-3a0c-404d-aabd-78bc23b8c37c", "sighting_of_ref": "indicator--f83ca953-2df6-410d-9730-8309c5881f4f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3470f0-acba-494f-b9c6-9e313fc6cd1c", "sighting_of_ref": "indicator--7533381b-751f-4f71-8983-21c57fe5674e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e185bf63-2720-42e9-8762-d3269de20c4e", "sighting_of_ref": "indicator--aec29170-b3dd-4464-9dbb-2346adf2cfbc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601d5183-03de-419d-a1ea-94c2ce908814", "sighting_of_ref": "indicator--7d2bacaa-0cbe-47e5-8f9f-052b76401bc4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8103eb9-ee84-4fcb-8435-0fbc26f6e929", "sighting_of_ref": "indicator--faec0f87-20d0-46fc-9038-196c3e05b1a6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4428cafb-b9e8-4e7e-bc98-cabb6fdbc352", "sighting_of_ref": "indicator--6ae10388-8560-494b-96b5-9630f1367c52", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93927aea-ad70-4956-9514-b93508bd4320", "sighting_of_ref": "indicator--74683029-634d-4584-a569-59a021ddc6b3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6caa432-b345-46c3-8527-69a7eea96d1d", "sighting_of_ref": "indicator--912332c5-e4c5-4870-8085-7552ef1abd39", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4713ff-6441-4e3b-a482-8ec618ed6c93", "sighting_of_ref": "indicator--0cfab0ae-755f-4aa6-9dbb-07072194efd6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c7d04a-d881-4af5-83a7-1beb3e507046", "sighting_of_ref": "indicator--f9e2ed7f-ba7d-473a-a899-7eff3288dcf9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c26ec30-a06b-4294-a8f8-157e38a93c1a", "sighting_of_ref": "indicator--35d79023-b180-4a99-a588-5168ba6f8a06", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a292adfd-f9eb-47a3-a91d-9ceb72f34a62", "sighting_of_ref": "indicator--6dbb4256-0227-422d-b3ae-6bcdb909ecc5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5608355-aaa4-42a1-9978-be0741d00729", "sighting_of_ref": "indicator--8d809fa9-800a-4ade-b270-c12de63f497a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27d2dbe-0158-405b-8f8f-15a2e0e6e11e", "sighting_of_ref": "indicator--18d68629-9668-4f05-b847-730d8c1997b1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f33af9b-b7ac-4b73-8cdf-40308fb5a0e1", "sighting_of_ref": "indicator--c02ac537-1119-4c73-a95f-341bcc148628", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b05a6fc-f168-447f-98e7-ac4a573e73e1", "sighting_of_ref": "indicator--2f20987f-7223-4058-8cb7-45566ad222d1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c800a1-185b-4718-bcd7-9966d20f1acd", "sighting_of_ref": "indicator--d5f9de25-1912-4eec-82bc-b5805ab91cf4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e884815-61cc-4bde-89f1-da21581ed667", "sighting_of_ref": "indicator--c9baf8d2-c382-48b0-b190-92e9e1190f7d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab19819-f800-4a6d-a1c5-54606da90901", "sighting_of_ref": "indicator--c9baf8d2-c382-48b0-b190-92e9e1190f7d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91f783d-4b25-40fc-a755-b30619d28820", "sighting_of_ref": "indicator--e740b8f7-8087-4aa0-840b-6ab5c2870190", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb175c71-5f36-48f3-81d1-bba91f3d5b90", "sighting_of_ref": "indicator--44ceac03-7442-40dc-b842-4709017d215f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2df61f-8afa-4b61-bffb-b5b4a093e65e", "sighting_of_ref": "indicator--e85ae944-2080-4ede-b394-f4e6d48d38b7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daed861f-a104-4e13-b24b-190499acf7b0", "sighting_of_ref": "indicator--5765f117-8631-467b-98ab-893c35e778ca", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0241c110-6ecb-4b1a-8ba7-81d187bad069", "sighting_of_ref": "indicator--a67470ad-430d-4524-8242-84c82162b05d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ade6cc-33e6-4be4-9c4e-96401409f33b", "sighting_of_ref": "indicator--09d88c43-5702-441a-bd4b-c1b80298afa3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb1ae03-81e5-4786-98a7-6ce98bf5376e", "sighting_of_ref": "indicator--c3a709a6-43f1-46ee-8aa6-60232b0080b6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50a73ee-2db7-414c-8be5-4a8b3d509d8a", "sighting_of_ref": "indicator--057a47bf-3ee0-489b-a362-9ac28ee93df2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29c046a-e7dc-438f-ae74-3ad337bf6cd5", "sighting_of_ref": "indicator--df8a915c-c418-46d9-ad06-61274d65486c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4591d80a-7e75-4429-bef1-d888b3167173", "sighting_of_ref": "indicator--f90aaf96-8441-4de2-b024-629744fdf10a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49d4803-670b-4d53-af72-123548322e6b", "sighting_of_ref": "indicator--bd0a8506-94ad-43a9-93ab-8029f070baa0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93891cb0-32dc-4f98-b5f5-154cc0b69ec8", "sighting_of_ref": "indicator--52379d0a-f6a6-4bf3-b6ff-f572bd172079", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f0a060-8161-4d79-96d2-e0b3c6968776", "sighting_of_ref": "indicator--b52b378e-a591-42d7-9206-427385478619", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6671212-a3a4-4b32-b1f7-b3c258f8b09f", "sighting_of_ref": "indicator--e419b6fb-c5a3-4f97-bce1-4cb6273c64c7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4aa0df3-4de3-4c32-adbf-37d9a9be2375", "sighting_of_ref": "indicator--a5a85dce-3b87-4533-b848-f05ce851bd8d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd843c2f-7232-4022-a7fd-3e64e333bb1c", "sighting_of_ref": "indicator--9158fe1f-b04b-437c-871d-b0a95396456f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322250c3-dbc3-44f9-9fae-4f3eaf64d1e1", "sighting_of_ref": "indicator--83fa79e2-e2d2-4e55-82f4-6263899efe52", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93295f0-658d-47c4-ad0c-ce2920d661f6", "sighting_of_ref": "indicator--255f6413-b2dc-4087-9132-a25afeaa8285", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d8182c-4f2c-48e1-bcee-f4a4e3611168", "sighting_of_ref": "indicator--ba705242-a802-43b9-b13b-c295c66e0ac7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a119a56e-e36d-4c53-bf03-82ce61fc94d9", "sighting_of_ref": "indicator--f14b1106-3615-4b40-bad5-519cc251b9ff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fad9a5-f05f-4381-8ca7-36f3d1bd26c3", "sighting_of_ref": "indicator--19037d12-35db-4bc9-9d78-a31e2dfd7c76", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fdfec1-a70f-4309-a5fc-5a603fe4b548", "sighting_of_ref": "indicator--a5435ed1-d8fb-43c1-a06a-5707009ad522", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987aaac1-6452-4e24-ae32-037852c8b3e2", "sighting_of_ref": "indicator--c770d96b-4f5e-44db-a14f-f6d414b68a1f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496ca922-b426-45c1-8a26-6b6638ff4862", "sighting_of_ref": "indicator--c770d96b-4f5e-44db-a14f-f6d414b68a1f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e381f051-22b3-42bf-a804-cc112e6b352f", "sighting_of_ref": "indicator--effcea37-1e29-4759-bf15-0e9bb18b846d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e16ea02-6332-485c-a0fc-6dd7c129cfd1", "sighting_of_ref": "indicator--88caf1cd-24d4-4c91-8c8a-4da7598bd254", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b751b27-e528-426d-971c-22249e2caee9", "sighting_of_ref": "indicator--99979d67-c38f-4edb-8a0e-88a4a71f0637", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe77241c-4b1f-4793-868a-7a075e1fde30", "sighting_of_ref": "indicator--e4cdb538-21d4-44c1-97ee-0c0a78d2eff6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6908884-e434-42ec-ac97-07ade700cea1", "sighting_of_ref": "indicator--983bc2fe-0f2c-4c86-844f-513b586670b6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f49de7-6d6d-4d79-832b-5d6144296a72", "sighting_of_ref": "indicator--7f675d65-04fe-4de5-a7f6-de41dc1d51d9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4663b8b6-ab38-4ae9-8ac8-89f40d421981", "sighting_of_ref": "indicator--d053ad29-506f-4a44-a8ac-9410f61956a6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a63ce06-9b11-4da6-89ba-ca515b6cad64", "sighting_of_ref": "indicator--3f243f3b-ea9b-498f-bd2e-0afd259153c5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1da88b-0b26-481e-9837-3fe2cf38ff11", "sighting_of_ref": "indicator--90364fb8-3808-4e24-bbab-6660d311486b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e4396f-70c5-45c9-9319-f3c8a2c668cc", "sighting_of_ref": "indicator--0f07f365-9555-49e2-b409-81dc1efb37eb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffb19e1-c71f-4605-ad64-33ba99d6b79f", "sighting_of_ref": "indicator--eabe00c1-4ab3-4120-8594-861ca728b3a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e425a28-c943-427f-8c68-d1af06273f66", "sighting_of_ref": "indicator--056ea459-488f-4877-a4f9-84b01468ca61", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d72e80-2fbf-42e7-92e3-13c5f90b52f0", "sighting_of_ref": "indicator--d409b795-530b-4539-a7f9-8875f787863f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f0ca82-0175-4e71-a299-8fd07054a1d5", "sighting_of_ref": "indicator--e61a56b0-9ab8-4266-8539-3efba1a924ae", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b45f8b2-77f6-4125-ac1b-dd53a65b6ec2", "sighting_of_ref": "indicator--e61a56b0-9ab8-4266-8539-3efba1a924ae", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9bb2c6-3333-473d-8daf-25b27262a614", "sighting_of_ref": "indicator--bb295154-21fd-4383-a189-64dc9ff31206", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10137fa7-3545-4f0b-abd8-46f705e5a023", "sighting_of_ref": "indicator--6ae3a4ba-7b6d-4598-aa43-a437180fdc4c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b3c61c-991d-4f2f-8929-ffc1239c8ca8", "sighting_of_ref": "indicator--d6df72b4-4761-48d0-916b-e8ae91e83d78", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41144561-0cfc-46b6-b3e2-d548bc3d9501", "sighting_of_ref": "indicator--32e421e7-849a-4976-9bdf-a39f88441557", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d86b58c-fcbd-433d-acc6-ce42a1638933", "sighting_of_ref": "indicator--32e421e7-849a-4976-9bdf-a39f88441557", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559aa0e4-39e8-4b38-9b8d-0176b78d8388", "sighting_of_ref": "indicator--0b48d885-1978-4a0e-98c1-c1c57a01bd59", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0deb62b8-d36e-47b2-a534-51455c46949d", "sighting_of_ref": "indicator--a8003527-5999-493a-b4f9-574e0c843e41", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66a0e4e-5efa-423d-9b71-f3be7b1143d2", "sighting_of_ref": "indicator--a8003527-5999-493a-b4f9-574e0c843e41", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187834e2-5535-4c80-8a96-16c2b9e02a0f", "sighting_of_ref": "indicator--a8003527-5999-493a-b4f9-574e0c843e41", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f619bc1e-f781-4ee6-aacb-162e0334a7d6", "sighting_of_ref": "indicator--1d5cd1da-7dd9-4096-812a-ab8d77c8da13", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ab5354-15fc-4563-ac1f-d68ad85b64b5", "sighting_of_ref": "indicator--19366ba1-43fb-42ca-905e-428fe1cfa50b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4939396-836f-4e83-a2c1-8804b790aa34", "sighting_of_ref": "indicator--19366ba1-43fb-42ca-905e-428fe1cfa50b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ab95f3-ea46-4384-a3c9-4f136f676dfb", "sighting_of_ref": "indicator--19366ba1-43fb-42ca-905e-428fe1cfa50b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6786261e-44c8-462b-ab82-b2b0bc1cf3b7", "sighting_of_ref": "indicator--10ba897a-b78f-4d82-aab4-826d32e49be0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5242b23-c113-47e1-98c9-f15f0a0f33cb", "sighting_of_ref": "indicator--0766a0fa-e51c-4a52-b8b6-1280b6bc9b6a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28583559-acf3-4460-9886-1c63ce6fea13", "sighting_of_ref": "indicator--ed1627a7-082c-43dd-a334-35c0ab753aa6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071e62e8-6619-4baa-8677-49ca7f197f7b", "sighting_of_ref": "indicator--ed1627a7-082c-43dd-a334-35c0ab753aa6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406ffb8c-f86b-45e9-b4e3-845c5f012cb4", "sighting_of_ref": "indicator--ed1627a7-082c-43dd-a334-35c0ab753aa6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef10a27-2393-483c-b49f-68ebd1e7076f", "sighting_of_ref": "indicator--7d65c1af-80a2-420c-ae55-0f554005b90a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7072f6-6669-4cd6-986a-e2ee0823c727", "sighting_of_ref": "indicator--7d65c1af-80a2-420c-ae55-0f554005b90a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604a1da7-9415-443e-b85a-65ba40f3873a", "sighting_of_ref": "indicator--7d65c1af-80a2-420c-ae55-0f554005b90a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f93e8a4-0b12-4672-8ff9-7c63cfbe710d", "sighting_of_ref": "indicator--2b10f69b-f067-4533-9e82-e54ac187260c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b10950-2a0c-49c9-8d62-490a264fc306", "sighting_of_ref": "indicator--2b10f69b-f067-4533-9e82-e54ac187260c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4356f0dd-51f9-448d-b35b-3e7cfd19681a", "sighting_of_ref": "indicator--2b10f69b-f067-4533-9e82-e54ac187260c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ffba97-0def-4649-a9fb-249491391112", "sighting_of_ref": "indicator--ddceee4c-25be-4776-b4c0-14bb821a236c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d4a988-b2ca-49ae-82b1-3938dedc08a0", "sighting_of_ref": "indicator--ddceee4c-25be-4776-b4c0-14bb821a236c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370821bb-dc69-4663-a1b7-f00c4435577c", "sighting_of_ref": "indicator--ddceee4c-25be-4776-b4c0-14bb821a236c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7ecd33-7bcd-400a-993b-d4051e86eafd", "sighting_of_ref": "indicator--51af834a-b5fb-4d96-8192-5d06ee6f7a1f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3648954-6886-45fc-bc5b-4007533e2ddd", "sighting_of_ref": "indicator--b9d4a463-5800-4828-a6b4-7d5a4d674669", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892fba74-2b0d-43e5-90c0-bdd3662ff4d1", "sighting_of_ref": "indicator--330fa39a-955a-409c-ab9e-ca403b6ccd49", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88cb2213-5711-46c7-a586-4d27584063e0", "sighting_of_ref": "indicator--330fa39a-955a-409c-ab9e-ca403b6ccd49", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c02d5d5-05fa-463a-85c8-1f26868fddb0", "sighting_of_ref": "indicator--330fa39a-955a-409c-ab9e-ca403b6ccd49", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09efc693-5bf4-47c6-a185-f4d6d3362aae", "sighting_of_ref": "indicator--da7c85b6-b38e-4379-8a28-d87207c4ec20", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d0f289-925e-4269-a1d6-c0a86490fd99", "sighting_of_ref": "indicator--da7c85b6-b38e-4379-8a28-d87207c4ec20", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea4da5f-4901-4eb6-afdd-d0e457d7ef07", "sighting_of_ref": "indicator--da7c85b6-b38e-4379-8a28-d87207c4ec20", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de79cbb-9a02-43de-b4be-11bbaa74c641", "sighting_of_ref": "indicator--49eaf9d5-efca-4d71-a9ef-a6e514acc652", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e51cae-2e49-47e6-96e4-5e0a3e680d33", "sighting_of_ref": "indicator--05e3af1b-56a0-4a19-9218-fde6c82b54d1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb5d275-5a49-4a39-803e-0f8b3b1f5c3a", "sighting_of_ref": "indicator--e7797e25-76ad-4469-95bc-2f1c815afba7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3686ec49-306d-4eb6-ab24-7ebbe6d7dbbc", "sighting_of_ref": "indicator--cccc4dca-dfef-4d80-82db-1e9c74944137", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87dac3eb-ebea-495c-b3bb-f57e3e4156d7", "sighting_of_ref": "indicator--01d87d89-68d7-4203-9cd7-ef7102ab1acc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb887fb-0f53-47f1-8cf5-5724d5afa9b4", "sighting_of_ref": "indicator--01d87d89-68d7-4203-9cd7-ef7102ab1acc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d3be00-34c2-41ea-a515-9a385d43e1c3", "sighting_of_ref": "indicator--01d87d89-68d7-4203-9cd7-ef7102ab1acc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e695255-19eb-45bf-8426-a7a6c1311e3c", "sighting_of_ref": "indicator--354663bf-763c-475c-8b7b-fbb37d4f04ed", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e24b09-2569-48e5-aa97-827c8af9bbe8", "sighting_of_ref": "indicator--e6864114-6d07-45cc-85aa-6ff70fd3f393", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccf0210-111b-402a-a7d9-95e1076e0966", "sighting_of_ref": "indicator--e6864114-6d07-45cc-85aa-6ff70fd3f393", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2949503-c2c5-49f8-858e-67f0421fd1bb", "sighting_of_ref": "indicator--98f9f6dc-fe96-4622-bf19-8be6c8a9eb95", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266d4ecf-fb60-4f21-87d7-5349843977f3", "sighting_of_ref": "indicator--98f9f6dc-fe96-4622-bf19-8be6c8a9eb95", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39ee6ff-2009-47ae-8339-97b29f265cb1", "sighting_of_ref": "indicator--98f9f6dc-fe96-4622-bf19-8be6c8a9eb95", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751b70e1-247d-4a5e-8ae8-0e0da5ba9ebd", "sighting_of_ref": "indicator--a62a27fa-9564-4d6f-abd5-e1de2d8822b9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f189bcc1-accf-42fe-9663-909650b00e34", "sighting_of_ref": "indicator--5f5e326a-7f9b-424e-b464-32091107d632", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476bf6db-caf5-4938-9ebd-d72ebce4be2f", "sighting_of_ref": "indicator--8a61e132-b3f1-40a0-a33c-c5ef8df353c7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e251cd-dae9-4e8b-b77f-5591648c8bf2", "sighting_of_ref": "indicator--8a61e132-b3f1-40a0-a33c-c5ef8df353c7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4f5bf4-7ec1-4594-835d-6ba0fe6e2db4", "sighting_of_ref": "indicator--8a61e132-b3f1-40a0-a33c-c5ef8df353c7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad38cd6-85c4-47ea-aa06-35d33598ae76", "sighting_of_ref": "indicator--f245e57a-51e5-4d82-b71e-178b56859347", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0663c9-7f64-4a94-b561-e9ef8598d71c", "sighting_of_ref": "indicator--f245e57a-51e5-4d82-b71e-178b56859347", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ab59c7-9656-4175-8030-c955aa0e0ead", "sighting_of_ref": "indicator--f245e57a-51e5-4d82-b71e-178b56859347", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b213fd13-7d0d-4e76-a865-7811be4611c3", "sighting_of_ref": "indicator--45342bd5-4e9d-4085-8c7b-028133aadc04", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08e27fa-2ad7-4bc5-861d-f75d9d1e522a", "sighting_of_ref": "indicator--45342bd5-4e9d-4085-8c7b-028133aadc04", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab4b9dc-ef49-418e-a960-653f24581f1b", "sighting_of_ref": "indicator--45342bd5-4e9d-4085-8c7b-028133aadc04", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0188cc8-fa88-4fe7-8bcc-8945ce91a9bd", "sighting_of_ref": "indicator--3449912d-4522-4a5c-848f-bb754a98255e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14bcd40-9fb5-47ff-9f13-0484365bc2b3", "sighting_of_ref": "indicator--49bd0cfc-53c2-4151-b8f0-ed06c0eb332b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e7de6d-8609-419f-8a05-da48d6bc0fc5", "sighting_of_ref": "indicator--48b2a7c7-2b0a-4d72-872a-21427007d127", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a7987f-f7f6-4c65-a87e-a62a1af5ca5a", "sighting_of_ref": "indicator--48b2a7c7-2b0a-4d72-872a-21427007d127", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fee25b-9981-4cf4-ae4c-84456d9e13da", "sighting_of_ref": "indicator--48b2a7c7-2b0a-4d72-872a-21427007d127", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6461efe1-076b-4871-b88e-3aa0ca298d8e", "sighting_of_ref": "indicator--f06b7049-1eae-4617-aa49-5d60fe86edd5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729b54df-53a1-4746-a662-b91a91af57af", "sighting_of_ref": "indicator--f06b7049-1eae-4617-aa49-5d60fe86edd5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d28c8c1-8c06-4c62-b803-a5bcac9bb384", "sighting_of_ref": "indicator--f06b7049-1eae-4617-aa49-5d60fe86edd5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19095ea9-f07a-4e4f-b978-9d17f4cf4b55", "sighting_of_ref": "indicator--af51ff49-e3b5-4b3f-94f8-cd59e405e2f4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3fda62-fc54-43f0-b727-9a27e51388d8", "sighting_of_ref": "indicator--117ed914-ed67-46ae-ad77-962dc3ec833d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97dea25-5881-4940-945b-ef21a940b86a", "sighting_of_ref": "indicator--c19b9505-a971-4014-987e-1c41f1a8c144", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a47757-65c4-4e41-941b-af5ec893670d", "sighting_of_ref": "indicator--c19b9505-a971-4014-987e-1c41f1a8c144", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60c6bfb-bade-4245-b0c8-44f022c51a0f", "sighting_of_ref": "indicator--050dce9a-3d01-40d4-82f1-de0446c23eda", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5fe6c4-7755-4853-8c4d-707de3c10b93", "sighting_of_ref": "indicator--050dce9a-3d01-40d4-82f1-de0446c23eda", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb61aa8-2b12-48a3-ad48-cfe20678f12d", "sighting_of_ref": "indicator--9e11c8fc-8f1b-4dc1-a6e0-6c596e2035af", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d944ea-810b-4cc4-8488-a844b91192b0", "sighting_of_ref": "indicator--9e11c8fc-8f1b-4dc1-a6e0-6c596e2035af", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa6dbb5-da75-4257-b440-9b5a7170cefe", "sighting_of_ref": "indicator--9e11c8fc-8f1b-4dc1-a6e0-6c596e2035af", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471ab54a-515a-458e-acd5-7f1db1fec8eb", "sighting_of_ref": "indicator--e95b5c74-615a-4146-9aa8-ddd0ad7bb408", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b904c2-c290-4d58-b852-b5db8ad47139", "sighting_of_ref": "indicator--e95b5c74-615a-4146-9aa8-ddd0ad7bb408", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4890ab38-4034-4f90-a28b-77b37b9d32aa", "sighting_of_ref": "indicator--eeb35393-e95a-43a3-9dcc-d5456b20a75b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e06a39-3b8c-4334-9547-3d6d86d05e4d", "sighting_of_ref": "indicator--eeb35393-e95a-43a3-9dcc-d5456b20a75b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da036ab4-a965-432b-a314-43c1ad78c9cc", "sighting_of_ref": "indicator--e060c768-bec7-49d0-8b2e-d1ce145955ac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9d95f0-2ccd-4479-8989-f51687111051", "sighting_of_ref": "indicator--8368fcef-05c9-4dc3-a48e-44661890a196", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bd0d69-36a4-43d4-96c1-3e4ce51ff9ec", "sighting_of_ref": "indicator--71a4ffde-8534-4927-935f-052cfc247d1c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebda512a-af7f-4fc7-b55b-7f5be6dadd66", "sighting_of_ref": "indicator--74047100-bfde-4791-ba1d-4b44b05f9300", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326f0c66-20ef-40c0-b043-ef746eb7c251", "sighting_of_ref": "indicator--74047100-bfde-4791-ba1d-4b44b05f9300", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffded24d-c608-4e55-a0dc-29019ff2bfb8", "sighting_of_ref": "indicator--74047100-bfde-4791-ba1d-4b44b05f9300", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90a5660-9986-4747-bee7-059a4faa8478", "sighting_of_ref": "indicator--3e4fa881-b1cc-48ed-ab1e-b8617ff8e73d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7749400e-0e73-4edd-8774-356bd1e02131", "sighting_of_ref": "indicator--3e4fa881-b1cc-48ed-ab1e-b8617ff8e73d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986b8fb1-977e-4f92-8b43-0ffbb7979c34", "sighting_of_ref": "indicator--3e4fa881-b1cc-48ed-ab1e-b8617ff8e73d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2f15bb-6e47-44a4-bc71-0cf707f00378", "sighting_of_ref": "indicator--1d62bfff-83c3-4d08-bf04-753c3916b764", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954bd466-4374-4d67-bb53-ccc02e179d2b", "sighting_of_ref": "indicator--1b2d6151-dfc5-4d03-a08b-552765ac76e0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b820266-ea0e-492e-a3e2-f5668f8dbbe4", "sighting_of_ref": "indicator--e617246c-4381-47bc-afd0-f4a20dcdde70", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc37c000-0108-4eab-bcaf-90cd314c11ef", "sighting_of_ref": "indicator--e617246c-4381-47bc-afd0-f4a20dcdde70", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e756b4c6-82e1-4032-906d-f9b5bfe22e1f", "sighting_of_ref": "indicator--e617246c-4381-47bc-afd0-f4a20dcdde70", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600b69f2-e7c1-4a34-988f-ff1a03957fb8", "sighting_of_ref": "indicator--a00f7531-d2d5-474b-bf85-7ed22b8e1d16", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0943f7-b745-4c29-8f44-b64a68f88b8d", "sighting_of_ref": "indicator--a00f7531-d2d5-474b-bf85-7ed22b8e1d16", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5b4a09-5bab-460e-a2bb-1b2237fdb7b0", "sighting_of_ref": "indicator--a00f7531-d2d5-474b-bf85-7ed22b8e1d16", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfc39e2-cab6-4707-94cb-8a81198a1938", "sighting_of_ref": "indicator--052c8c27-0ff0-4a24-8fda-24851d8f49c5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3cf1fb-6213-4872-96ad-161453007f6f", "sighting_of_ref": "indicator--052c8c27-0ff0-4a24-8fda-24851d8f49c5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7002165c-dd62-4fea-9de9-dca40ceea4b6", "sighting_of_ref": "indicator--052c8c27-0ff0-4a24-8fda-24851d8f49c5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1dccfd0-49bf-458d-8155-8354d526598a", "sighting_of_ref": "indicator--5c262794-43db-4b1e-86be-da82063b8832", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e843801-4ae7-4906-a48a-a31806f0c43a", "sighting_of_ref": "indicator--5c262794-43db-4b1e-86be-da82063b8832", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5375020-3594-4de8-aee0-844851fb4ac4", "sighting_of_ref": "indicator--5c262794-43db-4b1e-86be-da82063b8832", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f04dd4-7271-4401-b0a2-2799f468da61", "sighting_of_ref": "indicator--ba4ea51c-fd94-498d-affe-3d80fec08fc4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fa005d-3ffa-493d-b17b-faa3e24d1eed", "sighting_of_ref": "indicator--ba4ea51c-fd94-498d-affe-3d80fec08fc4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86776c3d-cdeb-4bca-9863-c80018780160", "sighting_of_ref": "indicator--ba4ea51c-fd94-498d-affe-3d80fec08fc4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dda9f83-2fb9-4f54-90cb-4f62a206dae7", "sighting_of_ref": "indicator--d74b1559-1def-44f4-960f-bba09297108c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4eed0a-d18d-4296-86d0-02619f5e4677", "sighting_of_ref": "indicator--d74b1559-1def-44f4-960f-bba09297108c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab823e0-f753-45bf-aa82-ef39612249ae", "sighting_of_ref": "indicator--d74b1559-1def-44f4-960f-bba09297108c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6138ca-49d0-42cb-a673-4397db20d381", "sighting_of_ref": "indicator--e8b4df9e-8273-40c6-b019-08b029f61e06", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bab361-8f63-43ef-a4c7-3216ea313960", "sighting_of_ref": "indicator--e8b4df9e-8273-40c6-b019-08b029f61e06", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ae8bca-fc1b-41ab-b3f2-4a9d419f0672", "sighting_of_ref": "indicator--e8b4df9e-8273-40c6-b019-08b029f61e06", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13b78fb-17b4-4836-8c0d-bbf5632a346a", "sighting_of_ref": "indicator--81959491-e772-401b-9553-125609b8969a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e368a8b5-4fa1-42e0-9f58-40f8940b1921", "sighting_of_ref": "indicator--81959491-e772-401b-9553-125609b8969a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88305cb0-627b-4aa7-bc79-7b9457f23fdb", "sighting_of_ref": "indicator--81959491-e772-401b-9553-125609b8969a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0817ff-8953-4563-ac8b-cfb66fde1a1e", "sighting_of_ref": "indicator--8f8f6368-f801-43a2-b5cd-0275f112b1ed", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e86317c-ce52-4d3f-9ddf-a882252adf9c", "sighting_of_ref": "indicator--8f8f6368-f801-43a2-b5cd-0275f112b1ed", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e866b9-8ad3-462b-b43d-91ff717647ae", "sighting_of_ref": "indicator--8f8f6368-f801-43a2-b5cd-0275f112b1ed", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6132e71a-7ec2-427c-bbec-7bd94a1c24ed", "sighting_of_ref": "indicator--f8c12341-91a2-4a8a-b453-0b97ed8f8175", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835436de-3c6e-4ea5-bf4f-32df9690092a", "sighting_of_ref": "indicator--f8c12341-91a2-4a8a-b453-0b97ed8f8175", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cb2f39-164f-44be-aec8-72bb5a50d525", "sighting_of_ref": "indicator--f8c12341-91a2-4a8a-b453-0b97ed8f8175", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7949dba0-497b-4fe4-b7c1-f64b3ddd4329", "sighting_of_ref": "indicator--3c82d687-50ca-4a13-aa3d-812f9b57748d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c65e4bf-56d4-46de-ae28-094db67f6bd2", "sighting_of_ref": "indicator--3c82d687-50ca-4a13-aa3d-812f9b57748d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e72ea31-adbc-4bf1-98a8-bb0db36b5a28", "sighting_of_ref": "indicator--3c82d687-50ca-4a13-aa3d-812f9b57748d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29068c9c-6d86-4fe6-8c2c-043ceb959b14", "sighting_of_ref": "indicator--3b1e313c-8c72-4cd8-9018-bbbfe934f38a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28147bc-f204-43d5-9fd6-e05ee7e99564", "sighting_of_ref": "indicator--3b1e313c-8c72-4cd8-9018-bbbfe934f38a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205b8c4a-51c5-48ff-9dc0-b2bc9e29b80e", "sighting_of_ref": "indicator--3b1e313c-8c72-4cd8-9018-bbbfe934f38a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fb5c66-cd04-461d-aa3f-4ea888842ee5", "sighting_of_ref": "indicator--fd33ddad-daaf-4530-ba8a-631fc23e0477", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c499704-6906-4bd0-a627-bacdc6b7f9ec", "sighting_of_ref": "indicator--fd33ddad-daaf-4530-ba8a-631fc23e0477", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8893a2-6abb-4bd2-8eb2-7df6cfeecb2d", "sighting_of_ref": "indicator--fd33ddad-daaf-4530-ba8a-631fc23e0477", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d0d3b8-6102-4c0c-99bf-3294926873d2", "sighting_of_ref": "indicator--d70ada49-add0-41d0-8fdc-add255422dd2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b8e178-f034-41f8-8ec0-77902073af8f", "sighting_of_ref": "indicator--d70ada49-add0-41d0-8fdc-add255422dd2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2402c2-0920-4f62-84f5-8c382a351285", "sighting_of_ref": "indicator--d70ada49-add0-41d0-8fdc-add255422dd2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572ae9d3-e089-4a3e-a124-d3becc65d4a4", "sighting_of_ref": "indicator--940b0d35-d564-4393-b59e-872900879322", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d152ca-df79-45be-ba98-8657fea2c7df", "sighting_of_ref": "indicator--940b0d35-d564-4393-b59e-872900879322", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c47ff76-cb4f-47ba-84bb-9b7110ecbba7", "sighting_of_ref": "indicator--43f78280-3ea8-42ab-9307-7a13a331ce06", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fc93e6-f70f-4220-8554-61de79154170", "sighting_of_ref": "indicator--43f78280-3ea8-42ab-9307-7a13a331ce06", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d99c79-4c94-4988-95e0-b938e543d880", "sighting_of_ref": "indicator--43f78280-3ea8-42ab-9307-7a13a331ce06", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7389bddd-10cb-444c-927b-24e48a927d5e", "sighting_of_ref": "indicator--c118d4a3-850d-4e94-a1c8-9df04991f1e0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--359646f0-d2f0-4b95-aca6-d9560964b890", "sighting_of_ref": "indicator--c118d4a3-850d-4e94-a1c8-9df04991f1e0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10258ddb-f9d4-47a6-9500-2651f52e29f0", "sighting_of_ref": "indicator--c118d4a3-850d-4e94-a1c8-9df04991f1e0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab747414-befe-4e9d-a314-4d0f112239b1", "sighting_of_ref": "indicator--e8a70c45-d126-4680-a67b-83abd2b525ee", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980b1f08-7ea9-4761-96cc-b9cb9598421b", "sighting_of_ref": "indicator--e8a70c45-d126-4680-a67b-83abd2b525ee", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90abe45-f4bd-4a21-8d3e-61aaa072dab1", "sighting_of_ref": "indicator--e8a70c45-d126-4680-a67b-83abd2b525ee", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ddc529a-fe8f-4dc6-bc24-a92312348698", "sighting_of_ref": "indicator--a434fac7-cdc9-423c-bd09-2d753e30f3f9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d40bd8a-c4a1-46fd-b92e-ba707f126266", "sighting_of_ref": "indicator--a434fac7-cdc9-423c-bd09-2d753e30f3f9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8deb4e6e-450d-4ac7-8b8b-abfaccdaddcc", "sighting_of_ref": "indicator--a434fac7-cdc9-423c-bd09-2d753e30f3f9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d66df81-0cdb-4261-9c00-3987b0fcad05", "sighting_of_ref": "indicator--3f8a2b24-77b0-45cf-82cf-fda61861dabe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881ca87b-328c-4080-abf8-6b6803dc0720", "sighting_of_ref": "indicator--3f8a2b24-77b0-45cf-82cf-fda61861dabe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f32f4d7-cdeb-4548-8e48-4a3a3045e394", "sighting_of_ref": "indicator--3f8a2b24-77b0-45cf-82cf-fda61861dabe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e3852b-bfc1-444c-8286-63cb88bb0edf", "sighting_of_ref": "indicator--722b0fac-6edb-48fb-93cd-c3ac43979bbd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abd5c53-8bdb-446b-81f2-f8df13287a5f", "sighting_of_ref": "indicator--722b0fac-6edb-48fb-93cd-c3ac43979bbd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ceed70-e9dc-4b4a-a59a-c4d0777b7398", "sighting_of_ref": "indicator--722b0fac-6edb-48fb-93cd-c3ac43979bbd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7820bac4-a06f-4d49-87dc-0108d4066d94", "sighting_of_ref": "indicator--9d4d57d9-dc81-4012-9e6b-1bab3f3ae73b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da8e3fb-e401-4e7b-bf64-4e1e00133052", "sighting_of_ref": "indicator--9d4d57d9-dc81-4012-9e6b-1bab3f3ae73b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5514640e-e571-4dc0-a2ff-55baf69816d6", "sighting_of_ref": "indicator--9d4d57d9-dc81-4012-9e6b-1bab3f3ae73b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42836a47-d752-4ebd-a9df-cb14e74907e2", "sighting_of_ref": "indicator--a11ee5a8-81f0-4353-ae7e-e70785009b3a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569334e6-8111-44f5-a423-2d3652afab4a", "sighting_of_ref": "indicator--a11ee5a8-81f0-4353-ae7e-e70785009b3a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cc5293-7c2b-4825-949e-b766eb323614", "sighting_of_ref": "indicator--a11ee5a8-81f0-4353-ae7e-e70785009b3a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ac45db-2494-46b2-90ab-a3929449819b", "sighting_of_ref": "indicator--221597a1-8ecc-4147-98c3-a1d10dd71384", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f7f81f-11e6-4a5a-8be8-be619f616e7c", "sighting_of_ref": "indicator--221597a1-8ecc-4147-98c3-a1d10dd71384", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e7b3a9-de68-4799-8227-2453fb1c45b0", "sighting_of_ref": "indicator--221597a1-8ecc-4147-98c3-a1d10dd71384", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cf8fb5-038b-429f-ab59-a114f52afa5e", "sighting_of_ref": "indicator--db4c824b-010e-422e-8e60-cd8d778c057f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccadfdd-7e15-4bda-8d88-dc1b64130ab1", "sighting_of_ref": "indicator--db4c824b-010e-422e-8e60-cd8d778c057f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb4a935-4975-4c3f-b891-9101e89f638d", "sighting_of_ref": "indicator--db4c824b-010e-422e-8e60-cd8d778c057f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43f8d78-8501-47b9-a212-a7938e919dd1", "sighting_of_ref": "indicator--60c3dfe1-e621-405b-ab67-2f442279803a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a172a01-ebe0-4e45-b141-91b3fa8b4e42", "sighting_of_ref": "indicator--60c3dfe1-e621-405b-ab67-2f442279803a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c47f4e7-aae5-48e7-b7d8-49b9dbef6626", "sighting_of_ref": "indicator--60c3dfe1-e621-405b-ab67-2f442279803a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b4f1ea-e87f-4aac-b47d-64d671caf6c9", "sighting_of_ref": "indicator--ad9291d7-a46e-46bc-a623-d50aaed4956c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47972bbf-a2d5-4ff3-b2c7-33c2845b9977", "sighting_of_ref": "indicator--ad9291d7-a46e-46bc-a623-d50aaed4956c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9604094a-29ed-401c-93a4-adf242110de3", "sighting_of_ref": "indicator--ad9291d7-a46e-46bc-a623-d50aaed4956c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047137d2-71b6-4158-ba1b-74ddfb9c5bf7", "sighting_of_ref": "indicator--5fa7dbba-a701-481c-b4cd-e52d2abd57e3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ede9686-b125-4dcc-91d0-1d84acd294af", "sighting_of_ref": "indicator--283287f8-d73b-45aa-baa5-ac86dc3398a9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5407f1c-c9ea-4380-b608-29235d206518", "sighting_of_ref": "indicator--099c5d33-151a-4b5f-b14e-6f2fa8f0656a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464779e1-3310-43df-8fb8-d86c5a9eb7f9", "sighting_of_ref": "indicator--45474957-d97a-412f-b397-d945e5633851", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0358f88-bbdc-48d5-90a4-7c1ba24c9d2d", "sighting_of_ref": "indicator--f7b19ba6-a242-4f40-8b96-cd1779fac191", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdf2da9-a040-4131-8255-cfebd8c41948", "sighting_of_ref": "indicator--9e345310-5e8b-4a4f-be1a-af4cce399133", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20f01d8-d8d6-4237-950d-822cd7c9d8ed", "sighting_of_ref": "indicator--62e1729d-c9f8-4bf5-859f-87819c96138a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c226e69e-4fb5-44a0-b73f-982a5b7f4f26", "sighting_of_ref": "indicator--1af6dff6-63dc-4e15-bbe0-06e475919908", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63094454-1146-4647-9904-3d1fb51a84b1", "sighting_of_ref": "indicator--83d064cd-46a0-4d2e-a595-af7803b00407", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25e458f-ca3b-4093-864d-ad42f6a9cf7b", "sighting_of_ref": "indicator--83d064cd-46a0-4d2e-a595-af7803b00407", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68cc3ba-15b9-408e-8f2e-1a685cb178a8", "sighting_of_ref": "indicator--c19e6988-c21d-4d8d-96ab-15907a507cce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071b1692-0196-4ec7-99c6-1e4b53230669", "sighting_of_ref": "indicator--19b5a6ce-0f4a-4edc-bb13-16d88ac49059", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d921e2-fc60-44de-91f2-371e3a5c172e", "sighting_of_ref": "indicator--e26ee3e0-4d8e-40b3-8e36-49fc563a6ed7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe3cc37-76ce-4b2d-a2fd-a7fafab9f3ab", "sighting_of_ref": "indicator--dd7791f2-9073-4d83-9f02-2e70851986cd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7c8140-9480-4194-a136-190c0d9a812d", "sighting_of_ref": "indicator--d9658cec-6b07-46b8-8ac5-6800e25e6e8c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572a89ad-e30e-4082-b5b1-8d88f03b6a9f", "sighting_of_ref": "indicator--a5826663-e8de-4b6f-8d69-dc02cf378735", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ad0965-2012-4103-8f6f-81fd8d06aee8", "sighting_of_ref": "indicator--c5f1e604-055c-4314-ae46-6bdcfe72ee2e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703499f6-0db8-4814-96dd-d86e5f29ad03", "sighting_of_ref": "indicator--feb6f89a-349b-473c-a2a7-e19e28c68f77", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619fe4e1-25ec-402a-8a56-36345c7efb7d", "sighting_of_ref": "indicator--feb6f89a-349b-473c-a2a7-e19e28c68f77", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92990953-08ee-4e80-a161-0096b645ff3c", "sighting_of_ref": "indicator--c8a7975f-3917-4ff5-bbf7-438a1abd76fc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18378af9-277e-4076-a5c1-fbb75e804d2c", "sighting_of_ref": "indicator--afcd590e-4db8-4dc1-b767-015cc0680dfb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad4eadd-025b-42a5-8f90-7492dd573c05", "sighting_of_ref": "indicator--289fd41f-330b-43af-939e-42fb83710374", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44664e75-cc4f-4098-b751-c790fca18b8d", "sighting_of_ref": "indicator--289fd41f-330b-43af-939e-42fb83710374", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94dafb47-7859-4c7c-b98c-5bb38e95407b", "sighting_of_ref": "indicator--289fd41f-330b-43af-939e-42fb83710374", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1ccdf8-742a-4b46-9caa-a77b6645b929", "sighting_of_ref": "indicator--558ecf36-2bed-406b-9140-efdeea40e8e0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cfab1e7-7cab-4593-ab27-147f73581c2d", "sighting_of_ref": "indicator--145949a9-efbd-4327-a6b8-b5c30cc2a31a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033fb185-0e98-4c25-be0a-03a4a2a8d9a1", "sighting_of_ref": "indicator--145949a9-efbd-4327-a6b8-b5c30cc2a31a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b2dc53-d2c9-47b8-a186-9c815bccd173", "sighting_of_ref": "indicator--145949a9-efbd-4327-a6b8-b5c30cc2a31a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2794600-4a3f-4b28-a822-baa8e5a692f1", "sighting_of_ref": "indicator--3fd6ea2d-825a-4ce6-9318-d7f812a8c552", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f65f7d7-82ca-48ab-a2f9-5088fcc4e79d", "sighting_of_ref": "indicator--3fd6ea2d-825a-4ce6-9318-d7f812a8c552", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155fd032-f742-48db-b6e0-2dca40d704e8", "sighting_of_ref": "indicator--a34770ab-fd3b-4cc3-817d-70c8f1752357", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac4f519-d7e8-426f-816d-13eaa518a795", "sighting_of_ref": "indicator--a34770ab-fd3b-4cc3-817d-70c8f1752357", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8324c118-5de6-478a-9132-0aa821b00864", "sighting_of_ref": "indicator--a34770ab-fd3b-4cc3-817d-70c8f1752357", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ad3a37-523a-4fac-9751-5f50651eb798", "sighting_of_ref": "indicator--f4cb42ab-056d-417a-995e-f9fc734209e7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b11005-f85c-42f5-b50e-b30e168af6e1", "sighting_of_ref": "indicator--f4cb42ab-056d-417a-995e-f9fc734209e7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51d85a9-9ca3-4bab-99e4-c5efb7918845", "sighting_of_ref": "indicator--f4cb42ab-056d-417a-995e-f9fc734209e7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095caa2c-7b98-4aa8-87e1-bda76bd8beab", "sighting_of_ref": "indicator--da8326e1-0962-4a08-bd30-f688d210d009", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a540e45d-7cad-4cc4-81fc-226af8f11fd0", "sighting_of_ref": "indicator--c56c3d38-46d7-49dc-894c-469936e95560", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e852f057-f314-47c5-8229-7201e837891c", "sighting_of_ref": "indicator--12a7abb0-9743-4d57-a691-dadb46c5eabe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49784961-5d2f-4c41-b6b3-bd205c5e3c79", "sighting_of_ref": "indicator--12a7abb0-9743-4d57-a691-dadb46c5eabe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8881c1ed-b32f-423e-acff-ae53f1c53db2", "sighting_of_ref": "indicator--240294ab-a68e-49de-927e-9c3923730469", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fec6c1-f719-4189-92ca-73cb36cd0a2e", "sighting_of_ref": "indicator--240294ab-a68e-49de-927e-9c3923730469", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3344a0-465d-4685-82e0-b69cc4c32acc", "sighting_of_ref": "indicator--240294ab-a68e-49de-927e-9c3923730469", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e869ce38-6c3a-4a4a-93ae-ad655ae44277", "sighting_of_ref": "indicator--fa54ba3f-c673-45f7-927b-e5656b97792e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7df3f8b-6bc8-4ff6-b174-a232cb01d9ef", "sighting_of_ref": "indicator--fa54ba3f-c673-45f7-927b-e5656b97792e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac64c3f-d618-4138-81f9-468357a3a5c1", "sighting_of_ref": "indicator--fa54ba3f-c673-45f7-927b-e5656b97792e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa765348-3f7c-4c64-8612-0504e61f95c1", "sighting_of_ref": "indicator--9ed57ccf-21b3-48e7-a319-c049a054abe9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88f8a3a-0690-4c44-a435-8d1a7a5a258b", "sighting_of_ref": "indicator--a4e57fc1-e05d-480d-9a62-8cfe20cccc27", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c18155a-a315-45ac-b433-399bc01660e6", "sighting_of_ref": "indicator--ab890ddd-dc79-4d7a-b397-238e0fa84930", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cd6c5f-0b89-4c19-8bf8-e71a5d556322", "sighting_of_ref": "indicator--eee55ab6-512b-4f15-9eb3-277f045b4628", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2724f39-6644-4cdf-86f5-385c76ca056d", "sighting_of_ref": "indicator--e1374726-dcdf-4929-b14b-4a19c645c36b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5ca9ee-2cba-4f5e-9a45-fb2efaa5088b", "sighting_of_ref": "indicator--e1374726-dcdf-4929-b14b-4a19c645c36b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e351ee-878e-4d98-9f9a-77275ab5f47c", "sighting_of_ref": "indicator--e1374726-dcdf-4929-b14b-4a19c645c36b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922a16ff-3b79-49da-9cb3-6169c19ef2e6", "sighting_of_ref": "indicator--28924071-0b41-4502-ab16-b01f571dec38", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49014bdf-5edb-4228-98f8-d3bf1dae0b6b", "sighting_of_ref": "indicator--4535666d-df78-4486-8305-63bb5d395d2d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c2bb85-cf2d-4bcd-ad4c-2e9463ef8aa7", "sighting_of_ref": "indicator--40c40da1-d438-437e-a604-6acdebe7574c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6284da0d-78fe-466e-8db5-b3fb47460e17", "sighting_of_ref": "indicator--40c40da1-d438-437e-a604-6acdebe7574c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fc3784-dff3-4e2d-9da7-e66790437ec2", "sighting_of_ref": "indicator--40c40da1-d438-437e-a604-6acdebe7574c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3158ef4-0394-47a1-abdc-586164de0c6c", "sighting_of_ref": "indicator--012b5e0c-a504-4caa-8b32-258e9b1e3f0f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7bfdd2-7b17-434b-9e33-87d88ac2b350", "sighting_of_ref": "indicator--a3b6d7a1-d36f-4060-9e80-6bbdb77b7fd0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b779fc97-899e-44aa-aa7e-5727f342d40a", "sighting_of_ref": "indicator--2db5611e-de03-4e09-a1c8-12339a141a73", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f668808e-ba09-4620-9a46-5f276d3d078f", "sighting_of_ref": "indicator--1539ac27-cdeb-41ce-9883-223957cf94f2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137a709c-64f4-4290-8148-b8fd921d854a", "sighting_of_ref": "indicator--fa9a6276-0b8b-4a90-8109-89a2cb8ff4ea", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6071a3-38ca-47d0-9745-808c4ab462a6", "sighting_of_ref": "indicator--1849bede-8050-4388-ba72-da5f2c839976", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b209721e-65ab-49c5-bf37-3ea10203cead", "sighting_of_ref": "indicator--10bdc7bc-e3e3-4ccd-aed8-a2e8c2844c8b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9826d28e-da3a-4ed7-b0d6-507781a992e5", "sighting_of_ref": "indicator--7da0009f-aab2-48ad-8bea-d5c7bc3498fa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e25e84b-beb2-4fdc-9437-54b5a281d377", "sighting_of_ref": "indicator--0f75a723-d80e-4ac3-827f-8bdac6c41715", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf223f6f-fb8c-4b22-b6d2-8f2e196288fd", "sighting_of_ref": "indicator--008fe29a-3e11-4cd0-8f6f-c23fef4f3630", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97b111f-8ad3-41c6-89c5-8b6951d4421c", "sighting_of_ref": "indicator--0c478f76-5b6e-47a7-b886-6d6fd0d81227", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bcf228e-d958-4614-90b1-998afcb591aa", "sighting_of_ref": "indicator--b6964e5d-6a28-4f33-848d-0b5c7eb1f9d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4629b091-1d8a-49a3-bb7d-c599feb57930", "sighting_of_ref": "indicator--67a98847-47a9-4ce3-8420-2d91f9e72d76", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce746fd-146e-40d6-9ee3-1d0de2623e83", "sighting_of_ref": "indicator--5c309965-9d80-48e2-ba0e-701e638b6777", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1ca9fa-2588-4a9b-8f28-8c0c87283912", "sighting_of_ref": "indicator--b866bc4c-fe94-4410-8dce-dbc591f79ad9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7fd3a1-e2cd-4431-b50d-0fd183d9ba27", "sighting_of_ref": "indicator--8afd6a94-5b40-44b0-9a81-73a870fb7678", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97da1d87-08d9-47a7-946e-3a7ab81dacd7", "sighting_of_ref": "indicator--6fc3f1e8-e509-4c36-b812-c26bb9d30278", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd851ad3-ba03-4141-bd2b-412cd50dc67d", "sighting_of_ref": "indicator--b9335393-5f99-4180-922f-ff6f3188f00e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3317ec13-0794-4528-a616-6e117a17afd6", "sighting_of_ref": "indicator--63a4cbe1-e898-4470-8326-b350994fc192", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df50a64-974d-444f-b40d-1a18a241616e", "sighting_of_ref": "indicator--83253190-c2f6-4da8-8837-adcfaea53d0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814d6acc-3325-41c0-9f1c-4fbd77cb83cd", "sighting_of_ref": "indicator--e9555a99-280c-44fb-af02-df612dcf5c25", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6991bb-3ad9-45d1-b501-d5ce41945c3f", "sighting_of_ref": "indicator--b1ac489d-526d-452b-84ea-46edd91d92b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f0b2e6-d8ec-471e-9072-86880d88136e", "sighting_of_ref": "indicator--2826a6e2-84cf-467e-bc0b-b1628b9d0714", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88faad4c-4f85-4394-acf3-3356b884f0af", "sighting_of_ref": "indicator--6a78e5df-6718-466e-9ae6-a39d4c1ed50b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00bc2ee8-3601-4eac-9919-8ce6f22f353b", "sighting_of_ref": "indicator--8fcb0c22-90a0-4a51-8b55-3ae30648e8cb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23aa83a2-4f5a-48a6-884a-2e49178e2b00", "sighting_of_ref": "indicator--e567c281-bd6d-4b47-bfdb-e054fb8460c2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4382fd-b303-45f2-8f8a-9ac49c7966e7", "sighting_of_ref": "indicator--e567c281-bd6d-4b47-bfdb-e054fb8460c2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9830ad-e0f1-46e5-a74c-b83b21af7092", "sighting_of_ref": "indicator--3acc7039-3843-4f66-95c2-0bcfe2e9d081", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba01d37-524c-4973-95b9-278e26a06970", "sighting_of_ref": "indicator--16f6e94f-1983-4568-8b54-d904f24a9e28", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e8a2a6-19ff-455c-aa4d-76c67be03d98", "sighting_of_ref": "indicator--16f6e94f-1983-4568-8b54-d904f24a9e28", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5716522b-a564-488a-99ce-2e1c5bc488fe", "sighting_of_ref": "indicator--553f874f-f15c-47fa-a133-324d431357e5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54cb101e-9e26-45b6-8312-165be9250f04", "sighting_of_ref": "indicator--da26293a-f747-4edb-bfe1-9bb221b4743b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9964fd7-930f-4065-a4a7-47ea933e2a4b", "sighting_of_ref": "indicator--da26293a-f747-4edb-bfe1-9bb221b4743b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3743bf30-fca9-45fb-b60b-2a802f0eb929", "sighting_of_ref": "indicator--23c91473-d7a0-4223-be5e-7b7e3a9ac4a7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80ecca3-d998-45c5-8c24-8284d0e76d9f", "sighting_of_ref": "indicator--23c91473-d7a0-4223-be5e-7b7e3a9ac4a7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87913b99-28c9-4e17-9f26-69a69494988f", "sighting_of_ref": "indicator--5682e100-9258-41d0-9d38-60eea607bac4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3ca094-2bec-4a2c-8296-f35854c35bfc", "sighting_of_ref": "indicator--4d8039fc-05de-415f-996b-afa65991e6b1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28be53c1-f065-49b0-97cf-a71d43a34df5", "sighting_of_ref": "indicator--cc86b58b-7029-4f92-bde3-9245beb7a74f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd89351e-cdab-4833-b8ab-2b1d74f5bd4f", "sighting_of_ref": "indicator--1de439f9-5713-4058-8492-b98d90ec706d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4610e24f-7c0c-4ec1-8340-63fd47051eb1", "sighting_of_ref": "indicator--47da3ad1-a160-42ca-884f-5eaf7a2bd1e8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465397da-d30b-4cc8-8ce4-7e2b0164c18c", "sighting_of_ref": "indicator--47da3ad1-a160-42ca-884f-5eaf7a2bd1e8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e755989-ecc5-4b35-8079-0d9f2cf205d6", "sighting_of_ref": "indicator--47da3ad1-a160-42ca-884f-5eaf7a2bd1e8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9f91a8-3669-4438-b7c3-c8c95a8b06b4", "sighting_of_ref": "indicator--0eca8714-d08b-4590-b99d-c9ce0fb7332a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456efdac-4e57-4f97-aedc-5abcf9319f24", "sighting_of_ref": "indicator--4d0b9c64-15b5-414e-8a53-5080d55eebc8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6f54d3-f280-4738-bf09-0685e2486f9d", "sighting_of_ref": "indicator--4d0b9c64-15b5-414e-8a53-5080d55eebc8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c067ac4-8ff3-4f3d-9a1a-41a33648169f", "sighting_of_ref": "indicator--4d0b9c64-15b5-414e-8a53-5080d55eebc8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf99011-8398-4c1a-a228-2ae252de487a", "sighting_of_ref": "indicator--61873952-1f63-4f7e-85f3-652df1e90238", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6dfbbec-53f9-418c-affb-91377356f6f6", "sighting_of_ref": "indicator--41f547af-c92e-48d5-9b66-9028705d749a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70ee560-e765-43f8-b6b5-c8ac7764a9c9", "sighting_of_ref": "indicator--fe01af6b-58a9-48d4-9470-23d36aad0858", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c2b7c5-80df-4fb3-be10-e694c95440cc", "sighting_of_ref": "indicator--69e45888-4a4f-4639-ad79-fe3fef9c0e1c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65776955-af07-433c-9b12-c7b299cf632d", "sighting_of_ref": "indicator--f92e5f60-a724-4f61-b818-84b87ca5bf91", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2c75c0-5c39-461f-b9be-3368483f2777", "sighting_of_ref": "indicator--50a8d30f-cb94-4dad-b2c1-f02a0bd99927", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3fa0bf4-285e-4517-aea9-618322ee5cb3", "sighting_of_ref": "indicator--7c7631b2-1157-4e89-9ac8-1f7913c497c3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b1012a-691a-4b59-90d3-bdbc80e2b66c", "sighting_of_ref": "indicator--570e01e8-34b6-4d2b-8b47-5a4a974f8f5a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f96242f-f03b-4a33-88ac-0991985bd6f4", "sighting_of_ref": "indicator--570e01e8-34b6-4d2b-8b47-5a4a974f8f5a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f138fb5-37b1-49e7-a578-25a0f9edaf64", "sighting_of_ref": "indicator--fc4c4a0f-a7c0-41ab-8a86-183996a75d08", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675a56ec-e284-441a-9524-9bd28bcb5bfd", "sighting_of_ref": "indicator--dc49442c-df4c-4074-873e-7d716332503d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1155bf-7a07-4830-89fd-910d9cfcd553", "sighting_of_ref": "indicator--195c6e3f-7f96-4b0d-8468-73abfd433537", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2edb2a-92f4-49bc-b7fa-ddeccf6f4613", "sighting_of_ref": "indicator--069c8e2a-3ce2-4b1c-9c46-9451431a6453", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965084a5-b8f9-405e-9bc8-1684827f08f4", "sighting_of_ref": "indicator--c5f56a07-c6eb-4bfc-b1e7-fdad4693b70f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0943f6b3-ec21-4c96-9de9-54ce4ddd5d0e", "sighting_of_ref": "indicator--c228d521-a9f1-4a43-b005-19dae6ba68c1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9de87b-33be-438e-a02d-4b09c4b44436", "sighting_of_ref": "indicator--b3740afe-9725-4736-a596-ac2c497e3fd7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a499a3-e0f4-450f-8d43-af5bbfdd1207", "sighting_of_ref": "indicator--8f591264-a259-4c7d-aeec-87fa80bcb848", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16fb2d2-73e8-4671-8370-c789ae2914e6", "sighting_of_ref": "indicator--9d85467c-1b34-4119-b723-adaa1f9e35a0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ba409f-d9a4-4db4-993f-162f3a5459e8", "sighting_of_ref": "indicator--74cad69b-a2bd-481e-91c7-9a6fe46492a0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5657a8-3128-4571-bbb2-bfcb52ae002f", "sighting_of_ref": "indicator--1ccbfb4f-e4a9-4bf9-90db-71e2af2eb610", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d70e92b-ffc7-4ee5-96fb-965d89571cff", "sighting_of_ref": "indicator--76acb22f-1e8f-4f9f-bac8-c7d1b14edab7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2780a1f1-ec49-477f-9a58-31be6385174b", "sighting_of_ref": "indicator--76acb22f-1e8f-4f9f-bac8-c7d1b14edab7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e332f3cc-dd88-4d0c-8b50-4967eea9529c", "sighting_of_ref": "indicator--e509d785-55ae-45db-8efd-ed6242408d14", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941ee88d-eb4e-4d4b-af99-741fa5841130", "sighting_of_ref": "indicator--5d8684ba-8d25-4ae2-96e4-526ae4d3399f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2a794b-5e7c-4066-ad86-356a1aa4a392", "sighting_of_ref": "indicator--8f63fbf6-6805-4b4e-bc54-239dc4689ecd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd273592-c0e2-407d-9846-5aa2a46f735d", "sighting_of_ref": "indicator--b6a61e23-61d0-4e72-a1c0-5397b221bdbd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229c6f99-0dc1-4b87-94fe-509d499228b2", "sighting_of_ref": "indicator--77e10134-6a64-4e05-bf98-ec14ce4802d2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1791f639-bea0-43e9-a053-b59a87d35adb", "sighting_of_ref": "indicator--e583ed54-9576-4ac3-a866-47052b85ffa7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc608ea6-4a7f-481f-8c0e-106b7aa010f8", "sighting_of_ref": "indicator--0b5597ce-3231-4b0c-a391-149a43ffd49d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9561b66c-2be5-4d4d-a187-6aad0e555616", "sighting_of_ref": "indicator--4af0ec6b-9639-4b13-8e30-e1a7c101bef2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b34a64-f3f5-4764-bab8-c75666c16c3a", "sighting_of_ref": "indicator--28f5cf32-0319-4f66-8fe9-4ddf9940fa61", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6b2ebe-242a-4655-988a-7fc4c1b89622", "sighting_of_ref": "indicator--9f4f509a-d844-4ae4-ab2b-1d18af0f66a2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40b7422-128a-4507-b271-53a4e2aff7a8", "sighting_of_ref": "indicator--5734386e-c1a5-487d-a24d-d00b7d27f40c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8a0b79-a354-4c6d-adc7-4421fedfbc69", "sighting_of_ref": "indicator--963da76c-789b-48b0-b955-15bde7907c05", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7098b5a6-3d13-4d98-af9a-3f0970983733", "sighting_of_ref": "indicator--6ad9cf0a-2103-4836-a84e-fc5a3de60106", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c704127d-c011-4e41-961a-87451f7319fa", "sighting_of_ref": "indicator--c73f48c6-7061-40b5-ac14-6e5788057899", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b1ce81-cccc-43dc-80b7-5bae474d9583", "sighting_of_ref": "indicator--cff8fdf4-b966-41b5-8d3e-2df260458dbb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206cb358-ccc8-4c14-8db1-a43be280a162", "sighting_of_ref": "indicator--f66b4039-5366-4786-83af-d9a86d8db628", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f8176d-0a02-4c89-a65e-9ebf0c6a5a22", "sighting_of_ref": "indicator--0ae9c455-c771-4a74-8373-24309a447887", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2cfbfc-24be-4f43-ac0d-672a78bafe69", "sighting_of_ref": "indicator--a166847b-98cb-4b23-9522-847000f72f0b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d72c91-d33e-4b07-ac4a-15c276cce52d", "sighting_of_ref": "indicator--4c901432-6632-48c7-9252-194fde6db08c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3835182b-8f72-45e9-b8b3-396dc30206c4", "sighting_of_ref": "indicator--ed2aaa1e-0e1d-4582-8677-86ecdacf7592", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf42de6-27e6-4233-834f-0a9af24a3147", "sighting_of_ref": "indicator--c8a3c51b-d2bd-4ebc-a5f5-0dcfd94d1e53", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44324ef-3847-47ba-9112-b2c18f827962", "sighting_of_ref": "indicator--89df3bfc-f520-41dc-9eb0-35d4b6b36b7d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170ce405-328d-4bab-aee3-d36dd3c1dd46", "sighting_of_ref": "indicator--80f601f9-37f4-4d6f-8fea-4cb8df59d881", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a71e3dc-cc86-453b-9754-1d64b535a541", "sighting_of_ref": "indicator--0c17e989-7c5f-4303-9f2f-eb24d9e8b60a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a804085-e78a-4731-b9f8-24ef440e642a", "sighting_of_ref": "indicator--0eb8af8c-f8a1-46ab-8925-6d50981a3a7b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b07e8a-af7e-41a0-8add-e76e65b7932b", "sighting_of_ref": "indicator--e69b8bf8-712f-43bf-b518-2036537e06a2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92817b98-10d6-4da6-a94b-592347bc4ad3", "sighting_of_ref": "indicator--7cc99af9-78de-4110-8db3-7f4f47600966", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e143a824-5f8c-42e1-af59-5e42bed2ceee", "sighting_of_ref": "indicator--ebcb007f-f2cc-40fc-89c3-497408ab3297", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a76da47-9276-4f73-b74d-77d459fc876a", "sighting_of_ref": "indicator--9b78eb0c-f561-414b-9a7d-90616bb33995", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afca75e-37d8-46f1-b7f8-ce39fd9f889f", "sighting_of_ref": "indicator--e112c05f-e48a-47a4-a011-c0481dbcf8c2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef17240-1782-4a1d-a029-a95376fab912", "sighting_of_ref": "indicator--030b3de6-d7e3-4419-9a8a-95809b0f76bf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b5913d-f538-454e-a31d-41c1f00232de", "sighting_of_ref": "indicator--02e7072f-61f0-4353-8a87-8caa656aea8b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7885337-85d8-4964-865b-2cfe56a0490f", "sighting_of_ref": "indicator--42f79143-2048-4fb7-8fb6-0245a3098d8f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2487da11-4971-42b8-9963-3572a05549d8", "sighting_of_ref": "indicator--3557e3c9-5c95-4093-9a0a-671a9ba358d6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c637fe-81d3-4b0b-b28c-4cce07fccaac", "sighting_of_ref": "indicator--df3869f6-67ce-4874-8c15-b162d8bb9fe6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba8977b-5bc5-425c-b071-44fbb2a80970", "sighting_of_ref": "indicator--d2dbf22b-5c38-4393-b5f9-2b4eec7e284c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54995ab2-1081-4567-b5ee-0fada55f05f6", "sighting_of_ref": "indicator--0552af8b-8a36-426d-ab1d-5e4b8ed9c1d9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cad743d-e2bf-403c-aa47-cbf629e4fbc4", "sighting_of_ref": "indicator--31d0b6e4-9e07-4b47-9313-78016a1572b7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cb5cea-c765-4452-b4bb-39fdde9421ad", "sighting_of_ref": "indicator--3c10756e-ad8c-42af-b006-92c7d9cf496b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d57f179-d610-433c-9d4b-8aedb387e639", "sighting_of_ref": "indicator--b9dc2fd1-ec1b-43c8-81d0-95b9d341d875", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18be83fd-dca1-42e0-9848-910e8b7eccdf", "sighting_of_ref": "indicator--c8449629-a855-4593-9f8e-93b3cf8b73ba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92bdec7-7e69-487a-aa7a-c5472667f8d5", "sighting_of_ref": "indicator--c23fa75b-b216-4c69-9317-fbe04fb5f998", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58dd8412-5a54-484d-8e34-0d5963b0a52c", "sighting_of_ref": "indicator--c153e0bf-ed4f-405e-8391-7eef4c9c98bb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f343c3a-55b1-4c57-bf01-6139e9b3fbe8", "sighting_of_ref": "indicator--7a2edd3b-ae13-4a38-9af6-5d29f29acca8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693a49ca-6c1d-4bc1-98f2-99078fed32ae", "sighting_of_ref": "indicator--05a30955-128f-410b-bd14-5e7a0d4322d1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654d6170-d86c-4214-a8ee-a5fc8bc62531", "sighting_of_ref": "indicator--f3ec984a-2bb5-403a-a403-041f51004302", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d54660-d400-46b5-8e65-c869e860a62e", "sighting_of_ref": "indicator--49db11ab-1405-46a1-ab5b-06e50df61d23", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67946674-556f-4426-8421-73d40da9812a", "sighting_of_ref": "indicator--49db11ab-1405-46a1-ab5b-06e50df61d23", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa13b16-6fa9-4e05-aaa3-3852961a88c7", "sighting_of_ref": "indicator--49db11ab-1405-46a1-ab5b-06e50df61d23", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72fa3a9-caf7-48b2-a199-164ac3e10a98", "sighting_of_ref": "indicator--81038c0d-09d5-4ee3-b377-13d0616d1894", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345167e2-62ca-4245-bc8e-2d9a6cd8fa3f", "sighting_of_ref": "indicator--e20b4931-5144-44ca-ae41-a2b70c6ff053", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fdad2c-40ed-4a17-9a69-a605e11af675", "sighting_of_ref": "indicator--5caca89b-4808-4fc4-ad8e-45590b449311", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d16a29-92d1-4372-9622-baec14cf692d", "sighting_of_ref": "indicator--6783e6c0-75db-490c-93ce-3a03953d2e5b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af23d84-912a-4751-a8bb-80f8722f4252", "sighting_of_ref": "indicator--19d5c60f-e0c4-45b2-aaf9-51691eef8d4f", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861b0ef6-8201-442b-89fa-c9758a1f7474", "sighting_of_ref": "indicator--85913f35-cb65-4659-8ed5-c52841a876c2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b014193-4daa-468c-85c8-15417704c87c", "sighting_of_ref": "indicator--6b25826c-3ea2-451f-a2c3-b11187c054b3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47fd8f0-b82d-42a6-a35c-bad05efc196b", "sighting_of_ref": "indicator--9b9c0774-e2d2-4967-825b-2051073d5aad", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d92a10-1b5b-4aba-8d28-d7f3009463d8", "sighting_of_ref": "indicator--4d270c6a-215d-4d58-8119-e65f19ba9185", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e314c11e-720c-49f1-a77d-477dbf04e1e7", "sighting_of_ref": "indicator--b3168f4b-a952-4a91-9f53-d01664da6477", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b76685-e47e-4063-885a-03c4bd007ce5", "sighting_of_ref": "indicator--fb9b952c-c77f-4af0-acc3-48bf879895da", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cb9743-8273-466c-b885-a75c5b4ee8dc", "sighting_of_ref": "indicator--fb9b952c-c77f-4af0-acc3-48bf879895da", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae5edbf-9d61-4cc0-b780-8d5c1791ea7e", "sighting_of_ref": "indicator--2229bcf0-d920-42ce-afe9-15323c155830", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a28c7d7-3795-43da-bc30-de8a9196161e", "sighting_of_ref": "indicator--2229bcf0-d920-42ce-afe9-15323c155830", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec6ccc7-28a4-4662-ba54-3921834863fb", "sighting_of_ref": "indicator--b5c1e098-9bf9-4566-9b55-9e507d3ed802", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9baf8f8-8ee2-4695-8b6b-f3ea9d907d81", "sighting_of_ref": "indicator--b5c1e098-9bf9-4566-9b55-9e507d3ed802", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb99009a-481f-464a-be9c-97eb5734c9f2", "sighting_of_ref": "indicator--b5c1e098-9bf9-4566-9b55-9e507d3ed802", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af04c5cb-2c43-46ef-9c4b-965c6549c3f1", "sighting_of_ref": "indicator--91f9e0a7-54b0-413d-ac6f-a792b051fd6d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8028b02c-72a1-4594-9868-3d4e35536048", "sighting_of_ref": "indicator--91f9e0a7-54b0-413d-ac6f-a792b051fd6d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e37ff2-5a6a-4a3c-aac2-c76d87ca2f34", "sighting_of_ref": "indicator--119bd66f-56ef-48c5-8854-90e1ceef5141", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204aac46-62e6-4178-b9f4-2fb3ec87850b", "sighting_of_ref": "indicator--119bd66f-56ef-48c5-8854-90e1ceef5141", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6715a6-573b-4449-999c-3f4884eaaaf7", "sighting_of_ref": "indicator--6ab7a0c7-00d9-49e1-b0a9-f8173ef5f1d2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b55071f-076e-46e5-83ca-8d841b20378d", "sighting_of_ref": "indicator--6ab7a0c7-00d9-49e1-b0a9-f8173ef5f1d2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64bd0c4d-89d6-4953-8ea2-80c3f11d13cf", "sighting_of_ref": "indicator--a93b030e-a95b-4c12-a635-cd9a54b47936", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e68b84-7fb3-4598-9693-eb4013b1d7b6", "sighting_of_ref": "indicator--c45ad312-5ba4-4266-9d28-3bc52f494342", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663d7cfb-6e75-4526-bb93-eebdd38bf3c6", "sighting_of_ref": "indicator--220fd688-6d6c-456e-9b4e-3d385506263d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4296afa9-182c-4428-a137-0b95657df73c", "sighting_of_ref": "indicator--220fd688-6d6c-456e-9b4e-3d385506263d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed75b646-80aa-48ea-8c9d-2142e16fa272", "sighting_of_ref": "indicator--31f6d67f-a585-406c-97fc-73bd9b6f2960", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05576484-5d4c-426c-b28a-481a6659940a", "sighting_of_ref": "indicator--31f6d67f-a585-406c-97fc-73bd9b6f2960", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0996bdac-ea6f-4560-b566-74ab5dcdb816", "sighting_of_ref": "indicator--e8721b3c-68c5-4fa5-83aa-f12a846b7391", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089b9998-1f2b-4607-9db7-f84cdc7a4c40", "sighting_of_ref": "indicator--b30ba9f1-bbb3-4dac-8b4f-0bf0f5240e0a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4425e764-d77f-464d-b621-6e741abf731f", "sighting_of_ref": "indicator--b30ba9f1-bbb3-4dac-8b4f-0bf0f5240e0a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8815a1-c509-4df3-b3e4-fd4d80028c5e", "sighting_of_ref": "indicator--47d2434b-c1a7-44f4-8883-8d49dce521ac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a371508-adc8-404b-930d-842b554a2dfa", "sighting_of_ref": "indicator--a1ab2fec-05bc-4367-ba15-5a377699e712", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0620bd-36ba-46f0-8620-4236a34eea38", "sighting_of_ref": "indicator--723e52e8-0a56-4681-99b8-ccbe12a00ea6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3278c614-b2e2-4779-8f10-35177d9e8a6a", "sighting_of_ref": "indicator--723e52e8-0a56-4681-99b8-ccbe12a00ea6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4581fb1-f441-4489-a44b-c7e69cde5dd3", "sighting_of_ref": "indicator--9948b3f2-6b8c-4f18-a452-fd0df1d62b42", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad9b748-8948-4ee7-8178-44af05663486", "sighting_of_ref": "indicator--9948b3f2-6b8c-4f18-a452-fd0df1d62b42", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3e590b-2986-4696-ba9b-858e4acd3f73", "sighting_of_ref": "indicator--9948b3f2-6b8c-4f18-a452-fd0df1d62b42", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea33b91-bd03-4ff3-a805-791a00ea45af", "sighting_of_ref": "indicator--2541da97-da25-44e5-a571-74925bbc11ce", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f97fc6e-20ec-4d4f-b60d-20a091a77217", "sighting_of_ref": "indicator--2541da97-da25-44e5-a571-74925bbc11ce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5b5fd9-cc91-47bb-9c57-7aacdc252dd9", "sighting_of_ref": "indicator--2541da97-da25-44e5-a571-74925bbc11ce", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4d4e45-d2bf-4c76-bd1e-9be0bee0fc8e", "sighting_of_ref": "indicator--2f85d86c-6f78-4c46-985b-5286320c5207", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52188ae8-b9e6-40f9-87b0-fb1896ff15cb", "sighting_of_ref": "indicator--9a357365-3698-41cd-944a-5a8e81d7bdf2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bef0267-4b9f-48a0-bc2a-a2433d02cbb7", "sighting_of_ref": "indicator--0ec7375f-d806-4675-8c5c-66bf368a0475", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0c45e5-b25e-40ea-992e-5b360e1c0b10", "sighting_of_ref": "indicator--3c438ddd-a201-4885-9934-80aded5a70c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0e1f64-a73a-4e2b-90c6-c2279b85a3a4", "sighting_of_ref": "indicator--79106f8d-1fbb-4237-b392-9d755d4c0f92", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd0badc-decf-4931-a932-2e31de74a3e2", "sighting_of_ref": "indicator--3edb5c23-2336-436a-99ab-742880b2018f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48abd13-04b9-4ee2-877c-33997ca6a20a", "sighting_of_ref": "indicator--2c57e809-a4ee-47aa-b1be-e4895a2434ec", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e431d442-981b-4f4a-967a-7f3a722d524d", "sighting_of_ref": "indicator--378c7ba8-493d-4dc4-816c-28c9ef26a987", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf563006-88ab-46b0-8c4f-f149e1575af8", "sighting_of_ref": "indicator--9f8eeafc-56f2-4f93-b991-77c8c6e05343", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4dcdc7-b018-4222-820e-71c2929028bf", "sighting_of_ref": "indicator--2fa6fca0-1823-4d76-aa7c-df27ae51b55c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4467ac-aa7a-453f-9365-bbe46a844d45", "sighting_of_ref": "indicator--dcce1318-7f76-4fce-99e2-77861fa14d0c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8392bf-19d3-42db-b635-eb2bb35d67bf", "sighting_of_ref": "indicator--b926803a-e75a-46cb-8d0b-fa8bde9c5e9c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26de5a4-d679-42a9-bea3-d4ecd69702c9", "sighting_of_ref": "indicator--3a293a0e-0bc3-4002-ae9e-ef26661123de", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22faa2c-755a-4353-9610-2f41a0dd83e0", "sighting_of_ref": "indicator--44c01636-d6ca-4401-be6a-7049aa4747f1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4653fc-300f-442d-aa7b-c45e102d98dc", "sighting_of_ref": "indicator--67f5f387-9444-4f3c-b827-34b39d15148f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c008da71-547a-4b25-bfd6-1f9af50aa5d1", "sighting_of_ref": "indicator--b926f028-ade2-484f-be11-b1e99ee03c66", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe7c2ef-3a59-4dbf-8b07-e4821f182416", "sighting_of_ref": "indicator--f1ead7cf-e10a-4762-abae-f52dcd880bad", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1747677-53f6-40dc-a6bd-3bde810f84bb", "sighting_of_ref": "indicator--f1ead7cf-e10a-4762-abae-f52dcd880bad", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d097042-201e-4890-b089-d86cd61702f0", "sighting_of_ref": "indicator--f1ead7cf-e10a-4762-abae-f52dcd880bad", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e975b3d0-284e-4c36-a346-225c37667d6a", "sighting_of_ref": "indicator--47114ecd-d963-43a9-8537-f6a87d17ab22", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66201a4-45be-4184-a9cf-e485743d1610", "sighting_of_ref": "indicator--47114ecd-d963-43a9-8537-f6a87d17ab22", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fe5b9b-d62f-4c95-92eb-4e030894ba41", "sighting_of_ref": "indicator--0b82dd1b-c270-4330-8d5c-e76ae83840b3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d69bc0-b209-46f0-9b69-9c4790a0d11d", "sighting_of_ref": "indicator--3a278d53-3c86-46f5-8069-ecb88fb3bae4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01241e28-be93-4cd9-a033-62d097f6b2c4", "sighting_of_ref": "indicator--bdcfa2a8-5b59-4b8e-ba0a-e1522dc33666", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3504ec10-a045-475e-8d79-68d1948f30aa", "sighting_of_ref": "indicator--b91630c4-f517-47c8-b6be-6785e827632d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b01ee3-4ddb-4eec-ae92-0113c47c21be", "sighting_of_ref": "indicator--cccc0af2-7624-43f5-b41c-0aa1df572568", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236cdd35-c383-4c00-a9ab-f73c5d66623a", "sighting_of_ref": "indicator--01a1858a-2b5f-4821-a9a3-56455159db1f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3c050b-dc23-40b8-9ba2-93b9f54a6cf2", "sighting_of_ref": "indicator--a3da5068-9e35-46b9-9c1c-2649a0f4ddbb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9e2e60-9020-4ec8-8b98-1af2fdd2893b", "sighting_of_ref": "indicator--0a939b0f-17c7-4396-abf0-466bbdda59ee", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61817cfb-bb73-45ac-90f6-6090c9177e40", "sighting_of_ref": "indicator--a2d1c95e-a423-4050-b452-65cd1a388403", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5eb6d0-ebbc-4ad5-ab57-15a9d06aa2ba", "sighting_of_ref": "indicator--a2d1c95e-a423-4050-b452-65cd1a388403", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a9bd99-c6e4-4440-87b2-201134ad3b0c", "sighting_of_ref": "indicator--41dfb4db-9ef1-4d41-af12-4a0acae879dd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dcbe7d8-0452-457e-922c-4e8d74f1ce21", "sighting_of_ref": "indicator--36325850-a405-4401-afba-28d11eaf931d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae029843-b5e7-4ad4-84b5-9803404b83aa", "sighting_of_ref": "indicator--10ba4638-8f86-4a5e-9fdd-22bd2e1320e5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd1a0d8-0337-4dd7-8f0b-b85a04ce1020", "sighting_of_ref": "indicator--f803a174-ca45-457c-b25f-b590f200b413", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd6c415-ccd1-4709-a81e-36911c912287", "sighting_of_ref": "indicator--e2ea2d87-3eca-4a37-b187-80e8f2c76d18", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4f78e3-0236-48ac-86bb-05fe323005c8", "sighting_of_ref": "indicator--e2ea2d87-3eca-4a37-b187-80e8f2c76d18", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e8db65-2a68-46f5-854f-7ffae8b35b96", "sighting_of_ref": "indicator--831e0841-35c3-4c1e-9378-5d926a32a097", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159d5676-2af4-4813-826f-964d8d70f98d", "sighting_of_ref": "indicator--831e0841-35c3-4c1e-9378-5d926a32a097", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8603b96e-4d92-4328-89a7-f77bd18338b7", "sighting_of_ref": "indicator--5daaabf0-7de0-4d25-91a8-fc9f3dd57bc1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9913e4d2-151e-48d9-85ef-36515cdd229b", "sighting_of_ref": "indicator--620d4ef0-7a9b-46b1-b6ee-a8e889be3525", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9817c7b2-fada-4ebe-916a-58c10ab434ca", "sighting_of_ref": "indicator--620d4ef0-7a9b-46b1-b6ee-a8e889be3525", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba97d8b-cd7c-41d9-a1e2-1685ea4f02d2", "sighting_of_ref": "indicator--b1f06fc8-70bb-4070-8808-a782402363dd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78722850-a5d8-49df-a0aa-7f43f3d3d9ae", "sighting_of_ref": "indicator--4a736d14-827c-4c93-b8e5-41fb37df2e75", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1fc5f8-8a08-4f2c-901b-4a7781457c52", "sighting_of_ref": "indicator--65094759-43b9-49a8-b0c4-c13191d4f92d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500d4b9e-0f62-4a80-b0a6-a2683a05e93b", "sighting_of_ref": "indicator--65094759-43b9-49a8-b0c4-c13191d4f92d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51954a8-42e0-4c7c-82a1-182ad0fca8a9", "sighting_of_ref": "indicator--1e51b7f9-dd13-4fc2-a270-24c68b44f8ff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66dd232-5392-44c5-976f-a9479e024596", "sighting_of_ref": "indicator--1e51b7f9-dd13-4fc2-a270-24c68b44f8ff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abd8222-7350-4554-a38a-b55cd1415afd", "sighting_of_ref": "indicator--39a35e8b-cb59-4730-9dbc-76a1b87a895d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2d5839-1121-44ea-8948-20a891d8a0b7", "sighting_of_ref": "indicator--81ad5cd8-da5a-4066-9f6a-1db186ddacac", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4ae1d8-da1a-408d-97b6-48ff2dbfa56e", "sighting_of_ref": "indicator--4106d047-ca66-453e-bdb9-3dbab9b2e981", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037dfd60-b796-4afd-8b3c-0abf7222bd26", "sighting_of_ref": "indicator--4106d047-ca66-453e-bdb9-3dbab9b2e981", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e1ba03-ed84-4a68-ad5b-7ae4befc4dfd", "sighting_of_ref": "indicator--db37a609-e430-41f5-95a8-bb1b4f96fff6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142ac4e6-9cdf-4805-b364-9833d94618e0", "sighting_of_ref": "indicator--a8dd3603-17d2-4635-9c2d-ac1ad8af581e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59edbdaa-7e66-4d71-9c3b-aa0f00f75f2a", "sighting_of_ref": "indicator--c3972732-bebe-478a-89a0-af49582538fb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86aab4b-a442-4f16-bb86-f735921933a0", "sighting_of_ref": "indicator--5fb27241-7f4c-4982-87e5-6034e51c1cd6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f6eabd-dc98-4100-9309-5cfb6e637506", "sighting_of_ref": "indicator--5fb27241-7f4c-4982-87e5-6034e51c1cd6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524c4914-7a83-4028-b699-8a87b076d1f3", "sighting_of_ref": "indicator--c2cc58b6-3f5b-428f-8fbb-3f2dff46eb41", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c57fca1-f3f2-45e4-9b47-aebb2376fa77", "sighting_of_ref": "indicator--c4e63d0d-a807-4514-bf3d-fb0b60119b3f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba172e7-f5f1-4238-bffe-e4d7aba8d639", "sighting_of_ref": "indicator--c4e63d0d-a807-4514-bf3d-fb0b60119b3f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4398be87-2d2a-4d0d-8e41-69082778076d", "sighting_of_ref": "indicator--85546e19-7c17-4d03-84ba-3be723060698", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51372bd4-654e-437e-a9fc-69bdc71fe877", "sighting_of_ref": "indicator--1cac040c-b970-45a1-9b4c-f7a5b43be0a9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf1b0c2-23c3-4a39-93c3-92b0c792bf3c", "sighting_of_ref": "indicator--bb24cb6d-694c-446a-a4c4-715b2af158b5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2682012-cbae-484c-9ce0-9f20662891aa", "sighting_of_ref": "indicator--bb24cb6d-694c-446a-a4c4-715b2af158b5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae67e48-7c68-4148-9420-445b1ec9a7cf", "sighting_of_ref": "indicator--5a72b2a8-6ce0-4e05-ac10-5b285d9eb8ee", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5d7797-f717-4106-bcc8-081c62401c6a", "sighting_of_ref": "indicator--8c911a12-f549-4ae7-b831-d82f2fda9b9f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839193aa-8baf-491a-bd91-a94687a3db1f", "sighting_of_ref": "indicator--3221ff62-9b1a-4e48-9c6e-5cd69e68eba6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34659d69-e316-40cd-b629-7f0be4c7a551", "sighting_of_ref": "indicator--6f3bd4a6-d9f8-4e9e-bbdf-7135d1201250", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3949eb2-f132-42b3-a1d9-d4656558ae34", "sighting_of_ref": "indicator--a21cc8c1-57b8-49ce-bfc0-3d9b113517bd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc42faa-6e97-409e-acc1-a77ea35e68fa", "sighting_of_ref": "indicator--a21cc8c1-57b8-49ce-bfc0-3d9b113517bd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5ffa68-25d2-467e-a8e6-6b1af5e5ec34", "sighting_of_ref": "indicator--bb653359-971d-4b6c-8c80-c4a482ce789d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac30cc6-993a-40eb-b065-27ae18404601", "sighting_of_ref": "indicator--838111f8-1fd5-4bb5-a08d-7a2617003ef7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1731c3b-8a4a-47bf-a275-fa292ec7b1fc", "sighting_of_ref": "indicator--838111f8-1fd5-4bb5-a08d-7a2617003ef7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5eb75b-b039-4674-bd43-aaf9fa671f8d", "sighting_of_ref": "indicator--989641cb-e5e2-43b2-b284-edbea74270d4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ad4754-2cc3-4b46-8db1-5d3ff765ee62", "sighting_of_ref": "indicator--a2165b7f-a686-45d2-a892-578affb3c853", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d43a454-716d-4720-9236-3bebc8c9e026", "sighting_of_ref": "indicator--a2165b7f-a686-45d2-a892-578affb3c853", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d5cdee-ce1f-4ce5-ba25-abbd55d8c41d", "sighting_of_ref": "indicator--a2165b7f-a686-45d2-a892-578affb3c853", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1378d7e5-2942-4e12-ab43-fdb1e5b8582f", "sighting_of_ref": "indicator--07c5bd43-6788-4e64-bbf8-ef8bffcc81c7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3445fc-a3ac-4b6f-8947-cb180e5a45f9", "sighting_of_ref": "indicator--e2e2f953-1545-4bab-b8c5-e0ba2982dbf1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce286699-7dc1-43fb-af3b-d3a5d08fc128", "sighting_of_ref": "indicator--e2e2f953-1545-4bab-b8c5-e0ba2982dbf1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2446c74-a364-44d4-94aa-92dc1cc382ca", "sighting_of_ref": "indicator--6b37fd00-0557-4b32-b739-524b83db8d73", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6722745-72da-4bc2-9cbb-edbf9c7daf47", "sighting_of_ref": "indicator--f5b9330d-0f14-4f77-a573-bd2b402dd650", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a072d8d6-b2e6-4b48-b485-e3a0e62a40a3", "sighting_of_ref": "indicator--f5b9330d-0f14-4f77-a573-bd2b402dd650", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7c53dc-7e7e-42f5-80ff-da95a7ffa0d3", "sighting_of_ref": "indicator--858ba388-2f17-4d46-a0f6-9e858527fd9d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5653c9a4-161b-41b5-8879-f00cb60b8168", "sighting_of_ref": "indicator--2abfb75c-340d-4830-ba65-10e4ae62de22", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fda9037-00c4-46a2-a1dc-36993de9098f", "sighting_of_ref": "indicator--2abfb75c-340d-4830-ba65-10e4ae62de22", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84265aac-e351-461a-8bf3-ab64cba37865", "sighting_of_ref": "indicator--2abfb75c-340d-4830-ba65-10e4ae62de22", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd5dd57-ab1d-47d1-aa20-61497b6a737a", "sighting_of_ref": "indicator--15df1efb-d893-4ac3-9580-a36316eb644f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99041271-3889-414e-b83c-e636ef5c06ce", "sighting_of_ref": "indicator--120d056f-3611-4ea6-959c-2296c28babc6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b26139-c0ca-4d0a-ab27-e5a9f0e8adb2", "sighting_of_ref": "indicator--120d056f-3611-4ea6-959c-2296c28babc6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9594d5e-e235-41a0-a158-7a0bab4a83b1", "sighting_of_ref": "indicator--c156576d-3655-4695-ab61-0409a060777c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b38264-0d79-4b12-b739-1bd8ea71d7be", "sighting_of_ref": "indicator--a54958cb-a07a-4411-93d1-006964c7aa3b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e200dd-dc40-447a-9028-c428bc9d62cb", "sighting_of_ref": "indicator--0464f4fb-004e-46ef-8a30-a93d359db38e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f26111-6a7e-4b8b-8ecb-9859bfd74e14", "sighting_of_ref": "indicator--0464f4fb-004e-46ef-8a30-a93d359db38e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c585275-ea0f-474e-8fc4-9fb2f2b30e08", "sighting_of_ref": "indicator--2fbbac4d-3aeb-47dd-97dc-3de4c8efc676", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91df443e-4928-410d-b05e-e9dc416c3ffe", "sighting_of_ref": "indicator--51a157f2-79c0-47a1-84ed-ec999bd5c970", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea722ced-4a70-4e77-81e4-49f9d2b649bc", "sighting_of_ref": "indicator--51a157f2-79c0-47a1-84ed-ec999bd5c970", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf3e96d-1e09-45c2-85ee-a1ee5f865389", "sighting_of_ref": "indicator--e2d8c7d8-0691-4a13-8f4d-e7c1e14eaf09", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38fc54e6-11a8-4822-9379-7c00011f486c", "sighting_of_ref": "indicator--42e7d196-e3a9-49e2-8da5-0a84b8cd8a31", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a1e166-a821-4c2b-93c4-88447ea39d12", "sighting_of_ref": "indicator--ad025a45-c2f5-469e-a71e-64eeef432bc2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a1086f-8c2e-4127-b4fb-3c689e07167e", "sighting_of_ref": "indicator--ad786708-a85d-411f-a4dd-a78b149eda59", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b03085-60f1-47a7-874d-3167692096c7", "sighting_of_ref": "indicator--74c22599-4756-4aca-b2ac-6c348f7aacfe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1360b69b-c11d-4405-a776-37d16fcb7b51", "sighting_of_ref": "indicator--b215e027-3d30-4519-ae56-09e932d4fbe9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa73a40-e894-4191-82c5-70a5c7bf705c", "sighting_of_ref": "indicator--b1501939-8995-4029-a9f4-37a138785e44", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79780e0c-4391-4b7e-b791-ed08c9aa690a", "sighting_of_ref": "indicator--11a304df-bdca-464a-b8d8-78af92caed31", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9d858c-a48c-4803-9fd7-dfa1c45fe66d", "sighting_of_ref": "indicator--e846b7de-e61a-49fe-a3ba-84efeb071ef1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b61f4c-3202-465a-a648-2e97ef1b9b8f", "sighting_of_ref": "indicator--d9203a3a-38e1-4fe7-9f91-5451d0b6c232", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a0cdbc-1c0f-47d5-9d8e-920cd34a5ff4", "sighting_of_ref": "indicator--d9203a3a-38e1-4fe7-9f91-5451d0b6c232", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0040d3c9-88c7-4499-87c4-8b5ba8f68ad8", "sighting_of_ref": "indicator--7d106a6d-bb2c-442a-ada7-37ff2799b3f7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917d9560-c342-43e5-9cd3-1cfa16aaf8d6", "sighting_of_ref": "indicator--f2a38d23-ebaa-4a6b-b8a9-47412637b73c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2eae4bf-05b0-4bf1-9043-c7726567ba92", "sighting_of_ref": "indicator--7abcff41-c553-4d2a-ba86-baa3a855cce2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c57059c-75f0-495d-a8d6-9adbf8663633", "sighting_of_ref": "indicator--5ab5100e-2fb0-43b7-b0c1-f47df64708b4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398e8424-3e9a-438c-a92a-190fd7f1a929", "sighting_of_ref": "indicator--c88bb69f-74f9-456a-8b78-d0bbe12da515", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f17b631-6682-49e7-a1da-5189c0adb48e", "sighting_of_ref": "indicator--c88bb69f-74f9-456a-8b78-d0bbe12da515", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ed9de3-32e2-4c8b-afed-8784b15520e6", "sighting_of_ref": "indicator--c03a8359-5524-403a-9c98-908b553945f3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada97d98-7a42-4c41-98fa-409056104b50", "sighting_of_ref": "indicator--c03a8359-5524-403a-9c98-908b553945f3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be58d60f-7029-4c2e-9eee-6ec1d09cfeec", "sighting_of_ref": "indicator--a43c642c-034a-4b4f-b5e7-8b6800d7478e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816b9c24-88e3-40e0-82af-f3b6144a55dc", "sighting_of_ref": "indicator--af6b399e-6e03-4f4b-ad6c-d5911c32097a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352d1c1f-eac1-43ab-a0ca-1d747ec6d60d", "sighting_of_ref": "indicator--af6b399e-6e03-4f4b-ad6c-d5911c32097a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1cf273-a268-4ebe-818a-7b9e48f90b72", "sighting_of_ref": "indicator--4d41474b-e24c-46a6-a456-6ae34b1b7a9b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a1eb02-c49c-413e-b0d4-29389124f942", "sighting_of_ref": "indicator--4d41474b-e24c-46a6-a456-6ae34b1b7a9b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bcc171-85d1-4c47-9ad4-d4a9792c7e80", "sighting_of_ref": "indicator--11b86923-9c51-4d3e-a19e-a2177533babb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e179501-87a4-4c16-b554-208563aaaf14", "sighting_of_ref": "indicator--11b86923-9c51-4d3e-a19e-a2177533babb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3c71bb-18d5-45f8-a684-81ff429fc075", "sighting_of_ref": "indicator--54f6905e-1ff9-49b3-93d3-d826b34c0a92", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29053fe-0d9d-4459-8d5c-4c4d1f62f858", "sighting_of_ref": "indicator--d215f06a-d0d2-4ef0-a24d-0e2931816851", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5527bd1-d17a-406e-a4da-487a49dff983", "sighting_of_ref": "indicator--93fae272-6cf4-4a62-aa15-56d8104f876e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a85b32-e49e-458a-b8a0-65d36cd8540d", "sighting_of_ref": "indicator--26e41da9-db5d-4570-8db9-e8fa3a3bbe60", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e4670e-92f8-42f1-94e3-b8f4f5bc4f78", "sighting_of_ref": "indicator--26e41da9-db5d-4570-8db9-e8fa3a3bbe60", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ffaa5c-8d8d-4ab7-86ff-45438cd6e35a", "sighting_of_ref": "indicator--e13f4bd8-6eb5-4c26-8db0-19c064a2903f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156368ae-a8a4-4a44-a6b3-42156d9bed79", "sighting_of_ref": "indicator--e13f4bd8-6eb5-4c26-8db0-19c064a2903f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816943ac-7aa0-4abe-97c0-bbea978b063a", "sighting_of_ref": "indicator--2b900bfd-1ab6-4c07-ae7f-5ff688020dfc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8309119d-7fad-4638-9873-328292e54301", "sighting_of_ref": "indicator--d6063b2e-0135-47f5-adb2-70039835a65c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae49cff-5e50-43ee-9e94-8e9d4120bd8c", "sighting_of_ref": "indicator--090828eb-678e-4ca5-98bd-72f56e17ec6f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8933947-3378-49ed-8b28-909fce901662", "sighting_of_ref": "indicator--090828eb-678e-4ca5-98bd-72f56e17ec6f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd85f74-3bda-4865-8aa8-fdf87c1bf5b1", "sighting_of_ref": "indicator--d2809a9d-87cc-4ccf-9ac9-9bd690f3b8fc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c81c78-5cb2-4804-a22f-57ce92e0537d", "sighting_of_ref": "indicator--d2809a9d-87cc-4ccf-9ac9-9bd690f3b8fc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d304a55-6da9-4293-920b-72700a30fd5a", "sighting_of_ref": "indicator--aa207ca5-8644-45d8-a117-d11144eae41e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eda6a7d-31e1-4cfa-b225-cb4b16d65474", "sighting_of_ref": "indicator--aa207ca5-8644-45d8-a117-d11144eae41e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ff81c5-e98e-48f9-b1be-a26ab24b46ca", "sighting_of_ref": "indicator--aa207ca5-8644-45d8-a117-d11144eae41e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb729ef-dffb-4b60-b7c7-797327f6df59", "sighting_of_ref": "indicator--c6f12b84-15d6-4399-8027-77fc05320376", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925d9fc5-f119-4183-ac87-0527c9effe5e", "sighting_of_ref": "indicator--202b2129-9932-4b6f-84b8-2d6ced641273", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79dbad63-f80d-46c0-83b0-12756154bc68", "sighting_of_ref": "indicator--270a216c-e0e5-40b4-aaec-7e34e7b18e20", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc69a7cc-a338-4c04-87fe-04f7dbe8114e", "sighting_of_ref": "indicator--b2530277-26af-4334-8886-881e3d2b8c34", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e922328-8f39-47f6-ac1f-544aed54d229", "sighting_of_ref": "indicator--c3e99fa3-536d-4149-a58d-01eb09096e22", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864538d0-f337-4c80-9ffb-12eb870e0bdf", "sighting_of_ref": "indicator--0ed15fca-cfdb-4293-80f8-7b2294dd5274", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ac1de9-7dad-49d3-bc76-ac316f12dcef", "sighting_of_ref": "indicator--0ed15fca-cfdb-4293-80f8-7b2294dd5274", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7a8c89-d910-4036-a824-c7fb6a3695d9", "sighting_of_ref": "indicator--9c70731a-8860-45ef-a907-4e275bc4a282", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270e97cf-7445-4e13-b1f7-3e6b4f783bef", "sighting_of_ref": "indicator--9c70731a-8860-45ef-a907-4e275bc4a282", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614c49ec-2cdb-4269-b363-08b6e9d0b27a", "sighting_of_ref": "indicator--875bf889-f859-43d3-8454-6b169b24fafc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331a4fdc-f236-4f12-b74d-121a587d4073", "sighting_of_ref": "indicator--477ca6d9-74b9-4aa2-acb1-fd74a48897e6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d192c1f6-b323-4ea1-8cdd-1ae784cc0ebc", "sighting_of_ref": "indicator--37498331-8054-4cc8-8766-bb7fb47fcaa4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6706be66-a9af-440e-b8e5-548ba641dc78", "sighting_of_ref": "indicator--8f85e2e3-e002-4278-a1d7-503035b1aa12", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c31a25-c115-4200-981b-32c17a12e7d7", "sighting_of_ref": "indicator--37577189-33ce-47b2-9da0-b789f65cfaa5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158e3455-902c-47a0-b008-a41c455f9bef", "sighting_of_ref": "indicator--6d2352ae-1dfd-4ecc-9524-44f268e73b6b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b4e4f3-c691-47c4-a224-46883d873896", "sighting_of_ref": "indicator--33fe2ee1-fae5-4eab-b672-4958f4f349e2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ca62c9-2b58-4dae-aadf-1529011aafe5", "sighting_of_ref": "indicator--33fe2ee1-fae5-4eab-b672-4958f4f349e2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d03dadb-84e0-4347-8b59-e10b2d0d7927", "sighting_of_ref": "indicator--124d46ac-9e8e-4c09-8434-0af473c8077b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426bacda-6523-4b28-92a1-07ec8ce923f0", "sighting_of_ref": "indicator--124d46ac-9e8e-4c09-8434-0af473c8077b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0d0315-d562-4e4f-b941-fac36f806a19", "sighting_of_ref": "indicator--1e220bb3-e554-442e-bccc-b3997e755605", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5753d51-3ab6-4d39-a698-0e8a970e9107", "sighting_of_ref": "indicator--20fa2229-22d8-4c73-8a66-69f23346f7d2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0332b75d-5af3-48a3-940a-ee90cda2d41f", "sighting_of_ref": "indicator--20fa2229-22d8-4c73-8a66-69f23346f7d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53217d79-6804-4bae-84ec-8ee817146716", "sighting_of_ref": "indicator--b302602f-d3d1-481b-8633-7ba0514ed084", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60585352-0c57-4a75-a657-a5d09fb0641f", "sighting_of_ref": "indicator--3a468b6c-00d7-484b-afac-9b31319090ec", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591d200d-0e5a-46be-980d-73a12d2bb8ec", "sighting_of_ref": "indicator--1d4488a0-d215-474b-8bc8-6c117ac5483a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a804e4d-5021-40cf-968f-3643d314f75d", "sighting_of_ref": "indicator--1d4488a0-d215-474b-8bc8-6c117ac5483a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17aafac4-817f-421d-bd09-46a20e33298d", "sighting_of_ref": "indicator--5e930e3f-30be-4be6-ab97-d5d40e64a6e0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0350c464-0bb7-4660-9223-a03915e3dacd", "sighting_of_ref": "indicator--5e930e3f-30be-4be6-ab97-d5d40e64a6e0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0eaac28-6766-4075-afc6-bb79be5635e8", "sighting_of_ref": "indicator--0ce11a46-e056-46b8-8789-31e0fa3c8557", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1903503-4273-4949-9512-ff86d99b53a7", "sighting_of_ref": "indicator--11a6acda-2101-4845-b478-204323fc58e5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88142caf-0089-4d66-8141-04751398a8ed", "sighting_of_ref": "indicator--11a6acda-2101-4845-b478-204323fc58e5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba99cfd-d7e4-4bfa-b98e-948cdc5090be", "sighting_of_ref": "indicator--11a6acda-2101-4845-b478-204323fc58e5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1ea091-70b2-48e4-aef6-9fb3732f556a", "sighting_of_ref": "indicator--8f869f13-e77d-4bb6-89a1-334c93df68a9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ac6fba-ae1d-4885-84d8-1a6bbbe362ad", "sighting_of_ref": "indicator--4a84a1d2-a804-49a0-b58e-3d286db49806", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76548e7-eb5b-4281-8a64-4c8435c7087c", "sighting_of_ref": "indicator--9facf5e3-7b5a-4514-9a3a-8b82bee4c00d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f008a06-fba1-4b7b-9836-a3495a573956", "sighting_of_ref": "indicator--cdcf1d77-0c28-4f54-ad08-1bb2c8bf1cec", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c90cadb-7513-49fe-9d4c-bb45773ab726", "sighting_of_ref": "indicator--6ec89f2e-15ba-4747-9958-181d3527f6e2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fa18c0-9989-4dd7-9bee-c7e8244b194c", "sighting_of_ref": "indicator--addce4f0-c9c2-491a-b130-04cb7e7ddabd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e2ac8c-7a0b-4ee0-afdf-6a03ed56a32f", "sighting_of_ref": "indicator--c975e557-c47b-4136-aaf8-ccd9dbe085b7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92195ebe-36a9-446f-9238-435ca190367b", "sighting_of_ref": "indicator--c975e557-c47b-4136-aaf8-ccd9dbe085b7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88632214-68a0-4304-89d7-091d1f27ca16", "sighting_of_ref": "indicator--8524c82b-7c0e-4fe9-bb62-5ab9dac3dd47", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb20e49-2fd0-4eff-a83b-ba31ba0fba9e", "sighting_of_ref": "indicator--8524c82b-7c0e-4fe9-bb62-5ab9dac3dd47", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bde9a8-1a04-43e2-bf36-4a04557e3b53", "sighting_of_ref": "indicator--116448f5-df07-4bbb-a7d6-1e72a04b148e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f282b93c-a2b6-43cb-8d4f-f2a768d22a75", "sighting_of_ref": "indicator--2b921a7c-44d8-40b2-a400-e83f48ef580a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b154a45c-3411-4b4e-94fa-3db70d1889df", "sighting_of_ref": "indicator--36b39fac-7302-4393-a2d8-17bb931b39cb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ecdb58-0572-4799-9600-0b61906d11aa", "sighting_of_ref": "indicator--d33f7527-7b7f-474d-902b-3cb3ca69d146", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d9b329-1b7f-4713-b425-431669390637", "sighting_of_ref": "indicator--0f56db36-a3ce-44e0-a839-df816c01ac13", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616785f8-c1ad-43c5-b689-b8b5eacc792c", "sighting_of_ref": "indicator--0c8ec4f3-5b89-4dd1-8d6d-1bb985a79223", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0532498b-f5ba-44bb-bc3e-51bfe531adc5", "sighting_of_ref": "indicator--f16aaa50-99e5-4d62-a5e5-aa44985c0f52", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e941b77-4f1b-4715-9f3a-a29e4383d824", "sighting_of_ref": "indicator--65869f89-fb8e-4b03-a5b3-47424c78302d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b3daf5-377a-4c7a-aae5-e37d2cb34c66", "sighting_of_ref": "indicator--85e5b4a4-2661-43a0-bad7-721a9063293b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5b58d2-fd7f-4d87-8621-cb19bb15e764", "sighting_of_ref": "indicator--1ce8e85e-2e2e-4d23-85c9-914cfa5268ce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec93cb8-0718-408e-a930-d7db179a8608", "sighting_of_ref": "indicator--b0b7c384-85df-48e4-9839-7c327908c19c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71646950-74a0-473f-99a7-af7508324890", "sighting_of_ref": "indicator--b0b7c384-85df-48e4-9839-7c327908c19c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3237fb-1a0a-4366-b79a-9a21fbbd9961", "sighting_of_ref": "indicator--3f273bd5-2489-4264-8323-5a8d6188a342", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07745cb-e772-4525-9622-0e37e14cba94", "sighting_of_ref": "indicator--14909e01-609b-415f-9355-0213e27deb58", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808fc164-fd30-4387-be3e-f642e0d097dd", "sighting_of_ref": "indicator--00db304d-d670-4681-b7d1-5c7fc098848a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef199b69-5100-4f92-b94a-a46e2c2e6b44", "sighting_of_ref": "indicator--a5e8101f-ba42-46ca-914d-ae6e078614bc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88d6d76-5d74-4766-830f-1fe7c166173f", "sighting_of_ref": "indicator--8c5d59c8-fbb7-4b54-b307-b4394ca46890", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518fbc7e-ff87-4e2b-8af3-787e747f4b45", "sighting_of_ref": "indicator--0bf5950c-9e6a-478c-b3ea-3d301440fa12", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af181f7-cb48-4b3f-b8dd-e5de152b14f2", "sighting_of_ref": "indicator--0bf5950c-9e6a-478c-b3ea-3d301440fa12", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d1619f-6c94-48db-abc8-af68c25427b2", "sighting_of_ref": "indicator--715df614-65be-4cd3-826e-9ee8064a845a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd0bf1f-84b4-4b49-8e38-b090514e6d95", "sighting_of_ref": "indicator--715df614-65be-4cd3-826e-9ee8064a845a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4d6187-4fc8-4375-840e-04fd21572d58", "sighting_of_ref": "indicator--4a34561e-d239-4c84-992e-849dc1618510", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3448b64d-44b2-421e-80b7-3991a88dcb76", "sighting_of_ref": "indicator--70ba9fb1-f035-42e7-984b-4ba908bdb198", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca35d8d4-bf9d-4fdc-a08c-30f2b50cbd74", "sighting_of_ref": "indicator--70ba9fb1-f035-42e7-984b-4ba908bdb198", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e702698f-0ed1-4543-8001-b45d0c4cf354", "sighting_of_ref": "indicator--70e130b7-7fde-44cb-979c-53c6e2028cfd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb96d58-7dae-41f4-a26f-75f34acc2e9a", "sighting_of_ref": "indicator--70e130b7-7fde-44cb-979c-53c6e2028cfd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd09d2ac-ecbf-4be6-94f8-7c8fe0758919", "sighting_of_ref": "indicator--7a12d366-bb8d-4678-bff3-68dc3910c125", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686b0b95-9603-4a64-a28d-06c2d243f3c5", "sighting_of_ref": "indicator--a379153b-2cbb-41de-9848-4a3b94b7169c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b331bcda-94fe-409c-aa1c-a185e6cbbdf6", "sighting_of_ref": "indicator--0cb58b38-35b5-4940-a4d4-892ffac43518", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ac74b6-70d2-4c69-adb8-564a30cd6771", "sighting_of_ref": "indicator--0cb58b38-35b5-4940-a4d4-892ffac43518", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2380bfd7-b645-442e-8d13-2e171501987d", "sighting_of_ref": "indicator--6289df08-d9d3-45ec-aaf3-0cc671ba8464", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3baad2-cd58-46b9-bd7b-ad2c3025636d", "sighting_of_ref": "indicator--6289df08-d9d3-45ec-aaf3-0cc671ba8464", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3413af78-1bcd-4dff-9cf0-8ff991063cb5", "sighting_of_ref": "indicator--4d4e8a5b-c177-4c1a-b7c0-5454ca46b261", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d1f58e-e296-4a43-8723-ff862151c43c", "sighting_of_ref": "indicator--b94b779d-0393-425f-9205-4f901c6f87a4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54234ac7-f823-4aff-815c-cecb099813f5", "sighting_of_ref": "indicator--b94b779d-0393-425f-9205-4f901c6f87a4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda01eee-4c6a-46a0-8c55-e4a3bf4cfd99", "sighting_of_ref": "indicator--b94b779d-0393-425f-9205-4f901c6f87a4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65eefcc2-c304-4ff7-ae13-2a5cb4100f81", "sighting_of_ref": "indicator--b8ec48ce-a813-4d7a-9759-9fc505f7116b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deedfaa6-8861-4296-b300-16843bb26b9c", "sighting_of_ref": "indicator--40e4bead-b1b6-4301-9830-cdf935b966b7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab2f156-179c-4a7b-812d-4ef1115d6161", "sighting_of_ref": "indicator--40e4bead-b1b6-4301-9830-cdf935b966b7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e135d56-8645-459f-b5e3-278b448e2ed0", "sighting_of_ref": "indicator--146f4d0e-d97f-40cc-be0c-c9da1ed1be64", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26cf49d-e91c-4e61-b943-6ec66e016ef6", "sighting_of_ref": "indicator--146f4d0e-d97f-40cc-be0c-c9da1ed1be64", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae89c28-6757-4539-bf3b-f5aa9feaa7f1", "sighting_of_ref": "indicator--83f80960-dec6-4d3b-a7a2-8797e597f143", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3398d33b-e737-49b4-a54d-668a76a62638", "sighting_of_ref": "indicator--83f80960-dec6-4d3b-a7a2-8797e597f143", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44d487e-8c6e-447a-a5cf-fe48360240c3", "sighting_of_ref": "indicator--83f80960-dec6-4d3b-a7a2-8797e597f143", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e78403-c98d-4b9d-9ac0-39449ae771e8", "sighting_of_ref": "indicator--29e2bb8f-76b5-4b48-8184-10cdfca9e592", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18668871-d6d0-48d5-bd4c-0a64d4629b55", "sighting_of_ref": "indicator--b83b5fef-e94f-4719-973c-7138992e5fe3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a64f96-d9aa-42f0-9801-8d77ca833294", "sighting_of_ref": "indicator--9c43b681-ceba-46b6-ae4d-1d7ad8171eb4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77569a4f-ea6b-4aad-81ea-35c781d953c1", "sighting_of_ref": "indicator--9c43b681-ceba-46b6-ae4d-1d7ad8171eb4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06498b5a-02bc-4b25-8e66-889885669a1d", "sighting_of_ref": "indicator--9c43b681-ceba-46b6-ae4d-1d7ad8171eb4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd627ac-de30-4f4c-925c-f90d951404e4", "sighting_of_ref": "indicator--0ad4915c-fa60-4210-92b8-f023b2fdc60a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24700981-6d71-4656-9e7f-00436d3744f0", "sighting_of_ref": "indicator--7eb3561a-5a42-4844-a1a8-07d6a496f664", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee368a8-2366-4d05-8dcd-c93ba40544f1", "sighting_of_ref": "indicator--1e964f74-b9b1-4089-850a-f0d73f6d62c1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471ea782-28b8-4bc5-b43f-d2e1892e5d0c", "sighting_of_ref": "indicator--1a93f7a5-9c12-43bb-81b8-af35a1c23d93", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17df167-3a0a-4631-9e2c-c35dba99cd09", "sighting_of_ref": "indicator--1a93f7a5-9c12-43bb-81b8-af35a1c23d93", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b8ab70-6cb1-4ea3-8c50-a2dca8e5a281", "sighting_of_ref": "indicator--1ada0cef-f905-43ed-adc3-47227b56982b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4b8ba9-4fa9-4459-8b70-4b26c583933e", "sighting_of_ref": "indicator--4322e20a-a3f7-48fc-b5b4-ffe3c9cb62d7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286b0b4c-e6ed-40a6-9301-e902574f9bea", "sighting_of_ref": "indicator--d27ac8a4-4b12-4aee-bf3f-eb92d539e69e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70b4245-7acf-4b66-aa32-3b88fd11ac76", "sighting_of_ref": "indicator--3d28b8ce-42f4-4532-9c76-ce9baecb9ecf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59d66d1-9526-403c-81a2-5ba7ef29ca75", "sighting_of_ref": "indicator--8ed08bdf-f36f-4920-b52d-c6e70fe8cf01", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6ff9fe-e967-4b63-bc23-d7ed3720a0fc", "sighting_of_ref": "indicator--4f6e9248-e4c2-4ede-ba1c-062073dc109f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7f5cb9-c729-4f19-bcd9-e571726d11cc", "sighting_of_ref": "indicator--1178a345-282b-4461-84b6-f7160679c657", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0692f9b-1f0a-4dca-a29c-cda3f4590a45", "sighting_of_ref": "indicator--1178a345-282b-4461-84b6-f7160679c657", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d56d61-e929-4e8a-a415-5a5363d63abc", "sighting_of_ref": "indicator--1178a345-282b-4461-84b6-f7160679c657", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e41b0c3-cfc4-413f-a507-e16a1588f817", "sighting_of_ref": "indicator--34d09120-f90c-438e-b5fc-e49ca62e7212", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf19c4e-3cff-4857-8cb0-1c226c33c9e4", "sighting_of_ref": "indicator--34d09120-f90c-438e-b5fc-e49ca62e7212", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef40e92-ceff-43e0-9afd-3d9b72c48b60", "sighting_of_ref": "indicator--27fcc966-ebc5-44b5-b328-28b5be9a15a7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d932ed0-2d2c-4209-877d-529984f14d70", "sighting_of_ref": "indicator--526a717d-1fba-4d1f-8bce-def642bed4b9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0032f7e6-95b9-4e76-ac2b-89ba525da21d", "sighting_of_ref": "indicator--526a717d-1fba-4d1f-8bce-def642bed4b9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c412b2b2-9164-4cd4-a8f7-fcbf796bb3de", "sighting_of_ref": "indicator--25123fa8-27be-4e42-b0cd-6e38f9dabf9a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ae1f68-b56f-444b-b461-e4c8a83088c4", "sighting_of_ref": "indicator--3139c4d6-0f7d-41ea-a19b-594ff951332f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a85437b-1f1a-4f4c-9cf0-2b62d59ff9b6", "sighting_of_ref": "indicator--5f66adc9-cbbd-47c2-a237-26325645e586", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb6a9d1-12aa-40fe-811b-891670cef134", "sighting_of_ref": "indicator--248ce932-4037-4449-8c33-f17001bf7689", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c25115-9bd6-494d-8cdc-2852fd49190c", "sighting_of_ref": "indicator--248ce932-4037-4449-8c33-f17001bf7689", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889572f3-4695-4ef5-919b-7e28fc8e0687", "sighting_of_ref": "indicator--02176fd5-693b-417d-b0e0-8ed2745d48d8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f7e13a-7338-462e-88a5-a3b851a3b799", "sighting_of_ref": "indicator--6c7315c8-62bd-4e5e-944c-786c30f0f997", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3a40ed-cf4b-41ea-96e5-19b97f64e5be", "sighting_of_ref": "indicator--a469ae41-791a-485a-9eb2-6c764cf455c8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3cdaee-b2f8-442b-9f18-31d27158ac69", "sighting_of_ref": "indicator--3af93976-f14e-48c3-bdfd-500314693e51", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6710cc-a5c9-4ec4-8ef6-b8c52f119fdd", "sighting_of_ref": "indicator--0f6f9e86-dbf3-40ee-84c4-ecfa8feded05", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac619bc5-7c70-4b8a-84f1-a359ea01c830", "sighting_of_ref": "indicator--e59a2851-431d-4c4a-9a2a-744bc28626ea", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d533aeff-4b25-42d6-9b3f-0d49f871924b", "sighting_of_ref": "indicator--22ece154-a293-4825-9704-b92faa862df8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbeb71a-a37f-4782-9244-1c5260944402", "sighting_of_ref": "indicator--180b2d26-b184-450e-832f-170c1e5c401a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4bd952-aab9-4b38-8ea4-0d50363ffdea", "sighting_of_ref": "indicator--6502041e-e1ea-4a76-9d44-986b53b54b37", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4fa61d-33f6-4baf-a175-f6da1fdb77d8", "sighting_of_ref": "indicator--6502041e-e1ea-4a76-9d44-986b53b54b37", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84bcf901-f5e0-455d-b009-694c7bebef4c", "sighting_of_ref": "indicator--9409b451-35c1-429a-ad46-aada4f49bfe9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36585351-745d-4563-8d94-f530f1d2b6da", "sighting_of_ref": "indicator--9409b451-35c1-429a-ad46-aada4f49bfe9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72569ec0-470e-48ff-bb78-61a0c941a819", "sighting_of_ref": "indicator--9409b451-35c1-429a-ad46-aada4f49bfe9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563685e8-e88a-43b7-993b-b8a9e64e431d", "sighting_of_ref": "indicator--1eabd5b7-8146-4bea-956c-6efc00ffae88", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f616fe41-eba7-4f66-a09f-f2156c61df6d", "sighting_of_ref": "indicator--c6cffdb1-1706-4fb4-bb1d-4233f54c3337", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0601d591-e9b9-4232-8fe3-e90d4adc222e", "sighting_of_ref": "indicator--c6cffdb1-1706-4fb4-bb1d-4233f54c3337", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1b376f-e55f-4f0c-b726-4282b1306108", "sighting_of_ref": "indicator--d757b9fa-0560-42c9-a5a0-ae6e07fb9aaa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63012e58-be82-419f-a67e-b9827aeb5b4a", "sighting_of_ref": "indicator--e087d227-c2f7-476f-8fd1-a01bd21c72e1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90668b9-bcc5-4135-9b45-f803a3e4fad3", "sighting_of_ref": "indicator--e087d227-c2f7-476f-8fd1-a01bd21c72e1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45eb64a6-9236-40df-a085-33768e13fb35", "sighting_of_ref": "indicator--50e76352-0ea7-4241-ae7a-a35c0a8712a6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddcb84c-9193-4ecf-ba7d-2fb0f4621b70", "sighting_of_ref": "indicator--18ed33f5-6000-4981-bd66-90e9e222e310", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef373480-ba38-4585-9aa8-e196f585e1ad", "sighting_of_ref": "indicator--8295f44e-425f-4dee-a944-2e6bade99dd6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67715bf-16f6-48c3-8104-c91943c9ffa2", "sighting_of_ref": "indicator--f1938365-0dcd-4d8e-ade5-3b6554c57d30", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b908dd3e-73e2-4108-bedc-ee0007d10cb4", "sighting_of_ref": "indicator--f1938365-0dcd-4d8e-ade5-3b6554c57d30", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3dcda5-65c2-48e3-a685-e0f23c44a518", "sighting_of_ref": "indicator--faec401d-d483-4de3-a413-1b5626968701", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655cc237-7f9f-4abd-8774-e93fd33257c5", "sighting_of_ref": "indicator--fd980cd4-6389-4c06-a3f1-30b4cfd7cabf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e2a01d-767d-4d59-bed7-7d1514e136d8", "sighting_of_ref": "indicator--fd980cd4-6389-4c06-a3f1-30b4cfd7cabf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1826b26-d6da-474c-a2f1-441aff73ca11", "sighting_of_ref": "indicator--deb4cb98-2bc5-4194-ad76-fb3bf16429f1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c098fd96-7921-4d33-80b2-1a79c8ec5d8f", "sighting_of_ref": "indicator--091e9388-111b-4e14-9d78-c0dd9463d89f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329e5bf0-cf7e-4400-996d-9eb524760954", "sighting_of_ref": "indicator--28934923-e1c0-432f-af6e-279c74ade3e1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf175adf-e79f-4822-b4cc-58af093e1e6d", "sighting_of_ref": "indicator--28934923-e1c0-432f-af6e-279c74ade3e1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0434608-1162-4df6-9f1d-5d5395ab9bac", "sighting_of_ref": "indicator--3c2a219c-3bf7-4e1e-bcea-17a771fb2be8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb90022-fd29-469d-8634-5d690c9cabfc", "sighting_of_ref": "indicator--5c5f0dff-b989-4320-befd-0c95516c671e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db8cfa4-e193-45d7-ae08-49ab16019cf6", "sighting_of_ref": "indicator--cb18d41e-01d4-44d1-811a-ec2a388e1d57", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356aecf7-b133-4509-8f96-275de2703c04", "sighting_of_ref": "indicator--8cc9717b-c4e7-4e2d-a27c-f2a4211672c3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1335b12-6cb5-4b4f-a650-0ebdac53b1cb", "sighting_of_ref": "indicator--282f70a3-27a1-498b-b315-b68b5102febc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4b6ea0-ec0b-42e6-b929-efdc17887660", "sighting_of_ref": "indicator--8467ccb7-d9da-4b29-9468-94f6e4c05a55", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91582dea-1a22-4980-966f-62ab0bd26e33", "sighting_of_ref": "indicator--96e81490-11a9-4455-a09b-f84f0755e320", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4060a0d-2f8a-4067-954c-fec5eab160b2", "sighting_of_ref": "indicator--492875b5-fa89-43b3-9464-e96d07e82a79", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2718b4-5bb9-4368-b23e-6725c64b976f", "sighting_of_ref": "indicator--492875b5-fa89-43b3-9464-e96d07e82a79", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca981f6-68ec-4c94-91c3-9ea4509f2104", "sighting_of_ref": "indicator--185e9662-235e-4df1-9753-ac5a6308350c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baddbc0d-1aca-41f8-b65f-3f534c1188a3", "sighting_of_ref": "indicator--0c561c61-1181-46fb-b6b6-f30cdce91544", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6c8782-03bd-499d-8da4-fcb9d86450f7", "sighting_of_ref": "indicator--ae248b49-669f-4eb5-b5d8-c8ef9656511a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26c3233-4520-4f4c-bddf-93b26d185a2a", "sighting_of_ref": "indicator--ae248b49-669f-4eb5-b5d8-c8ef9656511a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa2847b-1941-4b86-93b3-aeb14f120773", "sighting_of_ref": "indicator--ae248b49-669f-4eb5-b5d8-c8ef9656511a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f424c3-4205-4d9c-956b-aeec4618017c", "sighting_of_ref": "indicator--bcf3e0af-d9ed-49b4-b86a-32994d249037", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2ab14e-7e06-42fb-8050-5c58af6a04b5", "sighting_of_ref": "indicator--c7a642f7-fb59-4dd2-be34-2b69863b920f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13659c07-fa54-4d70-940e-2c251a1cce66", "sighting_of_ref": "indicator--c1f3a7e1-14db-40dc-a260-d67e2303fadd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e1a521-6cc0-417b-8ead-29a9ffd00a0e", "sighting_of_ref": "indicator--d69c8aec-332e-420f-8ee5-8f0adf63cc8f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac6ca6f-7f70-401d-8081-eeba4d2b6d74", "sighting_of_ref": "indicator--d69c8aec-332e-420f-8ee5-8f0adf63cc8f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c2fa65-f7d4-4603-bc02-e2af69c0cf25", "sighting_of_ref": "indicator--24a27ffc-2edc-41fd-adcd-316c806b0808", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7317b8bd-eac7-42ee-9735-92bdbf600eaf", "sighting_of_ref": "indicator--1807abd8-ecc0-4bc2-a0ac-ede28101898f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb50020-d33a-43bd-9a8b-57720a795251", "sighting_of_ref": "indicator--9b1c0a4b-e48c-4d3a-b076-f8f2bdbb9308", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9654405-6cc5-4049-a482-bceb13783436", "sighting_of_ref": "indicator--b02ed7bd-b3b7-4e52-be85-bd6fa2209d9b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b245ee59-7d72-4fea-b385-178064ddfe09", "sighting_of_ref": "indicator--35bb0964-29ce-4889-9877-d3c929121a22", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d1c574-0353-499d-b35d-b167392ceff0", "sighting_of_ref": "indicator--35bb0964-29ce-4889-9877-d3c929121a22", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c0bc0e-2aa5-4e3b-847a-4074f413a839", "sighting_of_ref": "indicator--549965e7-0771-4324-ac1c-45894efabb15", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c394cc2f-0534-4cff-960e-0455ebb603fb", "sighting_of_ref": "indicator--9e2c8408-adde-4dde-93f8-e80660cf397c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a088ff9f-4f14-4a16-b212-3f0baca36fdb", "sighting_of_ref": "indicator--9e2c8408-adde-4dde-93f8-e80660cf397c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3319377-346b-4b5a-a299-f6716a622658", "sighting_of_ref": "indicator--a7dda439-3691-44b5-915d-29b33cf800d8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663c4326-d90b-413f-9519-cc83ca21a5a6", "sighting_of_ref": "indicator--a7dda439-3691-44b5-915d-29b33cf800d8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84321064-9fcb-41f4-b116-2f49b76d117d", "sighting_of_ref": "indicator--2f4e33dc-5971-4cf0-abfe-143391db05a5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f98b71-ee25-4c63-9ce3-33422d0c3649", "sighting_of_ref": "indicator--16822451-0ec6-49c0-9584-e5fb7cfb49e2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96aab574-23a4-49ab-87e5-ebcafca935dc", "sighting_of_ref": "indicator--72b5901d-d62d-4d74-96fb-2f5db16646c8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698a31fc-bb3e-4aa5-9ae3-c80169295e09", "sighting_of_ref": "indicator--baa3a0a1-8857-4f1f-a212-388dbf471daa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b344ee-3967-4a32-89f1-2130f1fcbd49", "sighting_of_ref": "indicator--8177bc4b-6958-42ca-af07-574b09065a71", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c151be-656f-494b-aceb-8c4daeba1ce4", "sighting_of_ref": "indicator--8177bc4b-6958-42ca-af07-574b09065a71", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a01bbe-bdd8-48f3-9805-ec21acd132fd", "sighting_of_ref": "indicator--18ee9a2a-1e2b-4b57-bc2e-21aa9195c30d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9222188c-3347-471b-8de9-66468000deda", "sighting_of_ref": "indicator--76065572-7478-456f-919e-a842647cadb5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bacb74-2fdb-4a82-8e6e-df9fc1ac42b7", "sighting_of_ref": "indicator--402fbabe-67c6-439f-9525-69d0bbefc07a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014d9b46-2337-4ec2-abef-052cfabf51ed", "sighting_of_ref": "indicator--255c3c4d-45ac-4ad4-868c-41f0eafc1fa7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53186f09-8b8f-4556-9c02-b8a6011e047f", "sighting_of_ref": "indicator--255c3c4d-45ac-4ad4-868c-41f0eafc1fa7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38235229-e58c-4c06-b3ca-771814360991", "sighting_of_ref": "indicator--ccc3a77d-c247-49df-876a-cf139dc4c201", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96ed04e-61b5-446e-87cc-c6b68a605863", "sighting_of_ref": "indicator--bad52cbd-37b8-490c-823d-ea511f3a4f50", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab790e25-855e-4c7c-b739-4e9079c75002", "sighting_of_ref": "indicator--bad52cbd-37b8-490c-823d-ea511f3a4f50", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b36bc91-e6b0-4b7d-b1fd-7fc3c3184db6", "sighting_of_ref": "indicator--7407eb53-594e-40ed-a83a-ac17eebdcba7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac86cf7-1724-47ae-9791-662eeccf8713", "sighting_of_ref": "indicator--b8f54a05-2b5c-4fae-b357-a81a091ce4b4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd42904c-917b-4853-98be-8091483cc446", "sighting_of_ref": "indicator--b8f54a05-2b5c-4fae-b357-a81a091ce4b4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bed5e97-9a7f-451b-8171-2a4aacf73930", "sighting_of_ref": "indicator--ccb9723a-2ebd-4d5f-ac45-b12fa2aaf775", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07da83bc-5614-424f-a8e1-16cc88bd0018", "sighting_of_ref": "indicator--5ffe2e7e-35e7-4237-b738-a76316383958", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47ea94b-766c-4f7d-8b78-8515d32ef618", "sighting_of_ref": "indicator--5ffe2e7e-35e7-4237-b738-a76316383958", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad405a1-ec32-428a-86da-10d2df8d4cdc", "sighting_of_ref": "indicator--7a09b3eb-ffa0-4048-99a7-dc6e200ebc92", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe40b07d-dae0-4a63-b7f8-86ad9c1f7484", "sighting_of_ref": "indicator--16ab923e-eb31-463e-af0f-8f1cf8e6a966", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66d18a4-71c4-40b5-8537-27d5f2745394", "sighting_of_ref": "indicator--458dd8ea-982a-4338-9d5d-ad234c2dab5e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2a165e-bce4-499a-bbc8-5280e3e7f476", "sighting_of_ref": "indicator--275f0596-836d-41cd-b038-ddf6183cbaae", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8dc1284-26cb-488e-a5b5-b33a2449f561", "sighting_of_ref": "indicator--2a739547-18d1-4835-a76f-ddef96f0120c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb007aa-4863-4946-84c0-577bffeb1d4a", "sighting_of_ref": "indicator--2244bfaf-a34b-415d-a8dd-4ed401fbf460", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8501261a-1a95-41f1-88cd-99d187d2944d", "sighting_of_ref": "indicator--2244bfaf-a34b-415d-a8dd-4ed401fbf460", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c015d4b-ab54-47ba-9e42-143ab5239b5e", "sighting_of_ref": "indicator--4091e933-44fa-4783-ade9-9b85dce297b6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13f0fcf-9180-442a-93bb-7fd987727cd9", "sighting_of_ref": "indicator--7b59144c-fca1-4343-a4c5-c52377789868", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699bc416-898e-4456-bd03-8bc5b6fa78bf", "sighting_of_ref": "indicator--411f436d-9069-4ca4-8543-21c97da40718", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ddda417-84a7-47dd-b7fc-85f8ebce2913", "sighting_of_ref": "indicator--3d84681d-81ff-4c89-a957-a60773f1ed7b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d58caab-abbb-41ed-bafa-699d781380c8", "sighting_of_ref": "indicator--3d84681d-81ff-4c89-a957-a60773f1ed7b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c6360e-f509-441d-8b48-5f4e8a63ff34", "sighting_of_ref": "indicator--d641aacb-6e30-496d-8923-693701d10092", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91a44cb-c2d8-41bf-ac81-e94f8caa3f56", "sighting_of_ref": "indicator--d641aacb-6e30-496d-8923-693701d10092", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18bf7ec8-516f-4c0f-9400-47cf392466e4", "sighting_of_ref": "indicator--924ba6b2-f2bf-4a82-add3-9f8795e49ef8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b28223-2030-4675-b6a2-b1eb1d431062", "sighting_of_ref": "indicator--924ba6b2-f2bf-4a82-add3-9f8795e49ef8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6915eb3-6230-44ad-ac3c-9f114ca492d4", "sighting_of_ref": "indicator--d6022d81-6f29-4a7a-9053-b81c5a1e0f47", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8ab4b0-4e46-4d47-80ec-2652e5d38b2c", "sighting_of_ref": "indicator--d27573ce-5be7-42a5-b57b-fcb5ea80e94d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c66e3a-00a5-472d-bedf-d3c05206bfbc", "sighting_of_ref": "indicator--d27573ce-5be7-42a5-b57b-fcb5ea80e94d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8fe925-c194-4a86-8e75-6126fa2e4e40", "sighting_of_ref": "indicator--9eca9a99-6a27-4022-ad15-c706b0701588", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b9a21f-8bc9-46b2-ace6-2e0db890e738", "sighting_of_ref": "indicator--e1419974-37b0-47a7-9169-4c7d46a75a75", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26e1256-929e-4f6b-820d-ea76c16a5c52", "sighting_of_ref": "indicator--e7d62c35-0410-41df-ba74-f848f988eb90", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dde4bf3-5419-4a11-b75e-0afba93e5d0d", "sighting_of_ref": "indicator--da21d7c7-a304-432a-a760-4a889da14484", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc2c6f1-ea68-44dc-a5aa-b5c6d964f554", "sighting_of_ref": "indicator--93aa01a1-8064-4328-b090-56e36243afe8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8de7171-4d38-44a7-9525-dc62d4a52586", "sighting_of_ref": "indicator--c80be80e-787d-40f0-b9c4-8b96249d6772", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146482ac-a76b-4b33-8781-13d448b37e5d", "sighting_of_ref": "indicator--cfe8fb6a-82c4-46e6-a5db-78a0e0e5f123", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515e229f-54d9-43a0-9a77-8676fe2cdb7a", "sighting_of_ref": "indicator--cfe8fb6a-82c4-46e6-a5db-78a0e0e5f123", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f258899-97f7-4fb0-b722-eced9bf668d6", "sighting_of_ref": "indicator--4b2d0aa0-fe39-4413-8bb0-d48a634d2dad", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5d0880-e0d0-42e6-9fb4-a9fbc6304c81", "sighting_of_ref": "indicator--a0f963ee-091a-4112-a5ca-701a63a7e960", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00ccaa5-6f96-4471-a106-d6748daa9cb1", "sighting_of_ref": "indicator--a0f963ee-091a-4112-a5ca-701a63a7e960", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8c3579-4075-4662-9ff7-78de2f7c4707", "sighting_of_ref": "indicator--2963783f-0cf2-44dc-b9e2-0008fb0d2780", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3b2612-f01b-459d-8470-351357ea89cb", "sighting_of_ref": "indicator--c3bfb7e1-48bc-4d45-8feb-b38b48a501fc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d135b2a3-eef1-420f-a956-362d0d547753", "sighting_of_ref": "indicator--c3bfb7e1-48bc-4d45-8feb-b38b48a501fc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998483b5-1b6e-42c5-a92b-ce0503a32242", "sighting_of_ref": "indicator--4aa18619-f029-4eca-9d3f-bbdd07485fcf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f636d7f7-03ae-4a05-bcd6-f43b28d908fa", "sighting_of_ref": "indicator--4aa18619-f029-4eca-9d3f-bbdd07485fcf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc17398-d84d-4a4a-9791-bfb6875e0aeb", "sighting_of_ref": "indicator--38b8871a-c1ac-415c-b890-2a349cdc024d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a10a31-640d-4acd-abcd-f39fbadb1174", "sighting_of_ref": "indicator--39f7da19-2b5f-408c-b90a-d6317ce3ef94", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9488cd6b-1aae-405e-8550-5fb16d9a4e5d", "sighting_of_ref": "indicator--b3bfa43e-5e3a-4996-9f8e-dd7ddc474658", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b5c3d3-6881-4685-b665-d1c7a2ec397a", "sighting_of_ref": "indicator--b3bfa43e-5e3a-4996-9f8e-dd7ddc474658", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93fdc80-f8d9-4f7c-9285-b58c214df91d", "sighting_of_ref": "indicator--1c34e622-62ad-4ab1-87e3-31c7abc7a999", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e70755e-f824-4994-a216-e83d0ff51c92", "sighting_of_ref": "indicator--1c34e622-62ad-4ab1-87e3-31c7abc7a999", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca869a56-9be9-4b3f-bc03-6ce4de6f90d8", "sighting_of_ref": "indicator--1c34e622-62ad-4ab1-87e3-31c7abc7a999", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a341f761-f0cb-4757-be4a-f249886ac22c", "sighting_of_ref": "indicator--39e23391-510a-4e97-9d92-32739f5d757d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2274875b-ccc2-480c-a6ba-c25548631d87", "sighting_of_ref": "indicator--39e23391-510a-4e97-9d92-32739f5d757d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6341f252-f30d-41ea-ae61-87a7dd9ccc9f", "sighting_of_ref": "indicator--47c4575a-7ae5-42fb-836b-6abcd13d65bb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b63c32-e1ae-45cd-a3ea-df55944bf60d", "sighting_of_ref": "indicator--eadb596e-c48c-4b1e-b0a3-754ff3e2c691", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370293ab-7bfa-4306-b8f0-64ccc6080ca1", "sighting_of_ref": "indicator--74225ae8-52bd-4644-aa45-165e7ea693ce", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e1a4fd-b9f6-4316-a2c5-6136e809c629", "sighting_of_ref": "indicator--74225ae8-52bd-4644-aa45-165e7ea693ce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ab7305-cb17-445e-9714-2b1475571249", "sighting_of_ref": "indicator--9443b630-27e4-488e-aeb2-dcc3b3cd4ff7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac78afa-f0b8-400f-be56-feb4b8582034", "sighting_of_ref": "indicator--9443b630-27e4-488e-aeb2-dcc3b3cd4ff7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5edda10-7337-48d7-b78d-3dc60f82487f", "sighting_of_ref": "indicator--ed1b18d0-b08a-4310-89af-a95b83b0d1c6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41d1676-e772-44ea-bd5e-953e02f55b35", "sighting_of_ref": "indicator--ed1b18d0-b08a-4310-89af-a95b83b0d1c6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a1ca1e-ea01-4c1d-bb38-2c087fdf3309", "sighting_of_ref": "indicator--493171cf-5918-4c80-a083-29ec3bb24be6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c80f594-2769-4a91-892a-b8c35ef772b4", "sighting_of_ref": "indicator--4d1e4e0b-f81c-4b44-bbb7-913341035f6b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b56dd6-fd72-4447-becb-99442e3fdc25", "sighting_of_ref": "indicator--5c2d3fda-ca1b-4eb2-b89b-0ba449d84879", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b309d84-ef87-448a-a9fa-6ad0cfc28f29", "sighting_of_ref": "indicator--fa746d75-6134-4f4c-bfae-83dc6e469f9e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd84696b-01ae-491b-9bc0-474a877d3f18", "sighting_of_ref": "indicator--bb13720a-69f8-462c-8279-f7d51a1e32db", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876206d0-0252-43f2-b4e1-b6307efcf5ed", "sighting_of_ref": "indicator--b4d48927-b107-494d-a56a-0cc9ac443413", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02792683-b010-4588-9460-ba24bc3e99d5", "sighting_of_ref": "indicator--2878ccd4-65d4-4269-9b22-90069c0aacfc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50f4cd7-334e-4dc8-b181-b170dd07ec2d", "sighting_of_ref": "indicator--ce356947-de53-48d9-8709-c68423954c14", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c037b207-b5f8-4f59-8ccf-bb930a920db6", "sighting_of_ref": "indicator--7fd48a61-d09b-43cb-8ffd-4464cb4b3d92", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f020c2a-3b47-49fa-b8d6-60c9e07dfd0a", "sighting_of_ref": "indicator--03999ae6-10e2-495d-bc12-e10aab818052", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b8bcd9-a7c2-434a-a250-75817cabfc23", "sighting_of_ref": "indicator--1c505803-8c06-4785-81e8-b3044a27883a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4493038b-df4a-4876-a447-de151ee7ddf2", "sighting_of_ref": "indicator--1c505803-8c06-4785-81e8-b3044a27883a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c315073b-c157-4ffd-bd95-2f859e6fdac3", "sighting_of_ref": "indicator--6aab19ce-c987-4679-b764-f5f23f15d7d7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0cf73c-055f-4611-8121-dc36ca685ff2", "sighting_of_ref": "indicator--51f902f6-7b74-4a5e-a281-591aada82636", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c00db31-7527-43f0-a352-f4fcd7174df2", "sighting_of_ref": "indicator--d553e709-305b-46c2-8259-3e9cafb74544", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4af37f-91cf-4ce8-af9c-41f833803d90", "sighting_of_ref": "indicator--54ad8f89-9a4c-4e64-8538-b8a1691a80b1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323e29f1-72a3-4f64-8d18-9ce676ff7ef0", "sighting_of_ref": "indicator--d971e833-4460-4a7d-ab8f-99d27e0700f5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2185aed8-e4a8-4fe4-9cec-b4578806f71f", "sighting_of_ref": "indicator--27d19567-1083-4ccf-a8dd-4f88dac12efb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0d0bda-95f9-4456-890b-51a5569cb01b", "sighting_of_ref": "indicator--657d4586-fbb9-423a-835d-c7c18b258021", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb5c1df-603e-4374-b59a-b470a1fd3a17", "sighting_of_ref": "indicator--b6eab376-b413-481b-9007-010fa3b6dc19", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f9dd35-8d7a-4c53-9c83-4e4e88fd42ce", "sighting_of_ref": "indicator--4cbbee34-7596-478a-bc90-9ced53128fb0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eda8330-43e4-42bb-960b-a8b53e24b441", "sighting_of_ref": "indicator--1aa772aa-19fa-4937-ad74-63f8600ecf74", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be4f1bf-c9e4-4a99-a874-2177c639cded", "sighting_of_ref": "indicator--339ef55f-03b9-46f8-8820-22e211ac028a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e777881-b0ca-4594-87b4-8f9431dfd832", "sighting_of_ref": "indicator--60740556-e331-4101-b0b4-0805d9c42fba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a6748e-7f11-47a1-8c68-37ee00141242", "sighting_of_ref": "indicator--812226e7-0d7b-48b9-82e1-85531ce67495", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1aaf7e0-ffa2-44d4-b276-b67684246f7a", "sighting_of_ref": "indicator--6ad069ff-725a-4b5a-a65c-3ed446abab8d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ccfd5a-761d-474e-900c-228f23f9a90b", "sighting_of_ref": "indicator--1b4483ec-441c-4307-84ee-2692ec9a6b51", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddebf474-a26f-44bf-9c2f-59778f556ad8", "sighting_of_ref": "indicator--1b4483ec-441c-4307-84ee-2692ec9a6b51", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d087c767-ed4d-4650-bab7-9ee7128d67e1", "sighting_of_ref": "indicator--1b4483ec-441c-4307-84ee-2692ec9a6b51", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffb8ae6-f10c-4d39-8a30-044cea1359ed", "sighting_of_ref": "indicator--48fbff56-c3ad-4354-b836-6ad44866e3cd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f52ae11-f70c-4219-a4d4-47b67a124adf", "sighting_of_ref": "indicator--a5901fa5-08df-4441-8cd6-c1d8a1f1f9d0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ebd8cf-a079-4e30-aedd-cb62d6fa143e", "sighting_of_ref": "indicator--973fdbeb-db2d-4bb2-b30d-4bcff268fafa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e44fd16-2396-484d-bdc6-459b743e9dc4", "sighting_of_ref": "indicator--973fdbeb-db2d-4bb2-b30d-4bcff268fafa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624685be-1671-4774-bce2-4448a97c2d7c", "sighting_of_ref": "indicator--2beb7ae0-f825-4bca-88f9-ce28d8e11dbb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509dbb6d-2e27-4ebc-a242-c9187943f12d", "sighting_of_ref": "indicator--2beb7ae0-f825-4bca-88f9-ce28d8e11dbb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c72907-a886-4a44-98c2-9216291e83a3", "sighting_of_ref": "indicator--ea0afea4-2401-4609-8291-0dd49560723f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9384d6-c13a-4e6e-8182-76fcbbd976ec", "sighting_of_ref": "indicator--ea0afea4-2401-4609-8291-0dd49560723f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810eda5f-0a19-45fe-bb90-b1543c374ccb", "sighting_of_ref": "indicator--7c00544e-608a-4e85-9790-ea205f1d167f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f353d45-3762-4bff-b444-ad2da76c3cb0", "sighting_of_ref": "indicator--e41b7a8a-e390-4ea7-b05f-21e622d7c6c9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dac2da-a1c2-46cb-a21a-ed28e9d4b74d", "sighting_of_ref": "indicator--e41b7a8a-e390-4ea7-b05f-21e622d7c6c9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb05e43d-e64f-4511-9fe1-24a8d8d39097", "sighting_of_ref": "indicator--b52dc829-f295-41ad-a742-99383caf1d49", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e1d641-7da9-401b-98d0-2ce95817d018", "sighting_of_ref": "indicator--6ed9079b-2728-477f-ae88-502a54a4ebc6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40dd460-cbad-4ee2-8119-a86830c02cf8", "sighting_of_ref": "indicator--6ed9079b-2728-477f-ae88-502a54a4ebc6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c781f0a-cf1a-4432-902b-71cbd98e82c7", "sighting_of_ref": "indicator--6ed9079b-2728-477f-ae88-502a54a4ebc6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a8af20-331f-42fb-ab0c-f996568d1619", "sighting_of_ref": "indicator--b3a56281-964a-4670-ab0b-8b9940d492f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a090b49-704c-408b-929f-dcf85e6bc8d9", "sighting_of_ref": "indicator--b3a56281-964a-4670-ab0b-8b9940d492f0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4645081-5396-4d88-97eb-17a9f41dc99e", "sighting_of_ref": "indicator--b3a56281-964a-4670-ab0b-8b9940d492f0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f29f678-4f87-47e9-8f2f-25ca00b755f8", "sighting_of_ref": "indicator--bf902892-e330-47ca-b1d3-a45231e57c84", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bcf35c-9b49-4c84-b7f3-0c9a7b4a67a0", "sighting_of_ref": "indicator--bf902892-e330-47ca-b1d3-a45231e57c84", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be4569b-0e5f-4f26-bd8d-f0954a111900", "sighting_of_ref": "indicator--66b6a89f-6f1c-47e6-aa2a-bbb3bca948ab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46b12df-4261-46cb-be6d-6cf35ac73a04", "sighting_of_ref": "indicator--4107e2a5-0764-43d0-9680-20cffdaf4d25", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b820f3-f158-4c7e-b2e4-619633b2d2c8", "sighting_of_ref": "indicator--4107e2a5-0764-43d0-9680-20cffdaf4d25", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d826f8c3-9481-45e9-90e3-964032a2062d", "sighting_of_ref": "indicator--8e377685-0db7-4578-a108-e1aa32dd92f7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e0db5a-4110-4663-b04f-bb0624ed6604", "sighting_of_ref": "indicator--8e377685-0db7-4578-a108-e1aa32dd92f7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11aae41-89a0-4cad-a451-1229e7daf714", "sighting_of_ref": "indicator--338234e2-5cff-4255-8b07-a25de7707961", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f833406f-211c-48fc-93d3-ebae4c7787e9", "sighting_of_ref": "indicator--8b425a48-902c-45a9-90e3-6ba09d46bddf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c219953-6da0-4ff2-81f0-10cc75f61be6", "sighting_of_ref": "indicator--0be43c14-3e9d-4fcc-b9ff-76f11c463823", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa22cca4-a8ee-4e24-ba95-c6757642f7da", "sighting_of_ref": "indicator--8b46c9b2-e6ae-4261-a8a9-7479e5b36d1b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b43ebab-f9dd-4e9d-ac0a-c78e05244411", "sighting_of_ref": "indicator--dd25e1a8-d9d4-4f7f-ad86-3a96cf499971", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81572a1e-dc33-440b-9cd1-0b6d7c5e7f29", "sighting_of_ref": "indicator--f3b97420-a70b-44fc-8171-7b81ec06b0f4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c68165e-7fa1-4054-9b74-60a615d294ad", "sighting_of_ref": "indicator--e0a66d4f-0207-40a0-ba17-6d2eaef6ba3b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6bbd5e9-0172-44af-acad-1d01ebab0cae", "sighting_of_ref": "indicator--e0a66d4f-0207-40a0-ba17-6d2eaef6ba3b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c589287f-8e2e-406e-a90a-11d83879717c", "sighting_of_ref": "indicator--28db8cf1-a6dc-4fb3-bf03-2fc1ba6a65f5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c0e5aa-b81c-49b9-902e-b8990d3d86d4", "sighting_of_ref": "indicator--f4ca86b7-4c9e-4713-8ffa-c7903fdc5d7e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ec701a-4692-4971-87a0-15e060d5db2b", "sighting_of_ref": "indicator--934f5bce-508b-439e-9085-7372b7ee08de", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d432ee-fca2-4745-92bb-41b83a97b230", "sighting_of_ref": "indicator--109d6cd8-1614-488f-896f-37970e657d4e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee79e4e0-6f76-45fe-b100-a3640ace5931", "sighting_of_ref": "indicator--f2544ad8-5abb-48df-8b29-9bc6ba860607", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e262673b-81b7-4409-972b-9553d3f7e2ce", "sighting_of_ref": "indicator--f2544ad8-5abb-48df-8b29-9bc6ba860607", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08ebe21-1b9c-4898-be7d-bdbcbce428df", "sighting_of_ref": "indicator--f2544ad8-5abb-48df-8b29-9bc6ba860607", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d33bf9a-6c73-432d-9c90-0c125713f8b0", "sighting_of_ref": "indicator--f0dfddd1-7c6f-429b-b8df-39b29cbf0c5e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45568311-4cdb-48fb-8bb0-1d63e39c66d7", "sighting_of_ref": "indicator--f0dfddd1-7c6f-429b-b8df-39b29cbf0c5e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4012707e-e159-4871-a9b6-24db36e29879", "sighting_of_ref": "indicator--f0dfddd1-7c6f-429b-b8df-39b29cbf0c5e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297ab05e-5d7d-4b36-8944-837ac3ce2748", "sighting_of_ref": "indicator--70dc6c2d-5100-4c7c-88fe-134e045babf1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36fc1e3-2df1-453c-9235-fbf4a242ec36", "sighting_of_ref": "indicator--1680ae78-cd4e-474a-b84a-507244fbeb71", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5429dd4-0f7d-4a5e-854c-4a9ee60296bc", "sighting_of_ref": "indicator--80065a52-5852-4f66-8051-8a3735cdde23", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0a978c-8e48-4e4c-a7d5-047f58ca70c2", "sighting_of_ref": "indicator--a7b79ade-ae00-4734-b159-0dac6793a5b8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad307b8-27ae-4dc8-95c8-7037c0769cde", "sighting_of_ref": "indicator--52125d6e-558e-4124-82d1-99c0bf07bdb4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65609356-87f3-4fb4-b4f4-b8a4bd70a5fb", "sighting_of_ref": "indicator--52125d6e-558e-4124-82d1-99c0bf07bdb4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e0970e-00e6-43a7-98cf-b37087f19b37", "sighting_of_ref": "indicator--9ec1a565-4416-461e-b341-7a69f6f4b541", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1013c31-9373-4d98-8142-ae22ad990138", "sighting_of_ref": "indicator--b572d250-b1cc-440f-b4d5-d5dc8b020b33", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac543e5d-f922-4409-aa6a-989b4c2e5227", "sighting_of_ref": "indicator--b572d250-b1cc-440f-b4d5-d5dc8b020b33", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9269be3a-0b1d-4243-8a1c-2e628ba37bfc", "sighting_of_ref": "indicator--b572d250-b1cc-440f-b4d5-d5dc8b020b33", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a58dd07-f02e-4df9-90d2-bd30916bc1f2", "sighting_of_ref": "indicator--8d8dd796-8df9-4448-907c-b4f13ab34680", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7945d350-bf79-49dc-85d6-275ad1d75843", "sighting_of_ref": "indicator--8d8dd796-8df9-4448-907c-b4f13ab34680", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7564d1d0-8ed0-4b86-9b55-fc0026cdf807", "sighting_of_ref": "indicator--8d8dd796-8df9-4448-907c-b4f13ab34680", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ec265c-01b7-4aa2-8569-b14960d7fd48", "sighting_of_ref": "indicator--749c0f1c-737c-4f78-a743-2bed056507e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263dea82-ee09-4d73-a95f-4517bfe6d351", "sighting_of_ref": "indicator--3b3987ad-c552-459a-b564-6b06947b48ad", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a6b6b3-ef8d-4c2f-8fc9-1b46a52398d1", "sighting_of_ref": "indicator--3b3987ad-c552-459a-b564-6b06947b48ad", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f267bfb1-e5de-46a0-afec-9ce4212c1ce0", "sighting_of_ref": "indicator--8a2ac9c4-ad75-41cf-96b7-e6a889232c9d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e5d6a4-08ac-44c2-b2f7-2d854e870249", "sighting_of_ref": "indicator--8a2ac9c4-ad75-41cf-96b7-e6a889232c9d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c603aa99-f0f7-4010-addb-0f89f1f700ae", "sighting_of_ref": "indicator--838144b0-2771-478e-8ea9-ad00d01f2dfa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742262be-56f8-4604-9edf-41e64489a65d", "sighting_of_ref": "indicator--dc429988-75cd-449a-be23-bd23c63d09cf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64688ead-84b6-40b4-8709-5a5bee34913a", "sighting_of_ref": "indicator--dc429988-75cd-449a-be23-bd23c63d09cf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c93826-a219-4759-9042-1275db7a4c5c", "sighting_of_ref": "indicator--4a369fdd-3885-44f1-9d0e-398a234ac591", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5578a58f-c086-477e-a93c-512992408f64", "sighting_of_ref": "indicator--4a369fdd-3885-44f1-9d0e-398a234ac591", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be7c932-fda9-4a12-9567-92a5ade6312b", "sighting_of_ref": "indicator--58425282-eb3a-40a8-b3fe-caf56df5d47e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbcfae7-9e74-4f0c-b4a2-ac241b4723ee", "sighting_of_ref": "indicator--57ab66b8-37a3-4889-94d6-4cd5448e59c7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840069e5-9840-4222-94c8-22841a7c1891", "sighting_of_ref": "indicator--3d33bd73-949c-4d5f-914e-dcde7cafaea4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8416386c-82f7-4e76-962a-5217d0872617", "sighting_of_ref": "indicator--3feb6354-d611-4051-b319-3ed9d27a3a61", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e450f90e-7ca6-4278-aa4a-7eaffe8180d7", "sighting_of_ref": "indicator--92985771-1081-4baf-b40a-f46549f6745e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8bff10-d1d1-4a3e-b964-460f63165c61", "sighting_of_ref": "indicator--dd1b486e-3dd6-44ed-84ad-79f3430cebb2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae874779-bd61-4fa6-b8fa-970ad3c3ed57", "sighting_of_ref": "indicator--c9082bc3-2e62-4890-bdbf-edbbe79799c4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e24bbce-569e-407b-b842-fcb394623e31", "sighting_of_ref": "indicator--c9082bc3-2e62-4890-bdbf-edbbe79799c4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c04caf0-dd42-4b37-9901-90ae84703e6a", "sighting_of_ref": "indicator--256df950-73b0-4d2b-839b-1534fe0f9c2c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24986eb-f7ed-4e5e-bd24-4f219997d97f", "sighting_of_ref": "indicator--eddcc365-edc0-4f5a-a2a5-0bd26e9e8e46", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e84a9d-5662-4205-b567-9fdf1610f920", "sighting_of_ref": "indicator--51cf87b7-0143-42d9-a1b1-b6cdcb513ca7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a987beb-7895-4a3d-900f-4a71a0ce87e3", "sighting_of_ref": "indicator--8199b63f-5f19-4f7f-b87d-ceb96d4374f0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048a794a-6677-494a-9f1d-7904099e7014", "sighting_of_ref": "indicator--948b91f0-da8a-4cf4-8f40-d33dbe75d71a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afb5830-4505-419c-8622-4943864958a7", "sighting_of_ref": "indicator--5b7f04d5-1650-43fa-a123-f3ce494c905c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5afa51cf-a99b-473d-87dc-b8dacd54cfd0", "sighting_of_ref": "indicator--889395d5-7eba-4f49-b485-8625e04d52cb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42195420-a6ae-40a0-8c42-3dd0505421ea", "sighting_of_ref": "indicator--294e5213-a910-4483-99b6-d8c7169f2c8d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6288863d-8180-4cdf-a493-209facf37001", "sighting_of_ref": "indicator--294e5213-a910-4483-99b6-d8c7169f2c8d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7556f4d3-dc45-40d9-9d2d-9abad7d214b6", "sighting_of_ref": "indicator--b7e596c9-4b4e-45e9-9aed-eb975778326e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7202a9c-8de8-48a4-a212-7317a22ecef0", "sighting_of_ref": "indicator--dbac2120-5032-44ec-b35c-9073ccf703e7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006af28d-31ac-45d9-88ea-f485d9d43f97", "sighting_of_ref": "indicator--4f9ebfb0-8d87-4a1f-9cb8-0b707ac43f9f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db428081-b340-40b1-9841-24c0e18cb2ac", "sighting_of_ref": "indicator--4f9ebfb0-8d87-4a1f-9cb8-0b707ac43f9f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6caf8f24-0dc1-4bdf-b9a7-68615573efa8", "sighting_of_ref": "indicator--aed2634a-688c-47ce-a12b-8ba66e95f74a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c34c4f-4f51-4d62-bf48-66c2806967e5", "sighting_of_ref": "indicator--65cfafd1-6956-48ce-9fa9-8e6d4459e551", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75dacc76-dffb-4d92-b96a-4423f76391f5", "sighting_of_ref": "indicator--ff9d2aa3-51f5-4561-b9d0-ef9a21a2e8de", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8450a1-5664-4bb1-8aae-af54ae9a99fb", "sighting_of_ref": "indicator--971bc82c-1ee7-481e-a8c3-0e4fd2edd6a4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1802f93-1346-408e-b6d0-8149bf3f2b73", "sighting_of_ref": "indicator--c034a457-6879-4836-bb4e-f2321e6eb372", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b5d36c-fc1c-4b47-a4ee-4bb586cacf06", "sighting_of_ref": "indicator--c034a457-6879-4836-bb4e-f2321e6eb372", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cd6bd4-9636-44ae-a39b-9c40f41071bd", "sighting_of_ref": "indicator--1a8ca732-411f-4341-91be-6113e14e6933", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1899033d-2cc1-40d0-8e79-51603a64b183", "sighting_of_ref": "indicator--072024b5-5802-4b11-81f9-e2c08a121827", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ca9b0b-56d9-4a7f-b7dd-1c6552dcf68c", "sighting_of_ref": "indicator--583903f0-7f19-4da6-add0-b27b1ee0abfa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013ce215-7895-4929-8661-0635003efdaa", "sighting_of_ref": "indicator--583903f0-7f19-4da6-add0-b27b1ee0abfa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f82d47-50c3-4f36-8b28-adfd885dc191", "sighting_of_ref": "indicator--583903f0-7f19-4da6-add0-b27b1ee0abfa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd3f667-5ec1-46fd-bb3c-474f59d0d889", "sighting_of_ref": "indicator--81c9f52e-f1af-499c-bcbe-ad9ff720b3b0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3858c8-7c13-45fa-8923-7f4ef399da32", "sighting_of_ref": "indicator--51595dd4-6d99-455c-b022-7726a6fb803e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e66f70c-d6b6-4870-bad7-86dc981b20b3", "sighting_of_ref": "indicator--51595dd4-6d99-455c-b022-7726a6fb803e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c6cbb9-bced-4646-81df-1e153f1d75dc", "sighting_of_ref": "indicator--ac1463e7-8c15-4950-baa0-c0d6afaf657e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1a5053-6d90-4913-a2bb-39f5e8be8c65", "sighting_of_ref": "indicator--428eeeed-15c2-4a9a-ae3a-4ed25c53cff7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b3eafd-b465-429e-b01c-7a62e7e248b8", "sighting_of_ref": "indicator--428eeeed-15c2-4a9a-ae3a-4ed25c53cff7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2fe915-4246-4558-b0d6-9483f46fc7f8", "sighting_of_ref": "indicator--9b51372f-7691-4962-bd56-962d60a972ca", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3844fe27-4aa3-4711-b1b3-05874217fcd0", "sighting_of_ref": "indicator--8d00444e-1abe-44f4-88e9-c5a1cb9fffe4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bc08cd-5e6a-42ae-915e-16e30bd0d47d", "sighting_of_ref": "indicator--c26a9ddc-da43-4d53-a96a-036f66fdfdf6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d43a0a-6e6f-491b-8e92-7b9f92fcf5b3", "sighting_of_ref": "indicator--19d988de-21a5-4624-a68c-d7e1b5539950", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd2903c-d56e-4129-8b3e-686664289fce", "sighting_of_ref": "indicator--f15c5fac-89c2-4b94-bc43-caff3d2628d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a95550-123f-4765-a52b-d5427db32584", "sighting_of_ref": "indicator--84322922-d49b-403e-be14-d87860a96f17", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1eee47-80e9-4b8d-9f79-14b01f15c893", "sighting_of_ref": "indicator--84322922-d49b-403e-be14-d87860a96f17", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334fcf05-c3c9-46b1-9480-3b28da74a552", "sighting_of_ref": "indicator--d0cb7b6e-7edc-4d1c-9ab1-1bc5f3cfc606", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810214bf-674c-4491-aabc-401d3d84a1d3", "sighting_of_ref": "indicator--d0cb7b6e-7edc-4d1c-9ab1-1bc5f3cfc606", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bf86b7-8631-45dd-91f0-8aedd0c0240b", "sighting_of_ref": "indicator--0c95a624-3acc-47e3-b271-db6f87f9ef04", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851ed2fb-9172-44b2-8bc4-4e473cb0722b", "sighting_of_ref": "indicator--78f9fdd4-96cb-4614-b45a-6303a411bdb3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a5bbce-1202-45ca-b558-e1d8e8d666d3", "sighting_of_ref": "indicator--78f9fdd4-96cb-4614-b45a-6303a411bdb3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0348a9-9f83-4882-b3cc-4e8fc4b66309", "sighting_of_ref": "indicator--421a1658-7a87-4cb1-a3ca-6e48d1f57f66", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e011184-d673-4282-ae4b-2271a4a2e7ed", "sighting_of_ref": "indicator--da07b06f-d749-459c-b2a9-0ffee4aab4f7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df84c117-4f6a-424e-849c-f1d1b424e9fa", "sighting_of_ref": "indicator--a0a9040d-6ae0-4d9a-9b78-65a6d372119e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75066a8b-9c3f-44f6-8bfc-69783d2f052c", "sighting_of_ref": "indicator--29a0bda4-b337-4ba7-bf0e-297928726305", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc09454-4d5d-4bf3-9421-5f7239d9319b", "sighting_of_ref": "indicator--78c2c19d-d640-4297-b2fe-0f1c02db0d58", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f0c533-651e-4cf7-b67c-f176c27b7d06", "sighting_of_ref": "indicator--53ec8628-7d28-424c-91d2-7f8d1ecc9ac6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f8aea1-a4f9-452f-ab98-a3fd6f86d589", "sighting_of_ref": "indicator--53ec8628-7d28-424c-91d2-7f8d1ecc9ac6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68226bd-e58c-4f79-a004-333d559adf63", "sighting_of_ref": "indicator--bf0853b4-d0b9-4d2e-8460-362e446ebb1d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1eac78b-ddff-45d6-a299-98705c07ef04", "sighting_of_ref": "indicator--bf0853b4-d0b9-4d2e-8460-362e446ebb1d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afc740f-c935-44e5-93c7-c6f36fee4864", "sighting_of_ref": "indicator--80eaab5e-ca96-4221-94ed-ba0408e9cfa9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa90c06-739a-45dd-a219-9580d9f3097a", "sighting_of_ref": "indicator--80eaab5e-ca96-4221-94ed-ba0408e9cfa9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e695f79a-baf8-4b62-87e3-3a9ed9e8ea29", "sighting_of_ref": "indicator--6e988b93-9415-4b8f-be3b-fb20ce320cb6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6f43f3-6f2c-465f-bd77-ab4d14c22a70", "sighting_of_ref": "indicator--640e49bc-ebc5-4267-93df-357cb5592f9a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e6332d-6a66-4fa0-ab2c-23b6a9ed2353", "sighting_of_ref": "indicator--5304d4e5-c086-4c7c-a6e3-07552e1fb8a1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b17b84-1819-4a2b-99f3-cb5898de3fd1", "sighting_of_ref": "indicator--5304d4e5-c086-4c7c-a6e3-07552e1fb8a1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81255f94-6ffd-40e0-b1be-1ea3dd407ea0", "sighting_of_ref": "indicator--5304d4e5-c086-4c7c-a6e3-07552e1fb8a1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd1cd83-3a90-4bf5-977e-8f7d2077ad78", "sighting_of_ref": "indicator--0d943663-7b9e-4f51-9169-f3e26469d55a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b577273-caaf-4d7e-9b16-71243d8170c9", "sighting_of_ref": "indicator--bacddbe7-b7ed-4e3e-84aa-e0be20ee98a6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07acd8b-1756-43ab-9f35-38ea73a19d09", "sighting_of_ref": "indicator--1f9a053e-be98-475c-93ab-11429472fa64", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16f4635-d356-45f4-aa7d-a2671775768c", "sighting_of_ref": "indicator--a8ac3650-09b7-4473-97af-c220323c3702", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45805c47-09ec-4c16-ba6b-561785c80076", "sighting_of_ref": "indicator--8361e9b8-78b8-4f57-9530-e62e14828228", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aaf4085-e1e3-4337-b2c2-1441f1f8db58", "sighting_of_ref": "indicator--6615e8b6-fdb4-4cf7-a014-901289283e4d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd8f40e-6924-43e5-af06-a58b43796088", "sighting_of_ref": "indicator--40e83b07-ac7a-4a24-a299-6aecad20bef6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c26ff45-c754-4f15-ab0f-b3a2e5354bca", "sighting_of_ref": "indicator--40e83b07-ac7a-4a24-a299-6aecad20bef6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56ded3c-78f5-4ea2-b0ce-61384053f3fd", "sighting_of_ref": "indicator--d7b4cd7a-43fc-4ccc-a0d6-9a370cfa6798", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a3c4ad-ce33-4cf5-abd8-cc5404594dbc", "sighting_of_ref": "indicator--d7b4cd7a-43fc-4ccc-a0d6-9a370cfa6798", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e3557b-6789-4794-819b-ff93c739104e", "sighting_of_ref": "indicator--803f8d79-a130-4ea6-b39d-86e3c349fe96", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91613f4b-5242-4e75-979e-d5b511404a61", "sighting_of_ref": "indicator--803f8d79-a130-4ea6-b39d-86e3c349fe96", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a91635d-f7d3-4a35-88ff-2cbdd14913c4", "sighting_of_ref": "indicator--803f8d79-a130-4ea6-b39d-86e3c349fe96", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c008e0-eaec-44fc-b543-79a62c94159b", "sighting_of_ref": "indicator--c865ee8d-a32d-4558-a2d7-255187960df8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c9a18e-d5fc-4f3f-b71b-b1635e5bf4a7", "sighting_of_ref": "indicator--88883e7a-a7ab-4c0c-82b0-fe97ea5c9ae3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007a908b-2bab-4c27-ac41-ffc79dd0b3d5", "sighting_of_ref": "indicator--88883e7a-a7ab-4c0c-82b0-fe97ea5c9ae3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c926ecef-0825-4ba4-9be9-30e15129018e", "sighting_of_ref": "indicator--7391c9af-c790-4ee9-8d73-40eade066914", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f5c0b9-eebd-4332-a6e2-9de85af68212", "sighting_of_ref": "indicator--60adeb9b-ab2d-4f8d-9d85-ed382fa944f7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2e451f-7b57-47be-b363-5d942fb41363", "sighting_of_ref": "indicator--66984087-6c42-4192-8fc9-288631dc6466", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e39b78-2088-43fe-9793-b534bbb88bee", "sighting_of_ref": "indicator--033e7e48-dcf7-4545-ab20-08140b69dc54", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10dcfa88-867b-4541-ac75-17488b6a07a9", "sighting_of_ref": "indicator--033e7e48-dcf7-4545-ab20-08140b69dc54", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4225e7d-ed55-46e3-ab37-dbfcf2d21a3c", "sighting_of_ref": "indicator--43543f74-62f3-4114-85ff-ac8553bac868", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23a9664-1a32-4198-88f2-a6c6ee42f25f", "sighting_of_ref": "indicator--487be152-4822-40dd-95eb-263a3a2cee44", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5fd68d9-a09e-44b4-9d94-263efae7cf8b", "sighting_of_ref": "indicator--487be152-4822-40dd-95eb-263a3a2cee44", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9bc617-efd1-48a4-9b61-735d93237284", "sighting_of_ref": "indicator--2b349f2e-da3e-4ca0-8277-d05239c0492e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81012fb1-5b16-4b2e-abbb-f277c10d2543", "sighting_of_ref": "indicator--2f0612bc-8257-4115-a849-f478f8bed13c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f945bd8b-aaaa-49b2-9554-bcb88a09ff56", "sighting_of_ref": "indicator--60bce068-e126-4516-84b1-1ca96de4de67", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98499ba7-d064-48da-92a8-acbd87b7708c", "sighting_of_ref": "indicator--60bce068-e126-4516-84b1-1ca96de4de67", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d52c588-3e4c-41a3-8145-4f3524bd5a89", "sighting_of_ref": "indicator--15be2e8d-3c76-437f-abe2-f7155bdaa4e0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8ed94f-b1f5-4e08-948c-34672e9c8841", "sighting_of_ref": "indicator--15be2e8d-3c76-437f-abe2-f7155bdaa4e0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe2a00b-96ec-4e4e-b28b-ebbba21bbd0a", "sighting_of_ref": "indicator--6a7ee3ce-e520-47ae-826b-19588ddf0828", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9803c73d-fd31-48e2-86fa-a5bef59df49a", "sighting_of_ref": "indicator--07c41bd7-293e-4634-a13a-9862d0ebc9ad", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaecb4cd-c0bb-49a5-811b-fcd280279445", "sighting_of_ref": "indicator--07c41bd7-293e-4634-a13a-9862d0ebc9ad", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b24e71-5791-4821-845a-a7cd0a396f39", "sighting_of_ref": "indicator--1888c54b-9f08-4a1d-bbeb-29118357b1ef", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff2204a-10df-468c-af6f-fb0c97d5d45c", "sighting_of_ref": "indicator--1888c54b-9f08-4a1d-bbeb-29118357b1ef", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72622468-2242-42aa-ac00-5ba60d4476ec", "sighting_of_ref": "indicator--e0a9a5ff-4817-4a53-8f3c-ee046dff8766", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91135a69-fc5f-495d-8907-ccf665713095", "sighting_of_ref": "indicator--b1d5b61c-5499-4330-a270-506c69853368", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18998ce-3849-475f-a4f8-286997b6793d", "sighting_of_ref": "indicator--14cfe2c8-b428-4d63-a8e6-250c63661c87", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe542d7-9354-4630-b7c5-04caf4f99803", "sighting_of_ref": "indicator--4f254ddf-dee8-429e-bccd-3704712df503", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c80799-1056-4e23-9454-88ec47b0fce8", "sighting_of_ref": "indicator--763722c1-870a-4e8b-8b35-2663721677be", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37e9338-d03b-4e55-9051-3292fda97277", "sighting_of_ref": "indicator--763722c1-870a-4e8b-8b35-2663721677be", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8ad86c-2854-4baf-a195-f3c77ca4f662", "sighting_of_ref": "indicator--169de5c2-6965-4857-a34d-5d7c675e9987", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ea4238-e720-4563-ae40-ca2fd5a36b35", "sighting_of_ref": "indicator--8a9164d2-54a6-4411-aadc-cfc273f5248a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbccf7d1-8471-461d-a585-fe5456f7c379", "sighting_of_ref": "indicator--3d20de08-28c3-4b02-aaf0-152635ae0511", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40270ede-f1b1-41ec-9a24-63e72061f546", "sighting_of_ref": "indicator--3d20de08-28c3-4b02-aaf0-152635ae0511", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9755103f-4535-45b1-a69c-bc4edb3190e4", "sighting_of_ref": "indicator--4e03cb29-3a2d-47c1-bffe-259cfbbe13b7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2daab7bf-70e0-4c5e-8d46-f2d66bb53ac2", "sighting_of_ref": "indicator--4e03cb29-3a2d-47c1-bffe-259cfbbe13b7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f761c8-9e49-49a8-9c4d-cd1d227b3a01", "sighting_of_ref": "indicator--5f9bc4ee-e1ee-4756-828f-b90a3b12b9fb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6dcacf-475c-492e-b4ce-959dccd930cd", "sighting_of_ref": "indicator--eb512481-3266-4297-8fa6-dbf29f2d1dc5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a825393a-8bce-403a-aa5e-4542a0b28e22", "sighting_of_ref": "indicator--b89f8e8c-7796-49eb-b901-42cc2833544f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fe26cb-af68-4bb4-bacf-92e86aa5dd59", "sighting_of_ref": "indicator--1290ff28-e0e6-42ae-b826-248dfafe5af8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b762607f-d729-4bee-9c50-316e26fae13e", "sighting_of_ref": "indicator--c5b01eaf-a1f8-4d02-b47b-513f9ce0180d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1642aa9d-45d2-4cf7-a236-4d54b10d292d", "sighting_of_ref": "indicator--50613c1b-b039-46d9-a48c-363cfbd0e8b8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fb1721-2b73-4934-814f-1d313cd96823", "sighting_of_ref": "indicator--50613c1b-b039-46d9-a48c-363cfbd0e8b8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20756f02-7198-4584-bfd2-e7f6c726f4b2", "sighting_of_ref": "indicator--a53895b2-2383-4621-a80d-0e757d82a88b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef91266c-3ce8-4a03-b91b-7f45abbd7fd0", "sighting_of_ref": "indicator--a53895b2-2383-4621-a80d-0e757d82a88b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f9cf85-0b5c-4081-b52c-77b54e8c2b2e", "sighting_of_ref": "indicator--1a1896e0-4a5b-4aaa-82d1-c2e4e0edb0e2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89dfe16e-82ee-46c6-a467-13342e82d1ed", "sighting_of_ref": "indicator--1a1896e0-4a5b-4aaa-82d1-c2e4e0edb0e2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e892a8-d427-40a2-b161-12e32c669b5e", "sighting_of_ref": "indicator--62a7250a-c9f9-49af-828f-ebe579124626", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95487162-26ec-441b-bf22-6502db4ea7b5", "sighting_of_ref": "indicator--62a7250a-c9f9-49af-828f-ebe579124626", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13267e82-1caf-46e1-9904-6cdebf062533", "sighting_of_ref": "indicator--dadcab43-3a22-4726-a426-36063a464eaf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91303b14-ea95-46d8-9c22-c2d01baa2062", "sighting_of_ref": "indicator--f774eb5d-0809-4603-8487-0f48aecceca8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9776842e-b111-4b0d-8db6-c6365c3bff59", "sighting_of_ref": "indicator--61da7051-35c6-431f-bc17-c8ce4811fdaf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a939cd8-d627-4a33-b31f-768b951d761c", "sighting_of_ref": "indicator--61da7051-35c6-431f-bc17-c8ce4811fdaf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1e5b9b-7740-4ec5-9d50-b3885007adc7", "sighting_of_ref": "indicator--0b824b01-f67b-4ed7-8e85-965827d5667e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2959de8f-7b04-4b07-8b24-db8bf4f72cad", "sighting_of_ref": "indicator--0b824b01-f67b-4ed7-8e85-965827d5667e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca8e510-4369-444c-9ca7-218bccd0ffb3", "sighting_of_ref": "indicator--1fa766c0-c085-4fac-9e9a-c84b9cc681bf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6492a4-dc85-4d0f-96a9-c89ab2985a61", "sighting_of_ref": "indicator--400db1d3-63c8-42ac-b384-293ff0af6f3b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def02561-8b0c-40c5-9ee8-9248fef28c11", "sighting_of_ref": "indicator--83dcf562-c8f4-4b90-bc50-5481c1c9121b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f81e4f1-db33-4aa5-b1d0-11b0f7166cc4", "sighting_of_ref": "indicator--84ab850f-5ce6-495e-897c-8a314efbbd4b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40016947-5dca-487c-8aa8-8c62bb074441", "sighting_of_ref": "indicator--f333c32e-2986-479a-af58-811e72b6b7aa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84093a50-b213-4b66-a4d5-865eba3a6325", "sighting_of_ref": "indicator--4b54c066-5b37-4f03-91fd-6345f97f8da3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b413c8f-0225-449d-8a26-23f4cd7c0172", "sighting_of_ref": "indicator--4b54c066-5b37-4f03-91fd-6345f97f8da3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89612dd6-3bd5-4f17-aadd-8c796c6aeecf", "sighting_of_ref": "indicator--d3e300ca-1546-476f-a93b-f7c71a29cfc1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2414359a-7ad6-4d5d-b6f1-1cb4b917ee3f", "sighting_of_ref": "indicator--b12280be-a4da-4042-bf14-7c10dc2ad737", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ca8782-5cac-49fe-b8fe-735c8ebfe5de", "sighting_of_ref": "indicator--b12280be-a4da-4042-bf14-7c10dc2ad737", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8ef344-5710-4315-a404-4f42c961c14f", "sighting_of_ref": "indicator--87fe0240-2ba6-4483-a98b-8d8c78b5ea97", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ad4109-f361-4176-9877-63c60bc3b561", "sighting_of_ref": "indicator--87fe0240-2ba6-4483-a98b-8d8c78b5ea97", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e77b7b5-6363-4533-8cc4-80b9da995aa3", "sighting_of_ref": "indicator--4541c297-e256-4477-a9f9-3088a494d6d0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad966615-9d60-4eca-b613-5f79e1cf63a5", "sighting_of_ref": "indicator--4541c297-e256-4477-a9f9-3088a494d6d0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6c49c5-6c74-47be-858d-42a5723cb119", "sighting_of_ref": "indicator--3bda60f5-2d22-4c99-b23a-ce1c1caf76ef", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9770515a-09fd-4c4c-956a-b7e10298bd40", "sighting_of_ref": "indicator--d8fb11ea-54d0-455e-86ba-04adefa1882d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9008b5b5-7b97-40d2-a113-cb833567b84f", "sighting_of_ref": "indicator--155c29e6-514b-4799-9d87-c1027e5c10d8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ae9e17-e6c3-4441-bfac-7af9d6589571", "sighting_of_ref": "indicator--2f002e14-fc88-4690-a18f-9b816192f2e2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b806893-a79d-41d7-81ad-e2f1b25a852d", "sighting_of_ref": "indicator--2f002e14-fc88-4690-a18f-9b816192f2e2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d5f9c7-31c6-48e8-8224-334801794983", "sighting_of_ref": "indicator--3fb1d36b-099a-4fff-8a04-f082d6cb922c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e497dfee-4bb2-437c-98d0-2419634783ac", "sighting_of_ref": "indicator--cddce2d3-ca79-48bd-96d5-2a4337287507", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c1eaa7-f5dd-4a98-b980-2ad51c26e134", "sighting_of_ref": "indicator--e2218e34-ccaf-469a-8762-a7cf3734407e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1493dee0-b031-4936-9431-6f70692349ba", "sighting_of_ref": "indicator--e2218e34-ccaf-469a-8762-a7cf3734407e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e80b60e-7b16-4883-b8b8-29d7b9eb79c7", "sighting_of_ref": "indicator--a5a361b7-ed23-4168-8e8a-c7e6bf2f51eb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5904441c-698e-44db-98de-7790817543c3", "sighting_of_ref": "indicator--1771138e-0cf1-473b-a6a0-259307a99702", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8050a475-0d17-4c5b-b685-b89a84df9e01", "sighting_of_ref": "indicator--8c57ccbd-7b97-4c04-968a-d3f18ffc0f2a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dc51d9-8b22-4fa1-a606-a23eb9852236", "sighting_of_ref": "indicator--8c57ccbd-7b97-4c04-968a-d3f18ffc0f2a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6a8df3-8cbe-42d4-b733-27ec659e8c8e", "sighting_of_ref": "indicator--499c3683-b2f9-4688-a752-913b383fb26f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010cae55-4777-47e3-87a2-7b3345f6e4e0", "sighting_of_ref": "indicator--1181905e-1b55-460b-b277-257192cb9f26", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a57304-a474-4d55-b1b6-18d8acb2b5ac", "sighting_of_ref": "indicator--4f2fb845-0749-454f-a335-ebd0da1c084d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65157915-61b9-4ee4-a7fe-7176b613bb88", "sighting_of_ref": "indicator--4f2fb845-0749-454f-a335-ebd0da1c084d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20145605-5991-4439-8edd-e1d8d378d251", "sighting_of_ref": "indicator--c7f523f8-727a-48b2-98ea-b11893c1b8cc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5130bed0-33dd-41b7-a455-7aba5e5faa6e", "sighting_of_ref": "indicator--24ffbd65-a954-4705-8189-902dc0ced6f5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14972c22-c41d-43ea-b041-3de1541c2e1a", "sighting_of_ref": "indicator--24ffbd65-a954-4705-8189-902dc0ced6f5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3fa18c6-b38b-46a6-a045-1a31ca30a35c", "sighting_of_ref": "indicator--0859e390-bd97-498e-9319-93d5d8f1fab7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2aa9a8e-6f3d-4b84-a450-ab47ad73b0a0", "sighting_of_ref": "indicator--73d9d433-64c1-45c4-95a6-1ac07e1c1f7f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba3ffce-8833-4bb6-9e40-e4981359403d", "sighting_of_ref": "indicator--aee6c153-21ff-4094-bb42-63fa1e1f4ae9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d747af2-6ec9-4019-8ea7-030853b4d1f8", "sighting_of_ref": "indicator--aee6c153-21ff-4094-bb42-63fa1e1f4ae9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b450d17-42f6-4db9-92a1-430e9d6bad83", "sighting_of_ref": "indicator--14475b76-aead-421a-a033-115466686085", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957adada-dd62-401b-a3ce-b57ed0954443", "sighting_of_ref": "indicator--d3404363-f923-4f72-b4a5-625e2aea2dd5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6efd6a-b44e-4511-b76a-0a374c880283", "sighting_of_ref": "indicator--c58d5244-296b-4940-a11a-64560b6a6b10", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d485ff5-adeb-4f2b-8fe3-1a9553fa88e5", "sighting_of_ref": "indicator--4a3af49b-1244-4db8-9acc-cecce2920acc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf5ac84-ca91-4ae1-b935-c730a16cc60b", "sighting_of_ref": "indicator--537ec9e5-d93b-429e-b641-4f4003e15fc3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39c5185-1961-4861-85e0-d0ad6fe67e47", "sighting_of_ref": "indicator--3671064d-12e9-47f3-9636-6f57faaedb53", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564a26b4-11ae-4c4d-9443-05c7298cfa6c", "sighting_of_ref": "indicator--3911268b-df02-4757-a44e-635a02681124", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75653a13-4c96-4a97-8c79-fa3c719d5d25", "sighting_of_ref": "indicator--77aea6dc-a5be-4739-a981-b721a2e14894", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c13e63-5ac4-47c4-9f0e-bfdd9095b057", "sighting_of_ref": "indicator--ede1f3bd-1e1e-437b-bb02-60e267beccd3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e06aa95-d60e-4954-8085-c3d74dd81431", "sighting_of_ref": "indicator--dd05346b-a8be-4858-b4ce-f5d170f94e0b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecaf2d18-9df8-4089-b03f-973d68934939", "sighting_of_ref": "indicator--bf76ee65-6111-4e4b-91c2-d94c64f07e9f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8024508-fa82-4f51-81b8-70a592fd3499", "sighting_of_ref": "indicator--f21f2fa5-8f4b-4c11-8e9e-498c6813b860", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a715d98c-5c31-4f58-bc22-a5e50728a888", "sighting_of_ref": "indicator--2c9ca78b-f227-4a92-9006-e6cbcb8e1a3e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cab54a-01f2-4dc8-b467-0dfea2a15e98", "sighting_of_ref": "indicator--2c9ca78b-f227-4a92-9006-e6cbcb8e1a3e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb481b1-421b-4d82-8c95-157a14ee966b", "sighting_of_ref": "indicator--8c8f52b1-e472-411c-b250-29a4dcf8abcf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7cb6a9-02e0-4e3f-8704-232383374a0f", "sighting_of_ref": "indicator--8c8f52b1-e472-411c-b250-29a4dcf8abcf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec9a4e4-2d88-4552-9444-f54615afd116", "sighting_of_ref": "indicator--9fbed677-bf39-4d44-8dda-5e52c15aa648", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2042e1b-c61d-4022-b1dd-bcd340d06d35", "sighting_of_ref": "indicator--2517ef9c-31a4-4a16-a2c0-568b93df26ca", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f4b6ba-0824-4bcc-9b2b-43b586aa4fa9", "sighting_of_ref": "indicator--bb1bd288-8028-4a13-8625-52c627a3ebf3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0544925c-b810-4712-8d6b-fb38c3c0868d", "sighting_of_ref": "indicator--ec4495a7-4454-4abc-b945-99004e2e2050", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7706e154-f9dd-4fbd-b383-7821b8bdd849", "sighting_of_ref": "indicator--c62c0842-3b9a-4ae9-98a8-9e8e74b98fab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdcabc1-7afd-4d07-855b-a5b2e666ca17", "sighting_of_ref": "indicator--81ce5c44-0ea9-4539-9658-c35143ed92af", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743a3e5c-591d-476c-b586-1e20468542f5", "sighting_of_ref": "indicator--316c52f1-e55a-4b9e-8075-256afecae983", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c33e8c1-c244-4f60-9c8c-c43fec8abab4", "sighting_of_ref": "indicator--23d30768-992b-46b0-baa7-824a8aa1ffe8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f36b916-2241-4dce-9b1b-07814ff4dc45", "sighting_of_ref": "indicator--3b14a129-cf54-4b8b-a956-118418d9b7bc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646fbb75-7098-408a-9c76-d6f8eeaca2f8", "sighting_of_ref": "indicator--8d42cdb9-8e0c-48f0-9159-a8575eacead8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfdcced-3b6d-43a6-920c-c18cc6f4e11f", "sighting_of_ref": "indicator--8d42cdb9-8e0c-48f0-9159-a8575eacead8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54add69b-3749-4b12-91f3-0dc0799f8a19", "sighting_of_ref": "indicator--8d42cdb9-8e0c-48f0-9159-a8575eacead8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917ee9ec-b7bb-4270-b7d3-70275c088639", "sighting_of_ref": "indicator--7acb05f4-f753-4ffe-bde8-25692281bc4f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46cba04a-3b34-4e6f-8859-ec839113ee90", "sighting_of_ref": "indicator--d153f9d7-7e91-4790-8104-0934de77ff4a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ecb0af-1b51-4642-bb6a-49ddbefc77d4", "sighting_of_ref": "indicator--033db4f1-075a-467c-9fc7-a124900030c9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d2882c-2226-4646-8e59-4e3506fc1d2e", "sighting_of_ref": "indicator--87de4909-c7d0-40af-b2eb-75a29d5a8b86", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf07a3b5-c019-4774-9702-549082ac212d", "sighting_of_ref": "indicator--87de4909-c7d0-40af-b2eb-75a29d5a8b86", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b9f6e9-aa64-47d4-8144-f9f7fda92a46", "sighting_of_ref": "indicator--2073579e-8f5a-4fa6-8455-57a77f6efee4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf500e9f-e281-4ded-9a1a-b505b80af3a0", "sighting_of_ref": "indicator--7d1e4325-5d59-4aa6-8134-da0f20e83ff2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353bbd1b-80a6-4783-bbb5-f725ec5f03c2", "sighting_of_ref": "indicator--8d7e918a-ae5c-48cd-8b13-95cf7b0f74f2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb77972c-bcb7-45c2-9a70-deebce7ad740", "sighting_of_ref": "indicator--8d7e918a-ae5c-48cd-8b13-95cf7b0f74f2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4997fa0-7466-4375-9337-1c7d2db163f1", "sighting_of_ref": "indicator--8c9cc4f7-086b-48dc-85a9-e2d74e8b2da2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabb34e9-bc09-4ba1-aaac-0a8f6012381c", "sighting_of_ref": "indicator--20910ae1-85ec-4002-a901-c28b9ce020f2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0410ddbc-54f3-41d3-b45c-08ca021759f6", "sighting_of_ref": "indicator--4c072ce0-2efc-416a-a01a-28849c03af12", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4085ec01-6b97-4fef-88d1-427d48f3350d", "sighting_of_ref": "indicator--7c39af48-3b8b-4ee0-b4b9-e38e5f653776", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1e8f75-d55b-46eb-95cc-2fa8cc6ec16c", "sighting_of_ref": "indicator--22610239-7876-4f18-b597-afd797edc7b7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3238f400-d965-481c-8fb7-430ca5becebf", "sighting_of_ref": "indicator--22610239-7876-4f18-b597-afd797edc7b7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042aa897-7f57-49be-96e0-2d721d65d5bb", "sighting_of_ref": "indicator--e8fc58a6-902f-47b0-9809-edd600d850a5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a47759d-c025-48c0-b52a-348d7f929ae1", "sighting_of_ref": "indicator--1f4ff0ea-0c77-494a-b92f-f428dab8fbde", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3cebcd-e882-4529-ba29-61ad21ce2df1", "sighting_of_ref": "indicator--0ca2fec8-dd05-4c83-8335-5dbd59ccf785", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279ce6e1-2821-41db-8e7d-3e94c363ab17", "sighting_of_ref": "indicator--c0e895cc-0876-4e95-9a4c-b25d91a060e4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7feb475-408f-4377-99f3-dd3625bbf90b", "sighting_of_ref": "indicator--252ecff6-76d5-4d25-918f-4e32b14e074b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c753f0f-6568-4c33-b935-f63149597d14", "sighting_of_ref": "indicator--d61e23d0-18c6-4717-950b-ae3b60d04636", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e231abdd-03c5-422a-9a1a-dff79410be72", "sighting_of_ref": "indicator--950b9679-e74d-47d3-b584-a58a51ad8bf3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b85769-604e-4ad1-938e-1c3eb28476ec", "sighting_of_ref": "indicator--cef9e929-d74f-47ef-b334-9b580f73a1f5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cadb3cd-63f2-4c7b-9fc6-5ff953c4a191", "sighting_of_ref": "indicator--fa5fa589-feb0-4798-98e0-e5ea4104d10b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d26d3b0-f89e-4930-b18b-710cdbaa98e4", "sighting_of_ref": "indicator--fa5fa589-feb0-4798-98e0-e5ea4104d10b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f738c8e8-5ddb-4bc8-be82-7b179bcce96f", "sighting_of_ref": "indicator--f3cfecbe-2b95-47f1-8d5c-6b3d58eaca93", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd00dc8-25a7-4d7d-a1bc-51cb22043d80", "sighting_of_ref": "indicator--f3cfecbe-2b95-47f1-8d5c-6b3d58eaca93", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b310b2e-751f-4485-904c-cc30fba3884b", "sighting_of_ref": "indicator--5e042b62-f0a7-487c-8a60-9b928e0683bc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1b67e7-0046-46d6-9f4f-ae5a23f5e290", "sighting_of_ref": "indicator--3b96fb3f-18cb-4bad-9138-5009c5631a11", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d842373-38bd-40e5-bbcd-b0258a9040f8", "sighting_of_ref": "indicator--a6e30f00-0434-4b33-9a36-90f5df27c514", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bceff2-bbf6-414c-9c25-a1450760e704", "sighting_of_ref": "indicator--dca46a08-122d-41e7-858a-d867b38fb76d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdca1cb9-6339-4f59-918b-e4f631e3a98b", "sighting_of_ref": "indicator--9ef9be10-98b9-4032-81be-6ee61a7bf1b5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808bb720-b2f3-410c-b318-dc049bc0d7bd", "sighting_of_ref": "indicator--21d1a489-84d4-481e-a620-4c6828a4a7d5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec481754-f6ff-4fe6-aafa-6bd4c4bb55c3", "sighting_of_ref": "indicator--f159dfa0-afc3-4e6d-afb5-2528c3ab1d12", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c6401c-db8a-452c-a730-eb1e9b30fb94", "sighting_of_ref": "indicator--0b367474-d052-40f5-8a7b-0cac7f3484b3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0dbd39-fe7f-492a-9168-d8ab232008a7", "sighting_of_ref": "indicator--351168b8-535b-474e-aae7-87c251beccb4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b2d852-cb27-4c45-ab60-b01cf05661d1", "sighting_of_ref": "indicator--351168b8-535b-474e-aae7-87c251beccb4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3e38e5-3361-431e-bf50-dbdd862c13a0", "sighting_of_ref": "indicator--aec46dca-abf9-4584-b2fc-c86ed885c4cb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3e10e9-f4c6-41c1-8e90-737af615deb3", "sighting_of_ref": "indicator--e4174982-2c3c-45d4-b432-e5a2a0af9abc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ee8cae-df68-48b5-a637-e91e746984a4", "sighting_of_ref": "indicator--3927d981-b504-4628-9357-08cce8d88b58", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57a4c67-97b5-4ae4-9062-6f09fa7e7cc5", "sighting_of_ref": "indicator--4cc0cafe-882f-4a2a-a82e-3ea05c918f70", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57b9b1c-2ef6-4891-82c8-a2f7da9300f5", "sighting_of_ref": "indicator--0a8df342-9b59-4a47-82cb-c2c88fa8a35b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3125a65c-2e97-465c-b889-bba27c6b7964", "sighting_of_ref": "indicator--7ad26dcb-06cb-4ac1-b08f-7acc80a7d7ad", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd80c33-ab3d-4e6c-ac50-c3d15a1260a4", "sighting_of_ref": "indicator--f47def63-4844-4c86-80c4-60aefc19c6cb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18695873-1b68-45e7-9809-f3684ec40f7d", "sighting_of_ref": "indicator--f7f31fd2-fb35-4e2f-a3eb-6ead4150e77f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e21417a-4981-4ebf-b70b-779af0dc4f89", "sighting_of_ref": "indicator--55379a37-e68d-4b6c-a34e-07c377a177d6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037e73e0-a15f-4b23-ae5b-6cb12229e08f", "sighting_of_ref": "indicator--988fdff1-07fe-47aa-b528-b460aa89db8c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea6d677-5521-4273-936d-fee789814f3e", "sighting_of_ref": "indicator--b3e665a7-5320-496e-9258-3dbafbcd6366", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e62cf56-1eea-449b-9484-d8a17b26f64e", "sighting_of_ref": "indicator--b3e665a7-5320-496e-9258-3dbafbcd6366", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6af44f-c37d-4b59-999b-1c48d3b3036d", "sighting_of_ref": "indicator--b3e665a7-5320-496e-9258-3dbafbcd6366", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa4c2c7-b444-47c2-a5a8-3070930e1fe5", "sighting_of_ref": "indicator--2c3a7f08-375a-49cf-a4b8-f8294b1d630a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fca775-569a-4623-aee0-7d56b49415ac", "sighting_of_ref": "indicator--2c3a7f08-375a-49cf-a4b8-f8294b1d630a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac8071ed-8096-41d8-8eb7-bd7ca1328ccc", "sighting_of_ref": "indicator--b5e4f9ce-8c81-46ad-89b2-8cb87425b72c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add5e453-359a-4784-9810-d001d5bc5bc4", "sighting_of_ref": "indicator--20769725-b054-45a6-93f2-a6ffafde7191", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ffdf532-0d8c-4396-ae6b-19cc7cb81671", "sighting_of_ref": "indicator--20769725-b054-45a6-93f2-a6ffafde7191", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ceaf488-ee94-4757-abd1-e2bb10f7649f", "sighting_of_ref": "indicator--fbad9b55-8369-4062-9b6c-489221d7d1c2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b55c86-11cd-40a0-a8eb-468fa6eb451d", "sighting_of_ref": "indicator--fbad9b55-8369-4062-9b6c-489221d7d1c2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffa4924-ebd4-4d1a-bdd9-4e6208fd411c", "sighting_of_ref": "indicator--e775ef6f-9ab9-4bb2-bb6d-5a838cff4db3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef221c7-497f-4dbc-9b6a-310852ba0ed5", "sighting_of_ref": "indicator--e775ef6f-9ab9-4bb2-bb6d-5a838cff4db3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33b2aaa-985c-4e6e-bfee-7c9aa7f28198", "sighting_of_ref": "indicator--66a68bf9-2003-4910-9c64-76fc8b3f584d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa080250-1fe4-49c2-b5d5-b92af254de97", "sighting_of_ref": "indicator--66a68bf9-2003-4910-9c64-76fc8b3f584d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b07a23-3c8d-4801-9413-cacfd58992d7", "sighting_of_ref": "indicator--66a68bf9-2003-4910-9c64-76fc8b3f584d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2869ba0a-244e-4a88-af25-381411064ee7", "sighting_of_ref": "indicator--fe2ae0a5-b3fb-40f6-9639-bc29aab732d8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd264ba-c8a8-4cfc-b491-4070149fcffa", "sighting_of_ref": "indicator--15587427-b56f-4491-a324-d6699bfffb6a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ee1795-203f-4a3d-84a7-70cc31bdf69c", "sighting_of_ref": "indicator--4303ecb0-07d7-4240-948f-f76e4192a505", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a7e0e3-a882-4e79-9775-debc60fc64f4", "sighting_of_ref": "indicator--4303ecb0-07d7-4240-948f-f76e4192a505", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91c9076-4db3-429f-9836-1d903c604b8e", "sighting_of_ref": "indicator--4303ecb0-07d7-4240-948f-f76e4192a505", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5510e28b-6406-4ce3-905d-9cc03adbfe28", "sighting_of_ref": "indicator--ab6dd49f-f076-4115-bce7-98c3e3c635e1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bafc742e-4479-4656-b7b3-9ab979fe6bc5", "sighting_of_ref": "indicator--ab6dd49f-f076-4115-bce7-98c3e3c635e1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b613e9d3-ab32-4de6-8a76-cf99304fa1fa", "sighting_of_ref": "indicator--005a162e-d7f4-4467-ada4-9637511aa49a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbccd52b-7c44-43eb-9278-6bd5c5dffec3", "sighting_of_ref": "indicator--005a162e-d7f4-4467-ada4-9637511aa49a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1448f11-e04e-46b7-8d21-3bc03d814d63", "sighting_of_ref": "indicator--005a162e-d7f4-4467-ada4-9637511aa49a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a0ed85-32ff-4a81-bf25-336db4ee22de", "sighting_of_ref": "indicator--f2be7109-f730-410b-b5b0-61a5abd067ca", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7d261c-a399-44cb-b61f-0dedbf55f699", "sighting_of_ref": "indicator--f2be7109-f730-410b-b5b0-61a5abd067ca", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25fbd61-89eb-49eb-8f5a-63393e4cd389", "sighting_of_ref": "indicator--7d9eb6e4-999f-4df2-ac55-95b2d27b705f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0edd3765-a6fe-423d-ac91-ea62735cdeec", "sighting_of_ref": "indicator--7d9eb6e4-999f-4df2-ac55-95b2d27b705f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4661054f-b9df-4757-81ab-934c7a0c8bf7", "sighting_of_ref": "indicator--7d9eb6e4-999f-4df2-ac55-95b2d27b705f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb568a5b-9884-4e51-b3fc-dff2e13d44c1", "sighting_of_ref": "indicator--1f99e075-f640-427d-a412-f419c191065f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd6584d-651e-46bb-b732-801034f74561", "sighting_of_ref": "indicator--1f99e075-f640-427d-a412-f419c191065f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06dd5de-fc95-4ff9-ab2e-322a94659a99", "sighting_of_ref": "indicator--1f99e075-f640-427d-a412-f419c191065f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddecd5b-9263-41af-ae66-72eb3dd83e21", "sighting_of_ref": "indicator--dd779da5-cf7e-4e9e-a855-c88856f817ba", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1aa1bfe-03e7-41f1-abfe-0c8e5dbcf1f5", "sighting_of_ref": "indicator--dd779da5-cf7e-4e9e-a855-c88856f817ba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2107706a-3f48-4ed3-87e6-3cf44f836b85", "sighting_of_ref": "indicator--dd779da5-cf7e-4e9e-a855-c88856f817ba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f8f1d5-89a9-4bef-8871-03dc1407ff6e", "sighting_of_ref": "indicator--975a18b8-0b72-4567-bfc5-591d029b3800", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049af53c-366d-4350-bca8-d674a9404275", "sighting_of_ref": "indicator--975a18b8-0b72-4567-bfc5-591d029b3800", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcda2be-5ca9-4612-a26f-e1ed004530ca", "sighting_of_ref": "indicator--975a18b8-0b72-4567-bfc5-591d029b3800", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39eb137f-bc20-41cf-9791-6ed17f23c13f", "sighting_of_ref": "indicator--c10c7b0e-da36-4f93-b15e-7383bc7599c3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc22a01-3e7f-4275-b289-ace8f1a6c02e", "sighting_of_ref": "indicator--c10c7b0e-da36-4f93-b15e-7383bc7599c3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083ff8d4-792e-4fdf-a02b-99564b0c4db0", "sighting_of_ref": "indicator--c10c7b0e-da36-4f93-b15e-7383bc7599c3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe0fd75-efa8-416f-90ff-829f9ba80334", "sighting_of_ref": "indicator--6dae3fdd-fa39-4a17-b18a-cf83b7bee01f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651ce830-bb7b-4af1-a5ec-756cda07ab9a", "sighting_of_ref": "indicator--6dae3fdd-fa39-4a17-b18a-cf83b7bee01f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c4b6c8-b8a2-4f5f-a2d9-bc5a4bf2871d", "sighting_of_ref": "indicator--6dae3fdd-fa39-4a17-b18a-cf83b7bee01f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77207d20-3168-47be-939a-ee4cb58c12b2", "sighting_of_ref": "indicator--32d30ec9-0cf6-4e92-b167-9d30fbdf64f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c6290d-aefa-47d8-b59f-dff35b47a7c7", "sighting_of_ref": "indicator--32d30ec9-0cf6-4e92-b167-9d30fbdf64f0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923f2b08-610c-47a1-98a2-6459fdc9ae69", "sighting_of_ref": "indicator--62e7ad31-7aa6-4b57-957e-e0443676c798", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5017905c-f445-4a93-a6ae-452477b3ac8f", "sighting_of_ref": "indicator--62e7ad31-7aa6-4b57-957e-e0443676c798", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119b0867-7d9d-4fbb-8452-f2d39cf11e9d", "sighting_of_ref": "indicator--2cd3ddf0-8dfd-4785-ae18-bde247999836", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10290b8-66c7-451b-8f4e-eecf7435d66a", "sighting_of_ref": "indicator--2cd3ddf0-8dfd-4785-ae18-bde247999836", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c97f2ed-59fc-456e-bdd2-9726b6c04b97", "sighting_of_ref": "indicator--6d4ba01f-3395-46ef-891e-cca054e0801d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb63259-1469-4949-b55b-2621620ccd2b", "sighting_of_ref": "indicator--6d4ba01f-3395-46ef-891e-cca054e0801d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e10cd7-d9df-48bf-ae31-037dab22bdda", "sighting_of_ref": "indicator--6d4ba01f-3395-46ef-891e-cca054e0801d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b763cd-a9dd-4bb4-86b9-832cc3427522", "sighting_of_ref": "indicator--682551d5-c88d-43e0-b09f-43bffff131cc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2a3c5b-cd25-4977-927a-5a7af471029e", "sighting_of_ref": "indicator--682551d5-c88d-43e0-b09f-43bffff131cc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb562d5-bde0-47f8-b3d6-3305dfdb02a1", "sighting_of_ref": "indicator--682551d5-c88d-43e0-b09f-43bffff131cc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5ae300-4470-4419-87f3-6db6fb251c43", "sighting_of_ref": "indicator--2b43e39c-c47e-4798-b18f-ad1e918d8e34", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58696545-2bbb-4f1d-8b4d-5645e61ee58a", "sighting_of_ref": "indicator--2b43e39c-c47e-4798-b18f-ad1e918d8e34", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fadc4b1-6511-4acc-aabe-6c6c8c3cdceb", "sighting_of_ref": "indicator--97747140-4ee5-4b2a-a674-e9e6ef3920d9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40846204-fbf2-41cf-b12a-2363785a6acb", "sighting_of_ref": "indicator--5335148f-5f02-46e9-a698-ef2936eba042", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6ba5c8-6957-4e3c-9610-f74d2b451971", "sighting_of_ref": "indicator--17d707bc-ee2e-476b-87e8-d542a65f0108", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a163ae9-e7eb-4d2b-b580-937913e0385b", "sighting_of_ref": "indicator--17d707bc-ee2e-476b-87e8-d542a65f0108", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1025a25f-42c2-487d-b590-4bc9bce3a3f0", "sighting_of_ref": "indicator--29e24f45-464d-4af4-a165-256e39a81aef", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2608db62-e0b0-41d6-8f84-0204c5dfbdaf", "sighting_of_ref": "indicator--29e24f45-464d-4af4-a165-256e39a81aef", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1670d514-1643-4acd-947b-ce92e748113c", "sighting_of_ref": "indicator--7e7fc058-7433-4293-b66b-edbd6ab4e1bf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff009595-d572-4e78-ba56-a1805eac9b96", "sighting_of_ref": "indicator--5bf2ad15-ec7f-44da-b962-1fb8d7058bba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4853b1db-7538-4188-bd0a-7509260deacd", "sighting_of_ref": "indicator--5a95edbf-e64c-434e-9ec6-15c9dfe61332", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647d2635-e838-442e-bb32-2161ebdee12b", "sighting_of_ref": "indicator--5df921db-4028-46b6-a900-445622f01ef3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f302be8-1902-4bc7-b2b9-e89760e95fcd", "sighting_of_ref": "indicator--820e1dc7-3e80-42bb-a82f-adfaffe458c2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42e7972-9dbc-4988-b84e-8d445cccf1e6", "sighting_of_ref": "indicator--a2c20d5c-5ce8-473b-9732-54045271fa01", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c747a81-c664-4f1f-88d1-d60ebe5a7c92", "sighting_of_ref": "indicator--5a5c8293-9ff7-4a9b-8b40-7bb39529bc06", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2227d6-bc1e-455b-9468-a07d6adb7636", "sighting_of_ref": "indicator--4d7aef23-6c33-40e2-994c-32fd709f6922", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0427c4-74ec-45d6-beef-9e7b7349d3d6", "sighting_of_ref": "indicator--503917c0-b1be-430b-855c-e9ae80ebb36b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f5db93-0879-4bae-acf8-9e1aee5175b1", "sighting_of_ref": "indicator--503917c0-b1be-430b-855c-e9ae80ebb36b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b381a6-76c0-469d-b35e-f0a2be6e7a2d", "sighting_of_ref": "indicator--503917c0-b1be-430b-855c-e9ae80ebb36b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5af6824-a8db-47a4-8bcf-d34e96ff7911", "sighting_of_ref": "indicator--493b3690-c063-4468-b359-abe14410160f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496519ec-f19d-4875-a7d2-0148a4b14498", "sighting_of_ref": "indicator--493b3690-c063-4468-b359-abe14410160f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1038fe-e720-4e7a-9e29-f16d44d572cf", "sighting_of_ref": "indicator--04080d45-518c-4962-98b4-28f96e90073a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00087ecf-11bf-4f6e-bf3b-4fe84bd94f7f", "sighting_of_ref": "indicator--04080d45-518c-4962-98b4-28f96e90073a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7951f355-db61-4b6e-889e-0872d30954d5", "sighting_of_ref": "indicator--04080d45-518c-4962-98b4-28f96e90073a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e563526e-dc49-4710-be9e-0415a1fe96fc", "sighting_of_ref": "indicator--759c3884-1798-4f1c-a1d6-a43f02e05f4f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e85c2e1-8ad1-4c79-b0ed-d058a0516298", "sighting_of_ref": "indicator--759c3884-1798-4f1c-a1d6-a43f02e05f4f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e18b60b-20bd-40ce-a382-1b3fa10219f9", "sighting_of_ref": "indicator--759c3884-1798-4f1c-a1d6-a43f02e05f4f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904314fe-931e-4b8c-9656-bab6085a9cc5", "sighting_of_ref": "indicator--c6e09fca-2f17-4700-b5f6-f23d519562b8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ca4e3e-9b6b-49b1-80ee-13670f923dc8", "sighting_of_ref": "indicator--c6e09fca-2f17-4700-b5f6-f23d519562b8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48208d0e-37b3-4fa5-b072-3f5854e90049", "sighting_of_ref": "indicator--672acb10-24cd-4382-ac9a-832be5005522", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007ec683-79f6-4e59-8d79-14e47c407fcf", "sighting_of_ref": "indicator--672acb10-24cd-4382-ac9a-832be5005522", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2ebb19-101c-4f09-b727-fb6f10d8d2bc", "sighting_of_ref": "indicator--ec666a21-ee19-4fe7-a303-a0745cd9e1b3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33d19b5-fe6b-4c1a-9213-6939d3af41d2", "sighting_of_ref": "indicator--ec666a21-ee19-4fe7-a303-a0745cd9e1b3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8581ce-ad3a-4559-a153-393a3fac8ecd", "sighting_of_ref": "indicator--ec666a21-ee19-4fe7-a303-a0745cd9e1b3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307eb267-9c60-410f-b02e-bf11e674d230", "sighting_of_ref": "indicator--23bfd8b0-d882-47d6-bc62-c4184c7b5a98", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586cd06f-2a06-41e0-8bb1-72c9a6f9b0e6", "sighting_of_ref": "indicator--23bfd8b0-d882-47d6-bc62-c4184c7b5a98", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e42cc2-b804-42cd-916a-7e8587b41ae8", "sighting_of_ref": "indicator--3349c703-1e2a-4c2a-a0df-95d71e7553b2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9705b0f-ac64-4a44-8b50-88120af773d4", "sighting_of_ref": "indicator--3349c703-1e2a-4c2a-a0df-95d71e7553b2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1fb8db-10ed-41a4-b66b-c26e9027d2b7", "sighting_of_ref": "indicator--0e8b6837-8276-4218-9a5b-058528c3e897", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7f8bd2-5f99-41a0-8953-f6a8bc499e77", "sighting_of_ref": "indicator--0e8b6837-8276-4218-9a5b-058528c3e897", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7ac6e3-f2d0-4a7e-a6ff-dbf31d9d18bc", "sighting_of_ref": "indicator--0e8b6837-8276-4218-9a5b-058528c3e897", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87159dc-0098-4443-8eed-efffa510743f", "sighting_of_ref": "indicator--4ce5d598-f30e-4aca-97dc-2afc5a573b06", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2055b293-8472-4f63-9d45-184dd356547d", "sighting_of_ref": "indicator--4ce5d598-f30e-4aca-97dc-2afc5a573b06", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845f8965-cd70-4ccb-95f0-b99073ca530b", "sighting_of_ref": "indicator--4ce5d598-f30e-4aca-97dc-2afc5a573b06", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc488d8-0321-4933-8fd7-3b85dad96282", "sighting_of_ref": "indicator--17b2bfc5-e918-43f5-bbe8-7252da3473ac", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708b7201-7ffb-4803-b8fd-de85adb4034a", "sighting_of_ref": "indicator--17b2bfc5-e918-43f5-bbe8-7252da3473ac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61aabc4f-0492-4912-8cfb-05c7a954d4a7", "sighting_of_ref": "indicator--0ade4014-09cf-4a65-99ca-627c29163b1e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3c0b8e-098d-485e-a487-5d1c5302d6ca", "sighting_of_ref": "indicator--0ade4014-09cf-4a65-99ca-627c29163b1e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbed0c42-712e-4141-89e5-5dcb9cb33de4", "sighting_of_ref": "indicator--0ade4014-09cf-4a65-99ca-627c29163b1e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7e9037-93e1-4f41-ba5e-7457857986d6", "sighting_of_ref": "indicator--90ad1500-d607-476a-a9e1-57f453b93848", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041c1d0c-619e-4509-8c9d-18b0fbee510c", "sighting_of_ref": "indicator--90ad1500-d607-476a-a9e1-57f453b93848", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4c2fda-5b2d-4737-a3ae-62c32f502f7c", "sighting_of_ref": "indicator--90ad1500-d607-476a-a9e1-57f453b93848", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cf1d7a-cc88-4de3-9448-7ef787690120", "sighting_of_ref": "indicator--8d2a3769-4048-4444-9b46-da82f91f50b3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6d785f-9a43-4308-b8c4-3e0e7a80dc1d", "sighting_of_ref": "indicator--8d2a3769-4048-4444-9b46-da82f91f50b3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb55e66-ebc6-4294-b72b-99b54def1dd9", "sighting_of_ref": "indicator--a2886fe1-4907-431a-90da-1d6495a6be40", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b2fac8-ef87-4033-808e-1624e98a23a9", "sighting_of_ref": "indicator--a2886fe1-4907-431a-90da-1d6495a6be40", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1129c2-4a87-4f81-a1e1-5edd5320394d", "sighting_of_ref": "indicator--a2886fe1-4907-431a-90da-1d6495a6be40", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b53683-a702-4827-b358-d62b0ba37388", "sighting_of_ref": "indicator--228ef724-7ab5-43e4-a68a-dd47be678b38", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64cd2781-a016-42c3-9491-723a7e7a0fab", "sighting_of_ref": "indicator--025345e8-4f85-4075-965d-b8eb85d45ec4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41af85b5-c92a-4709-b516-ee3c299b85aa", "sighting_of_ref": "indicator--3a705522-b26c-4c9a-852c-daf035ac3bef", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa331b94-8c4f-48b7-ac9f-24961cb7bc59", "sighting_of_ref": "indicator--3a705522-b26c-4c9a-852c-daf035ac3bef", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34a2da6-c224-414a-b48a-85525cfdc1eb", "sighting_of_ref": "indicator--b24c0814-eb51-47d9-961b-4ea909d1f77e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345cc1e3-6179-4f71-a78b-a22fb45705de", "sighting_of_ref": "indicator--0b1b9fdb-7ca5-4529-9324-c324f51f4036", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a58f5f1-e898-44e7-a4e0-42af8b7f623c", "sighting_of_ref": "indicator--bf76312f-41ea-4f36-8e58-566af3f67a2c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04448fa2-d428-4ae9-affd-7048bcbe158b", "sighting_of_ref": "indicator--fd94c806-a9e9-4543-8673-4b68802564d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d129fd2-5c01-4a66-88af-0246c0ec3006", "sighting_of_ref": "indicator--4bb5ff22-7200-4779-a4bb-1816046aef6f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f0fbec-4255-42c4-a069-6676e2d570a9", "sighting_of_ref": "indicator--84137847-b74f-4bd6-be7a-b1f51c00b1a1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce278fc4-f174-40f0-99e9-6e78238d12db", "sighting_of_ref": "indicator--e7b6aef6-e6a6-40b7-a734-81674bc1db79", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf29c4e-9721-472a-bdae-35228184c3e7", "sighting_of_ref": "indicator--f19b4438-f855-48ab-8dc6-5a773c757e28", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59009ee1-f63c-4000-8536-7d88ab2be62d", "sighting_of_ref": "indicator--908b4767-e22f-4138-b908-6488833bd76c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05561b7-5610-4ab2-9faa-08f14ddf4f84", "sighting_of_ref": "indicator--908b4767-e22f-4138-b908-6488833bd76c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6491a5-def8-4d5a-93c6-bd5ccb8f76a6", "sighting_of_ref": "indicator--8754f038-58e4-46f1-98d1-8112abe5b21e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40833be2-8277-4fe9-9415-8f5b122b7f80", "sighting_of_ref": "indicator--f2a00a05-b9aa-4e65-9b40-0468ea6463ad", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b4ba3c-ae4d-4681-b0a9-82bfaf1481b7", "sighting_of_ref": "indicator--fbecfa16-b20b-4223-8908-5009ddc900e1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd927d7-3143-4c6b-82a9-d93bed72a5ad", "sighting_of_ref": "indicator--fbecfa16-b20b-4223-8908-5009ddc900e1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fba83a-8177-4813-89e2-63921feebcf6", "sighting_of_ref": "indicator--a99950b6-8557-4bfa-ac87-5d57b37ab989", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c3f01b-179f-4f2a-9bc6-f7910a38820b", "sighting_of_ref": "indicator--3b2d32a5-6c9f-4c25-8659-bebe4bafc425", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bd80fc-55d6-4dbe-be4d-3e61324374e4", "sighting_of_ref": "indicator--8e34fa67-f494-4967-963b-d3e162fe2eff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd7a049-3c54-41ea-b1cb-9e0369c7528f", "sighting_of_ref": "indicator--67a8c78d-304d-4c32-a43a-662b34bdce3f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8369c162-3990-4b49-acbb-4f154d7f3347", "sighting_of_ref": "indicator--0a80e77e-1d79-4ff8-ade7-df297a162dae", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2769f5eb-6050-4259-8029-1ca1da68e1c4", "sighting_of_ref": "indicator--eaf61675-a3fa-42a0-b45c-216af52501bb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947807a6-92de-46a7-8f99-0c5c6bdcf86e", "sighting_of_ref": "indicator--d0e313a3-e436-4d51-86d3-227bf4c8bfc0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa40c57-eac9-44c2-b52c-f59babf17d7a", "sighting_of_ref": "indicator--a9787154-f9e3-4d77-8e63-ce3b8b35a1cb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a4c8e7-4496-4456-b77f-cfdfbdb9fe72", "sighting_of_ref": "indicator--14a0e4db-c0cd-4f72-83e4-bdd98f1a6f0c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820f168f-fb64-4aea-a0cb-5afe2f37ce20", "sighting_of_ref": "indicator--14a0e4db-c0cd-4f72-83e4-bdd98f1a6f0c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1270d4ca-86e3-4180-a08e-0c958d307f28", "sighting_of_ref": "indicator--14a0e4db-c0cd-4f72-83e4-bdd98f1a6f0c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71820a15-e2f3-4fa4-b3ba-d8ac3c9588df", "sighting_of_ref": "indicator--73b1338c-1b67-43a2-8c60-513dd2f140bd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62063479-ac55-46da-b1b4-564c1eefcdd8", "sighting_of_ref": "indicator--73b1338c-1b67-43a2-8c60-513dd2f140bd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17abdd27-8ac2-43fb-81a1-16bd7731a505", "sighting_of_ref": "indicator--73b1338c-1b67-43a2-8c60-513dd2f140bd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2369fdc2-6081-45c8-934e-ff03f2b48207", "sighting_of_ref": "indicator--c7e7bdf9-e58b-45aa-a3ea-e17d5e7958f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79537d0e-4212-4948-b4a5-9c598a3fac1d", "sighting_of_ref": "indicator--c7e7bdf9-e58b-45aa-a3ea-e17d5e7958f0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc543c17-8b05-4a05-868b-794bf86b659c", "sighting_of_ref": "indicator--c7e7bdf9-e58b-45aa-a3ea-e17d5e7958f0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bbfeb8-e397-4a74-be06-c42882996bff", "sighting_of_ref": "indicator--3b61d278-d09a-4095-856b-27b6a7c16783", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e96473-f9dd-4f41-be6d-b0edac1ed1cf", "sighting_of_ref": "indicator--3b61d278-d09a-4095-856b-27b6a7c16783", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f70ff3a-5b51-437c-99d3-0a1baaf906d8", "sighting_of_ref": "indicator--263b07bc-dcdf-4c1c-a86b-d4f4aaf84ce2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce19963-f9b7-46c0-8c8a-3fc72b870a08", "sighting_of_ref": "indicator--aeecb358-e023-458e-b85b-5f2d5a49973d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b1635b-2544-483a-ac7a-f2ffa70edc98", "sighting_of_ref": "indicator--451b1b5e-1f95-48c6-a87c-b01b762a5a89", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da02029c-8646-4722-97cc-e78436daf89e", "sighting_of_ref": "indicator--451b1b5e-1f95-48c6-a87c-b01b762a5a89", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7c74a3-d81c-4e3a-880b-52e4e99f679c", "sighting_of_ref": "indicator--97824a40-4966-45f7-b8e4-51d2b9acdeb6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae46832-61d4-4cd7-b652-f0d9ca3defa5", "sighting_of_ref": "indicator--97824a40-4966-45f7-b8e4-51d2b9acdeb6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c88851-a166-4886-b2ca-95cff3df8403", "sighting_of_ref": "indicator--8ed81acb-265e-464c-911e-5446d4220ea0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72489b4a-97a8-49be-ab72-392e21dd8c41", "sighting_of_ref": "indicator--0e61e403-88e5-4cfc-9a08-e3888d0717d8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f85f4b-9c5e-43ca-818b-66db64a89f25", "sighting_of_ref": "indicator--0e61e403-88e5-4cfc-9a08-e3888d0717d8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fac60a-7c3f-4ce3-bf78-b04997b601fb", "sighting_of_ref": "indicator--0e61e403-88e5-4cfc-9a08-e3888d0717d8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6274f053-54bd-42e3-b4b0-e8b886fb7e65", "sighting_of_ref": "indicator--5fbb32f8-e62e-4c05-b495-3fbde1510131", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47a5ab4-8839-4670-8f2f-ccbde2b34a5e", "sighting_of_ref": "indicator--5fbb32f8-e62e-4c05-b495-3fbde1510131", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec97bca9-5ae4-4887-be75-43c623ce4503", "sighting_of_ref": "indicator--5fbb32f8-e62e-4c05-b495-3fbde1510131", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c0a515-74a5-4d16-a734-70cc2053ffd3", "sighting_of_ref": "indicator--5d903f00-faa2-4710-9f1b-04e30b878ea6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37a8f49-9c12-49df-922e-8f62d428b4f4", "sighting_of_ref": "indicator--e96b0238-2304-4d00-8e8a-9e8d60492cf0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a836a6-a438-4155-8162-00b205a55ef2", "sighting_of_ref": "indicator--e96b0238-2304-4d00-8e8a-9e8d60492cf0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f520e6fe-e1fc-44ef-b4af-6f39122fda9d", "sighting_of_ref": "indicator--1ab3c781-87db-4c0d-acec-45a44a578004", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf65bcb-9c62-4405-b888-15e5f301c1e0", "sighting_of_ref": "indicator--1ab3c781-87db-4c0d-acec-45a44a578004", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facb3c0d-f288-4358-9321-a670aa75d4ed", "sighting_of_ref": "indicator--8a8518e0-0e64-4e56-866d-477ca294d1fc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836a2d1f-4de8-4f3a-b3c8-fc50f7a76b43", "sighting_of_ref": "indicator--8a8518e0-0e64-4e56-866d-477ca294d1fc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6580459e-e941-4efd-8373-11e2454e5247", "sighting_of_ref": "indicator--0618144c-09a9-49ee-a5fb-374b06292e34", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4e0634-f83b-4c66-b853-499dd3856f38", "sighting_of_ref": "indicator--0618144c-09a9-49ee-a5fb-374b06292e34", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b075f0-8d9c-4648-8c2e-bce73e5b610a", "sighting_of_ref": "indicator--0618144c-09a9-49ee-a5fb-374b06292e34", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c473d9e2-4384-4eed-8f7f-b85003337d4b", "sighting_of_ref": "indicator--238bf92e-4a09-4f13-adec-17acbd7c5157", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275d2db5-dd42-4a0a-af22-09bc6a539b2b", "sighting_of_ref": "indicator--238bf92e-4a09-4f13-adec-17acbd7c5157", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af42fcd3-19d9-4970-8c27-0630c253ddc9", "sighting_of_ref": "indicator--14ae2d6d-d61d-4de7-9f2e-81cc89491e17", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75349aad-41da-42d3-938c-183fe60d594f", "sighting_of_ref": "indicator--c42f7589-2821-48b2-9970-a6d114b8ced2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04cf2b86-d180-490d-b372-32a6b55b25cc", "sighting_of_ref": "indicator--c42f7589-2821-48b2-9970-a6d114b8ced2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d625734-0a2a-4dbe-8a64-02643ead4515", "sighting_of_ref": "indicator--265c88a9-3008-4175-9a82-6dd5869604be", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b1e73e-9d62-4943-b8b6-fa7bc8484b75", "sighting_of_ref": "indicator--490b97ec-b58f-458e-877b-faa318ce812f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfa547a-c7d5-4b1e-b62d-92dc0497be62", "sighting_of_ref": "indicator--490b97ec-b58f-458e-877b-faa318ce812f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dec2cee-e3e5-4d01-aff1-203ccd97d526", "sighting_of_ref": "indicator--b57cf177-f6e5-425d-8eab-526219af2a86", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2221ddb-cb84-483c-8891-bb22275277f1", "sighting_of_ref": "indicator--c3a1704e-01eb-443b-bcba-15cd1e65231f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7417823d-db10-42f8-8bcf-f55bf68275e5", "sighting_of_ref": "indicator--e0123f50-6274-4fab-9d95-f2b4f22fb9df", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef82fa7-5a66-4b1b-8376-7bd4d7985b3b", "sighting_of_ref": "indicator--f2adb22d-f596-4ee2-b3d6-f451a6bbfb81", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173cfa04-ffb8-4e7e-8914-ea61dac9be34", "sighting_of_ref": "indicator--a1f12758-45fa-47bf-8592-c2af85bc6c60", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b301887e-50b1-4b04-963f-76b87b8992a5", "sighting_of_ref": "indicator--0ecdf566-af02-4b5f-90b5-91e6906ee68d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f099fbe-403a-4d9c-8125-5428d894613a", "sighting_of_ref": "indicator--0ecdf566-af02-4b5f-90b5-91e6906ee68d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e06849b-e022-4958-a5ae-b1c31e318a7c", "sighting_of_ref": "indicator--7b50c834-e383-4d0b-825f-ab1eb1efd4ad", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db6923b-7266-44d3-889e-de74cc83c793", "sighting_of_ref": "indicator--7b50c834-e383-4d0b-825f-ab1eb1efd4ad", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b50d872-9f18-4d97-a15f-d741812862b0", "sighting_of_ref": "indicator--3cc915a5-2706-47fb-b3e9-6746fce90623", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92298f41-ab7d-4f51-b846-71727847be4e", "sighting_of_ref": "indicator--3cc915a5-2706-47fb-b3e9-6746fce90623", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8244b9b7-d14e-4566-83ed-f3f6d6427dbe", "sighting_of_ref": "indicator--3cc915a5-2706-47fb-b3e9-6746fce90623", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fda72a0-b869-484f-8d0d-2acbd63ad81c", "sighting_of_ref": "indicator--5bb32270-0460-4f46-9d42-26f005234028", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6046a222-8bda-458f-9d9c-655c144f984a", "sighting_of_ref": "indicator--5bb32270-0460-4f46-9d42-26f005234028", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a31548-108e-422b-b71c-0c823a9e2fcf", "sighting_of_ref": "indicator--9e154d45-1540-439b-8c60-cef153bb9b7e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67701ace-f8ce-44d2-8f1d-3115ce330524", "sighting_of_ref": "indicator--9e154d45-1540-439b-8c60-cef153bb9b7e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082dac82-de8a-45db-b73c-b2afb54aa0b6", "sighting_of_ref": "indicator--ea774ce9-1644-4a47-b166-c5d6ed846c03", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0da1d72-8404-4d5f-b02b-3134a1dd7a03", "sighting_of_ref": "indicator--ea774ce9-1644-4a47-b166-c5d6ed846c03", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3d9839-bb53-4271-b58e-f751af2f3f70", "sighting_of_ref": "indicator--c348db47-c3ab-44c3-83c3-f754a0e3deae", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d66b76f-c367-47d0-b56f-1d35aa280d0a", "sighting_of_ref": "indicator--c348db47-c3ab-44c3-83c3-f754a0e3deae", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0e7f9f-ba3d-4594-abf6-72a173aa34db", "sighting_of_ref": "indicator--c348db47-c3ab-44c3-83c3-f754a0e3deae", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849cd4c1-3ecb-43a8-a959-233408ca56bc", "sighting_of_ref": "indicator--ef25dfeb-e0fc-45b4-b9a0-cfce1d27ce0c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b700e9c-ae3d-4a9d-83f3-f58469c847c0", "sighting_of_ref": "indicator--2cfd7729-53de-44c8-ad04-73cbb714767e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bbd394-15b0-47c9-8306-d06088687ab1", "sighting_of_ref": "indicator--2cfd7729-53de-44c8-ad04-73cbb714767e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1cf366-0fab-4fd6-8c4a-93d690f1d2cb", "sighting_of_ref": "indicator--2cfd7729-53de-44c8-ad04-73cbb714767e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d03d35-bb1b-4244-b5c1-d9a975000a19", "sighting_of_ref": "indicator--6f4ec57d-7da0-4364-acc0-614e570c8355", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d7b942-72e1-4049-aa58-df92ee3fef4e", "sighting_of_ref": "indicator--6f4ec57d-7da0-4364-acc0-614e570c8355", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3993e21b-0e47-4308-bd48-14ead0beabb5", "sighting_of_ref": "indicator--6f4ec57d-7da0-4364-acc0-614e570c8355", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9e19ab-8e07-477d-8aaa-cebd34ffdf04", "sighting_of_ref": "indicator--9def9cad-6fec-4d27-83e1-6165e5a9455e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d499a190-c41e-4d94-bd11-61fa1892a080", "sighting_of_ref": "indicator--9def9cad-6fec-4d27-83e1-6165e5a9455e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fea9af-2bad-45a0-ae8e-12129ccd8765", "sighting_of_ref": "indicator--8db7a3c2-ebe6-4721-90c5-18ccf1a41bd4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f36c68-c929-4eee-b5a2-75fa06721ea9", "sighting_of_ref": "indicator--8db7a3c2-ebe6-4721-90c5-18ccf1a41bd4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4353cd-4bf8-45ff-86d3-bc073951566e", "sighting_of_ref": "indicator--8db7a3c2-ebe6-4721-90c5-18ccf1a41bd4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7447163b-8b81-49be-bf24-2160f3c03956", "sighting_of_ref": "indicator--0f84437e-9cb8-49fa-b0fe-9b348f1cbca6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9efb172-7687-4e38-9132-2f715573fe8c", "sighting_of_ref": "indicator--0f84437e-9cb8-49fa-b0fe-9b348f1cbca6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394ebacf-5313-41c0-aa55-708951266ba8", "sighting_of_ref": "indicator--0f84437e-9cb8-49fa-b0fe-9b348f1cbca6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6305fdf1-7af8-4dde-b23d-4f770a667752", "sighting_of_ref": "indicator--c6f29e1b-1930-43d5-9c21-ee8a53205821", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98567b80-2245-40f1-a7d7-b0920e4d6d9c", "sighting_of_ref": "indicator--c6f29e1b-1930-43d5-9c21-ee8a53205821", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2cc29d-fe19-4558-b7a4-e2c129e8b4b8", "sighting_of_ref": "indicator--c6f29e1b-1930-43d5-9c21-ee8a53205821", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9a7131-6503-47e2-9898-fd87a3cc531b", "sighting_of_ref": "indicator--9c47152c-0f39-4287-9c56-e8b8486e47c2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70a8525-08f0-426d-babd-cfc6fc068ef1", "sighting_of_ref": "indicator--9c47152c-0f39-4287-9c56-e8b8486e47c2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21813e4-1d5b-44ce-9297-fc3904b20394", "sighting_of_ref": "indicator--9c47152c-0f39-4287-9c56-e8b8486e47c2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049335ab-5626-478c-b154-2f4f543f56d8", "sighting_of_ref": "indicator--7a35536d-bef4-4f4c-8726-706f3b6d550e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ead8777-723c-4961-9ab3-65da302ad8fc", "sighting_of_ref": "indicator--7a35536d-bef4-4f4c-8726-706f3b6d550e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c57c35a-4041-4a6c-ba03-8b1b628bb40d", "sighting_of_ref": "indicator--7a35536d-bef4-4f4c-8726-706f3b6d550e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e493a8-281a-4069-835f-012f4da2df66", "sighting_of_ref": "indicator--dc1c8d9d-5a38-453e-b04d-f0c9dcc8361c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab44d96b-effb-4f03-adf2-5e864d2a4272", "sighting_of_ref": "indicator--920ba4a2-da8e-47f6-acae-098fd5cddcbd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d37ebd9-c856-4bfc-aa2a-2f17df0be3b1", "sighting_of_ref": "indicator--b7137f8d-31db-4e0c-a9f2-e742098f14d5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e2b373-2235-4370-b5be-312f15ca2afa", "sighting_of_ref": "indicator--6a023885-ae14-4b99-8758-aae92b56448d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfca23e-48fb-4119-8ab2-e07f17d82730", "sighting_of_ref": "indicator--8477b3f9-8b62-44a1-8f67-b566f7a8083f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c7cd4b-9586-4f94-98ae-a28139b47c37", "sighting_of_ref": "indicator--d70cc857-a83c-4e4e-bc49-667c78a4cfe9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04178dcf-df58-4fe6-899e-4a5e33e44ca4", "sighting_of_ref": "indicator--29fb7cbb-e1d3-415b-a3f0-62224d2c8ee4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ceba6e2-1299-4ed6-8fd2-5847a35b6f5f", "sighting_of_ref": "indicator--5c3c2a6b-082a-414e-9bd5-8f2ca11ca73f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4de0c53-60d4-46ee-a3ed-e6e1a8a5a0ed", "sighting_of_ref": "indicator--b8d9cfb9-8c12-4b32-9e11-5052769b6b47", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9517c1-fab3-49f6-bc3c-3e7f2c0cc056", "sighting_of_ref": "indicator--9faf139c-0dcd-4964-a390-83bb177a42f3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb27ad52-4bde-4dd9-b390-02cdda60bbd1", "sighting_of_ref": "indicator--d11e70f6-89dd-4a1c-aeea-0b8537e7e696", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f984563d-31e1-4a33-9c43-15a0de428740", "sighting_of_ref": "indicator--9b063cbd-9377-4c3d-8109-3687ae293acf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0d9f82-244d-49e0-82ff-d46311d6901a", "sighting_of_ref": "indicator--66d3d2c7-5217-4527-99f4-0e5562e24b55", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4c46d1-37d1-4a43-81bb-580d82a9533d", "sighting_of_ref": "indicator--66d3d2c7-5217-4527-99f4-0e5562e24b55", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7a9612-dda6-437e-b052-416f659e663a", "sighting_of_ref": "indicator--3a086ac1-6973-41dd-b759-624e376ff4a8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca060b76-2e3d-49a0-8b96-bda6256e6109", "sighting_of_ref": "indicator--60967976-e0b6-4015-84c3-1550a9513110", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8d6695-d610-459d-9775-1ebd18eda6ef", "sighting_of_ref": "indicator--1a61ab75-2d38-41d8-9ece-ba1d5ccd0b39", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2229225f-248b-47a8-8a4c-f4c925c42dd8", "sighting_of_ref": "indicator--9cc43233-d526-48f4-be92-c552c80c15bf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3abdbc-a677-491d-a39f-07306b316e23", "sighting_of_ref": "indicator--9cc43233-d526-48f4-be92-c552c80c15bf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e41714-4a80-40a6-acf5-9cfd29dbbe35", "sighting_of_ref": "indicator--9cc43233-d526-48f4-be92-c552c80c15bf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163c09c1-189b-4f96-89ec-b94674d97aa9", "sighting_of_ref": "indicator--3d13dd1c-d1b2-43b6-8644-99e7e21aedf3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c45e4de-ffb4-4d20-8337-26be25324647", "sighting_of_ref": "indicator--b30a2b56-ae47-42a5-bd1f-855d68712f9c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e62af0b-b6bc-4b11-b749-123d546fbf3d", "sighting_of_ref": "indicator--b30a2b56-ae47-42a5-bd1f-855d68712f9c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f96248-32f9-45c8-873e-a30d74ea5734", "sighting_of_ref": "indicator--f28fbc88-497a-4617-b7e8-46c072ddc296", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1442499-0015-4a34-b9ec-05b4b0c35051", "sighting_of_ref": "indicator--94878d37-5a84-4214-b961-de1ac4749750", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19804c41-1ba6-4e1a-8f53-577eca9141e7", "sighting_of_ref": "indicator--dd8463b5-c8f1-4e28-8261-252d91e9fee6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4236bf-fb39-4d6d-88e8-34e9b3437e29", "sighting_of_ref": "indicator--dd8463b5-c8f1-4e28-8261-252d91e9fee6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b700d3c-4bad-483c-bcd0-b99bf65e5c67", "sighting_of_ref": "indicator--7c5c7141-f101-4445-b55d-f8e17574f98e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92607aae-69af-4b4b-be5f-848264a7d4fd", "sighting_of_ref": "indicator--ce335a9f-d146-4bc1-bb4b-d4096c49fe81", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc58452-4eff-43f0-897e-6ad0b00e2639", "sighting_of_ref": "indicator--e46e8f14-17b8-4beb-9c27-7d27ff9b5e33", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157ff671-a36f-4c16-90b5-9d602fb541c2", "sighting_of_ref": "indicator--588b18d7-7839-4d8c-b1cf-8152afefaf35", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8180e6-57a5-4a65-b6bb-0c8f73616053", "sighting_of_ref": "indicator--21a51fdd-9163-4624-bd7e-716f96de34f0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c46c590-de8e-419b-848e-3779c8439389", "sighting_of_ref": "indicator--8fb5d8d7-412d-4ca8-8b13-1e9a609381a6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c49a409-0d8f-46ee-9ffe-232dc19ab99e", "sighting_of_ref": "indicator--8fb5d8d7-412d-4ca8-8b13-1e9a609381a6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796bb7ef-4b28-4752-94a9-a3ce8bf5d466", "sighting_of_ref": "indicator--8fb5d8d7-412d-4ca8-8b13-1e9a609381a6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc2dcf0-383e-400d-8a68-dd8847ecce59", "sighting_of_ref": "indicator--26f62873-9148-4de9-8019-9b14127440d4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac816fbd-286e-4937-b1f1-903c31170eb3", "sighting_of_ref": "indicator--26f62873-9148-4de9-8019-9b14127440d4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aabe5cc-4054-474d-af5a-c42f50f133ce", "sighting_of_ref": "indicator--26f62873-9148-4de9-8019-9b14127440d4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18441ceb-5fbb-4080-966c-1857d032fb92", "sighting_of_ref": "indicator--99c3c475-6087-4505-9d21-862354524c34", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84792db6-be72-4a8b-8ff9-ba891f903794", "sighting_of_ref": "indicator--99c3c475-6087-4505-9d21-862354524c34", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e5f976-5fd8-400b-bc25-0c84496d7e1d", "sighting_of_ref": "indicator--fa0645f1-cc96-4d45-8d02-f9ba29be8ad8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfe683a-e373-4411-a112-856ef99e3395", "sighting_of_ref": "indicator--58f50881-284c-4c5f-b973-884819e70790", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e6ce85-452a-472f-ab82-01210c1b296e", "sighting_of_ref": "indicator--58f50881-284c-4c5f-b973-884819e70790", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7d5be9-2d24-4534-830a-f5997cf3978d", "sighting_of_ref": "indicator--58f50881-284c-4c5f-b973-884819e70790", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7920be-a12a-4860-b20b-b0f3ffbf7911", "sighting_of_ref": "indicator--8f34cc84-e171-4695-97e4-baeb04908303", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29893308-f0ac-41e1-877c-ba9521c8a3c4", "sighting_of_ref": "indicator--0fdd28c9-e446-4dca-a30a-53136a3ca87b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7141c1a-be85-4242-b967-7640060d895a", "sighting_of_ref": "indicator--0fdd28c9-e446-4dca-a30a-53136a3ca87b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cde3f69-2d9f-4fda-b613-c4986330a669", "sighting_of_ref": "indicator--0fdd28c9-e446-4dca-a30a-53136a3ca87b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff3502c-7d20-480a-b4a9-70b6ace46e0c", "sighting_of_ref": "indicator--0676c7ee-43f9-4ba5-9747-4775deadaf96", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6539a9c4-78d6-430e-894e-3316c3e9a08e", "sighting_of_ref": "indicator--66bb8614-d197-4623-969b-1db99791016d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2aff48-d6e4-40e8-8af7-da364f962db1", "sighting_of_ref": "indicator--66bb8614-d197-4623-969b-1db99791016d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4544c934-b7bc-4558-b77d-288ff5353a48", "sighting_of_ref": "indicator--66bb8614-d197-4623-969b-1db99791016d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d27809-8696-4819-8169-a8a7b880c354", "sighting_of_ref": "indicator--7c9d69b9-0ff4-4033-9f9e-d884c36b6565", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7606ade0-0836-4006-9996-f19a11cc7cc6", "sighting_of_ref": "indicator--7c9d69b9-0ff4-4033-9f9e-d884c36b6565", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a18b2f8-26fe-4504-90a6-6066257ccb09", "sighting_of_ref": "indicator--7b0ef1a1-afb9-48df-8290-cd6486792a28", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d93cde-67f6-4e42-b2a9-c219e74e3aa3", "sighting_of_ref": "indicator--7b0ef1a1-afb9-48df-8290-cd6486792a28", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89afa83e-2831-4912-8bc6-3c15bbd8c23f", "sighting_of_ref": "indicator--5834d973-0169-4898-a9ae-209a11633249", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a671bd2-f5c3-4d18-b72d-416061b4f258", "sighting_of_ref": "indicator--5834d973-0169-4898-a9ae-209a11633249", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0c2415-7a90-4ff1-a59a-fe706820a8c9", "sighting_of_ref": "indicator--5834d973-0169-4898-a9ae-209a11633249", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1e5800-170a-452c-82e3-3182918c35c5", "sighting_of_ref": "indicator--713f56b5-76a9-4c20-a5f0-a8257d6760ef", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78965897-14a4-4685-8d89-4702e2a1f86a", "sighting_of_ref": "indicator--713f56b5-76a9-4c20-a5f0-a8257d6760ef", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bea79eb-22f1-4f48-90a4-2e3c8d5dff1c", "sighting_of_ref": "indicator--713f56b5-76a9-4c20-a5f0-a8257d6760ef", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc01131c-2c84-4b71-9012-b46093b86a37", "sighting_of_ref": "indicator--e601c34f-84f9-4c39-8175-b9bdd44e10bf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d78f85-783b-4ec2-8354-376ba34367a2", "sighting_of_ref": "indicator--72b595c5-c2b6-4498-8d15-efa3a8d4baf2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7060ceea-6077-48a2-9699-9546881ebd51", "sighting_of_ref": "indicator--72b595c5-c2b6-4498-8d15-efa3a8d4baf2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d367b1d3-318d-407a-b3f1-a2ffb0e9ae30", "sighting_of_ref": "indicator--72b595c5-c2b6-4498-8d15-efa3a8d4baf2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0545d99d-0184-4be4-bc86-813547710dbe", "sighting_of_ref": "indicator--80be6fdf-ab25-461e-bba6-92b43dd1e2a4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca561190-c4bc-4b24-bd76-611149450853", "sighting_of_ref": "indicator--80be6fdf-ab25-461e-bba6-92b43dd1e2a4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187f9c01-6bed-45da-a69c-8a6dbc4e4113", "sighting_of_ref": "indicator--6cce4568-95e3-4468-8b5b-cd55aebfff71", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fef442-5df9-4702-9365-4377b8007e35", "sighting_of_ref": "indicator--6cce4568-95e3-4468-8b5b-cd55aebfff71", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cdc8b0-684b-471d-8a7c-6e5803ae7f5c", "sighting_of_ref": "indicator--6cce4568-95e3-4468-8b5b-cd55aebfff71", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40ee46a-1772-44ad-a6ee-b8f7bed8e6ee", "sighting_of_ref": "indicator--09a452be-0d5c-4321-b0d7-b3c103c41065", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28aebc5c-6278-4709-9356-daa07b8ae028", "sighting_of_ref": "indicator--09a452be-0d5c-4321-b0d7-b3c103c41065", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80fc0733-48ba-428d-9b9a-6950fc53ae9c", "sighting_of_ref": "indicator--09a452be-0d5c-4321-b0d7-b3c103c41065", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd58d1c8-01ee-4a61-a393-a9be37056729", "sighting_of_ref": "indicator--0ecb7a86-c28c-4259-8200-c8e8d5e108bf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c37fddd-62d9-40d4-ab48-ac7e2d976d7d", "sighting_of_ref": "indicator--0ecb7a86-c28c-4259-8200-c8e8d5e108bf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c3d923-b104-4edf-a18d-0c0361f4cf72", "sighting_of_ref": "indicator--7ab23aad-0d03-449e-81da-f40ae9ecdbc5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df32b43a-2729-4921-ad9d-e41bc7414549", "sighting_of_ref": "indicator--ff67018c-80c4-4e85-bb81-ad9fa912fb31", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1038baf8-829b-47ba-859b-6647a1ad64ec", "sighting_of_ref": "indicator--ff67018c-80c4-4e85-bb81-ad9fa912fb31", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc153c2f-9989-40fb-9fc4-c1dd3d72e07e", "sighting_of_ref": "indicator--ff67018c-80c4-4e85-bb81-ad9fa912fb31", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a9d6b6-4ed8-4b2f-b664-5e0f275070c4", "sighting_of_ref": "indicator--9d1bf133-bf43-4e4c-8947-06f225c81c53", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88aef5c-e006-4d1d-bbf2-f249eaa6eb68", "sighting_of_ref": "indicator--9d1bf133-bf43-4e4c-8947-06f225c81c53", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d449dea-fcd0-429c-b091-2ec87ce76a86", "sighting_of_ref": "indicator--b68cb30c-9e48-4b3e-b961-01d9a7493616", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96761b74-c50d-4a4a-8fe6-16d312d9ef32", "sighting_of_ref": "indicator--b68cb30c-9e48-4b3e-b961-01d9a7493616", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5127da4-996d-48e1-82e2-94e88c5064e4", "sighting_of_ref": "indicator--b68cb30c-9e48-4b3e-b961-01d9a7493616", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1e6a89-c11e-4d12-89f6-bec814435cd6", "sighting_of_ref": "indicator--de061ca0-9c0a-4958-99aa-d2db60e61785", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f06d1d-e491-4702-8812-86271a421860", "sighting_of_ref": "indicator--de061ca0-9c0a-4958-99aa-d2db60e61785", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26da6138-ea73-4b02-adfd-e0a778d2d260", "sighting_of_ref": "indicator--de061ca0-9c0a-4958-99aa-d2db60e61785", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e355d2a0-227b-4777-8b22-c06eb7ad3c7d", "sighting_of_ref": "indicator--bc83b454-9485-43b5-94b5-dbdac42b6aeb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c881138f-b145-4bd4-bd46-a3827fdb53d5", "sighting_of_ref": "indicator--bc83b454-9485-43b5-94b5-dbdac42b6aeb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd71d2c-b402-4bfa-ae31-c5deed618627", "sighting_of_ref": "indicator--bc83b454-9485-43b5-94b5-dbdac42b6aeb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d422b8f5-e5dd-4907-94df-4385f8a07864", "sighting_of_ref": "indicator--51966c10-78ae-466f-9f4c-9f8dfabac559", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35d7237-2bdc-4974-bd63-99e7eb87ad27", "sighting_of_ref": "indicator--51966c10-78ae-466f-9f4c-9f8dfabac559", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ccc6c9-f3c4-40cd-9b2a-0d82d5c37005", "sighting_of_ref": "indicator--51966c10-78ae-466f-9f4c-9f8dfabac559", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabc1bcc-3eb7-4b82-b538-838fdbdc050a", "sighting_of_ref": "indicator--10ce3d7e-b4de-4f6c-ac77-86fe913cf135", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66a7cec-96a9-4d0c-a27d-0528323f0e9e", "sighting_of_ref": "indicator--10ce3d7e-b4de-4f6c-ac77-86fe913cf135", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63810498-70cb-4e27-84aa-3fed174feb51", "sighting_of_ref": "indicator--10ce3d7e-b4de-4f6c-ac77-86fe913cf135", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870227ef-e0c6-4fb8-9dad-6dc2271904cc", "sighting_of_ref": "indicator--64c6f77c-8a6b-4663-b44b-95141c86fd9e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e9754f-e736-450c-8cfd-e80a77e3e73d", "sighting_of_ref": "indicator--64c6f77c-8a6b-4663-b44b-95141c86fd9e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313ba4d5-8b6c-448f-a2bd-c5db2df24e97", "sighting_of_ref": "indicator--244cc7c6-1e3d-42fb-bfb6-d6ef6b8a2a1f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee9d832-dd6c-4092-8da4-f293b9650181", "sighting_of_ref": "indicator--244cc7c6-1e3d-42fb-bfb6-d6ef6b8a2a1f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd86d8d-e462-4cbf-9785-4368b1666c3b", "sighting_of_ref": "indicator--244cc7c6-1e3d-42fb-bfb6-d6ef6b8a2a1f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5c001c-4181-4400-a6b7-75fbd469115b", "sighting_of_ref": "indicator--4f28005d-3cc7-4bb6-99a4-c662d2421c6b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae21a5c1-c22d-4dcc-9e76-129b45839746", "sighting_of_ref": "indicator--4f28005d-3cc7-4bb6-99a4-c662d2421c6b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ece336-100d-43a4-bfb0-b83111ef71e9", "sighting_of_ref": "indicator--4f28005d-3cc7-4bb6-99a4-c662d2421c6b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85247a9-eed4-411d-bc0c-3761d956d697", "sighting_of_ref": "indicator--db6b3565-e9d7-485c-ad4d-85a20e895481", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944369e8-bd44-4463-b25e-ed32451424a4", "sighting_of_ref": "indicator--db6b3565-e9d7-485c-ad4d-85a20e895481", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df597f0-7c26-4013-a7b0-63826fec9be6", "sighting_of_ref": "indicator--db6b3565-e9d7-485c-ad4d-85a20e895481", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552eb649-6ebb-48e0-b1af-ae3ffe26ff6f", "sighting_of_ref": "indicator--2b1b6e86-f2ef-43d2-bf8f-f8089c781028", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b44ea2f-8128-4019-896c-044e081434c1", "sighting_of_ref": "indicator--2b1b6e86-f2ef-43d2-bf8f-f8089c781028", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e69d909-74c9-4b3c-8827-eba4b1e0e7ea", "sighting_of_ref": "indicator--70852d04-fad5-4672-82f2-1d6e87359fe6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7885454d-6248-451f-a27d-6253e1617336", "sighting_of_ref": "indicator--70852d04-fad5-4672-82f2-1d6e87359fe6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a210b08-e225-467f-bd1d-2e299afbab34", "sighting_of_ref": "indicator--08ac8062-c8d8-4644-9dd6-d4366b90cbb4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b9aa46-d78d-4080-8775-9347418b216f", "sighting_of_ref": "indicator--08ac8062-c8d8-4644-9dd6-d4366b90cbb4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67646912-1e97-4b65-be3d-dad04f4f3585", "sighting_of_ref": "indicator--a6729a69-fdac-4e35-a0f9-715a6dc5f9d6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7aaf92-a9bf-4bd0-a3e3-c053b1ea6dbb", "sighting_of_ref": "indicator--a6729a69-fdac-4e35-a0f9-715a6dc5f9d6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba4619d-0e98-4ef1-b1f5-80387cc66c06", "sighting_of_ref": "indicator--a6729a69-fdac-4e35-a0f9-715a6dc5f9d6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b650ac1-61f4-4ee7-a129-5e6fdb3700a4", "sighting_of_ref": "indicator--bceff54b-ed1a-45ed-8ddd-4202352b16f1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72139522-8535-4cdd-a5c3-45f48b6a1b72", "sighting_of_ref": "indicator--bceff54b-ed1a-45ed-8ddd-4202352b16f1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46741e0e-f7b0-4e59-8705-057e3a755533", "sighting_of_ref": "indicator--cede85d0-01a2-4e67-8544-b30b4d8018d6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a425df5-2d7b-4329-a80d-87701712cc36", "sighting_of_ref": "indicator--cede85d0-01a2-4e67-8544-b30b4d8018d6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7762bee7-7d92-4561-8bce-3e122cfd18f3", "sighting_of_ref": "indicator--cede85d0-01a2-4e67-8544-b30b4d8018d6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d947d8-67d1-4279-b323-6084ead6c3a8", "sighting_of_ref": "indicator--ed62f27e-d94e-4d9f-9b96-9ae6e717f376", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d7f063-8510-4f47-9f49-0653ee025173", "sighting_of_ref": "indicator--ed62f27e-d94e-4d9f-9b96-9ae6e717f376", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4d1e3e-675a-4ced-b932-0aafacc02143", "sighting_of_ref": "indicator--ed62f27e-d94e-4d9f-9b96-9ae6e717f376", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26161191-dce3-48c1-b72c-3bcc077c4d48", "sighting_of_ref": "indicator--35712173-bcef-4c3b-add8-9c8028265ebb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262447bd-785e-4ac4-8234-fd9fa6fdf2c8", "sighting_of_ref": "indicator--35712173-bcef-4c3b-add8-9c8028265ebb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fdf9503-ffb0-49ee-b722-10fb73aa3726", "sighting_of_ref": "indicator--35712173-bcef-4c3b-add8-9c8028265ebb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e529a98-cdad-41b7-ae71-9778b21f70c4", "sighting_of_ref": "indicator--a297d745-a189-40e3-b7cd-90903fd5239f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba4bb69-3a4e-45ab-9bca-45deba39a648", "sighting_of_ref": "indicator--a297d745-a189-40e3-b7cd-90903fd5239f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a6d5f2-1a42-4df6-9b1f-e0cdaa37e195", "sighting_of_ref": "indicator--a297d745-a189-40e3-b7cd-90903fd5239f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acdab47-5c36-4d5f-a166-dac0dcd3feaa", "sighting_of_ref": "indicator--5c592a3d-144d-45bc-aa1c-b1bb8124cf8c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f06ef46-d094-427c-84a5-9729467ffe24", "sighting_of_ref": "indicator--5c592a3d-144d-45bc-aa1c-b1bb8124cf8c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777d3d7f-8d27-4172-b5a4-0d5f6ff5986b", "sighting_of_ref": "indicator--5c592a3d-144d-45bc-aa1c-b1bb8124cf8c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239395a8-b855-4fb4-93e7-8655e757c3af", "sighting_of_ref": "indicator--fcdac82a-bc4a-4485-a653-cd4ae1426c27", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b1cc78-32a7-4df5-b046-6040080997bf", "sighting_of_ref": "indicator--fcdac82a-bc4a-4485-a653-cd4ae1426c27", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60ab313-0ab1-4c6d-b9c4-37f13eebafd7", "sighting_of_ref": "indicator--690f239e-4d88-4775-b568-d9cff2751c96", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6eb428-1539-44b5-8e3e-3ecaecc98c5f", "sighting_of_ref": "indicator--690f239e-4d88-4775-b568-d9cff2751c96", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08be71d2-9188-4d6e-a88d-c55867bfdb6f", "sighting_of_ref": "indicator--690f239e-4d88-4775-b568-d9cff2751c96", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deacf3fd-31b4-4068-b643-2e24c2e6552e", "sighting_of_ref": "indicator--708ad22e-b074-4bf8-9795-23b087b744dd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd52e538-f5ad-4f7b-a944-65f2e5c540dc", "sighting_of_ref": "indicator--708ad22e-b074-4bf8-9795-23b087b744dd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9b1b5c-8952-4c1d-b40f-69e751eec8a9", "sighting_of_ref": "indicator--708ad22e-b074-4bf8-9795-23b087b744dd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2059a87f-25c9-4750-9b3c-e8d745fd1ab0", "sighting_of_ref": "indicator--ca76918e-7b4a-4cd8-91a7-0daf0c849bad", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a87f095-e8a4-436d-ace9-6711b31202b8", "sighting_of_ref": "indicator--ca76918e-7b4a-4cd8-91a7-0daf0c849bad", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5267004a-d5ef-4ec4-bb53-82fb7614ff8a", "sighting_of_ref": "indicator--6f566627-a510-401c-be13-c341a1734298", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e7acf3-ee37-4798-af65-6cb269d9406d", "sighting_of_ref": "indicator--6f566627-a510-401c-be13-c341a1734298", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34f97de-50fa-47cf-a88a-8a5cd593b4b8", "sighting_of_ref": "indicator--6f566627-a510-401c-be13-c341a1734298", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0f2155-3224-46f1-b462-33e57427e421", "sighting_of_ref": "indicator--1dd2d245-0ce0-4c44-b404-3af3dfa04882", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5dd0013-3ee2-4ece-b26d-2cd51751e496", "sighting_of_ref": "indicator--1dd2d245-0ce0-4c44-b404-3af3dfa04882", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bed7b64-8195-46a8-ab89-52d8a97afbdf", "sighting_of_ref": "indicator--995ce1df-6142-4c5a-829c-679a0c0b20de", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f19f67b-0e6c-4a51-8ca8-3c570545d660", "sighting_of_ref": "indicator--113a9111-891e-4716-9abc-99ffc9592cee", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1d6c4a-2273-4300-b236-a199e7c32204", "sighting_of_ref": "indicator--113a9111-891e-4716-9abc-99ffc9592cee", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9211d82-124d-4da8-bf12-3df8a851ba57", "sighting_of_ref": "indicator--46f93e8b-0e85-4e6d-9c47-c66e5b90fd3f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d1bc63-3bdc-435a-a9e6-a60369b68db7", "sighting_of_ref": "indicator--33abdcde-cf32-42a4-9efe-5f8c058b8444", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029d9879-ca25-43e9-8299-67d0ccbe18ec", "sighting_of_ref": "indicator--2aa62333-c00e-457d-8928-d026cb39a854", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85de2b5-5ccc-459a-9050-41babbd8ef93", "sighting_of_ref": "indicator--3cf97b69-b5a4-4a73-83e4-20b24089212b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4440d9e3-7bbc-45c0-9fdd-0d899d31d394", "sighting_of_ref": "indicator--cf620031-4796-447b-ab09-7ec5bd95f8ee", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90295185-4188-459c-a06d-e35556d57ae0", "sighting_of_ref": "indicator--9e837188-159d-492b-89f7-b9ff37c515f1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf52d026-ef6e-457a-a9ed-73be021a9fac", "sighting_of_ref": "indicator--71449ba7-adf0-4e94-8f90-31920fe5a108", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0d2229-b569-4c29-8cc8-662e8d38dd2e", "sighting_of_ref": "indicator--f181803f-de1f-4645-833e-8606579af5a3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1079cbdd-ce21-4bbf-8b23-23f7c55e7353", "sighting_of_ref": "indicator--23b2265b-4116-4344-a2ee-7b99b74dbaa1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbeff4c-2ae3-4603-b8f2-191c0e2d4b58", "sighting_of_ref": "indicator--3b7cd8e6-2c25-4121-bd75-d4b7d1894f21", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04006617-fa7a-4ac6-93e3-0267503f0dcc", "sighting_of_ref": "indicator--c5642959-113b-4475-a69d-243fac1d8570", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ee220e-ae2f-4162-978a-e813a2a3ac74", "sighting_of_ref": "indicator--85bfc55d-2cbc-4bd0-9f52-6e08cee55bf9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02d29dd-a49d-44e2-a890-b0cef8505db7", "sighting_of_ref": "indicator--85bfc55d-2cbc-4bd0-9f52-6e08cee55bf9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf991e82-69ba-42dc-a0f7-ee1acd732023", "sighting_of_ref": "indicator--d82d41a2-1c30-4f70-82dc-9981468629cd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c02fd1-f95d-4b31-8931-d2176b59eb40", "sighting_of_ref": "indicator--d82d41a2-1c30-4f70-82dc-9981468629cd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814d3b8f-d248-4537-b7ef-e65fb87f205b", "sighting_of_ref": "indicator--23d44f2e-5923-4c90-b436-0ef44b1369b4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3183bb1b-0008-4474-b4ab-c609d2839128", "sighting_of_ref": "indicator--712be909-1dc4-4380-b606-bf1eb7e672a4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a84b44c-dfd1-4e4e-b71b-f5344a2020e6", "sighting_of_ref": "indicator--8934fa7c-58a6-41f2-9948-915c22ae4474", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefc2768-08cc-4e0d-be9c-1c6971356efa", "sighting_of_ref": "indicator--d7ec2c4a-6dba-4ecb-8100-143ad7f58d7e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1725ca-f8cd-4970-bb2a-fba90202a35d", "sighting_of_ref": "indicator--d7ec2c4a-6dba-4ecb-8100-143ad7f58d7e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19e7166-bf21-478a-a7bb-f733fd39aa82", "sighting_of_ref": "indicator--d7ec2c4a-6dba-4ecb-8100-143ad7f58d7e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbeb0c1-3aed-4a27-b4af-289a81f548ba", "sighting_of_ref": "indicator--10be5422-500a-40f4-8376-4ab60554441b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63e3e33-09b4-45ae-8892-a47e50d4676a", "sighting_of_ref": "indicator--e4355996-82a7-4089-97da-98cd7b62a36c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43816ded-13e1-4dee-9a02-1cb261457467", "sighting_of_ref": "indicator--916b5442-9ad8-4494-8802-6253cb7dc649", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53fb22c-7278-463a-9d21-f54abed99e8e", "sighting_of_ref": "indicator--916b5442-9ad8-4494-8802-6253cb7dc649", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4beff53-f94b-412e-90fb-4b142708ff1d", "sighting_of_ref": "indicator--baa3c3fa-157e-4a9d-8769-8b4369b9a0a9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27db74cd-6c7d-4d03-a52a-e88fd8e7b8a5", "sighting_of_ref": "indicator--556b0467-38e3-446a-9049-eb9d9e09ac74", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c97909-e457-4f52-a222-cc0c5585ceb1", "sighting_of_ref": "indicator--556b0467-38e3-446a-9049-eb9d9e09ac74", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecabbcc-236a-4bc3-999d-b3c4b81355d7", "sighting_of_ref": "indicator--b64812e3-6b6a-4f74-b5ec-33becb6d83c1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4201824d-2cbe-4ec5-adf8-531fd10925ea", "sighting_of_ref": "indicator--b64812e3-6b6a-4f74-b5ec-33becb6d83c1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1803d8-9be9-4d04-bb8a-9e6d98449161", "sighting_of_ref": "indicator--b64812e3-6b6a-4f74-b5ec-33becb6d83c1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf36b1d-c4a1-40cb-ac1c-a1c7b69eb1ce", "sighting_of_ref": "indicator--9b07c814-ce95-4807-b3a3-dbbc9c617b77", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1e8c8c-7f9e-4816-b47c-b805ce126959", "sighting_of_ref": "indicator--9b07c814-ce95-4807-b3a3-dbbc9c617b77", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059e67a1-f46c-437a-ad3b-31ff9e5ada4a", "sighting_of_ref": "indicator--9b07c814-ce95-4807-b3a3-dbbc9c617b77", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b94d374-739c-4ae2-94be-7cf5e70acffd", "sighting_of_ref": "indicator--7d9c7ed9-7787-4b6c-afc1-289316184854", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca9f936-474e-47be-983a-4bed0f445513", "sighting_of_ref": "indicator--7d9c7ed9-7787-4b6c-afc1-289316184854", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615ff5c0-6304-4011-b7c8-badb87ba9a34", "sighting_of_ref": "indicator--51c1a970-52e2-45e5-8b67-f2368baaa138", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae7177b-0022-4b78-b287-435bbf99dd55", "sighting_of_ref": "indicator--758a9a4f-1c2d-412e-830f-fa1c907cceff", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b459ea-9b8c-40bd-9a72-4bf24c614e29", "sighting_of_ref": "indicator--758a9a4f-1c2d-412e-830f-fa1c907cceff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36411bf8-5aed-4004-b550-f43b4a5717d6", "sighting_of_ref": "indicator--758a9a4f-1c2d-412e-830f-fa1c907cceff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef9d206-9d40-465b-b84a-59dc1e7fa97d", "sighting_of_ref": "indicator--58903f34-72c6-4e68-899a-ef3e5d2ff31d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0950c5-2c46-42e5-afc1-fd4bb77d7fad", "sighting_of_ref": "indicator--58903f34-72c6-4e68-899a-ef3e5d2ff31d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1fbc25-878d-4c9a-b386-d847c011e184", "sighting_of_ref": "indicator--58903f34-72c6-4e68-899a-ef3e5d2ff31d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50aa3758-0371-4ed6-8b48-f1af2e40b5a8", "sighting_of_ref": "indicator--76f96001-15b8-4003-b4b8-2c223e6358ec", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53e8061-25d6-4b1a-8f12-8b8325874cf0", "sighting_of_ref": "indicator--76f96001-15b8-4003-b4b8-2c223e6358ec", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eaad533-e3e1-4d5c-a140-90201718dec1", "sighting_of_ref": "indicator--76f96001-15b8-4003-b4b8-2c223e6358ec", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80f813b-8637-4fd6-8a99-cc599c00dded", "sighting_of_ref": "indicator--52e231fe-22ef-493e-9f64-175060bcb3f4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fd223f-9152-4977-9b0f-8dca6d968ef4", "sighting_of_ref": "indicator--52e231fe-22ef-493e-9f64-175060bcb3f4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1573bdb0-3adf-4aca-a775-7c3695616aa1", "sighting_of_ref": "indicator--52e231fe-22ef-493e-9f64-175060bcb3f4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcd1b05-13bd-4807-8309-2eaf752c329e", "sighting_of_ref": "indicator--7686bf0b-7b24-49c3-83ff-d3e1e5cdcab7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f920f9-f57d-4e84-ab24-d50717621c47", "sighting_of_ref": "indicator--7686bf0b-7b24-49c3-83ff-d3e1e5cdcab7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4986ae-6b58-4611-8fd9-db007566202f", "sighting_of_ref": "indicator--7686bf0b-7b24-49c3-83ff-d3e1e5cdcab7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526950d3-1ed2-45eb-9596-c9aa2ba21ec6", "sighting_of_ref": "indicator--79d2a77d-5832-46e8-843b-470af4f1c5fd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64480c58-b1b1-415f-af65-ab488872dca1", "sighting_of_ref": "indicator--79d2a77d-5832-46e8-843b-470af4f1c5fd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9737759d-a698-4808-9767-1e6cd11c6912", "sighting_of_ref": "indicator--79d2a77d-5832-46e8-843b-470af4f1c5fd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5270f419-9151-4e78-9a15-ea396d472dc5", "sighting_of_ref": "indicator--9bd4db4b-c1ca-41ae-82bc-8b965b09551f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b413a2-d264-4e66-9d72-4badda1b21b1", "sighting_of_ref": "indicator--9bd4db4b-c1ca-41ae-82bc-8b965b09551f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9367d8-99a7-4c1e-9b24-a2f2f7324f23", "sighting_of_ref": "indicator--9bd4db4b-c1ca-41ae-82bc-8b965b09551f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2eeac4-eeed-42d5-ac1e-184e8948489f", "sighting_of_ref": "indicator--9f55bdd6-b1e2-41ef-afc3-47402b70e816", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b1b9a6-32c4-412b-a953-d07d14603887", "sighting_of_ref": "indicator--9f55bdd6-b1e2-41ef-afc3-47402b70e816", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece5f8b9-5b3f-49ce-96db-9ce4ad03c563", "sighting_of_ref": "indicator--9f55bdd6-b1e2-41ef-afc3-47402b70e816", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e24a65-0ae0-497c-876a-71748cc7fff1", "sighting_of_ref": "indicator--5948bf51-dbc0-4e5e-98c3-7d5bb6897317", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c45d16-d3fb-48dd-9c27-d5879587ad8e", "sighting_of_ref": "indicator--5948bf51-dbc0-4e5e-98c3-7d5bb6897317", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3caab52a-3203-4808-91b1-777b0eaa3743", "sighting_of_ref": "indicator--5948bf51-dbc0-4e5e-98c3-7d5bb6897317", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff942492-64d9-4e8c-83bc-3a2e88653195", "sighting_of_ref": "indicator--64a0795d-33d1-4a46-aba3-f65c6e668bb9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda01534-2c93-4e7a-9cee-d295e6ada25e", "sighting_of_ref": "indicator--64a0795d-33d1-4a46-aba3-f65c6e668bb9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2224d4be-2630-498a-b2fe-cd88b594f2cd", "sighting_of_ref": "indicator--64a0795d-33d1-4a46-aba3-f65c6e668bb9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1dba5a0-dd22-4d71-ba27-0e3283040d14", "sighting_of_ref": "indicator--5b554762-0537-4d2e-8ed5-d2a4c2d23354", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3869b4-7c45-42f7-8c96-60d9cc342d08", "sighting_of_ref": "indicator--5b554762-0537-4d2e-8ed5-d2a4c2d23354", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7447a407-664a-4886-bf1d-8008b1af58a9", "sighting_of_ref": "indicator--6531ab15-0e48-4310-8b5d-794af238d079", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b367c955-ece3-4cf9-8a27-563e41e36af3", "sighting_of_ref": "indicator--6531ab15-0e48-4310-8b5d-794af238d079", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec6796b-6d2b-4b2d-9154-e9495cc1756d", "sighting_of_ref": "indicator--b2e77458-55a8-4506-8d21-999101ca67f2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b822ae-d07f-4c68-a5a5-35f57adcd7be", "sighting_of_ref": "indicator--531fd3be-69d2-430f-9a36-6c6e1554ac7c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b986153-2f1d-4443-9260-47a3ad63544d", "sighting_of_ref": "indicator--d0b7666d-0903-4ead-b13a-189266dc8045", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d028b8d1-0f94-4309-b90a-42de99cbf0ba", "sighting_of_ref": "indicator--60de02cf-eaf7-4ef4-bc50-847c8c163ddf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e950b4-d391-462d-84b4-af723c2d01e8", "sighting_of_ref": "indicator--e9e53ce0-d6ca-4d69-aaa4-1e5c4aa220eb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f7083a-3764-469c-98e8-f1b7635dbb45", "sighting_of_ref": "indicator--f38c08d5-cd05-45ad-ad79-9819c40e2130", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2327b3a8-3055-4010-ba4f-452508da6b9b", "sighting_of_ref": "indicator--b45b3f34-7a66-4011-8202-3df16a2592ea", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ab3151-34d3-4cdd-a25b-11b3fcd8ca1e", "sighting_of_ref": "indicator--b45b3f34-7a66-4011-8202-3df16a2592ea", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbaac44-369a-4c9d-8d87-3f87570f1201", "sighting_of_ref": "indicator--45c20bc9-6188-47a1-82d9-f34b2c1400c9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693711ca-78c2-481f-9459-0191b2348d32", "sighting_of_ref": "indicator--45c20bc9-6188-47a1-82d9-f34b2c1400c9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f2dbc2-3255-4fdb-bfab-ec9b2ee25ae4", "sighting_of_ref": "indicator--44fe1aa9-1d1c-47da-b5b3-a14d6aeec8c1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521d5474-0c33-4f71-ab94-33e51bd68ce9", "sighting_of_ref": "indicator--b27e5bdb-ef7e-4516-a445-437a50ab329a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94296d4b-154e-4c50-b59e-dd21075f2473", "sighting_of_ref": "indicator--b27e5bdb-ef7e-4516-a445-437a50ab329a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442f1009-5076-45c4-a199-c6cd45ba4892", "sighting_of_ref": "indicator--4dd1abe7-d6b6-470f-a72d-67deb1eb639c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9144b48-76c6-46f5-8762-6b5495f33735", "sighting_of_ref": "indicator--4c96d3d3-0641-4bd6-9f3a-74b890620516", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcb3bf3-341d-46ca-adfe-5c03be2b0e73", "sighting_of_ref": "indicator--e200e43b-33a6-4ff9-bbf3-e79f83ab8c7b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad165fbd-d4b3-4de5-9576-3397cc2cc778", "sighting_of_ref": "indicator--c8be6865-55eb-4760-948c-ca7fd0b70de7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24078e24-239a-4ab3-9ef0-db832b022b06", "sighting_of_ref": "indicator--6fb8c111-c08c-4cc4-97d2-97520b426483", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcece142-9c73-401b-a664-c0af21060f9f", "sighting_of_ref": "indicator--d9fe4f9b-b6a4-4f52-9d4e-414610a00884", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a769857-4214-417e-8bbf-d1c77da2f0e8", "sighting_of_ref": "indicator--d9fe4f9b-b6a4-4f52-9d4e-414610a00884", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f991862-55f7-43bb-85cc-a689fe3b4967", "sighting_of_ref": "indicator--772c6861-0c6a-4cfe-99bf-74557a47366e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f79924-04bd-4e1e-a29a-ac4f45076b8c", "sighting_of_ref": "indicator--772c6861-0c6a-4cfe-99bf-74557a47366e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262cba16-f97d-46e8-9381-566f6ab3a325", "sighting_of_ref": "indicator--bd576be8-b08e-4f46-b719-b9e531c34916", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce71d99-32b8-47e5-9bc1-5d6baad4222e", "sighting_of_ref": "indicator--bd576be8-b08e-4f46-b719-b9e531c34916", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f419f2-edd9-41f1-b215-8e76aab66259", "sighting_of_ref": "indicator--0bf0a39c-89e8-4b99-ae7b-a455652a5710", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32510692-76ea-4d3c-8e27-a5adddc4ce86", "sighting_of_ref": "indicator--6e5748f2-d7c1-449a-92ac-ce4768605c03", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373a61f2-aa09-451f-afec-49584be5230d", "sighting_of_ref": "indicator--a46edb73-18b0-41e1-ab3c-8eabde09378a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b666027-8a0b-4a00-80ce-b602e2cf5d7e", "sighting_of_ref": "indicator--be761e23-893e-4658-bdd8-86f3edd1b531", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e259a53-fd53-43ec-877b-26452570a905", "sighting_of_ref": "indicator--c1d4902a-3947-4122-b30b-693f43b77a8f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd0b3ec-6651-4e90-8625-5b039bfa336e", "sighting_of_ref": "indicator--0a0ea08d-64a2-4fed-a664-72fa6cf5a274", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e910bfca-0fab-43d6-97e5-3460ce4bae65", "sighting_of_ref": "indicator--b0aa8a68-a377-4c0a-ab22-1e69a4b3ba74", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b5bde2-bf6e-4df4-8764-0ef9d8a698b5", "sighting_of_ref": "indicator--42f4630a-6b76-4283-af62-e7119d0ab0c4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc22cfda-a407-467f-8efe-b903b311040e", "sighting_of_ref": "indicator--d2417570-a5f9-4f13-ba20-9561af0d75ea", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115b61cd-b840-4324-a8d1-964ae5ac51ed", "sighting_of_ref": "indicator--d2417570-a5f9-4f13-ba20-9561af0d75ea", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c90e44e-a134-42f0-bafa-d01222bb677e", "sighting_of_ref": "indicator--6292c189-a137-4d02-a7dd-9234190e6e3f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d46e77-2b46-402b-855a-195766b9f3c6", "sighting_of_ref": "indicator--a1ded202-47bc-4c98-8be3-1979d85a0c1d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1664a5c0-620c-48bd-affd-cba4a247894b", "sighting_of_ref": "indicator--a1ded202-47bc-4c98-8be3-1979d85a0c1d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982184fb-88fc-4c94-9c4e-dc437ab6595d", "sighting_of_ref": "indicator--8791a07a-ae69-4f6f-9363-f58d2da2ba9d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167d9291-68a1-4916-a158-ced48081f71b", "sighting_of_ref": "indicator--67170ae8-24d0-47b6-9a61-e8d293bbe0b5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74e3ebe-0e28-405b-8e37-d10104f14aa7", "sighting_of_ref": "indicator--67170ae8-24d0-47b6-9a61-e8d293bbe0b5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd39bc2-3a06-4a01-adc4-58af6f1fa844", "sighting_of_ref": "indicator--563860f8-fdea-4576-af93-389e419556c8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef82d2f3-3239-40eb-a90b-07b5f6adb3be", "sighting_of_ref": "indicator--563860f8-fdea-4576-af93-389e419556c8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45071558-1753-4c34-8eda-b20966c776d4", "sighting_of_ref": "indicator--563860f8-fdea-4576-af93-389e419556c8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9341e9-5e0c-4d82-a349-c9f6a539c2b9", "sighting_of_ref": "indicator--b063f1f5-6bd9-4a44-b9bf-0287994383a6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0336914a-09c4-4810-97f2-499225fc1a33", "sighting_of_ref": "indicator--b063f1f5-6bd9-4a44-b9bf-0287994383a6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb5a614-12e6-4931-8fd0-2c6c4cc5ee33", "sighting_of_ref": "indicator--b063f1f5-6bd9-4a44-b9bf-0287994383a6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bf4fcc-299d-47aa-8ba0-72259d4aa65d", "sighting_of_ref": "indicator--ad01283d-f44b-4622-9078-236d22e01e43", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d01f83f-e526-47bf-85b9-9ced6cd6f7a5", "sighting_of_ref": "indicator--ad01283d-f44b-4622-9078-236d22e01e43", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538718f3-aa12-42e7-9603-9b28867e9971", "sighting_of_ref": "indicator--ad01283d-f44b-4622-9078-236d22e01e43", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b331f4-3467-45aa-b65d-b33e1ec6ecef", "sighting_of_ref": "indicator--8be9377f-722b-459f-a297-06ff534ea33e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda3bdb5-7cea-4237-b213-10479f9e83c8", "sighting_of_ref": "indicator--8be9377f-722b-459f-a297-06ff534ea33e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee616b70-a69e-4ed9-b93f-748f790a7ee4", "sighting_of_ref": "indicator--8be9377f-722b-459f-a297-06ff534ea33e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd66cc27-5bb2-4faa-be1b-52a5f5cd8b44", "sighting_of_ref": "indicator--13520518-3cc5-4913-8779-1f90cf2f1925", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3938f94f-a4d0-4e13-85e0-d71c6960872b", "sighting_of_ref": "indicator--13520518-3cc5-4913-8779-1f90cf2f1925", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d2932d-cd22-4533-b124-b7c44da9e60b", "sighting_of_ref": "indicator--13520518-3cc5-4913-8779-1f90cf2f1925", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9a849a-9f17-4d64-bd7c-066772018a7e", "sighting_of_ref": "indicator--2f2ad851-99df-40d3-af81-a294bf368a9f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461659f4-df5f-45d4-8f0b-b7237c83b74a", "sighting_of_ref": "indicator--80108951-d399-43eb-a63d-ff65037bc0ac", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6689d6e6-c63b-48de-91bf-06f52f80b324", "sighting_of_ref": "indicator--80108951-d399-43eb-a63d-ff65037bc0ac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be82915-2238-4204-9cef-7d2363efe661", "sighting_of_ref": "indicator--80108951-d399-43eb-a63d-ff65037bc0ac", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b2c5bb-4efb-4088-9d4d-776e47116221", "sighting_of_ref": "indicator--79561ad6-3e45-4dbd-b874-ec5ffd6bbf93", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339537c9-838a-422e-9f82-b51189972b50", "sighting_of_ref": "indicator--79561ad6-3e45-4dbd-b874-ec5ffd6bbf93", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8513ff5e-526a-4ddb-90f9-3edd9ed9aa86", "sighting_of_ref": "indicator--4161b5ef-fe30-4267-9c67-a91b866f5c64", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6419215c-5d4f-41a7-a29c-a5ea1fc708b1", "sighting_of_ref": "indicator--d743e1f3-acb3-4ff3-bfeb-775ef898551d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b694ee7-2fa6-4165-91ed-9809bd706e19", "sighting_of_ref": "indicator--e4a965f2-6c4b-40b7-afd0-19006c0ec6af", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5643411-b787-482c-9c14-6ef68f837013", "sighting_of_ref": "indicator--260e4b8e-2304-4d10-96a8-fcb402b8d8cc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d95d419-26d4-4512-b994-ff45bdd57a39", "sighting_of_ref": "indicator--260e4b8e-2304-4d10-96a8-fcb402b8d8cc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2036f812-c4d6-48c6-93e9-ff986675acae", "sighting_of_ref": "indicator--7e8f74cf-e0b8-4bd8-8abe-4deeeb60183f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2baae5f6-8543-4ec5-be22-e32e6b7aaeae", "sighting_of_ref": "indicator--7e8f74cf-e0b8-4bd8-8abe-4deeeb60183f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca17792-4aff-4712-a798-58b171266523", "sighting_of_ref": "indicator--408d9364-71ea-4e0f-90d7-9c8d70633a40", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5f1bbc-c76f-461a-8925-8cf5fd93f45c", "sighting_of_ref": "indicator--3ac0604a-b985-4c2d-85b4-226aba50d18a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7ce754-fd99-4157-9c86-120dd6709ff8", "sighting_of_ref": "indicator--3ac0604a-b985-4c2d-85b4-226aba50d18a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d1c242-613d-42dd-a50d-61bd4a3ac21f", "sighting_of_ref": "indicator--6bb7d787-a98d-44c2-95dd-554257ec2af3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8c61ea-8020-4a0c-9c19-97bce469ca51", "sighting_of_ref": "indicator--6bb7d787-a98d-44c2-95dd-554257ec2af3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c652c9a5-5259-4c00-9956-72e6acdedd34", "sighting_of_ref": "indicator--6bb7d787-a98d-44c2-95dd-554257ec2af3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b9ae3d-1124-451d-a178-425407bef795", "sighting_of_ref": "indicator--60961034-116e-4919-a412-8ad5bb59e58c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3400ce-047d-4132-adfa-ed23762dd507", "sighting_of_ref": "indicator--60961034-116e-4919-a412-8ad5bb59e58c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0b951f-00e5-49e1-b9f4-7f380ea1b6e0", "sighting_of_ref": "indicator--2397c30b-2420-4a0a-b2c7-d37be9e33480", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b1f351-3801-4d82-ab46-6e8644ee0c62", "sighting_of_ref": "indicator--2397c30b-2420-4a0a-b2c7-d37be9e33480", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b13046c-0d40-4f3a-ad59-79f0f75720e9", "sighting_of_ref": "indicator--2397c30b-2420-4a0a-b2c7-d37be9e33480", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11e73fd-2669-487e-8d8a-797a16deda15", "sighting_of_ref": "indicator--f4532ddd-1c10-4d26-80cc-a127353be676", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02e6123-205b-4e5e-b155-08a156c81980", "sighting_of_ref": "indicator--f4532ddd-1c10-4d26-80cc-a127353be676", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8304d266-a8c3-44c5-8f37-a81744703369", "sighting_of_ref": "indicator--6f9b73ac-0099-44db-bbf5-49337054e213", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ee2d15-9bb5-4718-b444-ea1ea9c1d459", "sighting_of_ref": "indicator--6f9b73ac-0099-44db-bbf5-49337054e213", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b6bb08-5acd-43e1-aca3-edd6393746b6", "sighting_of_ref": "indicator--c19c3ffa-1f09-4a86-9a40-55e354e682ca", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbe6121-c059-4c22-bbce-5968dae9839c", "sighting_of_ref": "indicator--c19c3ffa-1f09-4a86-9a40-55e354e682ca", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5fea29-dcca-4e7a-9a16-36c295482d3c", "sighting_of_ref": "indicator--ccbc8a7d-9794-469e-ba65-531205ca0e48", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f78514-31ae-4ba9-8ed8-e20f478faee0", "sighting_of_ref": "indicator--64feb66f-0c7e-43bc-b178-5bf093fc0087", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a5933a-b758-479c-8653-4bbdc63fd942", "sighting_of_ref": "indicator--333d9b6c-430e-440c-bfa7-0ed88c6a571f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394cd9e0-d7c9-4174-8a39-af1f982e04f1", "sighting_of_ref": "indicator--a87c5304-1d40-4b5d-bb94-55c204b4f78a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6155964-014b-4bab-ba5e-babbb84aa609", "sighting_of_ref": "indicator--5dcff7d3-62e7-48fc-bacc-3ea0107b1610", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b215f6-777c-4916-b650-eabb4153f36d", "sighting_of_ref": "indicator--7ed5bdbc-d723-4aa1-8aa7-089a6792047b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff6153a-8d91-4946-931f-373c061d6668", "sighting_of_ref": "indicator--850cff8e-3c2e-48f4-895c-ed3a7c30fb98", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98cceb3-7315-448d-bd7c-b660bac011de", "sighting_of_ref": "indicator--fdf69c9c-56f9-47f5-9f72-573e88c48d5e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ad4c8c-0ee5-4d9b-904d-037f6c1c246d", "sighting_of_ref": "indicator--fdf69c9c-56f9-47f5-9f72-573e88c48d5e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa4e5f1-337d-47ef-9e0f-7da0272a7cf7", "sighting_of_ref": "indicator--bb29a372-179b-49b0-8bd0-4df2f5ede65e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4050ed24-cace-4e82-8a0f-f9e04f027fa5", "sighting_of_ref": "indicator--471c77ac-9f34-40d5-87ba-5c28774e0b95", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57773530-cd7f-450f-9288-6444d2cc57e5", "sighting_of_ref": "indicator--471c77ac-9f34-40d5-87ba-5c28774e0b95", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ee5beb-4f67-4f92-b502-01b47590058f", "sighting_of_ref": "indicator--471c77ac-9f34-40d5-87ba-5c28774e0b95", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31791b37-27fe-4fe8-bae6-c6a6494c4a5a", "sighting_of_ref": "indicator--820faa96-cc46-4ce7-bc68-1570b447e77e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c5cb7d-3659-4601-b1dc-50cd8b6c630c", "sighting_of_ref": "indicator--820faa96-cc46-4ce7-bc68-1570b447e77e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f2524d-2889-479b-93ab-8a5a62f6098e", "sighting_of_ref": "indicator--85157643-c351-4c0f-86a7-d6adf158cdd5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5478e66-7e65-4f79-b3f4-41ccec8056fc", "sighting_of_ref": "indicator--463afc57-32aa-4a61-a01e-86e7d523feed", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78b3fbc-b514-4ad4-b637-c00e20893d04", "sighting_of_ref": "indicator--9fd90b2a-1aff-4c22-994c-7955e58845b5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9354009a-24aa-4d92-99a9-13a267fcbe74", "sighting_of_ref": "indicator--ec3a5ea5-2559-40c0-b9a7-d190b2b78234", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de86a113-e921-461a-a89e-2141b7e36941", "sighting_of_ref": "indicator--a5b74118-1a2a-40a1-9ea8-443c158c193e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb14c022-28ac-4a47-b5d4-cb6c8778d0a9", "sighting_of_ref": "indicator--a5b74118-1a2a-40a1-9ea8-443c158c193e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce21de74-3654-4fb9-8487-9ccb9bbbdebf", "sighting_of_ref": "indicator--d499ded3-382d-4678-9213-86f44ff0247f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eefd3ba-f5b0-4e9c-a74a-47d3a7be11c2", "sighting_of_ref": "indicator--d499ded3-382d-4678-9213-86f44ff0247f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05fc00be-d5cb-4542-a1d4-caecf95c36e8", "sighting_of_ref": "indicator--45b96daf-f479-46e6-892b-ed186feeb15a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79adc57-df5c-4fea-a983-8e1de59b98a7", "sighting_of_ref": "indicator--45b96daf-f479-46e6-892b-ed186feeb15a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7328af4f-55f3-418c-a5b3-a804df483261", "sighting_of_ref": "indicator--8bf8234c-b3c8-4a74-b757-e4f866bf105f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010b7ee6-fbe0-4cd0-bdb1-c3c533c5a7d0", "sighting_of_ref": "indicator--8bf8234c-b3c8-4a74-b757-e4f866bf105f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e090e1-79b6-4653-a5a5-7b0cd4e56681", "sighting_of_ref": "indicator--0cdec20c-38f5-4518-8edb-95e0a658ad88", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f3a52e-eda8-45bc-9e10-0bb3d32a2aa1", "sighting_of_ref": "indicator--0c90c959-7221-4a60-aa2b-fe5835af6fb1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8ce76b-39a1-4742-a463-dee4689c980b", "sighting_of_ref": "indicator--d974b7c2-3c3b-43a3-98f5-02fcd5fc60c8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd228210-ea93-4910-94ee-f721f5c0d3d9", "sighting_of_ref": "indicator--64dd62ad-402d-4299-a917-84fb904fbe66", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe8ed7a-9235-4350-ab03-a1dede6c306e", "sighting_of_ref": "indicator--67fe459d-f877-4207-b6d7-6a9b375c9dc9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946d24bb-9315-4d65-b967-06380bbbf34d", "sighting_of_ref": "indicator--22e9982e-dde0-4c8e-87d6-ecfdb1205b84", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4293bc08-7710-4194-aac7-847fd327a8b1", "sighting_of_ref": "indicator--f702d8e8-c019-4e59-b818-7690789ced63", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9226b602-0193-4b82-b3b7-de97b2f3455f", "sighting_of_ref": "indicator--e7a52728-1bc5-4558-a08c-44232992ae48", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc9a29d-4432-4b91-978f-f2b941a1fd90", "sighting_of_ref": "indicator--f732164d-5a16-43a5-829e-7f2eb1379cc2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3276b12d-cda7-4767-8240-a3b808d93a7e", "sighting_of_ref": "indicator--867a1b87-4b8a-440d-a3f2-87c361bb3a18", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f59dc2f-7ccd-41d8-860b-acb81d45118a", "sighting_of_ref": "indicator--867a1b87-4b8a-440d-a3f2-87c361bb3a18", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70436739-d413-4028-a879-b08d61469a23", "sighting_of_ref": "indicator--8aa42c18-c402-4728-8d81-8ee44be31612", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3781e7d-dcac-4ed7-b2f4-2295438ca8ec", "sighting_of_ref": "indicator--8aa42c18-c402-4728-8d81-8ee44be31612", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce85d3c7-afd2-4089-a6b6-1eceddd4f6d7", "sighting_of_ref": "indicator--8aa42c18-c402-4728-8d81-8ee44be31612", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bac41a0-43ee-4be6-8241-38b32b5e09aa", "sighting_of_ref": "indicator--75338d15-ac70-4756-b494-20dafd264c36", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03338fd-587e-4766-969c-072ebb3fb2b4", "sighting_of_ref": "indicator--75338d15-ac70-4756-b494-20dafd264c36", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ca1384-68bd-490e-91a0-3167c7f6c3ca", "sighting_of_ref": "indicator--1fb0a6d1-cbe8-45f5-b9b4-9b5a67a7a3c4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7121a19b-48ea-4b92-82c3-291c43eadb1a", "sighting_of_ref": "indicator--502a2010-02e9-4744-8b48-a3d956826b74", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989dd49d-ace7-46b3-8299-00b1d2ec2812", "sighting_of_ref": "indicator--b27f7130-99c8-458e-915c-c035e2ac7069", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44adeec5-1d79-4f30-8f5a-48f25d8659c3", "sighting_of_ref": "indicator--b27f7130-99c8-458e-915c-c035e2ac7069", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e613d65f-b9f3-4325-a170-6b494172689e", "sighting_of_ref": "indicator--eedc324b-b417-48f4-953f-efc3f926c3bd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38558016-58f9-4047-af33-13e6cf6d6308", "sighting_of_ref": "indicator--bca6bff6-6b4e-4b6f-91d3-03b1f5c7906b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc40cb35-f9f7-418f-8092-274810a5a8ad", "sighting_of_ref": "indicator--ff0a8555-a86a-4497-a8f4-8894c35c2cf9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61fdd9e-d110-44bf-83f3-eef4ee5b7a7f", "sighting_of_ref": "indicator--ff0a8555-a86a-4497-a8f4-8894c35c2cf9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bedcd12-e84d-451c-974a-875d0cbe5988", "sighting_of_ref": "indicator--4b8097de-fd66-4a29-9184-825e55066a04", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c25cd6c-94d8-4974-9259-0664026d4887", "sighting_of_ref": "indicator--4b8097de-fd66-4a29-9184-825e55066a04", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d13c2d8-a526-4202-812d-f8523f95b97c", "sighting_of_ref": "indicator--5fbf9e22-bd62-45da-9009-2dc65891ca75", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80399e6-31bb-4f87-8964-aaa387f72b01", "sighting_of_ref": "indicator--5fbf9e22-bd62-45da-9009-2dc65891ca75", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3c454a-405a-4de9-ae49-038bcdcdda0c", "sighting_of_ref": "indicator--986bdd64-4bca-4f83-b50a-b851829856f1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf018b3-e801-4fe1-a6e7-362d416851b7", "sighting_of_ref": "indicator--986bdd64-4bca-4f83-b50a-b851829856f1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec61c66-272e-4eb0-9c5c-729ac2153075", "sighting_of_ref": "indicator--986bdd64-4bca-4f83-b50a-b851829856f1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59824e4-dda4-4d6c-b800-5e60ed74442c", "sighting_of_ref": "indicator--7c7edf76-3c54-4af9-97bc-786a416f9143", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17efbbc-6f0c-4767-9ccb-a7f93d16a301", "sighting_of_ref": "indicator--fa2aee81-aef0-4789-9709-21209cd3ecc1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8c1c0b-6344-4a0f-b371-5b440c13bb33", "sighting_of_ref": "indicator--4bafffec-f079-46ea-bd29-7d1990f8d9e8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ac25c9-d753-498b-9f04-2ead5dc31f62", "sighting_of_ref": "indicator--6f48e0c4-64a5-4b36-9078-000c952b527b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ddd85a-a3bb-44c9-bc2d-568e132b4a70", "sighting_of_ref": "indicator--6f48e0c4-64a5-4b36-9078-000c952b527b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7d3453-722f-451c-89a5-4e681543d567", "sighting_of_ref": "indicator--f36f0163-4e70-4e15-b1e2-99789c7a476c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79d7ef5-0ffd-47f8-aa79-a4a032372041", "sighting_of_ref": "indicator--4564449c-ec77-409a-a341-f356fffca23b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7edade-a670-4a4a-818b-2f39dd859678", "sighting_of_ref": "indicator--ff5c2434-1764-49fb-9b7a-5a349d18ce85", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9d4f98-1a1d-4479-859f-e8b1b99a691a", "sighting_of_ref": "indicator--b841f9a6-eb28-4c4a-bc5a-905987083e7e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0806c5-77eb-4756-af2c-5b08f3708beb", "sighting_of_ref": "indicator--34a8876d-cd37-4aaa-8ecf-9da1ebb2b14c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a049d622-dd10-4483-9563-7190ff4ac5a0", "sighting_of_ref": "indicator--34a8876d-cd37-4aaa-8ecf-9da1ebb2b14c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769b082b-bf41-4db7-bcbb-a6be6ed9e6b5", "sighting_of_ref": "indicator--60af2f5f-f6d8-4ef1-91dc-f0d5c3ddf87b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77097547-2c49-4208-a147-9f8dee338bd7", "sighting_of_ref": "indicator--79c0f1a8-b427-48f5-858c-3c589ce6fa3f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a89dd95-2af8-43ae-b5af-a155a4166a70", "sighting_of_ref": "indicator--79c0f1a8-b427-48f5-858c-3c589ce6fa3f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063b9eae-b34b-458e-a0b2-dee97764512f", "sighting_of_ref": "indicator--60cb8da4-ef1c-4628-b81a-bff8da030e5a", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3e47bb-05a1-4244-bf3a-63b0b8440e0e", "sighting_of_ref": "indicator--d20300b6-267c-4b27-b2f5-5513363c9333", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375c6aa8-7597-435f-b55d-8a5571dce668", "sighting_of_ref": "indicator--d20300b6-267c-4b27-b2f5-5513363c9333", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795e5194-e793-4225-a293-96460c8e96d4", "sighting_of_ref": "indicator--e8f04305-c05e-4431-ac5f-3765b203911b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b970e4e2-dc6d-4383-8fe6-a2842f69dff1", "sighting_of_ref": "indicator--e8f04305-c05e-4431-ac5f-3765b203911b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb471b56-4d4c-4388-ac32-b19aeff6ee11", "sighting_of_ref": "indicator--fb6f5b56-fb7d-4f7b-9fb5-25f1f1d19a3c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf58bfe-f7f0-4970-ac0e-94407d779de1", "sighting_of_ref": "indicator--2fda4234-98d5-421f-90d6-6b40ac4d360c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06939bbf-4068-4b62-8fb8-e67f2b23fa96", "sighting_of_ref": "indicator--2fda4234-98d5-421f-90d6-6b40ac4d360c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90424149-abeb-4d19-9bce-311dcb5aa552", "sighting_of_ref": "indicator--c11d654a-6165-44e1-af30-a3d3e6f9aa3c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b851a5-c05b-459c-87cf-e874c21fb382", "sighting_of_ref": "indicator--c11d654a-6165-44e1-af30-a3d3e6f9aa3c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9befb1b-69bf-4e98-aad0-a7f08f77951b", "sighting_of_ref": "indicator--5c2e4dee-ce49-41b0-a9b6-c06bf4fca75b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c054320-84d3-4d66-b58c-82ed742b6515", "sighting_of_ref": "indicator--5c2e4dee-ce49-41b0-a9b6-c06bf4fca75b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c09d33-0a51-4279-9a1e-64b6d44d1d54", "sighting_of_ref": "indicator--d57256ec-7664-4b65-980f-ef210f876a57", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1287e8c9-88e8-4db7-8f42-09dc7ef63bfb", "sighting_of_ref": "indicator--a751353d-118d-47b5-bcf8-1a61db3802c5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d663e1-5452-4880-9e48-50d765f2a07c", "sighting_of_ref": "indicator--a751353d-118d-47b5-bcf8-1a61db3802c5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b18045-d86d-440b-8b1c-4b5a8ec8debb", "sighting_of_ref": "indicator--a751353d-118d-47b5-bcf8-1a61db3802c5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac50985-c972-44a1-b63f-52a4335efdcd", "sighting_of_ref": "indicator--bf525fa3-f0c0-46ed-92ee-07c9d107756b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b75423-8723-4255-9e92-936824d70adf", "sighting_of_ref": "indicator--762f2e95-6a40-4e09-8332-626102546029", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3066ed-bc8d-471c-95b3-ecba8f7a151b", "sighting_of_ref": "indicator--9df6812b-27ee-4ad2-96c4-ad11a79d08c3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984d607c-cc67-45a0-8c13-be4be82075b2", "sighting_of_ref": "indicator--7e49cdfa-04be-40bd-9c0e-27c29a5b16c5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624016d2-b810-4887-bf2a-36a309507c24", "sighting_of_ref": "indicator--947ab35b-a9c5-46a3-91d7-07b71b4c40dc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e28a03-da1b-435d-a41f-e7c5cd1b88a0", "sighting_of_ref": "indicator--24a0c768-194d-465e-a6d3-0073a71d482f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462790df-a093-4836-9385-4a065dd35dac", "sighting_of_ref": "indicator--4e967d23-5baf-408b-8001-86fe1ae41371", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1323d532-5408-4a8a-a6da-1a780351a5a8", "sighting_of_ref": "indicator--4e967d23-5baf-408b-8001-86fe1ae41371", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c54310d-cb5a-4ec2-b65d-0491654210a9", "sighting_of_ref": "indicator--adf40af5-afdf-4f23-ac2e-da545fc9592c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a233ea-9556-4268-855c-818432c8fcbb", "sighting_of_ref": "indicator--3037dd93-b3ed-4fd0-92da-904af8e02113", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2a3130-f627-4bb6-acd4-526e0578942c", "sighting_of_ref": "indicator--3037dd93-b3ed-4fd0-92da-904af8e02113", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419d6b3c-ca4e-45e7-9d3a-cf70dcee2b25", "sighting_of_ref": "indicator--48762c17-53f6-460c-8193-7c9e9cc17aad", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--183b6057-b8bb-42d0-bc49-daf240de088b", "sighting_of_ref": "indicator--48762c17-53f6-460c-8193-7c9e9cc17aad", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c5bedc-794e-49ff-a598-bb087e7f1a7a", "sighting_of_ref": "indicator--c98c1e0b-68ad-42f5-b8bc-8e2a5ea7e452", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5008aacc-31f5-450e-9070-55c2869d07c3", "sighting_of_ref": "indicator--3d79956c-6b73-47e1-8432-3ee5091bfac9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f843f5b-c799-4efc-b690-8705a1bc75ec", "sighting_of_ref": "indicator--3d79956c-6b73-47e1-8432-3ee5091bfac9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de26fdca-d510-40e0-ade3-f3a5b0a589d1", "sighting_of_ref": "indicator--bd619422-eb65-42c5-8923-9613c4b3ee1b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727ab559-89ab-4c59-8fcf-1f850cc4fdbd", "sighting_of_ref": "indicator--bd619422-eb65-42c5-8923-9613c4b3ee1b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4614971-70c5-4969-ae60-c0180eb8b25b", "sighting_of_ref": "indicator--a02e4510-7b8c-462d-88f2-d29298d24b8d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320f6948-1316-45c7-89ab-c06329ce2ca2", "sighting_of_ref": "indicator--eadbc235-0e42-4323-9c1c-dff6584ee48d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d410e7-2d01-4955-b021-1ef733d5a532", "sighting_of_ref": "indicator--71ffa1bc-0460-4e0d-bc1b-68eb6a482d20", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa5e1d0-dfc4-4d9d-886e-cded72950d40", "sighting_of_ref": "indicator--71ffa1bc-0460-4e0d-bc1b-68eb6a482d20", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff02840-b0be-4f66-8c4e-88299ed0a331", "sighting_of_ref": "indicator--af696cdc-db04-4af4-bcc7-5bfeb4c5df9c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724f14d6-c4dd-44e8-ae0a-ff811adf7aa2", "sighting_of_ref": "indicator--af696cdc-db04-4af4-bcc7-5bfeb4c5df9c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa42f9c-85b0-4dcc-bbf8-105892a6ec75", "sighting_of_ref": "indicator--9428c1dd-a507-4783-ab2f-a15a200fd076", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befed047-15e2-484d-bc03-e88c90db5317", "sighting_of_ref": "indicator--9428c1dd-a507-4783-ab2f-a15a200fd076", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ac4d9e-e1d1-4c65-b28d-abefc380078e", "sighting_of_ref": "indicator--9a984029-b255-4e86-b98b-61434484b6fe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63fb92d5-10d4-48c2-9de9-88879700db32", "sighting_of_ref": "indicator--e4313bc6-c75a-4a06-89b2-7c3f57ac123d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897f930f-0c50-42f8-8231-7d0cdde68860", "sighting_of_ref": "indicator--8bfe0083-ed54-498b-8e64-c184872e6ca0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b68b720-c0f5-4011-98de-668af201a73c", "sighting_of_ref": "indicator--8bfe0083-ed54-498b-8e64-c184872e6ca0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ef3c73-dc55-42fe-9500-d9f2bd605b70", "sighting_of_ref": "indicator--8bfe0083-ed54-498b-8e64-c184872e6ca0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed962833-2839-4ab7-9688-067b94d38225", "sighting_of_ref": "indicator--4d3d4bea-14e2-4e1d-b038-69674a487b3e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6b7bde-3bb6-4687-9c86-75196200f4db", "sighting_of_ref": "indicator--4d3d4bea-14e2-4e1d-b038-69674a487b3e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa98f5b0-88cb-41db-acae-994618fd0042", "sighting_of_ref": "indicator--9ee93bd4-2e27-44cc-9577-9c6823fd75d2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3553e6e3-5577-477c-9e6c-02816c1e3d53", "sighting_of_ref": "indicator--2c880615-55ca-455b-83da-b725308e97d7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a29fc3-c3d9-4218-b138-24e9cf2c1013", "sighting_of_ref": "indicator--2c880615-55ca-455b-83da-b725308e97d7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6031ddd6-e3ee-4a6d-99dc-61bfe88f7521", "sighting_of_ref": "indicator--2c880615-55ca-455b-83da-b725308e97d7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812c42c5-d38c-49c5-8977-0cbfeefbe87b", "sighting_of_ref": "indicator--8e9d391d-ad8d-406a-8cf1-14b9808af51f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e17a9b1-d326-4a34-8d11-44efa709fc45", "sighting_of_ref": "indicator--8e9d391d-ad8d-406a-8cf1-14b9808af51f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a5c05a-dbdb-4d94-b42b-ce04f7116f9a", "sighting_of_ref": "indicator--95b6e03e-e243-4a35-90bf-0c9c8657b342", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5990869-ad91-4175-a3e6-e77e82faa5af", "sighting_of_ref": "indicator--7ce6503e-8243-48eb-8ca1-3da67679e652", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46307878-188d-46cf-aa6e-33dccac4e19a", "sighting_of_ref": "indicator--e6cb85e5-cdc2-4ea5-9389-676b4a957ab6", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420387ca-ca42-42f2-97bc-02174049b02a", "sighting_of_ref": "indicator--a2d81e1e-40ef-4bd3-862c-2086ecd52cab", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3121f4-bc02-4bf0-bfb7-0950eff95ac9", "sighting_of_ref": "indicator--a2d81e1e-40ef-4bd3-862c-2086ecd52cab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f780cba-3784-49ab-ac9c-8b0a82eaeaad", "sighting_of_ref": "indicator--a2d81e1e-40ef-4bd3-862c-2086ecd52cab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02d32ed-16ac-4af2-997d-f77d2e031d16", "sighting_of_ref": "indicator--c9190863-bf60-4bc7-9d40-cc6a16d6bbe0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2f19e7-e48e-4a6d-a4ee-ffcf22feaff3", "sighting_of_ref": "indicator--af3c1aa3-864e-4700-98a9-31d5e0450b11", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f8261f-821b-4bfd-901c-91b4f865ab81", "sighting_of_ref": "indicator--7f86df05-2bb9-472d-b006-0d22178960fd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f00bc2-49ac-4f46-b2f6-c95eeaf07235", "sighting_of_ref": "indicator--7f86df05-2bb9-472d-b006-0d22178960fd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba58318-223d-4463-90f1-2e010fa5ee15", "sighting_of_ref": "indicator--3bd6bd77-ae44-4844-aa44-b8f8ba2d1d75", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0de5e3-33c2-4b2f-81fb-a2c2dffd2cc0", "sighting_of_ref": "indicator--4a6ddc2b-d4a0-4d02-aaec-f07e8b90e7fd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1c0d85-831a-4665-ab7c-f851b7f224b0", "sighting_of_ref": "indicator--795a71ea-5a19-4c84-aec9-64bf2b06f625", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f565697-c613-460b-aa5a-7ffe2aeba6d2", "sighting_of_ref": "indicator--5e6e2b6b-a369-4b66-b56f-56f066acdab7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26708c18-1ccc-40d1-adac-26f05a49b5d9", "sighting_of_ref": "indicator--5e6e2b6b-a369-4b66-b56f-56f066acdab7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f4a377-2213-482e-9ae6-2b9c11634c04", "sighting_of_ref": "indicator--5e6e2b6b-a369-4b66-b56f-56f066acdab7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd4329a-3a01-46dd-b6cd-ff7988fa0700", "sighting_of_ref": "indicator--62bcb07a-b712-4d23-b216-4a8498b3e22c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a1e808-8539-421d-9ad6-205eaaaa20ca", "sighting_of_ref": "indicator--62bcb07a-b712-4d23-b216-4a8498b3e22c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3be0dd5-fffd-43e5-94d9-51bcd96eba86", "sighting_of_ref": "indicator--62bcb07a-b712-4d23-b216-4a8498b3e22c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4520b437-dce1-422a-ad5b-50275cda4e00", "sighting_of_ref": "indicator--b99eeba7-77d7-49a0-bc1f-b49813564ae9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7347c5-3df3-4844-a918-73c4d6b5912f", "sighting_of_ref": "indicator--b99eeba7-77d7-49a0-bc1f-b49813564ae9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1670f9-5b4b-42ad-bb50-d2b41d1709e7", "sighting_of_ref": "indicator--be159408-2a81-4394-81d2-bcc2f363bbe0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b276b48-f14d-4398-8649-3e9d67c5b68e", "sighting_of_ref": "indicator--be159408-2a81-4394-81d2-bcc2f363bbe0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0e5f20-0eb5-4bc1-a3f3-983d4284d3e9", "sighting_of_ref": "indicator--efb83e31-0fb0-4962-b874-1669f63e7b2a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9c7184-eb97-4685-a687-d8d591344e21", "sighting_of_ref": "indicator--efb83e31-0fb0-4962-b874-1669f63e7b2a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d15d750-c5ae-4946-94a7-86693ecdb405", "sighting_of_ref": "indicator--efb83e31-0fb0-4962-b874-1669f63e7b2a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f62bcd-7f7d-4617-b8c9-db5f80398c6b", "sighting_of_ref": "indicator--ead633a1-dd33-4b63-b092-c1432b89bedc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71dae773-bf7a-4dad-8cc1-b0dd1a1c3bd8", "sighting_of_ref": "indicator--ead633a1-dd33-4b63-b092-c1432b89bedc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdcda93-8a74-4941-a15f-24d2310b6849", "sighting_of_ref": "indicator--ead633a1-dd33-4b63-b092-c1432b89bedc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197087dd-7d88-40fd-a514-998d8bbd07dc", "sighting_of_ref": "indicator--2677274f-9305-440a-abe5-8114bdf1fa80", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7163fb1c-5b6f-416b-be62-138c6a924e6b", "sighting_of_ref": "indicator--2677274f-9305-440a-abe5-8114bdf1fa80", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c651b6f-6d8c-4cd3-84c9-8245f2a93c9d", "sighting_of_ref": "indicator--2677274f-9305-440a-abe5-8114bdf1fa80", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c370803c-5fee-4786-80b1-176713f95591", "sighting_of_ref": "indicator--c9fed5bc-f62d-453c-9af3-7a907149b489", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d101c6f-6613-4531-9f67-2e4e11dd4491", "sighting_of_ref": "indicator--c9fed5bc-f62d-453c-9af3-7a907149b489", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e90c9f-1521-466b-a66a-94d7915c9e2a", "sighting_of_ref": "indicator--2a5fbfdc-105b-4f45-9886-c9d62a4483a8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39384b19-6b7f-4321-bb64-0a180c4d6da9", "sighting_of_ref": "indicator--2a5fbfdc-105b-4f45-9886-c9d62a4483a8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e651a037-4aef-41ac-9629-dbc6a0c7e18d", "sighting_of_ref": "indicator--2a5fbfdc-105b-4f45-9886-c9d62a4483a8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26660a0-52ff-4912-9376-4463303814f0", "sighting_of_ref": "indicator--d4722c01-983f-4460-a311-98542ba64f75", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89254cf-bb2e-40b2-92ae-77d24039ce89", "sighting_of_ref": "indicator--d4722c01-983f-4460-a311-98542ba64f75", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735aefdd-5dfa-4098-84ef-9229384ef1c4", "sighting_of_ref": "indicator--e9dd9b8e-7b57-4a92-a6bb-7949dbf159bc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225616bb-1a09-43e9-82dc-640bb9d7c8b7", "sighting_of_ref": "indicator--789cbde1-4ffb-46a7-b310-0b71fcc8203f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5367f3a9-dc91-436a-9c9e-9fb88d16c13d", "sighting_of_ref": "indicator--789cbde1-4ffb-46a7-b310-0b71fcc8203f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc606467-2303-45ba-bff5-4017fbd69bdc", "sighting_of_ref": "indicator--59b71820-833a-4f88-b931-3abaac19b943", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ef4541-220e-419c-959f-3d8ea6d2312c", "sighting_of_ref": "indicator--59b71820-833a-4f88-b931-3abaac19b943", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3e0224-533a-40b9-9439-9a54f1889809", "sighting_of_ref": "indicator--d182bec5-2f29-4651-aa66-75a1b7de84fa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c51923-62e8-4425-b640-686e1f79c5ac", "sighting_of_ref": "indicator--582bf543-8245-454a-ab82-a3f44b272427", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3143f4e-7272-456c-acd7-afc33597ba28", "sighting_of_ref": "indicator--582bf543-8245-454a-ab82-a3f44b272427", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba6e2e0-9fa2-432a-bda8-6ac198f02d41", "sighting_of_ref": "indicator--582bf543-8245-454a-ab82-a3f44b272427", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196a2935-629f-4386-8221-cf996c75514d", "sighting_of_ref": "indicator--e6122cd2-3cee-49da-a732-ce5056525742", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b4c5c3-f03e-4c8c-90f1-3be0c6279758", "sighting_of_ref": "indicator--e6122cd2-3cee-49da-a732-ce5056525742", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22664ea3-4270-4a0e-9882-da2c4d9b674a", "sighting_of_ref": "indicator--e6122cd2-3cee-49da-a732-ce5056525742", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02955c49-83fa-4b59-9d38-5e1d5c5fae68", "sighting_of_ref": "indicator--6745cd7f-4624-4292-9807-f965c315403d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46393a2-eff4-4b05-9923-bd85bc8710a5", "sighting_of_ref": "indicator--6745cd7f-4624-4292-9807-f965c315403d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38ef7ef-2fde-4185-ac26-f9829846dfa7", "sighting_of_ref": "indicator--6745cd7f-4624-4292-9807-f965c315403d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5010746-b78d-43a3-bd56-8228e01805f4", "sighting_of_ref": "indicator--6a00d8ab-8c7c-4ecc-a6fe-a5853a77b5c9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1d3494-a466-438f-9020-b2a32a6a4009", "sighting_of_ref": "indicator--6a00d8ab-8c7c-4ecc-a6fe-a5853a77b5c9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50cccacd-0c27-44d0-975d-3af41b30af1d", "sighting_of_ref": "indicator--6a00d8ab-8c7c-4ecc-a6fe-a5853a77b5c9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94212860-3356-4be5-b045-1223916f7ea1", "sighting_of_ref": "indicator--cbce90f1-7b8b-4808-9de5-ab3cc1e66146", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846631b8-e9a5-4cb0-80c1-4ec98899cf4d", "sighting_of_ref": "indicator--cbce90f1-7b8b-4808-9de5-ab3cc1e66146", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf15654-cda9-4ac9-9ee3-5f9754763c49", "sighting_of_ref": "indicator--cbce90f1-7b8b-4808-9de5-ab3cc1e66146", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc470fa6-068c-482a-961a-1a98faf3cfea", "sighting_of_ref": "indicator--923be000-7c56-4a00-842b-297300a00f2f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b29790-a79f-4170-822b-2b9631bbe8dd", "sighting_of_ref": "indicator--f336648b-d635-42b6-9dd7-69556bb96172", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98cc9c19-5503-4735-a65d-c4ba515cc5d6", "sighting_of_ref": "indicator--4c50d728-43d2-4bbc-bbb5-32dfe7bafd8b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d3efb8-ab06-48f3-b7e2-735b90d412bd", "sighting_of_ref": "indicator--aca82548-fc56-40dc-b8b7-9b587c32c50e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b84c63b-c365-4853-86d2-371db52d3ffc", "sighting_of_ref": "indicator--97fa9cf9-efe4-493a-9311-e9d8e129dbca", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d641b0c8-7625-42e2-ba8c-964f4aa347f7", "sighting_of_ref": "indicator--704a57d0-9125-471f-bbfb-6f63d4de3cc1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feea84e5-7ebd-4e60-975d-fa1f37854178", "sighting_of_ref": "indicator--66b437ab-3c34-4aa8-a73a-6a5e56cd3520", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2882ee-d589-46ce-a909-1902fda347d1", "sighting_of_ref": "indicator--befe3e35-bffe-4e34-970b-f99d99e35094", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a04008-ddca-4783-a1b6-ee752fec68d5", "sighting_of_ref": "indicator--b132aa94-c687-4a74-be66-f60b1aab9833", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd4ab64-4724-4490-92ce-013ff93e944a", "sighting_of_ref": "indicator--c9d892df-e7fb-4f2b-9916-af88338c4ac3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa5c11a-7a5e-461e-8e65-6ffcc8cc45b7", "sighting_of_ref": "indicator--631a7ead-39cf-4440-be7e-0a7e9c449e96", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ca0296-014b-4f05-9491-daf7ec73337c", "sighting_of_ref": "indicator--77c38c94-da87-4a36-95bc-9833f9bcff5f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284d7628-ea18-4fb8-a2a1-fe9118003937", "sighting_of_ref": "indicator--05116750-247c-48f8-9b32-912fe826094b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b3a7dd-57a3-4e5b-a9ae-268f6a06d550", "sighting_of_ref": "indicator--3b352dc7-7a53-4970-8798-0d52a41bbf93", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cec8e0-4b83-4911-97b6-58f695cffd8e", "sighting_of_ref": "indicator--3b352dc7-7a53-4970-8798-0d52a41bbf93", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ad05ea-4faf-4fda-9474-b6dd26131f3f", "sighting_of_ref": "indicator--3b352dc7-7a53-4970-8798-0d52a41bbf93", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a974bb-5f7f-46f9-8085-f64acdac120a", "sighting_of_ref": "indicator--d518c38f-0fdf-48ae-ac63-47fe9ace5649", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f12ee4-286c-41a9-8f87-916e1b4c9ede", "sighting_of_ref": "indicator--d518c38f-0fdf-48ae-ac63-47fe9ace5649", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e30d5e6-4b6d-4226-90bf-cfe33ebdfc65", "sighting_of_ref": "indicator--e983ff22-8c21-4a88-9b65-052a60e9fef0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b457a973-d2e6-4407-b800-26c2f3ee03bb", "sighting_of_ref": "indicator--60d8522c-62f6-4b90-ac75-9b68755b92db", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d739503e-e2b7-482c-9e7e-98ce6dd83ac9", "sighting_of_ref": "indicator--73d4e726-24a3-4759-b964-aded39b7df84", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab952bf-df2c-460b-99c5-63298d202a95", "sighting_of_ref": "indicator--b025ea93-6811-44d9-8241-f73191b3d6ce", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b08475d-1267-4689-8388-ae4e641def49", "sighting_of_ref": "indicator--f2409cdb-8b73-4781-8224-07f991c57d36", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cfc0eaa-7a6e-4b07-bce2-20910b093f5a", "sighting_of_ref": "indicator--f2409cdb-8b73-4781-8224-07f991c57d36", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055bf2f4-4e21-470e-be4d-8e5b168515ff", "sighting_of_ref": "indicator--b0364edd-1a64-43ec-b595-7e23679e547e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2750d80-ed34-423b-ae9e-7194443eb46d", "sighting_of_ref": "indicator--18751653-f3bc-4654-8067-dd4cc74bd725", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc859598-37c9-481a-8cd5-2f9731909d56", "sighting_of_ref": "indicator--18751653-f3bc-4654-8067-dd4cc74bd725", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629b7553-b539-4065-a2e2-5bfaabaac715", "sighting_of_ref": "indicator--b271e8de-70f6-470c-bc11-e94c67b6183b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9858405-a6a3-4696-9b54-81c5cd6a807c", "sighting_of_ref": "indicator--1ae3bee8-e260-4993-aea0-91e571716102", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0356e0ca-050d-4153-b9f6-0c53abbaaa5d", "sighting_of_ref": "indicator--1ae3bee8-e260-4993-aea0-91e571716102", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee76fae7-4a07-47c5-a61a-2bbfcc1010a4", "sighting_of_ref": "indicator--ae2ab124-4813-4cb0-913d-1fdbb6e91164", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cde88b4-d397-4cd5-8a06-24b6b28094d3", "sighting_of_ref": "indicator--5128de55-0192-41ed-bae4-b7166de1b95d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69c289b-fbe9-428e-a2a8-3addeca3760d", "sighting_of_ref": "indicator--e9cbdf9f-092b-453d-a017-b9bf6934ffab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8417a71a-e04a-4863-9185-3c1ac25ff89e", "sighting_of_ref": "indicator--54530a5c-0779-42f0-be94-e1e1d5dfa6e5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650bfdf4-3e8f-48f1-9c3a-54c214fd5215", "sighting_of_ref": "indicator--9d435ceb-cd05-4eca-a536-31ba025edb2f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbdee37-2417-4a24-b580-e7705df50ed2", "sighting_of_ref": "indicator--dc32ea44-717c-4282-8984-5be52a9cb8af", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbfe397-9bb7-4070-988a-1c3e25714df8", "sighting_of_ref": "indicator--f21b5177-ae4c-43e0-9f65-5d9cb02824db", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02ca4e0-02c9-40bf-b496-5699df0f17f9", "sighting_of_ref": "indicator--120dbeb5-629c-4631-8c2c-427b54970475", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b823a062-61ea-4262-87a7-6571b05e145a", "sighting_of_ref": "indicator--5baed2ab-cd41-4af4-a0d8-0efcb3654fda", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ffa44f-e5a7-4572-b31f-90dc1c5110d0", "sighting_of_ref": "indicator--5baed2ab-cd41-4af4-a0d8-0efcb3654fda", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf56a26-4651-45e8-ac71-67bcf42ce940", "sighting_of_ref": "indicator--5baed2ab-cd41-4af4-a0d8-0efcb3654fda", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bdcb10-c49a-42b4-ab31-e0a7c89741d8", "sighting_of_ref": "indicator--6b9a3fd3-43ed-4e6d-9e81-e86949959923", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326e932b-a395-4058-bd3f-f2cd84429c76", "sighting_of_ref": "indicator--816dc659-9517-4d85-b991-4998ec67001c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efedf6cc-ed5b-4a5c-88c5-73d396029f69", "sighting_of_ref": "indicator--c6b2d550-c946-47e9-9233-43a9312c82cd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be129e18-a369-455f-9b32-fc02ba5b85d2", "sighting_of_ref": "indicator--5cf53617-606b-4232-b822-19f744674521", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de6949c-fdc0-4a27-a5ef-b448320f5bfc", "sighting_of_ref": "indicator--c16b36a6-6953-4198-ab77-ee1e442d097c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3f7d22-950b-48f8-9135-67efe9762aa9", "sighting_of_ref": "indicator--70a35e13-6b8d-4e85-a2f9-bde6c54ccbb8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abe67ae-f4be-4bf2-867e-e69e1aa16054", "sighting_of_ref": "indicator--70a35e13-6b8d-4e85-a2f9-bde6c54ccbb8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc500839-0dd7-466f-9b56-c612aef6e08c", "sighting_of_ref": "indicator--9111116d-66e5-49c8-a590-4c40f7c959f2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70915042-19e0-45c2-8429-21b8122c907f", "sighting_of_ref": "indicator--9111116d-66e5-49c8-a590-4c40f7c959f2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8378a77-6c05-45c0-b378-298cb8f06dcb", "sighting_of_ref": "indicator--57947c68-b7e8-47a9-ac6e-e718895c5acf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9b7f80-a95b-48d8-9894-55d22eb95f39", "sighting_of_ref": "indicator--94494c15-3f6f-4640-923a-e597967af438", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36387b2-365b-4578-9de9-6180a455e35d", "sighting_of_ref": "indicator--b3487573-7c91-42c2-9e33-884e388f7520", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1e79ea-972d-4a40-b4a6-19f6871d34fd", "sighting_of_ref": "indicator--54c732d7-033f-4a35-ab9b-2df950686454", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7329b706-d645-4114-a812-f2745cf3e48a", "sighting_of_ref": "indicator--a371c75f-1b4a-4e64-9f2d-af72afc08be5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e203a3a1-a38f-4fc4-8767-5bab488336ae", "sighting_of_ref": "indicator--1d76c9e0-5b4b-4ad0-b4c5-c764a53c8c33", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6041ceb-e6ec-464e-be0a-88ee40a8f015", "sighting_of_ref": "indicator--1d76c9e0-5b4b-4ad0-b4c5-c764a53c8c33", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee117e4-d2d3-427d-b7a9-8e5dacae8e1b", "sighting_of_ref": "indicator--0ae8f329-8129-4d28-87c6-4abeced419a7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d40b5f1-8c36-4d48-a4a3-7469cfeace6c", "sighting_of_ref": "indicator--1e0e4982-85a8-43e2-a8d0-23ed0c89369e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7cdbc1-4473-4c06-97fe-4c7974ba12a0", "sighting_of_ref": "indicator--e4831c89-a289-48ae-aa1f-e8b4f7f60d37", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1112124f-5105-47c1-90b0-a7eee205dee4", "sighting_of_ref": "indicator--dde2d4d1-aa59-4196-921b-1589908ca466", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670b8e30-303c-4806-b6ef-de0a4d755902", "sighting_of_ref": "indicator--4d71ce9f-ce06-48c6-b745-cd8bece5754a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819245c2-4c33-416c-a489-8ee6e9cecefa", "sighting_of_ref": "indicator--4d71ce9f-ce06-48c6-b745-cd8bece5754a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e4c076-715c-4831-ba7e-2b3c71af2792", "sighting_of_ref": "indicator--0e2ddd13-8c2e-424c-941b-e558d62b0afd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c871a48-5dc8-4463-9e86-9b29e3b66494", "sighting_of_ref": "indicator--95c5e616-5ebc-4c5d-af94-933abdf5204c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b8a3dd-4012-4aa8-a177-2124c454705f", "sighting_of_ref": "indicator--95c5e616-5ebc-4c5d-af94-933abdf5204c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3836971-98e2-4fc0-b784-51fe7a152dc0", "sighting_of_ref": "indicator--95c2f6d0-18fd-4f48-9113-43263e16af70", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16ad800-e79a-4669-8650-263047504996", "sighting_of_ref": "indicator--f3aa7860-d075-4ed3-a2fb-dc8b660d2ad7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a81f88c-be5e-4317-92fc-cd41de37a2e4", "sighting_of_ref": "indicator--eb9272f1-9ce0-4e74-9967-af2a3ebea8fa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a399c687-5de0-4589-8a23-445c1d216794", "sighting_of_ref": "indicator--b5ad68dc-c168-4b77-be20-833844fdd6d2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898d41a9-3d1b-43c9-8991-2174fa1de808", "sighting_of_ref": "indicator--c3be6239-4818-47c6-8ac2-f4d3455d140f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23421b5-e776-48cf-bc20-a2ab8e00b28f", "sighting_of_ref": "indicator--c3be6239-4818-47c6-8ac2-f4d3455d140f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8bcd722-21c2-4f9a-b7fe-f6af0eaf9d73", "sighting_of_ref": "indicator--793a3545-02b0-4a23-a159-428e636323bc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa30611-d165-4525-8cae-a637b2fd21b2", "sighting_of_ref": "indicator--b0b57235-71de-4c7d-a1e3-4f8998dc3286", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6caa950-e3ba-4fc1-a925-8ef862cacec0", "sighting_of_ref": "indicator--b0b57235-71de-4c7d-a1e3-4f8998dc3286", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270f2891-64f9-4b05-93a1-1c0b7d426c13", "sighting_of_ref": "indicator--0fa5b59b-7a63-4d3f-a2a5-fd605f63ede3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0593ac4-b0f7-4ed6-99aa-8ce343f26e72", "sighting_of_ref": "indicator--0fa5b59b-7a63-4d3f-a2a5-fd605f63ede3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73d42ca-26b9-483e-987a-e8f916715f85", "sighting_of_ref": "indicator--90433ffa-2f4b-46a0-84d7-371707e96357", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6182f23f-4357-400b-8a92-248a2a66a58d", "sighting_of_ref": "indicator--eed58a3d-ffa2-475a-a2e6-bc016504af09", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22477cc3-e9cb-4bc4-8841-d4b83cbbbd44", "sighting_of_ref": "indicator--876e6f91-9514-4fa6-81e2-feec0d07b7a7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750dff36-60dd-4e9a-ad04-0fdb3d784bb3", "sighting_of_ref": "indicator--80811dff-251f-436f-85fd-12e41d22bf5a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91bab90b-e9f6-4019-8940-f72f55f48d05", "sighting_of_ref": "indicator--67fda8a1-dede-4413-b468-43862151377d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58f4f28-0a93-45db-b564-6dc1235c5a62", "sighting_of_ref": "indicator--0b08ee85-30fd-4371-ae2b-eedb17ebbb3d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a0e19a-0530-444d-a0b9-e09867f105c6", "sighting_of_ref": "indicator--a808b8f3-c360-4c26-8110-361b74db8aff", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9a6d16-85c0-4394-8ed1-05a7e695aad2", "sighting_of_ref": "indicator--a808b8f3-c360-4c26-8110-361b74db8aff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66b3034-d51e-48ef-95a8-2c6e21f21a53", "sighting_of_ref": "indicator--b12548c7-7582-402a-9221-ef833e6bc718", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9c982c-ea64-4992-83aa-7d779c371d0f", "sighting_of_ref": "indicator--98fb4e83-607c-4a1c-b312-f6bacb9d765f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a620612e-2b0d-4450-afc5-050e5f4950ce", "sighting_of_ref": "indicator--3e863a81-4031-465c-851a-e8e1cfd14e5c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a3bf26-beae-46c0-bb1c-520711e583d7", "sighting_of_ref": "indicator--986af649-cf77-47ef-b035-9a65adc9456d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a995ec2a-0399-4510-97c5-c518b4b58ef4", "sighting_of_ref": "indicator--738b919b-3d25-4765-bb36-feff8e88beab", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cc0c83-3a82-4358-9406-e9df65e5a846", "sighting_of_ref": "indicator--738b919b-3d25-4765-bb36-feff8e88beab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de78ee5-40e2-47c0-ac5f-7350e79f0f81", "sighting_of_ref": "indicator--738b919b-3d25-4765-bb36-feff8e88beab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ed3f6d-98a6-48b3-ac08-d6d69dbe0752", "sighting_of_ref": "indicator--d276f8ba-6766-42eb-b6e1-a3df20b60a19", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45180115-b6b5-46aa-97a5-a44f965155ea", "sighting_of_ref": "indicator--d276f8ba-6766-42eb-b6e1-a3df20b60a19", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eaf59cf-fcc0-47d9-86cc-315940e3296c", "sighting_of_ref": "indicator--d276f8ba-6766-42eb-b6e1-a3df20b60a19", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4134020a-617e-4856-ad1f-55f907f9ed68", "sighting_of_ref": "indicator--84d8a521-8a1c-40cc-9bfb-d1e32184ca48", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd41492a-f123-415e-ac33-9ba39ff256af", "sighting_of_ref": "indicator--84d8a521-8a1c-40cc-9bfb-d1e32184ca48", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633ff797-db3f-4318-b7f6-3b52d0b0c032", "sighting_of_ref": "indicator--84d8a521-8a1c-40cc-9bfb-d1e32184ca48", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647e9c78-bb1a-4f77-9933-e4773a93c625", "sighting_of_ref": "indicator--a813bc2c-a51f-4dcd-a8dc-e41546daaf67", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce07165e-d88b-4dec-9c49-db4d221715b7", "sighting_of_ref": "indicator--a813bc2c-a51f-4dcd-a8dc-e41546daaf67", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00699fd5-175e-4586-bdb2-3d8bb087c657", "sighting_of_ref": "indicator--a813bc2c-a51f-4dcd-a8dc-e41546daaf67", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973e6f38-1182-44e3-99fa-fd21b871883c", "sighting_of_ref": "indicator--7564d4d2-58fb-4d6f-b0d9-69bad8e312ea", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4169cfc-04e5-476a-b116-6d7b372f9a6e", "sighting_of_ref": "indicator--7564d4d2-58fb-4d6f-b0d9-69bad8e312ea", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d818930b-34ba-4946-837d-fd5066caec69", "sighting_of_ref": "indicator--7564d4d2-58fb-4d6f-b0d9-69bad8e312ea", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4018c785-7818-4515-b546-7a03e774b15a", "sighting_of_ref": "indicator--664397c1-3469-4b39-af46-2dbe160b2c0e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2cc184-dde5-4a5e-8ee6-ca5f74a3fa09", "sighting_of_ref": "indicator--664397c1-3469-4b39-af46-2dbe160b2c0e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4664e424-65d1-47a1-8c8f-aa27b4a1ae24", "sighting_of_ref": "indicator--664397c1-3469-4b39-af46-2dbe160b2c0e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f25ba44-84a7-4f87-8fba-38bb01202a11", "sighting_of_ref": "indicator--67c87be1-4b11-422e-a676-d54ca5e4b6a3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aad1419-b44a-4d55-91cc-f6bdb697ae10", "sighting_of_ref": "indicator--67c87be1-4b11-422e-a676-d54ca5e4b6a3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfbea31-93e9-48e7-afa2-2c157d0673e3", "sighting_of_ref": "indicator--67c87be1-4b11-422e-a676-d54ca5e4b6a3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7683c3-3591-45f1-ad0d-d9ba6f875443", "sighting_of_ref": "indicator--9afaf662-ea84-4a30-af48-16e763984a7a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c357ff-ee9a-479a-b31f-94669271dc40", "sighting_of_ref": "indicator--f1428daa-2382-4dd0-80ef-598556cdea8e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b872e79-2fd3-4f57-b949-7b37e5b5a5f8", "sighting_of_ref": "indicator--8f0c93ea-b235-4428-972b-153abee44509", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c99f31-a1fa-40ed-af79-febfe03196ec", "sighting_of_ref": "indicator--8f0c93ea-b235-4428-972b-153abee44509", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2494d82-ff42-4803-8fd8-0b9c5bb7e30b", "sighting_of_ref": "indicator--8f0c93ea-b235-4428-972b-153abee44509", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3813a1f-e24e-429d-9bfc-30e6d0424d2d", "sighting_of_ref": "indicator--1abec83c-3e49-495b-934c-65afab6688aa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937686e9-4731-431d-afaf-eba8dfd1b04e", "sighting_of_ref": "indicator--1abec83c-3e49-495b-934c-65afab6688aa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d0b31f-1a00-468a-bcde-4dfb3d9d0711", "sighting_of_ref": "indicator--1abec83c-3e49-495b-934c-65afab6688aa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e824eda1-6489-41bd-898a-d332df8c1aaf", "sighting_of_ref": "indicator--954994c5-90fd-4542-b701-88d165be1b72", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85b0757-9ca3-4657-8068-38ca937d6558", "sighting_of_ref": "indicator--954994c5-90fd-4542-b701-88d165be1b72", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d2eda4-e56f-48d6-b98c-9acc9fd1b083", "sighting_of_ref": "indicator--954994c5-90fd-4542-b701-88d165be1b72", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb6dc0d-eacc-442a-9301-23a88c1ae21b", "sighting_of_ref": "indicator--b6011d49-40ea-449d-aa02-2d92a35417d2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10abc67-b50c-4367-b42d-a6dff6b17c6e", "sighting_of_ref": "indicator--b6011d49-40ea-449d-aa02-2d92a35417d2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29da8855-e30f-459e-8d67-ae6e4b7eeaa3", "sighting_of_ref": "indicator--b6011d49-40ea-449d-aa02-2d92a35417d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa45254f-a57e-470c-b328-03855a4d42b6", "sighting_of_ref": "indicator--15a6140e-dd99-4a28-b09d-42ca9d0e001a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f220db87-85b0-464a-a548-cb6d91c9dd5e", "sighting_of_ref": "indicator--15a6140e-dd99-4a28-b09d-42ca9d0e001a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc1d6af-7011-4adb-856d-e96261bbd4a4", "sighting_of_ref": "indicator--e69601f6-8cd4-43ac-b738-71402ffef47a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36f2257-ba52-4aaf-94b9-24415bed7eb5", "sighting_of_ref": "indicator--108ebba5-2c1a-4a71-8fab-fb8b12402e2d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50cdf655-55cc-4c7f-bb55-e42edef0741e", "sighting_of_ref": "indicator--108ebba5-2c1a-4a71-8fab-fb8b12402e2d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa794af5-2223-4f20-9f7f-c79936ed09e6", "sighting_of_ref": "indicator--6be19efa-b0ca-4715-a64d-94907681f224", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b38fb2d-aca1-43e5-9ef5-9338a14318a6", "sighting_of_ref": "indicator--6be19efa-b0ca-4715-a64d-94907681f224", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9431f5a0-8139-4b30-adca-977d15aeaace", "sighting_of_ref": "indicator--7c3437c6-3a47-4bdb-af43-59d5c9572214", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902a0e7e-fba1-4fd4-b4d5-5a691b62d573", "sighting_of_ref": "indicator--7c3437c6-3a47-4bdb-af43-59d5c9572214", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0c3d2a-4492-491f-b68b-47101856c9ee", "sighting_of_ref": "indicator--25ff80d2-14b0-4e44-8614-5c15e1f6d8d5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbea8982-2d7c-48fb-9493-f4f7916d69cd", "sighting_of_ref": "indicator--25ff80d2-14b0-4e44-8614-5c15e1f6d8d5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35e045e-33f0-4a58-9729-fe72d0d830f8", "sighting_of_ref": "indicator--25ff80d2-14b0-4e44-8614-5c15e1f6d8d5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b89475-2008-47b7-a213-628d34a6420d", "sighting_of_ref": "indicator--3ddbd210-d180-4ac6-a106-eb93ba2848de", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e4a094-ad33-4f37-91fd-313e1f4be9a5", "sighting_of_ref": "indicator--3ddbd210-d180-4ac6-a106-eb93ba2848de", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2174fe-bfc8-45eb-b7ad-0d172605f3c8", "sighting_of_ref": "indicator--3ddbd210-d180-4ac6-a106-eb93ba2848de", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2de86a6-25f4-4fa8-aa27-542a550701dc", "sighting_of_ref": "indicator--c82430ec-d205-4744-819a-c201f408bb11", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd257c2-9378-4d28-b695-a6e3a0003660", "sighting_of_ref": "indicator--c82430ec-d205-4744-819a-c201f408bb11", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72513d3-1b2a-4e60-a1e2-a38026354985", "sighting_of_ref": "indicator--c82430ec-d205-4744-819a-c201f408bb11", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb902bf5-878b-4654-b029-aa58306813c6", "sighting_of_ref": "indicator--87ba2e13-c2e4-434a-87b4-5523c0cdfc7c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db41104-8775-4658-8e6e-edb1f3b3ad4f", "sighting_of_ref": "indicator--87ba2e13-c2e4-434a-87b4-5523c0cdfc7c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a8da4f-2f72-4575-8acc-4c657a159aca", "sighting_of_ref": "indicator--87ba2e13-c2e4-434a-87b4-5523c0cdfc7c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce08de9-a1da-43dd-b343-144d24511cd5", "sighting_of_ref": "indicator--42b45e8f-0e96-4bab-ac70-947d0baea0bb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98794f3-dc83-40a5-a554-830eb51b771e", "sighting_of_ref": "indicator--42b45e8f-0e96-4bab-ac70-947d0baea0bb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca5acd6-b107-4759-8aa4-cb97d98a4ede", "sighting_of_ref": "indicator--42b45e8f-0e96-4bab-ac70-947d0baea0bb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a76b1d-c4ee-4394-8ea8-442bc34b62e4", "sighting_of_ref": "indicator--07d208d1-e40e-4865-8369-0b88a3a6d45d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a2b2c0-722b-4257-9b00-3e488c7da70f", "sighting_of_ref": "indicator--07d208d1-e40e-4865-8369-0b88a3a6d45d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee2d8a0-a7c2-40fa-898d-c22acec00a8c", "sighting_of_ref": "indicator--07d208d1-e40e-4865-8369-0b88a3a6d45d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3374cd63-e442-4bc9-9910-6cbe445176da", "sighting_of_ref": "indicator--3f094b2d-62ce-4d2d-a087-59356b848368", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62e385f-3215-49b5-b1fa-35ee0e291d12", "sighting_of_ref": "indicator--3f094b2d-62ce-4d2d-a087-59356b848368", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573f1b4b-2ef7-4b11-b4c4-b177c91b9662", "sighting_of_ref": "indicator--3f094b2d-62ce-4d2d-a087-59356b848368", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a1d31b-243a-4867-b138-7780521f23bf", "sighting_of_ref": "indicator--ca9b4087-061f-4ccf-b2bf-9b8e0c06f4d8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01df92f1-37b7-437c-96d3-8833e579ab31", "sighting_of_ref": "indicator--ca9b4087-061f-4ccf-b2bf-9b8e0c06f4d8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a92abd2-98fa-46ea-a7e1-1be9d56fbe87", "sighting_of_ref": "indicator--ca9b4087-061f-4ccf-b2bf-9b8e0c06f4d8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ed1678-a765-47d1-96a9-dc0b40b40184", "sighting_of_ref": "indicator--889cc3e2-058e-4b49-9959-0cca92b99b0f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75dd2eb0-2c1d-4812-9980-c792bc8efca6", "sighting_of_ref": "indicator--889cc3e2-058e-4b49-9959-0cca92b99b0f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9da86c-9e2a-4aba-9b4a-4605e37d6f95", "sighting_of_ref": "indicator--889cc3e2-058e-4b49-9959-0cca92b99b0f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d48bda0-cbcc-4aca-aaf5-9d0ab560703d", "sighting_of_ref": "indicator--84f71691-b5e7-4925-8fa5-961e6f33b9bf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7896b08-e109-4902-9503-f7d2fdeef004", "sighting_of_ref": "indicator--0ba92f2c-3e34-46c1-b1dd-0717bb461173", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0862c6a-f5c3-459a-866d-db8e681aa734", "sighting_of_ref": "indicator--0ba92f2c-3e34-46c1-b1dd-0717bb461173", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313eb832-eaa5-428f-b92b-735c7c806d8b", "sighting_of_ref": "indicator--0ba92f2c-3e34-46c1-b1dd-0717bb461173", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184ba36d-c15a-4b89-a227-d07ae46a1d5e", "sighting_of_ref": "indicator--e7035974-4b3b-4211-8049-31b3b5ffe990", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9da6926-8ce2-44bc-b198-354aad536f9e", "sighting_of_ref": "indicator--e7035974-4b3b-4211-8049-31b3b5ffe990", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1e5eb8-3445-4fe3-9cee-496e17a6489f", "sighting_of_ref": "indicator--e7035974-4b3b-4211-8049-31b3b5ffe990", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4495023e-9ee5-4ace-b073-cc4ea2d50423", "sighting_of_ref": "indicator--a6f80975-5d1c-4a2d-a172-6c10110c04fa", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b51f05-a9b2-4817-b74a-524e78b62607", "sighting_of_ref": "indicator--a6f80975-5d1c-4a2d-a172-6c10110c04fa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b480fa-7144-43fd-81c8-293ba5d5bd25", "sighting_of_ref": "indicator--a6f80975-5d1c-4a2d-a172-6c10110c04fa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669cc641-096c-4f89-bc7d-54bf0a5e0a35", "sighting_of_ref": "indicator--6b6390f6-45e7-4257-9a44-9b92f26db842", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc10e7b-db76-4cef-9627-3936e6ade7f7", "sighting_of_ref": "indicator--6b6390f6-45e7-4257-9a44-9b92f26db842", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2abea0-62fb-46b4-bac2-33688bbc0e62", "sighting_of_ref": "indicator--6b6390f6-45e7-4257-9a44-9b92f26db842", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df40c36-0eba-46d8-8893-86e8d32fdf62", "sighting_of_ref": "indicator--f2350bf9-da70-4fac-98fa-fc535271ef53", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a4ecca-1af2-42bf-ab68-8f97ff65a467", "sighting_of_ref": "indicator--7e7c965e-45e8-4578-901f-dcd5ca2b546b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c75b611-3830-43e3-b829-0c687c3f4aeb", "sighting_of_ref": "indicator--7e7c965e-45e8-4578-901f-dcd5ca2b546b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7762908-4d1f-4683-ae2f-0ce58f26689c", "sighting_of_ref": "indicator--a6f0a4e9-062f-4589-9336-4e53805b317b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f0045f-0c28-4a84-b0fd-74adbfd21813", "sighting_of_ref": "indicator--8d81d522-af82-4f6d-82c3-0ff4dc8204d3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd9244d-eb9b-4377-afee-bc7398c622b5", "sighting_of_ref": "indicator--8d81d522-af82-4f6d-82c3-0ff4dc8204d3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67dd384f-c673-4b73-9eed-aaf99f22480d", "sighting_of_ref": "indicator--f06e13bf-c148-4a7b-bf42-22f1277c923d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0973d5b-7e70-497f-93b1-cd8a0b1792c1", "sighting_of_ref": "indicator--7f2f98e1-edad-4637-8315-bbefbf8b2440", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b979ecb2-7bc1-4058-b06c-72d661926a98", "sighting_of_ref": "indicator--e2c7fab2-7139-4a49-bed1-4aa38743597f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5d1794-14b9-43bd-8ecd-ceaf8b43be26", "sighting_of_ref": "indicator--364e6ead-7884-4ae7-bde1-e84b14771b81", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544eb31a-b9db-4b5d-b9c3-154b6ec79e07", "sighting_of_ref": "indicator--364e6ead-7884-4ae7-bde1-e84b14771b81", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058769e1-0f49-434b-a8cc-12c21f028a09", "sighting_of_ref": "indicator--364e6ead-7884-4ae7-bde1-e84b14771b81", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e61a6d-2793-4f33-8c1e-46ea788e3c1e", "sighting_of_ref": "indicator--6fef41bf-6e81-4b40-965f-be9e657ad1d9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3c8482-a7ed-4fb3-a026-1496759eee15", "sighting_of_ref": "indicator--cb52aba9-7839-458e-af93-6811f7e9ea9c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fb524b-9d97-4995-b569-79a649d1db9e", "sighting_of_ref": "indicator--cb52aba9-7839-458e-af93-6811f7e9ea9c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d300fc2-4ec9-487a-99d6-439353341288", "sighting_of_ref": "indicator--cb52aba9-7839-458e-af93-6811f7e9ea9c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d323a93-ae7f-499a-acb0-2e128987d490", "sighting_of_ref": "indicator--5d620fec-22a5-433e-a634-7646feeaadf6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248f8144-e29a-4c7a-bda0-3f22bcd35bc4", "sighting_of_ref": "indicator--4c9a8c50-f799-4538-bd94-8f9cbad89d4e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bccd238-3830-4779-b122-392b7a21be0d", "sighting_of_ref": "indicator--0baf0b50-c799-46ea-bb9d-cafc3721d052", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35167656-1032-42b2-af27-f10ca65393ff", "sighting_of_ref": "indicator--0baf0b50-c799-46ea-bb9d-cafc3721d052", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fe0d1e-6eae-4d74-bab6-17df23146d12", "sighting_of_ref": "indicator--0baf0b50-c799-46ea-bb9d-cafc3721d052", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499b2f91-43bc-493e-ae6a-7b5161b87d6a", "sighting_of_ref": "indicator--ec312d6b-cb13-4a1a-8f2e-63cb3e7e3f99", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a729032e-9385-4530-87b4-210d95b9612f", "sighting_of_ref": "indicator--ec312d6b-cb13-4a1a-8f2e-63cb3e7e3f99", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd44aa76-a992-418d-b978-524dc3646e21", "sighting_of_ref": "indicator--ec312d6b-cb13-4a1a-8f2e-63cb3e7e3f99", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71c39de-a24c-4b1a-836b-082b8b6ba456", "sighting_of_ref": "indicator--71435360-70c3-4764-a6c7-90c29968c74a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d891af0-a4a2-41d5-95b9-4de52ec2dba9", "sighting_of_ref": "indicator--71435360-70c3-4764-a6c7-90c29968c74a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d2d426-67a2-4016-acf8-a47e5494cb32", "sighting_of_ref": "indicator--71435360-70c3-4764-a6c7-90c29968c74a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6d5e30-8421-4af2-b6cd-1cb21ab05b02", "sighting_of_ref": "indicator--3b218f61-6b69-4c71-89c1-f08e9a7ad1d7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0b421e-c2da-4f17-8bb1-b0b3d94488a2", "sighting_of_ref": "indicator--538287cc-7a90-4267-9b9f-8f046944c059", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7af6a9-0d9e-48d3-a32a-210c85e9ea89", "sighting_of_ref": "indicator--538287cc-7a90-4267-9b9f-8f046944c059", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38802d0d-2f0e-4f62-b25a-2d0b7575d8eb", "sighting_of_ref": "indicator--538287cc-7a90-4267-9b9f-8f046944c059", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d307c7cb-8fe9-4ea0-9cc7-c5b489b8fb3d", "sighting_of_ref": "indicator--96513cd2-2b64-4073-9e9b-014f7896d724", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28ad84e-52f7-42aa-ba25-5a5a4884986f", "sighting_of_ref": "indicator--96513cd2-2b64-4073-9e9b-014f7896d724", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae4c2c0-243f-4082-aec8-70ba861dc219", "sighting_of_ref": "indicator--96513cd2-2b64-4073-9e9b-014f7896d724", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0067a7-e980-42ce-b9ab-ca4de8fb39f4", "sighting_of_ref": "indicator--647d7969-8715-4a7e-a033-062c644bfd39", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ec3486-a0b2-49e5-b2c7-8d9d080df6b3", "sighting_of_ref": "indicator--00cd3d22-82d7-4faa-aba4-86229f60d17f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f89d7f-8ca8-4dbf-8c5b-ccca0122ad84", "sighting_of_ref": "indicator--00cd3d22-82d7-4faa-aba4-86229f60d17f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b4a96f-2a39-4219-a447-72aaa0de9721", "sighting_of_ref": "indicator--bc9609a4-5b1e-40ff-b542-9e8432b812f9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d32e22-0923-425d-90c4-dbf58cec7ee6", "sighting_of_ref": "indicator--dcb986a2-2159-4cad-b435-16e77ac3b4b5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61178e1-ef4c-46e0-8bf8-e007b6d25e65", "sighting_of_ref": "indicator--dcb986a2-2159-4cad-b435-16e77ac3b4b5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9520f9c8-7a8e-48ad-9742-3439ebe01df4", "sighting_of_ref": "indicator--dcb986a2-2159-4cad-b435-16e77ac3b4b5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9fb720-f124-4e05-b7ec-a6971de65855", "sighting_of_ref": "indicator--01c69411-ed83-4918-8139-beeafb32ba18", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853b1620-7c49-44fe-a902-dd07e803a077", "sighting_of_ref": "indicator--83f0be19-9133-455d-aed2-54e1332f18fb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e209b26-991f-414e-bb3e-bd8ead9e4590", "sighting_of_ref": "indicator--063e10be-097a-48a7-b2d0-622c8625d0f4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c199d6-924f-4319-8907-bfe2b557701f", "sighting_of_ref": "indicator--063e10be-097a-48a7-b2d0-622c8625d0f4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766a7b7a-711a-42d0-bfe6-62ec25af5559", "sighting_of_ref": "indicator--063e10be-097a-48a7-b2d0-622c8625d0f4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c037567e-f8eb-4d83-90e6-3e14219db8e5", "sighting_of_ref": "indicator--cacc0cf5-b130-4766-b919-ffe1368ff5ea", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e427dede-a4db-4550-b736-23d0b64f2a23", "sighting_of_ref": "indicator--cacc0cf5-b130-4766-b919-ffe1368ff5ea", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2db3278-9a66-4de0-af11-1f9e72d63871", "sighting_of_ref": "indicator--cacc0cf5-b130-4766-b919-ffe1368ff5ea", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacfb33f-b3a1-4997-95af-b92dba28759f", "sighting_of_ref": "indicator--1d7c49c2-ed05-49bb-afc7-989e3228eb3a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16e7679-73d6-4a1a-8c8d-164688db7ae8", "sighting_of_ref": "indicator--1d7c49c2-ed05-49bb-afc7-989e3228eb3a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2461b12-78ef-4c4e-acd9-77c3d6763426", "sighting_of_ref": "indicator--1d7c49c2-ed05-49bb-afc7-989e3228eb3a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3e42ac-a471-474a-908a-e4d914f9a076", "sighting_of_ref": "indicator--e78f96c1-7de4-487f-935c-e4e981ea154c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7075d1-db03-462f-b72b-d3dff3925c3c", "sighting_of_ref": "indicator--e78f96c1-7de4-487f-935c-e4e981ea154c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf822c09-161c-4cd4-836b-5f922a6ce514", "sighting_of_ref": "indicator--e78f96c1-7de4-487f-935c-e4e981ea154c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f3fdbd-bfa3-4a44-9e07-4750d367a0c9", "sighting_of_ref": "indicator--9a5839a9-92a7-4493-8b94-9cfa8f7253f7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997254bd-7576-488d-bf6a-7a13c5efa876", "sighting_of_ref": "indicator--9a5839a9-92a7-4493-8b94-9cfa8f7253f7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d4ce09-fb55-407b-9a67-4ee3de7fc014", "sighting_of_ref": "indicator--2b42158f-65bc-43b1-bd89-14b1c2fcb442", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487d5ee5-781f-4ae1-b237-37860dbaafce", "sighting_of_ref": "indicator--2b42158f-65bc-43b1-bd89-14b1c2fcb442", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70788d0-0c97-4a7d-95ea-fc0983cf8730", "sighting_of_ref": "indicator--20b59687-c46f-4e86-a648-6c876e5b7c59", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d936bf6-d288-40eb-a470-eb2d39de88fd", "sighting_of_ref": "indicator--20b59687-c46f-4e86-a648-6c876e5b7c59", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986c4883-f13f-41fd-bd63-545f457e937e", "sighting_of_ref": "indicator--20b59687-c46f-4e86-a648-6c876e5b7c59", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2102f5-a852-4cfe-b3b8-32b3c110363a", "sighting_of_ref": "indicator--f0f02ff1-dbee-4001-bc82-5f36278272b4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954c2062-ac20-4cd2-b153-004f5fb155db", "sighting_of_ref": "indicator--f0f02ff1-dbee-4001-bc82-5f36278272b4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39001666-d629-436b-8e9a-20326f3ef583", "sighting_of_ref": "indicator--4c3e2ed2-41c2-4e98-9761-fe7167a9f8d4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a117dd17-5944-4e8a-8c87-bfb47dcb8795", "sighting_of_ref": "indicator--674e1cfb-9535-4ff8-bb80-43d559eb5fe5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a7bb37-ea0f-4b6c-8c17-904e97b67ab1", "sighting_of_ref": "indicator--6af52834-0ad9-480f-8e4e-3585c83331f2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f4b6c1-dc51-42e0-bf23-df9b7392ca42", "sighting_of_ref": "indicator--4033d6ea-153d-4421-b96b-1c6e00f213f7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00932cd9-74fa-4ac1-8af9-fdd9e3baf91d", "sighting_of_ref": "indicator--be623236-8a23-43ff-8182-dfe34298cf93", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ed2aae-2fc6-4018-a33a-c955f3146392", "sighting_of_ref": "indicator--93ccdc0b-2155-402b-9639-8a03aae1af39", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77db850-c3df-485a-9234-3b88a68deb57", "sighting_of_ref": "indicator--9ce028a8-af47-4ac6-a8d8-32675e32621e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b716a3d4-be96-48ae-9def-c1f9c8dccbd8", "sighting_of_ref": "indicator--0daf1c83-1c1c-437f-9eb1-58ccfc5f915d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbcb2d5-78bb-4480-89d6-38b76a35ed8f", "sighting_of_ref": "indicator--1f89e4f3-91e2-4b68-abaa-9ba6b4813bc4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782354a0-ff4f-4331-8f35-05beaec3bb76", "sighting_of_ref": "indicator--4b9a58a4-73d0-4b69-9d81-deeb03e047a1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f91ab3e-d471-4c26-8505-c138cde1a900", "sighting_of_ref": "indicator--1d7e3c26-87ae-4753-a820-220be731543c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48366531-a773-4e56-ac1c-8c4312535818", "sighting_of_ref": "indicator--8d05d44b-7629-4d4e-8c55-0efff74e5009", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee2ade9-4e2c-4d4c-95f6-5c2a67a21b75", "sighting_of_ref": "indicator--76408934-2a2e-41fe-8246-dcf1bf2f69cc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d00648a-bf96-4c63-9f05-d0d1e57f5cfc", "sighting_of_ref": "indicator--81607a25-5dce-4938-86a0-c58240637c43", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15696eb4-eaa6-49db-adcf-edb321656306", "sighting_of_ref": "indicator--17e99506-4632-480b-878e-0be4c88d390e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b9a468-3c2e-42fc-a01b-c4c633da9011", "sighting_of_ref": "indicator--c8a7be0d-adf8-47df-b454-93303075c944", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776aa678-7c1b-4309-af7f-80ba2c83a8f0", "sighting_of_ref": "indicator--8c40d8bc-ea50-4163-b893-6f8e7a41f33c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac2683a-85b7-4271-bad1-05fb0b618f36", "sighting_of_ref": "indicator--b94abf3d-911b-4c87-b578-52c0c4bfa3a9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0703c34d-8059-4bb6-ad3a-18fd6f53698f", "sighting_of_ref": "indicator--4737fade-7650-4703-ab10-1c910b83270c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94836c11-2f38-48b5-b9e2-a77ed70765a6", "sighting_of_ref": "indicator--ce95e250-b657-4b15-adad-98659443c6fd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a703c87-b535-4daa-9255-aeed8d03ac87", "sighting_of_ref": "indicator--042acc56-637c-45c8-9d4b-4cbe1e966eff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16bdb879-06a8-4261-97cc-d94ef437f7a8", "sighting_of_ref": "indicator--886c1701-8346-4c5d-8af7-9126c0d9fe75", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c0e35e-ef31-4760-b8c4-5b77cdf7d5dd", "sighting_of_ref": "indicator--886c1701-8346-4c5d-8af7-9126c0d9fe75", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667d45c4-738a-4b15-b3fc-f4c52959d4ab", "sighting_of_ref": "indicator--f070ce04-db17-4481-b3a3-12ba1633d38c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1314d6-359c-4220-9ca2-ab53c575976b", "sighting_of_ref": "indicator--e3dc3824-7173-4f1c-b853-36f1a0b910d3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf3873e-da46-4c8e-92b1-da055dd72171", "sighting_of_ref": "indicator--790e189f-9b82-450e-a3da-4b93f6c5da28", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8dd71d-d148-48bf-8b3a-77ddc0582c5e", "sighting_of_ref": "indicator--d57d2296-993b-4c73-9fb6-69545b3b2ae1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0853f1ea-e92d-414f-a50c-251307ca42c6", "sighting_of_ref": "indicator--426c6635-263c-4db3-b636-84630f234f67", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304d7cd7-8413-4073-81c2-8660ec7e1b61", "sighting_of_ref": "indicator--0fc72fd9-0f25-4c70-bb74-9ed1d46aa2b4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8aab82-9fb8-4fe1-a128-411d8191b982", "sighting_of_ref": "indicator--77c170ab-6812-4a99-a762-420671e9af66", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e52f4c-e9c6-4739-8ab0-c30cd8703f1e", "sighting_of_ref": "indicator--8994ad53-cb40-40b4-9c82-cc4ae918bc65", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69989cc8-400d-48ac-b724-ce00bd02ea42", "sighting_of_ref": "indicator--495d4f2b-d6a5-4b55-a3e5-6078ee82725e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0619df4-b824-4d6c-9587-266a7abe3ee8", "sighting_of_ref": "indicator--f5cbd23a-f851-4e3f-a5b6-bb649ad16805", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0572bf-a19a-4b03-8011-1f9fa35e1403", "sighting_of_ref": "indicator--4ba43a0d-5fca-4200-89e5-0a06582ffbd8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1afd14ca-8d17-43b1-be53-f58ac6dd26b5", "sighting_of_ref": "indicator--15177d10-1e4d-4718-b4ee-8b090775f066", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eca5ad3-7ff0-479e-b728-22f29f90e79d", "sighting_of_ref": "indicator--25ed309e-f70c-49af-86c6-a7165b7827e3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2a237d-4955-4e19-8e6b-fc007a74ebee", "sighting_of_ref": "indicator--7efcbdab-fa0e-49ca-af64-b5e4ec1dd91c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50cd3a54-c477-41a7-980a-1aed272e0a7d", "sighting_of_ref": "indicator--8fb55875-fea6-4474-a129-100c6dcca7c4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f60e8ad-852f-4726-b6f2-e261d5590cb5", "sighting_of_ref": "indicator--a40b8cf8-da0f-4761-ac98-c3563d7ca0cf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7b4002-fc95-4678-9a57-deeab901b1d7", "sighting_of_ref": "indicator--d9657a9c-fd5d-4129-a3f4-c8f8fa6e229e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4674a1ea-06dc-445a-805b-10fe3248266a", "sighting_of_ref": "indicator--2b649dc2-6a34-48b6-a33e-2766cd8bd481", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76b1892-a933-48fd-bc6b-015c78af7a66", "sighting_of_ref": "indicator--2b649dc2-6a34-48b6-a33e-2766cd8bd481", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6bc2d2-2596-431c-b96b-2510411eb69a", "sighting_of_ref": "indicator--d02f92d8-14ef-40e0-ab92-048c0daf40cf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4a07e9-a00b-447d-9286-23ce63f7cc5b", "sighting_of_ref": "indicator--d7eb9bd3-371f-40ce-b2f6-6cab2562e0eb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03cf7205-1a4d-4988-bb1c-fed1162ae01f", "sighting_of_ref": "indicator--33cc57cc-0306-40cb-968d-c0565542ad0c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e9268f-e32a-4071-9811-74c75ae88eb8", "sighting_of_ref": "indicator--c28046f3-375a-44cb-9ef1-e0383c41f007", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7969748e-8282-443a-a419-a360b94e6dae", "sighting_of_ref": "indicator--c28be41e-ee07-4b93-affd-37b2f0f17e2d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9361436-aac3-44b7-8d65-37011cf025b1", "sighting_of_ref": "indicator--c28be41e-ee07-4b93-affd-37b2f0f17e2d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7894d1cd-f779-4d6f-8e87-e20a4c17e617", "sighting_of_ref": "indicator--08055f4b-909d-4cb6-9b6a-0d170cf5fc62", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a13e16-a831-4179-b973-330296c8c250", "sighting_of_ref": "indicator--63e91d1f-3acd-4528-b34b-c8b8ff01d5de", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b1568c-7dfa-4412-baea-098179f06bc8", "sighting_of_ref": "indicator--038237d4-041e-44a1-9e57-5703fb09dd7a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65947f34-167e-4743-bdcc-86d74c991261", "sighting_of_ref": "indicator--025bfd6b-ff76-4a8c-85b4-9bcf8414ad34", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fcda48-4cc4-40be-b266-7c04262048e0", "sighting_of_ref": "indicator--b8200317-af66-4030-b4e5-d8c72a878b8d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f22f461-d1cc-4056-9467-660b81ce1567", "sighting_of_ref": "indicator--a30b5a0c-e7ef-468b-9a1b-4fe4c48644e4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbff52df-293d-4e17-a076-222970954f9e", "sighting_of_ref": "indicator--270e9197-0f12-4895-8ba4-ad9dbe8e2dd8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b28230-e8c9-44dd-8a5d-48d19ca89d2b", "sighting_of_ref": "indicator--4608f9e4-03e1-4553-83f8-e2689f942287", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d58d4c-8918-463a-9e49-bd6fe64ce485", "sighting_of_ref": "indicator--58c15ee1-d0a4-4f51-aab4-6bae202232b6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c27c383-4a09-4b51-84c7-75e94e882f9b", "sighting_of_ref": "indicator--8c6dc193-f676-476a-90b1-fb1a0847586c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086b9dbc-703c-4cd9-bada-861e3e44930e", "sighting_of_ref": "indicator--632e63be-2baf-4c59-b91e-7de8d7d327fb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e719a905-15d3-40bc-9e10-0636adaeee95", "sighting_of_ref": "indicator--f9a01acc-a385-4af8-b2b9-777cabdb1820", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8633f23-0735-4852-abf8-db24cad3f814", "sighting_of_ref": "indicator--28034e98-739c-4e43-a17a-7f5aa30b2f05", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf082cc1-a38a-4ca5-b6b0-b9d226048649", "sighting_of_ref": "indicator--5085a440-d58b-4464-8dff-f261151ec01a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23d154f-3145-47b8-b943-3663e1b59e30", "sighting_of_ref": "indicator--cc885c89-ff4b-49fe-8c56-ab63f7c87b97", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e1af62-52a6-4bea-a40b-6f8d464f7835", "sighting_of_ref": "indicator--d8c4dd38-5679-460a-bc9b-17c2aaa64bbf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4ba486-9ded-4445-ac4d-472370fa6c84", "sighting_of_ref": "indicator--ac740ad8-ce63-42fa-b1dd-b453d7acf334", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955a1183-711d-40ec-841a-b61a7ecbc66b", "sighting_of_ref": "indicator--745a3500-ddab-4712-b600-e8238c73e69e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39379c41-7430-42e8-83c9-3263b1a802e4", "sighting_of_ref": "indicator--14b95b8e-03f1-49d6-a930-bfe86bb3a69d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8d862c-4346-4523-92e8-5871b8e8a8a2", "sighting_of_ref": "indicator--ef9ea3c6-8356-42d0-af1e-31e96541fa5e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2897cafd-78c4-4cf8-9d46-78b16c8e66fe", "sighting_of_ref": "indicator--a942b591-5f9a-47ee-97ad-72e0f69b0ba0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6e3dfe-8340-4ac9-9703-ef23155ae051", "sighting_of_ref": "indicator--175fbbfa-b7fb-48fa-9e5b-dce9eadb3361", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce744b1-a693-466a-99e2-a2911349c129", "sighting_of_ref": "indicator--02df8556-1308-4f87-beb7-5c9f4f705a55", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f812ce4-3847-48a7-a33d-ec5d2b96d4f3", "sighting_of_ref": "indicator--ef323cbc-2999-4ccf-a582-124a565aeeff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159cdd91-9045-4545-98d3-2c493ef1de98", "sighting_of_ref": "indicator--07495090-eb51-48c1-a772-7cb304a83b6a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9d69fe-93f5-4718-9301-84695f5b0f16", "sighting_of_ref": "indicator--3f8ccf49-d144-41dc-886b-8c2b910ae8cd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1b20c2-06c8-4172-9b8e-0cd9feb1c35b", "sighting_of_ref": "indicator--3e005df7-dd58-40db-8767-40f7a685301d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34081fa1-67fc-4d8d-a1b9-df15b1056401", "sighting_of_ref": "indicator--214941b7-f382-4071-b22f-936230762f3a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8275f464-0114-4936-849f-b7068a5fa06d", "sighting_of_ref": "indicator--b4c55fb3-e5de-4840-9f16-38fa4774fbc7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a69e89-26b9-4868-b4f4-24cfde9962d9", "sighting_of_ref": "indicator--04283f1c-85a0-40ee-b1b5-78f7abb69eac", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c59c023-0605-4f41-9594-1911fee38033", "sighting_of_ref": "indicator--138ee504-da49-49ff-b960-c699cbec5497", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db59a7d4-c27d-4b76-acb9-5bd710694f23", "sighting_of_ref": "indicator--1049e631-ca45-4d75-9aaa-b9b925dabc7f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f1d429-3534-4276-8a2b-dfe24efee36e", "sighting_of_ref": "indicator--412e7658-0081-42fa-9888-5dc224dac1ea", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5650b6-40ef-4050-a52c-83040345212a", "sighting_of_ref": "indicator--0baf2395-13ef-4921-b043-16f8b3eabdf4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e258f3d5-dd07-425b-acc4-8e332d5714e2", "sighting_of_ref": "indicator--b3157b26-2329-4ad7-bdf6-3c79dc220aea", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b255aef0-0e49-4897-9e7b-9d596022e09b", "sighting_of_ref": "indicator--3fc03ec3-cc77-4469-986b-20d5ca7ccce5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1fd789-1840-4e17-99f2-b853bd61bb2a", "sighting_of_ref": "indicator--2a8cfaa7-01cc-4522-b3b3-89d3d2cc076e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e662c4-f9ab-4cc6-a61e-47b8b136834e", "sighting_of_ref": "indicator--b38fa5fa-36e0-41b6-8839-c18e10763a00", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbcf09d-884c-4ea1-885c-fd8a4f56f31e", "sighting_of_ref": "indicator--92d80bc2-312d-42c5-be8b-cbd11c6e41ce", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6a3f8e-a449-4c20-95fc-0e503b2118c5", "sighting_of_ref": "indicator--aee97f30-e3ca-41b2-b885-191b31cc8042", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2a3218-8f92-4e39-a1a3-cfbc3bdddb1c", "sighting_of_ref": "indicator--f00ce50d-b89e-443e-a4cc-654689621aa0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2dc3a3c-4bff-46c4-9d9b-592963d196d8", "sighting_of_ref": "indicator--f00ce50d-b89e-443e-a4cc-654689621aa0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7e3cae-675b-4636-8817-06378f2c6183", "sighting_of_ref": "indicator--f00ce50d-b89e-443e-a4cc-654689621aa0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8266930f-f9f6-4b45-8a02-7860772aa05c", "sighting_of_ref": "indicator--19322588-1cc0-414f-a0d9-c70758560622", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad02675-7a6a-4fef-897d-bb27891a4ae6", "sighting_of_ref": "indicator--19322588-1cc0-414f-a0d9-c70758560622", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede9bdf1-5767-48a5-aaea-e38d580c232d", "sighting_of_ref": "indicator--e33f1cf4-99e5-4d4c-aa25-974c0c4c0f27", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef4fd87-01db-4a7e-adb6-ec4e9785faaa", "sighting_of_ref": "indicator--ef597fb9-909e-4465-af38-768061a63a27", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37193f6-7fa6-4268-89e7-92fdf7c25c90", "sighting_of_ref": "indicator--a2ea4d46-a38c-4306-b8f6-123959c01b7a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb9c0bf-ac14-4db3-b044-0e81eb4d7259", "sighting_of_ref": "indicator--ec9210c6-472a-45f7-8012-434f2619c1ff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433b0afd-3a37-4862-be8d-4d719c05ad03", "sighting_of_ref": "indicator--9aa0d3b4-f5bc-4082-a24d-ff6d94365638", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6083493-03b3-41a1-a535-b3a3603de4e2", "sighting_of_ref": "indicator--d586dbe1-63d7-4faa-b549-3e0ab8798c80", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab51defe-8c60-4ec8-a501-95cdf24b3c15", "sighting_of_ref": "indicator--f7b58507-c509-4165-824c-9671ce23ab80", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f683b6-f4eb-4cc7-8031-b68faf5eafbb", "sighting_of_ref": "indicator--e075d70f-2555-4785-a4c4-e3de6f7933cb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dcf7b3-2145-4ea2-af3e-32d514925a7b", "sighting_of_ref": "indicator--e075d70f-2555-4785-a4c4-e3de6f7933cb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371c1ea4-df1f-44d7-95f3-534ec434612f", "sighting_of_ref": "indicator--dfdb2cd7-460f-4c9d-844e-cdc1ea50d21b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6186920b-53d5-4de6-bc00-cf6f78efd63f", "sighting_of_ref": "indicator--ca90af72-8e4d-49ee-acc6-9800198ed5ec", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853c434b-eda6-425a-91e0-02e423cd07dc", "sighting_of_ref": "indicator--90da00cd-ef49-4665-acaa-98bca1366f4f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff29abda-482b-4a57-8267-a7af84b41a2a", "sighting_of_ref": "indicator--4457b93a-0742-478e-bde0-01e9a1598e3b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e95f36-cee1-41d2-b097-b65d7edc2bfb", "sighting_of_ref": "indicator--6925cd79-263b-488d-bf52-b8f216dc5904", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc7e1a2-247a-48e2-9aa2-09743f30fd8c", "sighting_of_ref": "indicator--37dbc516-a4c1-48d1-afe4-c0b3c4e328dc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25be8715-e6f4-4abf-b81d-315e6582289d", "sighting_of_ref": "indicator--5e8b8abf-468f-479c-a8f8-4627fbd926d5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65aed35-aa43-45bc-ab56-18d1f8f6899a", "sighting_of_ref": "indicator--2df764ce-cb75-4cc7-83f3-399beb53c7a7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c44a77-324e-4cb9-9f18-f67e587ec69a", "sighting_of_ref": "indicator--59fb7a64-6127-4fcc-a0dc-c521891aaf76", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1216bb3d-7e86-423b-ae73-492ccc72fcbd", "sighting_of_ref": "indicator--ec0cf063-c2de-4510-bcb3-aa58df7a27cb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b926c35-64e2-4588-8403-9b66abcd3b28", "sighting_of_ref": "indicator--28b0ff61-3b38-4b30-b49a-c2c8a49c12e8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923e5e9c-7242-4910-b4d5-2adeaf922d15", "sighting_of_ref": "indicator--46a18b77-881c-489c-81b4-c2d58bce4d0f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a91904c-ea2c-4df4-875e-a2f473ac3911", "sighting_of_ref": "indicator--c1fa0ff4-579b-4a99-9d1f-6721987dae1d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0216597-f293-401c-a766-c740849e37b6", "sighting_of_ref": "indicator--6e9e5cf3-4db7-4554-aaf4-440cadb33c0e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a88142d-abd6-40a8-899d-e993d4311175", "sighting_of_ref": "indicator--b7eb9276-8c06-4e68-b45c-0e2cb3a6416c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3438a2-40a5-4838-8cc0-f36827fe1bbc", "sighting_of_ref": "indicator--b7eb9276-8c06-4e68-b45c-0e2cb3a6416c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225dd66e-530c-4d31-8e4f-50a449199bca", "sighting_of_ref": "indicator--9865b602-61b7-4f76-b868-cb10fa938ed1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450528ab-2329-43dd-9112-a306fb84b90c", "sighting_of_ref": "indicator--b45b9a39-643b-4b8d-a8f2-d4acf5af716f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b755ae51-c2bb-41c1-9610-3c5baf83e4d4", "sighting_of_ref": "indicator--e91b0c4a-6583-42ac-9c69-5176b0581e7c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0941dbb0-c9ef-481e-a4da-70331ad6ea2c", "sighting_of_ref": "indicator--f5db27f6-7560-471e-891a-897af7431346", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34c435a-4b94-4c5a-8ddb-cb68f20382e5", "sighting_of_ref": "indicator--2bf8ace1-fddc-4ea7-8b4c-049237fdcf20", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fda8675-033f-4d69-b0c8-9f4d3160a5ed", "sighting_of_ref": "indicator--48e88eb8-b5fd-4831-8fe7-4c03dc792358", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d896632e-6b83-4ceb-a8cd-9cc932ae605d", "sighting_of_ref": "indicator--b5629ba3-6702-4291-8bfb-e28d15cfe6eb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a77b26-fa55-401f-9093-3e370157903f", "sighting_of_ref": "indicator--b22fb0a3-49d7-446e-858f-b3f5e22989ae", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239209f8-0809-4464-961a-00c97c537d66", "sighting_of_ref": "indicator--17dee434-98a8-4b59-9209-f6cf6d3f1961", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc73716-3a28-4a67-9c57-9021e44868f9", "sighting_of_ref": "indicator--c863d8ce-725f-4963-b002-b4550b864632", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86163b5c-ab39-4f88-8a83-f6e2d3a59731", "sighting_of_ref": "indicator--90a014e8-8bfc-4acf-848b-d206839da3e0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8209eb6e-58f4-420d-a0fc-eb674e843e99", "sighting_of_ref": "indicator--90a014e8-8bfc-4acf-848b-d206839da3e0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8f2737-edd6-4f96-8868-35f68136631e", "sighting_of_ref": "indicator--64d999d6-1667-4855-8e44-f86509f27288", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e58c017-41e7-4d6b-a6cb-b4ea321a8797", "sighting_of_ref": "indicator--38c6742b-ca8e-4b4f-91d8-3a0443d9f413", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd65fe5-9e01-4c46-af6a-a35c3ebbc7a1", "sighting_of_ref": "indicator--38c6742b-ca8e-4b4f-91d8-3a0443d9f413", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afe4889-5258-4fb8-9ecf-6e9a5cb411fc", "sighting_of_ref": "indicator--67536448-08e9-4b2b-a587-51d1cf0ec273", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4256cee2-56e1-4a8f-b6d4-6b6bddf5312f", "sighting_of_ref": "indicator--1941c3b4-a8a3-4ca6-96b7-2e4078520722", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6bb47d-abff-4838-b16d-ef4c114e3ccd", "sighting_of_ref": "indicator--1d0c5b59-81e0-4189-aa0a-1194d8647cb8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dbdb325-4df8-4b05-9e0b-f797ccc935d2", "sighting_of_ref": "indicator--f863b9fd-724d-4aa7-847c-8a3cbf48fef5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cafd12-e1a2-4ca0-bd86-d10fa2d6e14f", "sighting_of_ref": "indicator--7fcce25b-27b4-4af6-8016-342f50656d6f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd45d274-f867-4f73-81b9-2f63d6bbb793", "sighting_of_ref": "indicator--8faa8824-89d7-46b7-b132-bfccc0fcd937", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d898b4-8e69-4be5-84fd-0c6c07c313a9", "sighting_of_ref": "indicator--b81dd4df-3650-4c11-b9ac-737129680eb0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a4b924-941f-445c-9fea-f3a8c1f756e7", "sighting_of_ref": "indicator--2836dd0b-979d-4dee-abb5-2b8ae382011a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25cb16f1-6292-474b-8eac-d9fec98b8d2f", "sighting_of_ref": "indicator--d27de3bd-3594-45e4-b52b-5905a9e4c130", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476ddf94-37e6-4b1f-a214-78146c8f597f", "sighting_of_ref": "indicator--d27de3bd-3594-45e4-b52b-5905a9e4c130", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd01e7b0-4ea7-496e-ae17-886946032590", "sighting_of_ref": "indicator--a9917244-87b2-4207-8c12-d9246d841360", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b217be-8f63-4bc3-aa0d-5ba9bda2ef08", "sighting_of_ref": "indicator--d362489a-e6e9-4b80-bb36-33434bf95dcd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d286e10e-1d38-4a1e-858a-106483a78c87", "sighting_of_ref": "indicator--ea238278-3085-4fc5-8933-b56f6a99008b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb7b815-6e16-416e-97d3-7e3b42f4eb6b", "sighting_of_ref": "indicator--717b7202-d396-4f69-a06f-8185952398e0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14c17e1-9b0b-4297-aace-ae79a4db90c1", "sighting_of_ref": "indicator--122b230d-7c0a-473b-8b64-3db46b0bd112", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207f9a6e-2681-4ab6-80f7-0c98debcc933", "sighting_of_ref": "indicator--0c4c2884-2d40-479a-b678-e3ae77a1b444", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8035a842-69d3-45a0-bf86-c53b84931edc", "sighting_of_ref": "indicator--e86f3850-4dde-4b72-a7a6-53e4262e9551", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff34cac-1f70-4819-a5a6-877b3eef43cf", "sighting_of_ref": "indicator--a30314b4-b488-4743-a091-ae442b685796", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cf0e36-cd2d-42e5-865b-304f430539f3", "sighting_of_ref": "indicator--8d9806cc-77f5-4878-8df6-ba474626c400", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aafbb3b-ef8f-43bf-b360-241eb9a8e01f", "sighting_of_ref": "indicator--70127b7f-5c4b-4719-bc1f-9f85c8e7947e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0595cd-2103-4d51-8f96-92cddc12f7ef", "sighting_of_ref": "indicator--b443a44d-4f6f-43b0-bd7f-a3450d9b6228", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6cdcd7-c3c2-43b8-a53e-0709f5e087e7", "sighting_of_ref": "indicator--13458061-f543-41c7-b4e0-8c6abf240208", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e2094a-fdd7-4fa4-a67d-0d6802248912", "sighting_of_ref": "indicator--25b26ca0-78bc-44de-abfa-e0732503be2e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0878e1d-f724-4609-8a82-25cdbfb4ee0e", "sighting_of_ref": "indicator--65d8396a-799f-435c-8112-b7fcbd343a51", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ef5411-e54d-48ec-85f1-85b94c137a04", "sighting_of_ref": "indicator--aa795df4-332c-4706-a3e5-aa22e538db0e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadaa78c-1235-4e6a-9009-dd1547069885", "sighting_of_ref": "indicator--d701c0a6-2c2e-45ff-aac6-b6832fe1001c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c737a28a-a74b-48bf-a886-76bb0dc434f7", "sighting_of_ref": "indicator--133cca3a-8592-4cc7-b43b-9b7be2debd14", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad75975-c08d-4a21-966b-e939693fde79", "sighting_of_ref": "indicator--aeff7150-1120-4931-b718-b98e69652781", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38509c7c-7110-4f7d-8190-9e73b57e0257", "sighting_of_ref": "indicator--50bbc0e8-410a-496b-a37c-e0235faa9102", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8ead10-da58-4611-8631-c7f7e7e42406", "sighting_of_ref": "indicator--958a16be-b7c1-4145-96dc-dd8954fe19ae", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b14d69a-45f9-4f83-abe7-4e8192e87774", "sighting_of_ref": "indicator--c66bc3dc-935d-44d7-a0e3-aee6beb33f35", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7445be3d-3e8f-4e80-937e-511fb0dd2c3d", "sighting_of_ref": "indicator--5cdd02bd-76ad-4edc-9ece-5d01f2bac8a7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08304df5-b283-4502-8697-518cbea68dbd", "sighting_of_ref": "indicator--99ffdb22-e950-4ce2-a4ee-610b5a459bd5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b6e4b7-2abd-4aea-828a-761a84fd2eb1", "sighting_of_ref": "indicator--6e6f0b9a-4f60-4e1e-ae88-18cfa0689166", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ede1e26-9fe1-4baf-815b-530ca7d5bae6", "sighting_of_ref": "indicator--5b0dc3bd-2d22-4a42-96a8-e9da1fdcefb6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be17a007-96a2-4495-b8a0-4291a38d4bc5", "sighting_of_ref": "indicator--5b0dc3bd-2d22-4a42-96a8-e9da1fdcefb6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc4cff3-7534-4340-89cc-3b56f3d42862", "sighting_of_ref": "indicator--68452009-f114-4478-ba28-f22f1e762688", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d44338b-ef74-43f3-b18c-8fc9c9e2e017", "sighting_of_ref": "indicator--e6d1fbe1-9d9b-4699-ab65-eb4bf1ec5ad3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce04bbe-cdc0-47d0-8a5a-e229d9e7cc4d", "sighting_of_ref": "indicator--cf2082e1-8d13-4530-8478-3148a84ffebe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895d7a03-5ba9-4b33-b71d-3a171dee342f", "sighting_of_ref": "indicator--5d2210c5-9055-4705-af2e-25cb2a3989c5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f569f69-5649-4d60-a271-7465ac850681", "sighting_of_ref": "indicator--99bd8e7b-0d85-49b8-9ee0-2a0e7800c27a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f93c327-76a3-43ad-abb3-2079f3d1f5be", "sighting_of_ref": "indicator--fb39a627-b36c-46b4-8ff3-6b27e5c93af7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7268466-677e-487b-ad8f-6db737915a6f", "sighting_of_ref": "indicator--f74c5196-4489-47bb-b237-1ac62bad2f3d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb2d94e-fca0-4c5b-83e4-897ae7a412a8", "sighting_of_ref": "indicator--2a715aa4-45cb-4229-a740-6fd989c46dac", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de254db3-4d97-4050-bedd-f5bc02378ac7", "sighting_of_ref": "indicator--63a7db85-4c3b-4c1c-9881-9735a68c612d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14e65f7-abaf-409c-b899-512d56c47c6b", "sighting_of_ref": "indicator--f70d7623-2c25-476a-9e3d-388e0c88054d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91558d2e-2f75-464c-818b-209b9882cda6", "sighting_of_ref": "indicator--9249c8cf-4d52-498e-87f8-2b12547b11ed", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d00096-47b3-450b-b730-e27003dc2b36", "sighting_of_ref": "indicator--d66b797d-71ac-4550-8ff7-876c4aa0366d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a658e462-8f50-44af-b976-7eca897f0db3", "sighting_of_ref": "indicator--fefb4716-2faa-4946-beb2-999de3a7bc1e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec735155-a9b6-4ea7-8bb1-ba062c8b35b1", "sighting_of_ref": "indicator--b54e66b6-ac98-41a0-9bed-d5f4aec507e1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353de151-1643-4845-bab5-f3c004585136", "sighting_of_ref": "indicator--1cb30b53-b879-42bd-b7b4-922aa282432b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52af957c-0aa2-493c-a055-3ab317a0a87c", "sighting_of_ref": "indicator--ccf3a20f-ae70-4e5f-8aaa-d7085bbd6437", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b136691e-6247-4a8a-8b63-c8f944ab7224", "sighting_of_ref": "indicator--28e641fd-78dc-4c0e-89a6-891234376c38", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819dfbc8-07fa-4359-a739-eed48cb820d6", "sighting_of_ref": "indicator--28e641fd-78dc-4c0e-89a6-891234376c38", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417c3b04-dc07-468b-a658-704b745ddfee", "sighting_of_ref": "indicator--313ba506-c9f1-4c23-82b7-b14a7fb60f1a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7506eb-7353-4cdb-819e-7599b4e47a44", "sighting_of_ref": "indicator--994d2e8c-b521-42de-a670-03ae2e0a1b38", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261708d7-658a-4e0e-9bc8-8648c6d7cc78", "sighting_of_ref": "indicator--994d2e8c-b521-42de-a670-03ae2e0a1b38", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9a5dd0-23c1-4a2d-948e-4450e434d5f8", "sighting_of_ref": "indicator--994d2e8c-b521-42de-a670-03ae2e0a1b38", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35b9b48-72e7-424f-8a3f-4be9a3f7b2eb", "sighting_of_ref": "indicator--4ce1b773-731c-459f-9a29-182e53a5c4dd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2ba4c3-b485-4cee-999d-9587cbccdd6e", "sighting_of_ref": "indicator--4ce1b773-731c-459f-9a29-182e53a5c4dd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f494bbb-6f97-436d-89d4-cf3315b58761", "sighting_of_ref": "indicator--4ce1b773-731c-459f-9a29-182e53a5c4dd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d991c7-c379-4556-a548-a27c1a2eb4d1", "sighting_of_ref": "indicator--5874937a-65b0-4179-a5bd-2b1f64f7a945", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873f9171-1f51-4aa3-9b05-6da32b0acf6e", "sighting_of_ref": "indicator--5fa0e1cf-0689-4674-b37f-9647c1f41658", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9226951c-fcf4-4a25-bf7f-088cb865e0bf", "sighting_of_ref": "indicator--5fa0e1cf-0689-4674-b37f-9647c1f41658", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e826ff7-93ae-41e5-bc75-e72235b9f7c7", "sighting_of_ref": "indicator--d11648d5-ad70-4a7f-8aad-160de716979b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671afb3f-112e-433a-9824-80eaf803c309", "sighting_of_ref": "indicator--45475658-1f39-49db-a7f4-7abdf3d8015b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69367583-eb7c-4570-a44b-cf2d279e3075", "sighting_of_ref": "indicator--45475658-1f39-49db-a7f4-7abdf3d8015b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64dfcfb1-fe22-4e9e-aae3-7ecc349c1a00", "sighting_of_ref": "indicator--45475658-1f39-49db-a7f4-7abdf3d8015b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146b305d-02f7-4a22-b4d3-045971019a9f", "sighting_of_ref": "indicator--953ba70f-6744-4b3e-839c-0ba366ecaad7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d3c268-c79f-497d-aa9b-8ea022b76f7e", "sighting_of_ref": "indicator--953ba70f-6744-4b3e-839c-0ba366ecaad7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0eb982-e160-4624-8a2e-0a1181cf1c8a", "sighting_of_ref": "indicator--953ba70f-6744-4b3e-839c-0ba366ecaad7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806165f4-50b6-439d-b829-dea98facf722", "sighting_of_ref": "indicator--e38398e9-aa5d-4c03-9319-3bd891d985b3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf817c91-7ef4-4884-b345-ac22d82d3483", "sighting_of_ref": "indicator--e38398e9-aa5d-4c03-9319-3bd891d985b3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944eab1f-108c-44e1-a652-f8f803d3bf81", "sighting_of_ref": "indicator--e38398e9-aa5d-4c03-9319-3bd891d985b3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca5bc33-9495-49ce-9ef6-c6bf0f78c34b", "sighting_of_ref": "indicator--7263d5f1-048c-4df3-a01a-e72544d35385", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c332041-cd7d-4524-8cf4-fbb05b626842", "sighting_of_ref": "indicator--7263d5f1-048c-4df3-a01a-e72544d35385", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f844065-967d-4255-980d-359f0cd1f350", "sighting_of_ref": "indicator--7263d5f1-048c-4df3-a01a-e72544d35385", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecd93d7-d8d9-4413-ae18-7a728686cb83", "sighting_of_ref": "indicator--fe706bd6-a0b3-48f4-8c0b-5ef0cf972248", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1c43a0-ce38-4427-9a63-256fbb870ddf", "sighting_of_ref": "indicator--c2cc7540-e0ed-4e21-916e-66c1445becbe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b7e618-86e8-47ff-82d6-d3d9783d92c4", "sighting_of_ref": "indicator--c2cc7540-e0ed-4e21-916e-66c1445becbe", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b5ada1-600a-499a-9cba-28ce8a1eb599", "sighting_of_ref": "indicator--9faf668b-1c6b-481e-96b0-040f22a0b62a", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9ee74c-a338-4366-a1d1-be59ed2fb4bd", "sighting_of_ref": "indicator--fec83c69-ca13-460f-a211-fef8bb6ac4f5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a31e44a-401e-4a8d-9da8-ee808a45ed58", "sighting_of_ref": "indicator--fec83c69-ca13-460f-a211-fef8bb6ac4f5", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4fc6a6-f962-4a24-992e-e562134a27bb", "sighting_of_ref": "indicator--cdfbc877-3f44-4275-8f84-3fcacdb1a7a0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89e327f-066b-4036-9771-4012906234b5", "sighting_of_ref": "indicator--cdfbc877-3f44-4275-8f84-3fcacdb1a7a0", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaaa3410-e07b-4764-8f53-caffc3198f45", "sighting_of_ref": "indicator--e7e11fe1-1e5a-4d37-a163-69ab63bc9532", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9921ce0-be52-4102-a042-2892d5a4aba0", "sighting_of_ref": "indicator--f31a8d02-5145-4da7-befc-3ac463e0aeb4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5872fe-68b9-452d-9c9d-46c172d2b69a", "sighting_of_ref": "indicator--f31a8d02-5145-4da7-befc-3ac463e0aeb4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00cff52-bd1d-47b2-b857-22715039359b", "sighting_of_ref": "indicator--f31a8d02-5145-4da7-befc-3ac463e0aeb4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03de547c-731a-49a9-9832-67b1882760c9", "sighting_of_ref": "indicator--fc4be460-e78e-4b17-9d1a-2820f0d9f226", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0dc54c-4bcb-498b-955f-95300da28782", "sighting_of_ref": "indicator--1c0da9c1-ae83-43bf-9ff7-7129bb0cdb50", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3682f7-1c8e-4c72-8a32-be2a719835d3", "sighting_of_ref": "indicator--1c0da9c1-ae83-43bf-9ff7-7129bb0cdb50", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e448f0aa-5b63-4047-a50c-0428a9a96cbf", "sighting_of_ref": "indicator--1c0da9c1-ae83-43bf-9ff7-7129bb0cdb50", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3bec04-e291-446e-b42f-0de505d42174", "sighting_of_ref": "indicator--0479446c-44d6-43fc-a7cf-5a6e77110aaf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cf3605-cab6-4352-8974-396d3bd5df52", "sighting_of_ref": "indicator--0479446c-44d6-43fc-a7cf-5a6e77110aaf", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eafd4c8-821c-4475-ac74-5c0bd127b247", "sighting_of_ref": "indicator--e4d46ed3-b93e-422b-84bf-178f8d70b7ac", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d17bf4d-42ab-4ee2-bbf3-7f0606ebeeba", "sighting_of_ref": "indicator--08c8446b-a6fb-42e7-9f26-d659be536b2a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ae5cad-2840-4508-a618-13c2884f7d5a", "sighting_of_ref": "indicator--d2dbf6aa-b78d-4c2b-b1f6-804493ed940a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79105664-2f96-4d30-b2b2-e0099043f453", "sighting_of_ref": "indicator--d2dbf6aa-b78d-4c2b-b1f6-804493ed940a", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4148bb0-e0f1-4e95-a6a6-df6201e87c25", "sighting_of_ref": "indicator--44a8f825-526f-41d2-b2c4-bc1b16816173", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690619e9-fbf3-4828-91f2-df614c521971", "sighting_of_ref": "indicator--44a8f825-526f-41d2-b2c4-bc1b16816173", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54473470-13cb-437f-9310-7df21e8887fc", "sighting_of_ref": "indicator--44a8f825-526f-41d2-b2c4-bc1b16816173", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8cc1dd-6c99-408e-bdc1-e12872ad5aec", "sighting_of_ref": "indicator--44a8f825-526f-41d2-b2c4-bc1b16816173", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36cbd16-e3fc-4b9b-8e33-073bdea83872", "sighting_of_ref": "indicator--939fe54d-f9f3-4a7a-a771-08e7407cec44", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38435227-6629-450d-80d0-453a70efdb96", "sighting_of_ref": "indicator--939fe54d-f9f3-4a7a-a771-08e7407cec44", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e9960b-6a65-4f8b-ba17-388b7ccb7359", "sighting_of_ref": "indicator--939fe54d-f9f3-4a7a-a771-08e7407cec44", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8af7828-efa0-43fe-b225-f9bcf83c869b", "sighting_of_ref": "indicator--939fe54d-f9f3-4a7a-a771-08e7407cec44", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478387d4-730f-4ab1-80cd-b07244f382e8", "sighting_of_ref": "indicator--1fc79fed-4a34-4348-b098-508fdb5c8704", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63bda83e-927c-40b1-87a3-64f14c8fea05", "sighting_of_ref": "indicator--1fc79fed-4a34-4348-b098-508fdb5c8704", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc13f41d-5343-4a48-944f-f0e25aa03106", "sighting_of_ref": "indicator--1fc79fed-4a34-4348-b098-508fdb5c8704", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce18820-6f34-4faf-a5b5-9f2cc86323f6", "sighting_of_ref": "indicator--04afc878-b37a-42d7-8270-40a4413ee0c1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4204d2f6-7fef-432a-a497-ec4e7ca5b6dd", "sighting_of_ref": "indicator--d4bbb6ba-5168-4ae8-8845-4deb122e4074", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7c355e-8991-4d26-9b68-d632052d2bbe", "sighting_of_ref": "indicator--d4bbb6ba-5168-4ae8-8845-4deb122e4074", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec84cb3-ba74-42c1-8c59-195688e84fb6", "sighting_of_ref": "indicator--d4bbb6ba-5168-4ae8-8845-4deb122e4074", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4277bf2-a607-4d90-a25a-d2cf4e854e78", "sighting_of_ref": "indicator--495c49d7-ae90-4e83-9358-6170ccd7903f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78064c3e-8a84-4655-8f86-2721694bfcc4", "sighting_of_ref": "indicator--86b793ae-c948-4142-8ea7-e8770134a975", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ed9cac-4050-4310-ae76-40885c9b8daa", "sighting_of_ref": "indicator--1ed23f01-72cf-4094-ad9a-9c8f0d0633c2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6bb705-0cea-491b-bb27-d8fa751eb28f", "sighting_of_ref": "indicator--b5a9d0ca-6516-42fc-a073-8971b52edbcb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea7eb83-34bd-4b22-962d-c57baa297c43", "sighting_of_ref": "indicator--d7ac79db-87e8-4c25-a556-331f6539f75e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0597453-7673-4ffa-9e83-94d8efa75c3e", "sighting_of_ref": "indicator--2f75dec3-1f79-425c-ac74-a22c06b366b1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c4fb6f-a4e5-46a6-80e3-05bff11b0ae8", "sighting_of_ref": "indicator--df5fc59a-a63b-4f1c-a940-404f4c0c240b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ddad13-ded5-46da-a29c-d15b13854c6c", "sighting_of_ref": "indicator--493e9f01-381b-405e-a475-85ecc40f1a1e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4e2a90-81c6-4ee7-9db5-8931c0702b75", "sighting_of_ref": "indicator--3ae179fa-d0ac-4ab0-bff8-7bf590a347c8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694648b6-ecdc-4391-8afa-fba33ea223d9", "sighting_of_ref": "indicator--b0ecf187-68c6-4618-83ce-7e99e13c8243", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e0cb8d-dbb2-447b-9553-d8ed1b93a843", "sighting_of_ref": "indicator--b0ecf187-68c6-4618-83ce-7e99e13c8243", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26887af-263d-4444-a71a-2123deeb759c", "sighting_of_ref": "indicator--0a829723-a962-457f-a2fc-af58f18b7712", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0740ddf4-9182-465d-9aaa-f13d3636ef07", "sighting_of_ref": "indicator--ed169b9b-4da7-413a-94dd-301f59b7ae32", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37fc9cf-ed2f-43c4-b980-735d7588acb5", "sighting_of_ref": "indicator--2eb7130a-8a9d-4609-ac2f-fead082b46a1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31df5382-8488-48fe-bba6-596823c97b22", "sighting_of_ref": "indicator--2eb7130a-8a9d-4609-ac2f-fead082b46a1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f970145-beef-4873-9d39-d80ee55d47ad", "sighting_of_ref": "indicator--c1de7bd9-c97d-4b27-9c73-b3cc974d850d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f3b426-d19b-445f-a858-5c5c19a0a46d", "sighting_of_ref": "indicator--776d288e-d17b-4c82-9e19-7cbce2235974", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8b625b-fb29-4900-8030-85e726577e31", "sighting_of_ref": "indicator--b36bc4a4-d05d-4ba7-8cbe-e5a4466f86d8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cbb3b1-02ef-4680-a0f4-57824f5f3579", "sighting_of_ref": "indicator--dbb68527-ca89-4172-94f7-d3b1101ee50f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73d77d7-d860-4b5f-a037-198c8b78940e", "sighting_of_ref": "indicator--dbb68527-ca89-4172-94f7-d3b1101ee50f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b832ab3-8d4b-4129-9268-8a4a48e9a5d7", "sighting_of_ref": "indicator--f3b8bc36-33bb-4d05-8adb-6fbf06f10850", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d7e55c-a5cd-4d9b-b8ff-21cffdc7dd05", "sighting_of_ref": "indicator--f3b8bc36-33bb-4d05-8adb-6fbf06f10850", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd7d642-0a45-472c-ba4a-9154b1982307", "sighting_of_ref": "indicator--41c8fafe-50ef-4d96-a21b-a4a6caa71ca1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f38af8f-78ef-4b2b-96d2-0117f803704e", "sighting_of_ref": "indicator--cf18f3be-83cc-4ab0-a77a-4be699f2e229", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93de5674-a0fc-4d53-913b-5f877e0eb490", "sighting_of_ref": "indicator--d6355c0e-6e7a-451d-8a31-eeebc3f37599", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ee4d2f-f6e7-45db-9daf-990a75623df6", "sighting_of_ref": "indicator--0781cba2-1139-48be-b0aa-9b8d3d45db8e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509f4213-0158-43dd-a1e5-4e3fbba966d5", "sighting_of_ref": "indicator--8911415e-6f1e-47f0-9eba-ebf25ede2be4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d38f94-42de-4101-8f05-db1cbbeddded", "sighting_of_ref": "indicator--8811084a-a02c-46f2-a657-b9812b8c7d2c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670ace98-9c56-4db5-ac1a-4311a36adb38", "sighting_of_ref": "indicator--8811084a-a02c-46f2-a657-b9812b8c7d2c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2205c9f-f885-47f9-918a-e9fbc33defff", "sighting_of_ref": "indicator--8811084a-a02c-46f2-a657-b9812b8c7d2c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e99410d-b50e-45ab-8be0-427000026cea", "sighting_of_ref": "indicator--8236e3b1-6791-4194-aed4-c483eb90042c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6dc726-f741-4740-9560-fd4d6e04af8c", "sighting_of_ref": "indicator--e10277c6-35c7-4829-a6da-aee9e269f39d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47435d1-ee59-4355-9716-bbb857b52987", "sighting_of_ref": "indicator--9a14ebd0-3d9c-4a1c-891b-2619c3408131", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42c40b0-8760-4b21-a4d0-a207dc877907", "sighting_of_ref": "indicator--8cd50c32-7d81-4d94-b5a5-c66b4f948f34", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a91145b-5593-47db-964b-ac0555c47f32", "sighting_of_ref": "indicator--0411e0f0-b1f0-4118-87ca-8bb0f0a953cb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761858b3-4f44-42e1-b72c-73a6d3e78933", "sighting_of_ref": "indicator--2e636ecd-226c-4df4-8c40-f075c2efe392", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927a599b-3437-431d-bb48-830fc0f3baa9", "sighting_of_ref": "indicator--9d61b375-2a8c-4241-8a82-e68f057b139a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c1b008-340b-43c4-aed5-c4b5231d491f", "sighting_of_ref": "indicator--9d61b375-2a8c-4241-8a82-e68f057b139a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dad3794-a2e8-4dfa-a38d-b10681c9ed0a", "sighting_of_ref": "indicator--68653480-a2c3-47f5-a413-7fcffef3ca68", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c321ea6-827d-4c1c-a370-54539dbfb446", "sighting_of_ref": "indicator--1d7de009-cae0-42b7-a354-31349851ed3a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb4735f-ddb6-48fd-a210-b9d5c59c4213", "sighting_of_ref": "indicator--f5f0532f-b386-4a3c-8464-fd36de4a4b6b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5e6481-aebb-40a1-8a6e-212ae47cbd54", "sighting_of_ref": "indicator--f5f0532f-b386-4a3c-8464-fd36de4a4b6b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414aa24c-71b2-42a1-82ba-c83e914a0896", "sighting_of_ref": "indicator--f5f0532f-b386-4a3c-8464-fd36de4a4b6b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df78898a-c53a-4338-bc36-f3f66d7d275a", "sighting_of_ref": "indicator--7697f4aa-d22a-4e42-b277-3affeae9b646", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1d31e0-f107-4be3-8e05-4285d2fe17b2", "sighting_of_ref": "indicator--7697f4aa-d22a-4e42-b277-3affeae9b646", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945d318d-7f93-472a-a480-a3e4a1910287", "sighting_of_ref": "indicator--7697f4aa-d22a-4e42-b277-3affeae9b646", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759ac60c-2618-4c14-8c5b-9a3a8f51cabb", "sighting_of_ref": "indicator--17143f5e-a6a6-4d69-baab-86c8cfade02c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529e51da-f88b-446c-8278-12e4d271e69d", "sighting_of_ref": "indicator--17143f5e-a6a6-4d69-baab-86c8cfade02c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356ce4ab-ab75-410a-96cb-273305378944", "sighting_of_ref": "indicator--17143f5e-a6a6-4d69-baab-86c8cfade02c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939fc9fe-aab9-48f9-a1f0-cb856af7cd43", "sighting_of_ref": "indicator--3272db24-630f-4303-a2b2-e032b6681554", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09bd4a2-74a5-4eba-b10f-2fff253471a0", "sighting_of_ref": "indicator--3272db24-630f-4303-a2b2-e032b6681554", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8e5316-2351-469f-8083-2bbdcf348461", "sighting_of_ref": "indicator--3272db24-630f-4303-a2b2-e032b6681554", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c9612e-95ac-456f-8566-2378df7a6311", "sighting_of_ref": "indicator--7a4cd5f9-9190-406a-9f0a-163d5dbebe71", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b25e6b-ed76-43b9-9cd9-796f74c2f96b", "sighting_of_ref": "indicator--7a4cd5f9-9190-406a-9f0a-163d5dbebe71", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce4498c-654a-4e61-a177-be0c69e79976", "sighting_of_ref": "indicator--7a4cd5f9-9190-406a-9f0a-163d5dbebe71", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e659a7a-2660-4250-a9b1-8e9f83bce90f", "sighting_of_ref": "indicator--075ccf25-75f2-49c5-90d2-3093d9e23223", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0384a0c-9801-4c8f-a3e3-dcf1136b9da4", "sighting_of_ref": "indicator--075ccf25-75f2-49c5-90d2-3093d9e23223", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181d8211-47c5-48b7-9171-df5f61dd7349", "sighting_of_ref": "indicator--0f2069ab-d218-4d5b-ba06-47600959119f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10ad7b4-9f41-4bff-8063-b23267ef02d4", "sighting_of_ref": "indicator--0f2069ab-d218-4d5b-ba06-47600959119f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0eb871d-afcd-4d65-b587-522323f6d420", "sighting_of_ref": "indicator--0f2069ab-d218-4d5b-ba06-47600959119f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0018d75-4a24-4797-87f5-7ddabf79b7ad", "sighting_of_ref": "indicator--6b464b4c-d3bb-41a7-9e11-3bda248d0674", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdb3823-fda3-4fb9-a162-8f9171346c51", "sighting_of_ref": "indicator--6b464b4c-d3bb-41a7-9e11-3bda248d0674", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0ff82e-fa77-4b29-b442-69457d040e03", "sighting_of_ref": "indicator--6b464b4c-d3bb-41a7-9e11-3bda248d0674", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1016d68-5f57-4538-974d-11960915e75e", "sighting_of_ref": "indicator--b33ff897-577d-4d66-ab62-64948cbeb740", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f510e20-49c0-4d78-afc2-0cdbca806e8f", "sighting_of_ref": "indicator--b33ff897-577d-4d66-ab62-64948cbeb740", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3595f056-6c8d-4bca-92e1-686ba7486f00", "sighting_of_ref": "indicator--b33ff897-577d-4d66-ab62-64948cbeb740", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03fc117-6a46-44b0-a804-a05cce90583e", "sighting_of_ref": "indicator--6bfe016c-bf71-479e-ad90-a39d3a10ffe9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e15904-ec03-40e9-b210-ca9dd7e09348", "sighting_of_ref": "indicator--6bfe016c-bf71-479e-ad90-a39d3a10ffe9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41091c4b-cd94-433e-a778-867fa82d564e", "sighting_of_ref": "indicator--6bfe016c-bf71-479e-ad90-a39d3a10ffe9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f77287-3803-402b-9b40-1c2c6b27eee3", "sighting_of_ref": "indicator--4fbb72cf-cc76-43b8-b59c-efeef30be0e9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d506757d-9b7e-429c-bf52-142d7d7e1acc", "sighting_of_ref": "indicator--2c78401b-15d3-4681-9605-c25aca3b0839", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8a16e0-c0af-4f2f-86f7-8c2338e9985b", "sighting_of_ref": "indicator--1cff151f-b522-4e95-956c-1b6b1cd50794", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8a5e6d-c61c-47bd-97d0-6fd06848d115", "sighting_of_ref": "indicator--1cff151f-b522-4e95-956c-1b6b1cd50794", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fd4905-55d1-4a32-a148-0695159aa455", "sighting_of_ref": "indicator--1cff151f-b522-4e95-956c-1b6b1cd50794", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bbbee4-d1c6-40d4-a9f6-9222aa3921b4", "sighting_of_ref": "indicator--9646898a-ae3b-4af5-97f7-82a9f66a9183", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f823d7b1-9bd2-47e0-a978-ea8ac571398d", "sighting_of_ref": "indicator--6c4af722-2458-4323-b116-217a5176d8a9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e637d291-cc9d-4868-91d2-d85fe80050ce", "sighting_of_ref": "indicator--6c4af722-2458-4323-b116-217a5176d8a9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227970f1-d857-4713-bd98-e7ea8c899037", "sighting_of_ref": "indicator--6c4af722-2458-4323-b116-217a5176d8a9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898bb278-d8a0-4d70-9dcc-70db4ec0f227", "sighting_of_ref": "indicator--9d9b4427-d664-4014-bec6-0db36e39e61e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c061df8e-9229-4578-83b1-f6b90362cbaf", "sighting_of_ref": "indicator--2f1e5d10-2e83-42f5-b872-645d55295927", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe1b79d-88ca-4651-80f1-d092939cde8c", "sighting_of_ref": "indicator--2f1e5d10-2e83-42f5-b872-645d55295927", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c577abfb-4052-4187-82e2-f5e251967b69", "sighting_of_ref": "indicator--2f1e5d10-2e83-42f5-b872-645d55295927", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a4b1fb-5715-43f5-8e39-976bcc773d6d", "sighting_of_ref": "indicator--9d7c0cd1-df77-46fc-a9b7-b30eb3be7cdc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7656ec-d3ab-48c1-b22a-093b929eafc5", "sighting_of_ref": "indicator--c6d22955-e0ce-4d37-9188-720988c1e729", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571ac973-9e7d-4318-91aa-6cdcd89c288e", "sighting_of_ref": "indicator--c6d22955-e0ce-4d37-9188-720988c1e729", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49550b91-7f9f-46dd-ba37-fe8bf972ccdd", "sighting_of_ref": "indicator--9d77f016-72ca-4063-8d1b-d2701a950f3f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f84298c-c318-4f62-a10a-8e17088998f3", "sighting_of_ref": "indicator--9d77f016-72ca-4063-8d1b-d2701a950f3f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2110e7-2472-4868-903e-a40c924bcea7", "sighting_of_ref": "indicator--9f8823f0-a881-42a0-9c80-acd5622a7872", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73160f17-1bc4-4bc4-85bf-d62221c7957f", "sighting_of_ref": "indicator--9f8823f0-a881-42a0-9c80-acd5622a7872", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e16d364-25a0-4186-b8ca-6a45854bf1f5", "sighting_of_ref": "indicator--9f8823f0-a881-42a0-9c80-acd5622a7872", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdef328f-4070-4e7d-b524-401bfa31af29", "sighting_of_ref": "indicator--51258e2d-e556-45dc-948d-032f4a94a645", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a1aee1-db10-490b-8809-aa6358b11a4c", "sighting_of_ref": "indicator--51258e2d-e556-45dc-948d-032f4a94a645", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56a2671-84c2-411a-b9f1-404eabdd980a", "sighting_of_ref": "indicator--f9905bea-3826-4eb0-97f8-c12a21f1fa19", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6518df0f-e35e-474c-870f-ad0504d7de9f", "sighting_of_ref": "indicator--9e86e7d4-5fd1-4676-a67c-858d6343cf35", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecdcdfa0-2150-4ff3-9966-7508f057c489", "sighting_of_ref": "indicator--9e86e7d4-5fd1-4676-a67c-858d6343cf35", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb7235a-7d31-4bbb-a690-e476987f9ea7", "sighting_of_ref": "indicator--9e86e7d4-5fd1-4676-a67c-858d6343cf35", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85de275-9068-44dc-a02b-22e5900f64a6", "sighting_of_ref": "indicator--249f5cc8-2932-48b2-a78b-90d285a4b349", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1aef56-adf2-46f5-83a9-710497dfe82c", "sighting_of_ref": "indicator--77fcb9a0-9761-4d47-8710-a6640d321406", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d7d9d0-e522-43b3-818c-723159090571", "sighting_of_ref": "indicator--6da7a3b0-682f-4a27-8f30-5bd0f2d18f8c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2925908-2f47-4dd9-8c20-9dddda8f10b9", "sighting_of_ref": "indicator--6da7a3b0-682f-4a27-8f30-5bd0f2d18f8c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d543c9-a0eb-49ef-b0bc-41d774e88dbe", "sighting_of_ref": "indicator--6da7a3b0-682f-4a27-8f30-5bd0f2d18f8c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae93178-e62c-4c00-a07f-f145fc5dd45a", "sighting_of_ref": "indicator--1dab208f-b376-4959-81df-37b25f1d27d5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ddb918-df7d-4e9b-ab60-b3eaf0c7ba66", "sighting_of_ref": "indicator--1dab208f-b376-4959-81df-37b25f1d27d5", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fdb206e-41fd-451d-a898-e115bf32d0aa", "sighting_of_ref": "indicator--34adb5e4-a798-4a8d-ad2f-d8e27c369adb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451a02ab-dab8-45d5-8882-7083b5e56ea5", "sighting_of_ref": "indicator--088b5b49-331e-4b63-8e0e-78c91753b7e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221346e1-dbba-4591-9f8a-a1a012b80a99", "sighting_of_ref": "indicator--bbb6e7ce-75ce-464b-afb8-c1ca48b49662", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a612fec7-f697-4123-8328-a65965634a55", "sighting_of_ref": "indicator--2382047f-155b-44ed-af98-0a5e8c3d13d0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c240e1cc-2f5f-49e4-91c7-b5a717c70cf4", "sighting_of_ref": "indicator--2382047f-155b-44ed-af98-0a5e8c3d13d0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f3539a-38c0-4d88-b54c-68e3e8a62200", "sighting_of_ref": "indicator--be6f6748-71c0-4909-9b6d-d97737cf152a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69299a43-2140-47e9-9058-6d6c0a45ca23", "sighting_of_ref": "indicator--dcb63a1a-9969-4efb-9b3b-16335eb15ecd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bac17a-acee-478b-9069-b31a0976277f", "sighting_of_ref": "indicator--4cc7214f-9e51-42d0-a8cf-c3dbd93df3a6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c3deeb-3896-4db5-837e-0ee9c31ae50f", "sighting_of_ref": "indicator--3cdba857-eeaa-4474-b0c6-a1456cb04308", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40230721-814f-42c3-9e53-a4017ce627ae", "sighting_of_ref": "indicator--a886f754-625b-47c9-9f27-d35ce0545392", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8766010e-ee7c-4ef8-bcd9-90a5e785a4df", "sighting_of_ref": "indicator--a886f754-625b-47c9-9f27-d35ce0545392", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60460883-2d3d-41a5-925b-661ce290320e", "sighting_of_ref": "indicator--a886f754-625b-47c9-9f27-d35ce0545392", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410c6005-8432-45c5-a1d5-fe328848aeb4", "sighting_of_ref": "indicator--c5d7ab5b-5cdf-4025-aecd-c36e7853532c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87950ff-3120-4f33-8d9a-c5cea4dccab8", "sighting_of_ref": "indicator--c5d7ab5b-5cdf-4025-aecd-c36e7853532c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be18062-15c6-4bbd-aeab-21dbadd6ca19", "sighting_of_ref": "indicator--7b00fffc-2213-4bdd-81b1-5985b0f3ba60", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c958f34-4719-4448-9205-eb8a13c14e3f", "sighting_of_ref": "indicator--0e0c9fe3-57c3-4c51-8cfb-55cc5a841931", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e986cb1-ee67-4aeb-9938-4f255206911e", "sighting_of_ref": "indicator--3823064b-5c1c-4a00-8172-7db37c9f10f8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec651ee-3383-4d39-af4d-202ef04f6c2c", "sighting_of_ref": "indicator--c520bed0-523a-490f-8e07-a7edb62089ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb35d00-7537-41c0-800a-018e4243caa5", "sighting_of_ref": "indicator--0057c652-31eb-4fac-933a-28089ec5235c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccb1248-d159-4621-b5cc-098b1eefda67", "sighting_of_ref": "indicator--8c145596-9302-437a-8ac8-e8db061908f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7f1c12-7886-4907-b961-e7abe88849af", "sighting_of_ref": "indicator--7e0193ce-8cb9-47b2-81b6-01b5021abcfa", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a39175d-6765-40e5-9f01-6a6fb8f0baae", "sighting_of_ref": "indicator--885e9724-ca5d-4abc-b686-c8d341b81d1f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d549850-e4b3-4e7b-94eb-cf8b9f4637e0", "sighting_of_ref": "indicator--c51307d4-9afe-473d-b529-004a683184f4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29812887-a07b-4d7b-b401-e3440a9546a4", "sighting_of_ref": "indicator--c51307d4-9afe-473d-b529-004a683184f4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f82b32c-3796-4205-a973-b17194e41f32", "sighting_of_ref": "indicator--c51307d4-9afe-473d-b529-004a683184f4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b86571-75d2-4324-b8e3-b4ea45ba6310", "sighting_of_ref": "indicator--e2f19c22-c409-4007-86ad-80bc4275cf0f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68366ba-669e-49bb-aaa6-60345efa4467", "sighting_of_ref": "indicator--e2f19c22-c409-4007-86ad-80bc4275cf0f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1d1015-bea1-4a67-8b85-e338019ba92e", "sighting_of_ref": "indicator--fbf651b7-1f49-450f-a142-08b24302c69a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5960596e-ac2e-4d7c-9ce7-f3f0596a7756", "sighting_of_ref": "indicator--f2f463cb-53ab-49d5-8ea0-a7d020704fde", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380d11a0-0780-4c15-a5a1-d05092657605", "sighting_of_ref": "indicator--abb61cf8-8a3b-41f3-9aa8-3845af1b9b5f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2078dabb-8acf-473d-8d00-f43fafc01b9b", "sighting_of_ref": "indicator--abb61cf8-8a3b-41f3-9aa8-3845af1b9b5f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e8766c-1149-40c4-9ae8-763ac45ca788", "sighting_of_ref": "indicator--cfec3d6e-00d3-4777-878a-0f17b230794b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9149b9-8dd9-41b2-8bdb-fcb12a78e4f2", "sighting_of_ref": "indicator--b5a7350e-f0e2-4cc7-8e30-568011663735", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ab99c5-0c38-48c4-a716-58ab30908fcf", "sighting_of_ref": "indicator--b5a7350e-f0e2-4cc7-8e30-568011663735", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a6fd3b-1fea-4f55-aa44-b72b2722e27f", "sighting_of_ref": "indicator--b5a7350e-f0e2-4cc7-8e30-568011663735", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3ad13c-fcf2-4f74-96ce-94dc8e3251e6", "sighting_of_ref": "indicator--be6f4453-3031-4768-ab03-f73958b9adc1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3106aa1-3c65-4db8-96f6-be50dc97efbe", "sighting_of_ref": "indicator--be6f4453-3031-4768-ab03-f73958b9adc1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ef289e-ff1d-445f-bdde-cc6bde4e5e64", "sighting_of_ref": "indicator--58033815-6e07-434e-815b-0def8b76ca37", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cbc895-1dff-4d0e-83cf-183ebbb5e508", "sighting_of_ref": "indicator--0bbb8702-8422-4c76-bb8c-be05c6a26fa6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb8e48c-a1d0-4ce7-83d5-3285fe922332", "sighting_of_ref": "indicator--0bbb8702-8422-4c76-bb8c-be05c6a26fa6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd95f8a7-f8eb-4a3a-8553-aa2379119a9a", "sighting_of_ref": "indicator--0bbb8702-8422-4c76-bb8c-be05c6a26fa6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5164ea58-7b10-43ad-a425-f50c694be772", "sighting_of_ref": "indicator--0e30caa4-12d4-497b-a1c1-e8fe28bc3b60", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e7c7cd-ba29-47a6-a0fc-748bca2079c1", "sighting_of_ref": "indicator--71cc68ca-19d2-4063-9330-e0b621f5dd2a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa198cb1-fe81-46a5-b306-b25390f7a1aa", "sighting_of_ref": "indicator--79f85e0a-8651-4078-b210-b28af8408f5b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604bc696-32a8-444e-8e95-a13dd384edcd", "sighting_of_ref": "indicator--85df63b7-3b75-4f66-9c2e-250acb6be836", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99022360-8149-4e09-b01d-52aa409fb8a0", "sighting_of_ref": "indicator--dd122e7e-60e9-4890-b7ed-153bcff0a48e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd0d364-4c76-4cf1-9070-df448abc350d", "sighting_of_ref": "indicator--256d42e7-150e-4b2c-b0ef-970b025b6737", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b90ae7b-779f-48cb-aa7c-39f2e71971f0", "sighting_of_ref": "indicator--45041dbc-7168-4f16-ac35-5b5462e4dd4b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c4078e-e8dc-4966-9dd3-31c9c7f43352", "sighting_of_ref": "indicator--06ea5ffd-7924-4406-9925-c3602d939ce5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73dd0c7a-7451-4486-94a7-5f0e9b4d0ec6", "sighting_of_ref": "indicator--ff70654e-92e4-4c2e-b0e1-29319a2af2bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0199bc62-cad7-4769-a65d-509baab11fa5", "sighting_of_ref": "indicator--0d5711f0-e7fc-4f83-84c4-0c2c41c8d3b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c78348-3c72-43fb-990b-33d8db3c3cd8", "sighting_of_ref": "indicator--8de370c2-75ce-47e9-8ea4-f74042f5adef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c00416-7854-4f0e-82b3-eef437e6c9f2", "sighting_of_ref": "indicator--8f6a9428-abc9-4d15-bdc1-2efa6b674dab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3515635-3fca-46fc-ac4c-922a6345d8dd", "sighting_of_ref": "indicator--3a78b09c-b1aa-4f3f-9742-b9e581fe948b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d5f1bd-fdf4-4908-b9ec-4e7105c03423", "sighting_of_ref": "indicator--4fd00e96-72cb-4317-8942-28485d1b0d35", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8fdc0b-89a4-4d78-a11c-d13d00a047db", "sighting_of_ref": "indicator--11afd81f-d64b-4ed6-8cbf-7a595dfad3ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97090ed-e54c-4255-9fea-e86b8e555b82", "sighting_of_ref": "indicator--ca851ecd-409d-4576-ab89-0f79536339f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf756004-bc92-4845-b852-8daa55ad1cba", "sighting_of_ref": "indicator--4fbf154f-dcbb-425a-ab92-b291c0b11450", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3a0c7a-00b3-4f21-96fa-6db9da86371c", "sighting_of_ref": "indicator--fee5002a-03d7-4a54-a27d-bc5159a13885", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d5ad8e-5406-4c50-8ad9-e22eef994238", "sighting_of_ref": "indicator--22482af0-6f3c-4b86-acd5-d22d6eb9fa1e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f7696c-3f01-49d6-9912-2bedecd8dd24", "sighting_of_ref": "indicator--a2f9dec5-84af-4297-95a3-71fb25f6596d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8c2faa-37e5-4264-933b-7661570819b8", "sighting_of_ref": "indicator--a91b04a1-4016-4cb8-af90-3473c6d93f36", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7441f0-95dd-4cb6-a516-45d0d1ebfb01", "sighting_of_ref": "indicator--61c5ffa6-09e3-40cc-97e1-8b44b6bb7790", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e76915b-5cdc-41b5-b6ef-38190d635221", "sighting_of_ref": "indicator--081d34e7-52c2-4b27-9bde-1ce77bb57b87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7cca8d5-a80e-4685-9d01-ec7dc6cf7309", "sighting_of_ref": "indicator--6b30dcf5-8cf6-4240-9925-d5161a309729", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e4c8d6-3580-4ee5-8b5c-163e5e925f98", "sighting_of_ref": "indicator--0fcafd52-c4ea-4f6b-b65c-e96e6c9c78e4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df5fc9b-0f10-4cbb-93a7-4042242e3d69", "sighting_of_ref": "indicator--0e895c6f-3848-47ae-8045-9e834564cdcf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bb6700-2b84-46c2-83e3-0ee66d60d2a4", "sighting_of_ref": "indicator--8314d7e9-682b-4e7e-99a6-868b956e68fa", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d04f50-035d-452a-9fd5-fca46fe74573", "sighting_of_ref": "indicator--5eaa96cf-7fef-4925-9ed4-19637c284602", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463d6448-dd54-411a-a19c-9e180b2f0abd", "sighting_of_ref": "indicator--a54c8f06-09c0-43b3-a96f-647843984a98", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbfdb01-7134-481c-9d2e-43c2d734ce99", "sighting_of_ref": "indicator--ffcc86e4-7d71-4aef-8825-484ef345acdb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ab735c-eaa1-42b5-970a-7bbe1ba4a39b", "sighting_of_ref": "indicator--1f76576f-c5cd-49ca-bc47-68502113a3a8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197e3055-5128-47ab-a568-0e7907f6700c", "sighting_of_ref": "indicator--07fb2a69-3e3b-43a3-8edc-34422fccfad5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb6759a-ead0-4ffc-95c7-8ba4aaba5ddb", "sighting_of_ref": "indicator--6db3127e-d48b-4122-8cda-85a3c260b74f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d735247b-d4c3-44f6-93ac-714bd904f92a", "sighting_of_ref": "indicator--1f96d67b-2582-4b82-a05c-8109fcb61f45", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1281a9d1-2254-48f7-af01-6a8e4d2131fe", "sighting_of_ref": "indicator--2d97342a-3a83-4809-9a96-d5c1ff79a3dc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b52826-ec54-4fc4-8599-28d35186c7fd", "sighting_of_ref": "indicator--2d97342a-3a83-4809-9a96-d5c1ff79a3dc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc37f0a-fb6b-41e6-b67a-d02c680a0497", "sighting_of_ref": "indicator--2d97342a-3a83-4809-9a96-d5c1ff79a3dc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc9ac40-24d1-4586-9c0e-d48e06bf4541", "sighting_of_ref": "indicator--6f352bf3-bdae-456c-b00c-2180f30b202a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f84d76d-b58e-4bba-bf19-df80a2aaae7e", "sighting_of_ref": "indicator--2d6567bf-8b9c-427f-ba88-ecb27ce98991", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39371c3-7147-4c23-84f1-9ea885847bbc", "sighting_of_ref": "indicator--63d06528-1b95-4c7b-95e7-710547fc86c5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5847394f-5e87-4f00-a5b0-39636bc61d19", "sighting_of_ref": "indicator--63d06528-1b95-4c7b-95e7-710547fc86c5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21e87ba-c01f-4f8a-8537-5cecb5b8d8df", "sighting_of_ref": "indicator--6c9a4395-bdba-4ef0-b469-3a12cde40723", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0993d40a-2319-410e-9c28-7fab4fae4cae", "sighting_of_ref": "indicator--20f1e8a4-a59d-425e-854a-0343b43f01d6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c565b05f-2ad0-484d-9aa0-9ac2de948f8c", "sighting_of_ref": "indicator--bb2828de-30d5-42a1-9f20-136a60e52591", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05f9b63-dca0-4b36-90da-3af84e249d7c", "sighting_of_ref": "indicator--bb2828de-30d5-42a1-9f20-136a60e52591", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57cc1ffe-f548-4e6c-830f-c80d0cdd940e", "sighting_of_ref": "indicator--bb2828de-30d5-42a1-9f20-136a60e52591", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9844e828-2cfd-41d2-b0f4-2137eb94d69f", "sighting_of_ref": "indicator--9d94e465-b032-4729-b435-924f35a72c1f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb6b142-c28a-48cd-b443-25982d68ffd9", "sighting_of_ref": "indicator--9d94e465-b032-4729-b435-924f35a72c1f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3e21ab-9cfc-4892-ac35-412946404d90", "sighting_of_ref": "indicator--e3e0df0e-cf56-47b7-928f-d0056875f899", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c7738c-93bd-42d3-aa04-e010c88e0f80", "sighting_of_ref": "indicator--e3e0df0e-cf56-47b7-928f-d0056875f899", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa67482-f857-448d-972b-6f56d7db92c1", "sighting_of_ref": "indicator--e3e0df0e-cf56-47b7-928f-d0056875f899", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08fe67d0-fe1f-4a91-8669-4da24cd91c4a", "sighting_of_ref": "indicator--f4ea350d-7e24-4342-8319-4a30a6705dc6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d194bbd-77b1-4701-9869-21bc6309befa", "sighting_of_ref": "indicator--f4ea350d-7e24-4342-8319-4a30a6705dc6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a443021-b050-4f0b-9acc-6dc404f252e7", "sighting_of_ref": "indicator--f4ea350d-7e24-4342-8319-4a30a6705dc6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff449be8-9f30-4aa4-a48f-a32a5d3151ed", "sighting_of_ref": "indicator--04eacd11-54fd-4948-940f-e795bf33efd2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbe8d05-d46c-438a-9a6f-e80dd7cf9034", "sighting_of_ref": "indicator--04eacd11-54fd-4948-940f-e795bf33efd2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a562cb-6b01-43e2-9219-3ec07aa80f1e", "sighting_of_ref": "indicator--04eacd11-54fd-4948-940f-e795bf33efd2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba4e601-7ef1-4d3d-9360-4b085216a828", "sighting_of_ref": "indicator--db8090e1-bba5-4d9a-bdb5-2d5f4d3b7c87", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e7f54b-526a-449d-98ca-fbcf2f556b1e", "sighting_of_ref": "indicator--8ff91865-c2a5-4ca4-bbb8-f81238539cd9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8205c20e-b508-4bcf-912b-f990d74d660e", "sighting_of_ref": "indicator--8ff91865-c2a5-4ca4-bbb8-f81238539cd9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2bed79-e904-468b-b5c6-2f99d65a37ec", "sighting_of_ref": "indicator--b0397986-2fd2-40a9-83a1-9fc0c005736d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbfd8342-82a6-4210-978b-04ebd3a91d80", "sighting_of_ref": "indicator--bc2fe9ae-4175-4c4c-afc0-dce89f3c2355", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8c39c4-d2a5-48f9-84e2-dcf07e7be738", "sighting_of_ref": "indicator--7ac7af66-4a9b-4ab2-ac1f-00a754d1ada1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526134e7-5f15-41aa-b9f6-9308eaa5dbe5", "sighting_of_ref": "indicator--7ac7af66-4a9b-4ab2-ac1f-00a754d1ada1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3678d9-a7fa-45f5-b2d6-f1e6cd8bbe78", "sighting_of_ref": "indicator--7ac7af66-4a9b-4ab2-ac1f-00a754d1ada1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e354aa30-6cc1-4fbe-bc8d-fe4b39f30017", "sighting_of_ref": "indicator--6dc88e5c-aaee-4fe1-8ecf-1372921cfb55", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5666407-8d37-4487-b348-29e968088498", "sighting_of_ref": "indicator--169717e9-0eba-404e-ac92-2c000e4cc24b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89592b2-5f2b-4e3e-8e03-925b1fb680d5", "sighting_of_ref": "indicator--3fede5ba-b1c4-4623-a0d3-7ab84a5f8e31", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1e6262-cfe0-4f22-b126-04146921dcaf", "sighting_of_ref": "indicator--3fede5ba-b1c4-4623-a0d3-7ab84a5f8e31", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a7c1a6-d9f0-46e3-90a0-b29c35b32a45", "sighting_of_ref": "indicator--3fede5ba-b1c4-4623-a0d3-7ab84a5f8e31", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044f351e-ed92-41ec-953a-0578923eb804", "sighting_of_ref": "indicator--177a6622-9860-4c5c-9db7-b44c1037b013", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a88164d-bbd8-4401-9ab6-765de243905f", "sighting_of_ref": "indicator--177a6622-9860-4c5c-9db7-b44c1037b013", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7198637a-cf3f-4a92-a3ce-b3b818fd8f98", "sighting_of_ref": "indicator--177a6622-9860-4c5c-9db7-b44c1037b013", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d1954c-8d55-4287-a0e9-6958095b0399", "sighting_of_ref": "indicator--170e3b54-7f8f-4d95-8d8a-5343d93ecc07", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff99a86-ff21-4c7e-b22b-02dbba250c71", "sighting_of_ref": "indicator--170e3b54-7f8f-4d95-8d8a-5343d93ecc07", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7681e5ba-3aee-4e2c-8350-a099eec13e34", "sighting_of_ref": "indicator--170e3b54-7f8f-4d95-8d8a-5343d93ecc07", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3b86ed-07a5-4401-b6d4-32bcc04a3233", "sighting_of_ref": "indicator--3ee4319b-9a7d-4ac7-975a-cf17e3ba816c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eeacebe-79c8-48b6-872c-08286a293a3a", "sighting_of_ref": "indicator--3ee4319b-9a7d-4ac7-975a-cf17e3ba816c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48386dab-d484-4f0d-afa6-d0b2e458762d", "sighting_of_ref": "indicator--3ee4319b-9a7d-4ac7-975a-cf17e3ba816c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5e678b-8f30-4573-b3bc-ed2af574909c", "sighting_of_ref": "indicator--36db4c90-0a67-4f19-8403-704cc2c79f22", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1278fa4-82aa-4c9a-b622-b38203c423da", "sighting_of_ref": "indicator--36db4c90-0a67-4f19-8403-704cc2c79f22", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b770a0-f1ed-4a85-a552-041adc56c18d", "sighting_of_ref": "indicator--2f4b9a5a-d845-4fdf-a279-93d3a6a7544c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e39992-d05b-40f3-8ec9-cb112aec6499", "sighting_of_ref": "indicator--2f4b9a5a-d845-4fdf-a279-93d3a6a7544c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615e741f-96d4-4584-ba97-c01e8c945ee5", "sighting_of_ref": "indicator--2f4b9a5a-d845-4fdf-a279-93d3a6a7544c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d2da21-35a7-47d6-9ff4-3e4c1d969c93", "sighting_of_ref": "indicator--95dde740-5584-4ca1-995e-4f22484946cb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cea0675-bd7e-4a4e-80a7-988ed77c6348", "sighting_of_ref": "indicator--332ebdff-85ec-473a-826e-a9a86d97d16a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24a9edd-8f1f-4a8a-970b-51a26f85ea22", "sighting_of_ref": "indicator--db9aa5ab-4b10-493c-a3b2-b1eac763909b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7378a45d-9f6e-4e93-8ee8-0ca107383250", "sighting_of_ref": "indicator--d7e7a87f-785e-4e46-9224-e6fd064dd361", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64af9283-2d43-4777-a3b8-1c3d78604a66", "sighting_of_ref": "indicator--74bdd5e8-dc92-44c4-a4ed-3673110994e4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a121de-a3e8-42b8-baba-060f80de1aa3", "sighting_of_ref": "indicator--eecf214a-9fac-425e-a863-3cb4e56419e4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8737e268-12c8-47fb-bf6c-0e5852676be3", "sighting_of_ref": "indicator--c89181ac-10af-4aa3-a136-33dff3abda28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6616ca15-e074-4265-b06e-bcdbb42fcade", "sighting_of_ref": "indicator--fbe774bb-b999-4663-be88-22cd0f452d09", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf76664-8640-44ea-a894-a9bb0b458b7f", "sighting_of_ref": "indicator--d50c3b94-0702-4652-a270-cd5ca099ea1f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e9448d-c85e-4428-a7f6-bb3e4415f62d", "sighting_of_ref": "indicator--0b723205-7128-42fc-a3d8-021601c02e2f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255dbb4a-05f0-4bad-bc01-a8ce21c5f36e", "sighting_of_ref": "indicator--9fc267e0-35c9-4e95-bedd-436cc8e55754", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ef62ce-dcc2-4451-b05a-de94084ca083", "sighting_of_ref": "indicator--ef0c943a-3081-44fb-bb34-47d80d6f612f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4af134-ce0f-4fb9-b3a7-0a3889807f5b", "sighting_of_ref": "indicator--c157be47-cb1d-4dc6-a592-fd5396cf8f35", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b922c11-4ef2-426b-aa73-8d3edc706ace", "sighting_of_ref": "indicator--c157be47-cb1d-4dc6-a592-fd5396cf8f35", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f8e1fd-d8e7-4b5f-adcb-24856ac5a7c2", "sighting_of_ref": "indicator--d8fbb7cb-1b85-4bdd-8a28-7c0de5fbad69", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c3423f-53cd-4fdf-b787-bc382d113f0c", "sighting_of_ref": "indicator--696cffa4-6472-49ce-80f3-1051247ee1e7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb7beb9-16ed-489d-b8f8-b813444db789", "sighting_of_ref": "indicator--698c4127-3e5a-44d6-a9b2-bf1c9530c745", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0fcafc-45cd-45ae-bf66-8f4a24cce1ea", "sighting_of_ref": "indicator--698c4127-3e5a-44d6-a9b2-bf1c9530c745", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e531c7f1-2b18-4d02-911e-62b61e37b220", "sighting_of_ref": "indicator--698c4127-3e5a-44d6-a9b2-bf1c9530c745", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0018786e-d491-4dcd-a748-255c1d2f3fc3", "sighting_of_ref": "indicator--4debb4e5-0334-465a-88c8-02b7d9a8e850", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1cdcc1-0d3e-429d-a0d3-c3125ac1e32b", "sighting_of_ref": "indicator--08b48add-1a9c-40d8-b729-bb510859179d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c1bffd-970f-45f6-9e82-832ce366a2ed", "sighting_of_ref": "indicator--83f79f43-8bfd-4568-9d41-16ddacc1e952", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea137042-4a97-40ed-8ba2-0dc6b7545fe8", "sighting_of_ref": "indicator--ccd437e8-7f7e-4efc-ac56-815e6e7e99be", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8b3cfb-2848-4684-9bdc-33e534cb883b", "sighting_of_ref": "indicator--bf228c74-14ed-4e3f-a74a-29bc71b0dccc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a61bbff-9453-4642-bd50-af4c21a27ea4", "sighting_of_ref": "indicator--2e76f3c0-46ca-4900-87c7-1125246349b3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05461f5a-e2b9-4564-98ed-67ec85dddd98", "sighting_of_ref": "indicator--27ca0958-6410-4b14-af6e-1c7bde6f6704", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36a2e8b-212d-4b53-abbc-032772685405", "sighting_of_ref": "indicator--77891302-f023-45b8-b93e-c01aabb5c167", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0493255e-b450-47cb-a23f-8843568a959e", "sighting_of_ref": "indicator--77891302-f023-45b8-b93e-c01aabb5c167", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d43e6e-5bab-4e99-83a9-5e74760de09d", "sighting_of_ref": "indicator--9adaf6ed-f220-40a7-aad6-aa30195f5838", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a199f2f-4c11-485d-b3f0-80c70db90115", "sighting_of_ref": "indicator--17d5be54-72f0-47ac-af80-7763d477f9f4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ee1439-ce19-4b12-a812-a25426659206", "sighting_of_ref": "indicator--17d5be54-72f0-47ac-af80-7763d477f9f4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7edecb-3357-4628-b793-842aa36949be", "sighting_of_ref": "indicator--102a04e7-2276-4324-ae88-08ab92215a79", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0e4a00-faa6-4bd5-a65a-b31f6592de0e", "sighting_of_ref": "indicator--102a04e7-2276-4324-ae88-08ab92215a79", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c60df08-0873-4d3f-b921-5daa1c181677", "sighting_of_ref": "indicator--c878d3b4-0fd9-491e-9486-e40c764cc0f9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0e07eb-a023-40e9-abfb-d48d8ad815da", "sighting_of_ref": "indicator--5eff1ccf-d477-49a9-826f-dcfd59af9bdc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da95d50-71a1-4c46-a67d-378172ea5811", "sighting_of_ref": "indicator--6f866dfc-05dd-4819-a6c1-cf107f112efb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a7bdcd-b834-4feb-af5a-89832b52dae1", "sighting_of_ref": "indicator--878cc8fd-e22d-480b-a871-a75caa750ca6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d160cb0-5947-46d0-99ed-bf4e7218eb0b", "sighting_of_ref": "indicator--f54c2853-6a19-455a-9ee3-8cde34a36343", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ed6731-91cb-4e56-8a8c-f067743c2543", "sighting_of_ref": "indicator--e5b99303-40dd-4bec-9c13-eab6f5635bdc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39f638b-dacc-4402-b656-c788ec0a347c", "sighting_of_ref": "indicator--69653409-d0a5-4a44-936e-8a6d08ac24e3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a89dd1-cc99-4336-99e5-cbf9e6048736", "sighting_of_ref": "indicator--f79cf1f5-1c85-49db-b4aa-33ca085f671f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770e08db-712b-49b8-a5e5-bfef40de33d5", "sighting_of_ref": "indicator--f79cf1f5-1c85-49db-b4aa-33ca085f671f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d027ae82-a16c-4541-ba64-9591fa3abeeb", "sighting_of_ref": "indicator--541b2760-4533-4c80-ac62-ae0550ff2b13", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380dcabb-9cce-44fa-a4b9-e63732937dda", "sighting_of_ref": "indicator--b6e81908-7d53-47cb-a0a6-ddd6e56990fb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ccf228-f034-4be5-b4f0-bb2e1ccb3483", "sighting_of_ref": "indicator--f9979aa5-1b4e-43cb-b65c-30e6d6a0613c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e78b83-7a73-42fe-8106-0d0493a7258a", "sighting_of_ref": "indicator--22cee29b-2ec0-43aa-9ebd-4386af873147", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4cf427-7c49-4451-a50b-2de085ca9443", "sighting_of_ref": "indicator--ceb68d63-6d14-4aa0-95bf-e0e616745f15", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb17a5b-6398-49d9-9a45-fcd706385517", "sighting_of_ref": "indicator--ceb68d63-6d14-4aa0-95bf-e0e616745f15", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb86b33-94c4-434c-99c8-d0288ed4abb7", "sighting_of_ref": "indicator--bdb6041c-22c0-43e5-9f80-376e26f1771a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1b9121-3a38-497c-a95e-e2ee2b5b56ef", "sighting_of_ref": "indicator--bdb6041c-22c0-43e5-9f80-376e26f1771a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c26ff8c-7083-41eb-a18e-76eef2c0a9f3", "sighting_of_ref": "indicator--e7d84bbd-0127-41d7-93dc-3549ede215e8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d711c87e-ae91-4629-9bb1-896edf8c6aec", "sighting_of_ref": "indicator--e7d84bbd-0127-41d7-93dc-3549ede215e8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04c73e4-ff57-4f76-ab8e-9e8b17e26e4e", "sighting_of_ref": "indicator--e7d84bbd-0127-41d7-93dc-3549ede215e8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b311ab1-d56c-450e-946a-6ac2a473f19d", "sighting_of_ref": "indicator--8e85d7ac-f830-453c-9560-db6883a228a9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c6e17b-a46b-4664-abb0-49809fe7c4ec", "sighting_of_ref": "indicator--8e85d7ac-f830-453c-9560-db6883a228a9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e135416-ec68-4334-8954-853d2fefdb88", "sighting_of_ref": "indicator--6213d67f-2f9c-478c-b8c2-58838fd9dd51", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096bef77-6d37-4800-aa41-c1b7b55c2079", "sighting_of_ref": "indicator--6213d67f-2f9c-478c-b8c2-58838fd9dd51", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294d9d76-9598-4c0b-99dd-a3363cd816a4", "sighting_of_ref": "indicator--6213d67f-2f9c-478c-b8c2-58838fd9dd51", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e605fe-0aa1-4e7c-8b2c-6dc0f652bcf6", "sighting_of_ref": "indicator--83714cc1-824c-4cd0-9282-6c6a11baea1d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307902a4-6d60-420d-a957-9f3493fa5ddf", "sighting_of_ref": "indicator--83714cc1-824c-4cd0-9282-6c6a11baea1d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a8b745-b199-4a73-84d9-7a71b19599e1", "sighting_of_ref": "indicator--83714cc1-824c-4cd0-9282-6c6a11baea1d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a39800-6f9e-476e-8a1d-e9990fdd9ca0", "sighting_of_ref": "indicator--f886b195-1976-475f-acb3-f4c01c18b969", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7453c949-0b66-4942-bce8-7a273a2af438", "sighting_of_ref": "indicator--f886b195-1976-475f-acb3-f4c01c18b969", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e25422-8a3c-4c41-81bd-f3906a139f78", "sighting_of_ref": "indicator--33e276fe-cc06-4d1c-b0a4-a3b119523552", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5062de2-36cd-46a5-96dd-ccdf376b44cc", "sighting_of_ref": "indicator--33e276fe-cc06-4d1c-b0a4-a3b119523552", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6d1328-cb2b-499c-9a40-f3ab899ddeb4", "sighting_of_ref": "indicator--33e276fe-cc06-4d1c-b0a4-a3b119523552", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dac6c98-311c-4171-8bd4-e7fe17313cc8", "sighting_of_ref": "indicator--5aeedc8d-31d9-4527-ab82-63fe2b4eb279", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2aec278-7abc-4594-9d08-caec1c73e817", "sighting_of_ref": "indicator--5aeedc8d-31d9-4527-ab82-63fe2b4eb279", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4107228c-113a-4d04-9fb0-c66cb5550a0b", "sighting_of_ref": "indicator--5aeedc8d-31d9-4527-ab82-63fe2b4eb279", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d082b2b-9edc-40f0-bbce-6516d8f99fd9", "sighting_of_ref": "indicator--88bed020-3b4d-43e7-b2ce-06ba9e3d1585", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06956928-5e5b-473c-b916-ae9ab475406e", "sighting_of_ref": "indicator--88bed020-3b4d-43e7-b2ce-06ba9e3d1585", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ae3d4d-2041-4e20-909b-6bce3780994d", "sighting_of_ref": "indicator--d6477fcc-d2ae-4046-b60d-b28e282392ee", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ac9bd8-852e-4b21-a191-be6a0a7f8e74", "sighting_of_ref": "indicator--d6477fcc-d2ae-4046-b60d-b28e282392ee", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7d7091-1030-4fe3-a69d-b832d73a97c5", "sighting_of_ref": "indicator--d6477fcc-d2ae-4046-b60d-b28e282392ee", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2c1378-d315-447d-a2a7-87d060b933cb", "sighting_of_ref": "indicator--ba5a86ee-dd3b-47fc-9883-45b1349e5ea8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63f6013-403c-430f-a311-5f0ac7969eb6", "sighting_of_ref": "indicator--ba5a86ee-dd3b-47fc-9883-45b1349e5ea8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328ed303-3158-4208-9d26-5e8049543efa", "sighting_of_ref": "indicator--ba5a86ee-dd3b-47fc-9883-45b1349e5ea8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ad3f7f-9530-40f5-b9d2-8c098c27991c", "sighting_of_ref": "indicator--9c887956-1f16-48b5-9d09-ac731ae5b7c8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3195b7e1-90ba-4411-a4b6-b438ac039a54", "sighting_of_ref": "indicator--9c887956-1f16-48b5-9d09-ac731ae5b7c8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7182c8f-058c-45d3-b010-d51d80f26f00", "sighting_of_ref": "indicator--85bdbb7b-590d-43e4-b65f-7c72b324eb3c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1a1139-fe37-4aa1-b7c4-87301dbbdf2f", "sighting_of_ref": "indicator--85bdbb7b-590d-43e4-b65f-7c72b324eb3c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c4883c-784b-4e2c-8d8a-71be08d0033e", "sighting_of_ref": "indicator--85bdbb7b-590d-43e4-b65f-7c72b324eb3c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01de0f42-c42e-43a0-9d69-85f10ff493c2", "sighting_of_ref": "indicator--c90c47f6-87f8-4d5d-81fa-1dd3eb8852ef", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5fe4e9-98ec-4a1b-9c58-55e822f42d7f", "sighting_of_ref": "indicator--67020bf7-0095-4b50-b402-bff3631ffaeb", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4183f235-789c-4321-a392-7509a9ee9930", "sighting_of_ref": "indicator--67020bf7-0095-4b50-b402-bff3631ffaeb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8324aad7-58ef-4655-b7a4-582c396564bf", "sighting_of_ref": "indicator--67020bf7-0095-4b50-b402-bff3631ffaeb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbc332e-1921-46cb-83a3-876627797248", "sighting_of_ref": "indicator--d126ee4f-aaa5-45e6-9bef-0ea48e8fe0c6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cd90e4-403d-4b43-a64e-5ddf909a819d", "sighting_of_ref": "indicator--d126ee4f-aaa5-45e6-9bef-0ea48e8fe0c6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef9407f-d68e-4cc1-8358-9226871c310e", "sighting_of_ref": "indicator--d126ee4f-aaa5-45e6-9bef-0ea48e8fe0c6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19619b1a-60e6-488a-914e-62e6a3d9ca02", "sighting_of_ref": "indicator--b1a1b993-3890-4adb-9ca6-1c76038a799a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1529e7c4-616f-4dd5-b2eb-890cb332233d", "sighting_of_ref": "indicator--7df361ee-bb62-4293-9d70-6730282fc369", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c5f22c-656e-4e03-ac39-c35bbeb73496", "sighting_of_ref": "indicator--7df361ee-bb62-4293-9d70-6730282fc369", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ee9b0a-2800-418c-9035-38785331ad0a", "sighting_of_ref": "indicator--7df361ee-bb62-4293-9d70-6730282fc369", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da894ad9-d932-4067-acb7-856693604bbb", "sighting_of_ref": "indicator--6f7daaf9-9489-4286-a589-c49e7d5c1bac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1beb44fe-3619-49c7-af57-39b432991d18", "sighting_of_ref": "indicator--6f7daaf9-9489-4286-a589-c49e7d5c1bac", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a856de02-b019-464a-b338-e3e65a8f8c27", "sighting_of_ref": "indicator--900d5158-d919-4789-b4a3-895a9a4b1ce1", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8c6056-e94f-49c9-b7fa-598341a8e2ba", "sighting_of_ref": "indicator--672215ae-84be-4206-9f04-29d8d92d0249", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391fa808-7c6a-452b-b6c9-95f494ae5bdb", "sighting_of_ref": "indicator--672215ae-84be-4206-9f04-29d8d92d0249", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2eb37b-a04a-4c3f-bf86-da3439d2ae63", "sighting_of_ref": "indicator--672215ae-84be-4206-9f04-29d8d92d0249", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d3c7c4-bc86-4263-97fb-96587a7140a2", "sighting_of_ref": "indicator--37ab9e0f-066b-427c-ab6a-ff0168afdf86", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbec414-78f3-47e2-90d9-6b78f0fafcb2", "sighting_of_ref": "indicator--37ab9e0f-066b-427c-ab6a-ff0168afdf86", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7960f0a1-c09e-4a3c-a21b-719adc101f51", "sighting_of_ref": "indicator--74f75bc1-0ffe-4f31-a904-18e1980d9f54", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd7262a-99e1-446b-8056-638617a7ee6c", "sighting_of_ref": "indicator--74f75bc1-0ffe-4f31-a904-18e1980d9f54", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c370a03-72ce-4e5a-aed6-26fa63a7f6ed", "sighting_of_ref": "indicator--60eea323-5a6b-43a6-8c5b-735bc9bb1f57", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8489e1ca-57fa-4566-92f0-86ea00fb95df", "sighting_of_ref": "indicator--60eea323-5a6b-43a6-8c5b-735bc9bb1f57", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dce23c0-7a6d-4981-b349-d2b88d403835", "sighting_of_ref": "indicator--fc0ad1d2-00f8-498b-97c6-89efbeb9ca69", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996e1c86-90a7-43e1-a5fe-1d0095f66712", "sighting_of_ref": "indicator--fc0ad1d2-00f8-498b-97c6-89efbeb9ca69", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3f88e9-5120-41ae-89d4-4bd1584ca046", "sighting_of_ref": "indicator--fc0ad1d2-00f8-498b-97c6-89efbeb9ca69", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccd37ad-86de-4835-a712-cb54d29360ff", "sighting_of_ref": "indicator--898ebdcd-7827-4d91-aa17-d1abc764a072", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73d6831-ca2a-47c6-a346-01be3a27de86", "sighting_of_ref": "indicator--898ebdcd-7827-4d91-aa17-d1abc764a072", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c9b0e4-7c1a-4bcf-bd70-0b9039a98a68", "sighting_of_ref": "indicator--898ebdcd-7827-4d91-aa17-d1abc764a072", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebfdfcd-5540-4068-bd18-d4c1f1316355", "sighting_of_ref": "indicator--2b8ed998-1617-4d43-a176-fc9c2fa494f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076654a7-e318-4118-a84c-25ac68a05e18", "sighting_of_ref": "indicator--2b8ed998-1617-4d43-a176-fc9c2fa494f0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7489cb5-2de6-46b7-993f-78e2edafb160", "sighting_of_ref": "indicator--2b8ed998-1617-4d43-a176-fc9c2fa494f0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd77725-3fd3-4fe6-a32f-5b629e2d7d10", "sighting_of_ref": "indicator--fe8da107-3f0b-4110-a6f1-ac552a4919cf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98891a67-7252-4eaa-9967-c7251a9dac84", "sighting_of_ref": "indicator--f537eddd-4a16-4771-8b72-4b7e059f078f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a061ee-570c-4bbb-84ed-570fc2502678", "sighting_of_ref": "indicator--171971ea-a62a-45a3-852d-b3aee30afd3c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10205577-54c8-42f6-afa1-8ad083e0654a", "sighting_of_ref": "indicator--d088cea5-2ad4-4350-bd4f-8172759f3126", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e813eab9-151a-4700-b182-6a4d41eca841", "sighting_of_ref": "indicator--6c58683e-80a4-4c62-9e05-8f5159a71ed4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0953571f-9c17-4cd7-84c3-402aaa155ce4", "sighting_of_ref": "indicator--e2454f05-e19d-4cf7-8e84-04e327c389c8", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938ce1bc-4f3e-4a1c-a663-c1ba8c2dafc4", "sighting_of_ref": "indicator--58e57265-5a86-42d8-8c41-c733636a45ab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30cf65e3-32a4-44d2-ae78-add0a92eb302", "sighting_of_ref": "indicator--a6cd3dcd-7bea-47e9-879b-c714a4ae5560", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ab1202-55aa-4338-9aa1-f192eab6643e", "sighting_of_ref": "indicator--085649f7-caae-40db-8418-3778472c4a6d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ff4e3d-7f24-454c-8b2f-d61940baef0f", "sighting_of_ref": "indicator--62a3709b-df01-4f90-a6a1-34c2ba02a442", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ed796d-963b-45fb-ab80-f281f39903e8", "sighting_of_ref": "indicator--62a3709b-df01-4f90-a6a1-34c2ba02a442", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcaf9e1c-7c34-4bdf-a079-2ea8840f23dc", "sighting_of_ref": "indicator--62a3709b-df01-4f90-a6a1-34c2ba02a442", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7efdbcf-57b3-4b89-bad9-61745cb574e3", "sighting_of_ref": "indicator--75f66ecd-bab1-4559-92c4-3c8572ad9c61", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4dbc393-523c-49b9-bed3-76d494af0eda", "sighting_of_ref": "indicator--3af4b180-ed09-4310-b4f9-a5eedbadaa62", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4cec9f-3293-406d-a65b-355f278129d3", "sighting_of_ref": "indicator--3af4b180-ed09-4310-b4f9-a5eedbadaa62", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761bc0ec-1f8c-445a-8d22-aec608908ffa", "sighting_of_ref": "indicator--3af4b180-ed09-4310-b4f9-a5eedbadaa62", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a92f7e-95f5-46f0-a9fc-4a7a3983dfd9", "sighting_of_ref": "indicator--3177d903-8e78-4e8c-b57a-4cac4b8cac8e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2ef957-c3dc-40c2-ad39-92d6361baa72", "sighting_of_ref": "indicator--3177d903-8e78-4e8c-b57a-4cac4b8cac8e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928fc66a-615f-4fde-8c6f-bc120c83abc5", "sighting_of_ref": "indicator--3177d903-8e78-4e8c-b57a-4cac4b8cac8e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3893c755-1892-4c5a-aaee-a6e0312c2ac2", "sighting_of_ref": "indicator--2b7cba83-2bab-4909-bf6f-0df5120cd854", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ad3aff-dba5-4ff0-867b-c559b34d808f", "sighting_of_ref": "indicator--2b7cba83-2bab-4909-bf6f-0df5120cd854", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7d09dd-b52a-4e81-93ba-48cba2faf468", "sighting_of_ref": "indicator--2b7cba83-2bab-4909-bf6f-0df5120cd854", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9390d30-182f-4d83-bf93-2bf054a7611e", "sighting_of_ref": "indicator--0b87eeef-356c-42a8-9fdd-34e7c316ec0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b2df4b-c1aa-4a29-abcd-81dc5766d75c", "sighting_of_ref": "indicator--cb6a9116-20ff-4fa5-bef5-df9a17fe35fe", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39076d41-2d4f-453c-b6f6-5d93cdc93535", "sighting_of_ref": "indicator--e3b31968-b2d9-4d7f-8bcd-7bb9c9964427", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2833b9-bfb3-4f5c-a331-ef056010abb8", "sighting_of_ref": "indicator--95c76edc-e411-4517-b825-d0cbbc712755", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b95dd2-17f9-4e1a-96dd-c69354c15d31", "sighting_of_ref": "indicator--95c76edc-e411-4517-b825-d0cbbc712755", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddd1561-3f34-40d2-9913-b06c1e51a0ca", "sighting_of_ref": "indicator--2e19b669-f05d-4196-808a-713e004e21d9", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fa29fe-9475-47a3-911e-4bb29952b3c1", "sighting_of_ref": "indicator--120ff9bc-4ebb-46b7-978d-d265347d4b63", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f366d9d-7c5f-441f-8c93-2d02eed625df", "sighting_of_ref": "indicator--aaf53012-77ba-4b01-9de2-6db483ecbdd7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faae81a4-87fb-43bc-90b5-6af33e6d9824", "sighting_of_ref": "indicator--a44b6831-59de-4605-85ae-1ba8c333347d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8ec768-f6c8-45da-874a-cc89ebad6e5b", "sighting_of_ref": "indicator--51ee753b-0bdf-4541-800f-e1dca98dab3a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e30498-1dc6-475b-91c6-7d64d4ae1db8", "sighting_of_ref": "indicator--51ee753b-0bdf-4541-800f-e1dca98dab3a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac86b4b5-89ee-4e59-b0e5-24627ba1f06b", "sighting_of_ref": "indicator--567bf46a-50c1-4cc5-b096-9f24f6be1dca", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba2eb42-14c7-4798-a2ac-36ec4d1a35ef", "sighting_of_ref": "indicator--567bf46a-50c1-4cc5-b096-9f24f6be1dca", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77675eca-6d99-41c6-9bd6-9089ac0aa93c", "sighting_of_ref": "indicator--66651f51-b530-4358-90bb-8c7594f91d54", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0d2ba6-003c-49fd-9fb4-6fb11e0263cd", "sighting_of_ref": "indicator--66651f51-b530-4358-90bb-8c7594f91d54", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb12475a-de9d-4038-8490-ab260ad8ad35", "sighting_of_ref": "indicator--d4890e02-c890-4f41-be1f-bf80603c216a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03f7578-0932-4a46-b919-cc8876098592", "sighting_of_ref": "indicator--d4890e02-c890-4f41-be1f-bf80603c216a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f477d7-fd69-44a4-bce1-a3d556a82304", "sighting_of_ref": "indicator--c561db37-7fb4-415f-9aab-bccf60162081", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd75c23-8623-4d0c-95a6-638b7cbbdf0c", "sighting_of_ref": "indicator--c561db37-7fb4-415f-9aab-bccf60162081", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbc89ff-412d-4a5a-9972-2ba2c2f601b0", "sighting_of_ref": "indicator--f08ab04d-b95d-490b-a3ce-e2314e0acdb9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3597f837-768b-43f0-afed-5f862f35c2b2", "sighting_of_ref": "indicator--f08ab04d-b95d-490b-a3ce-e2314e0acdb9", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3835b6ae-8928-48bc-8f77-d0083668661e", "sighting_of_ref": "indicator--e205e6a6-7f1e-4e6f-aa17-84bc1402aad8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd75ea91-17ac-4b20-94f9-44e95793fbe5", "sighting_of_ref": "indicator--e205e6a6-7f1e-4e6f-aa17-84bc1402aad8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67df6d09-4d1a-44be-b737-e523d231d641", "sighting_of_ref": "indicator--098f9f85-2887-4000-9525-d6107a580a49", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a3de68-475d-4d45-bf49-222cc830bada", "sighting_of_ref": "indicator--098f9f85-2887-4000-9525-d6107a580a49", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0970607-2feb-4ca8-ba1d-8aa969ef50f8", "sighting_of_ref": "indicator--744bc1c5-e0c0-4ba5-b53c-9a64d8be5993", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833b145f-dc5a-4b4f-abeb-83f73f5f9ab5", "sighting_of_ref": "indicator--744bc1c5-e0c0-4ba5-b53c-9a64d8be5993", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1853d300-687b-4390-95dd-1df676060ba6", "sighting_of_ref": "indicator--b642cdce-a0d1-4d63-a3fa-b30775bd39f4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a5ea07-5018-41ad-9a0e-57d0bd0abce4", "sighting_of_ref": "indicator--b642cdce-a0d1-4d63-a3fa-b30775bd39f4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbd09e9-8f14-4a7f-8b1d-0b23251f84c6", "sighting_of_ref": "indicator--f9764843-079b-4e3f-b83e-596e35db74e5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c9e484-5702-4e10-8c96-861da6ef259c", "sighting_of_ref": "indicator--f9764843-079b-4e3f-b83e-596e35db74e5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3655c4a0-aef9-43a4-8a2e-aead2293729a", "sighting_of_ref": "indicator--dc92fe1e-89a8-42db-a4cf-57e2fb8da384", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54875f41-edd2-47fa-bac0-d7c6465db875", "sighting_of_ref": "indicator--dc92fe1e-89a8-42db-a4cf-57e2fb8da384", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4e4f07-2282-4c15-bef1-3046d9d1e061", "sighting_of_ref": "indicator--0e53df99-6c25-4b37-aaa8-8c494d4751b2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7012042-14b6-4777-859d-a41bcb133d69", "sighting_of_ref": "indicator--95236a74-639d-44cf-8f70-c7ba482d6fe2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8730cad6-2d5b-4607-9e55-f7658d449792", "sighting_of_ref": "indicator--95236a74-639d-44cf-8f70-c7ba482d6fe2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6472f7-2425-4bee-990e-42e9918a7fef", "sighting_of_ref": "indicator--64ce444a-8718-488e-ae55-4b24b0c67790", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ccae086-b43e-4c9a-b69f-26fd2287ef6a", "sighting_of_ref": "indicator--64ce444a-8718-488e-ae55-4b24b0c67790", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2c5626-f40c-4f4a-9279-4d0e86173aa5", "sighting_of_ref": "indicator--386adf44-5b33-40d7-926d-ef47c75af4dd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afc4826-08db-4638-bdba-73dbc8e1f892", "sighting_of_ref": "indicator--386adf44-5b33-40d7-926d-ef47c75af4dd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf91f6f-8e2f-41e9-a430-a5bf9a471569", "sighting_of_ref": "indicator--5c9ade1c-ae06-4e2d-bee8-755f2a868ed1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b2ceaf-5380-46e9-bb30-19537102a68f", "sighting_of_ref": "indicator--5c9ade1c-ae06-4e2d-bee8-755f2a868ed1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e36c36-7189-474c-b7b8-6ab1c1b876fb", "sighting_of_ref": "indicator--1ef277d4-d366-4054-ba61-3782ff2b9571", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bda6838-475c-4e64-9005-976465867919", "sighting_of_ref": "indicator--1ef277d4-d366-4054-ba61-3782ff2b9571", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ac7d90-4ef7-424a-929f-a6533e8b8416", "sighting_of_ref": "indicator--13bb8724-528c-499e-8351-ee8a9b789bc2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603300b8-eb26-498c-80f5-ce564369ead0", "sighting_of_ref": "indicator--ed666402-424e-439a-83b5-5a1d49dace63", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a888b32-4781-4d48-9020-accbb73090fe", "sighting_of_ref": "indicator--ed666402-424e-439a-83b5-5a1d49dace63", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9ca81e-1ce4-4395-b05e-62d130d974a4", "sighting_of_ref": "indicator--ccf584c0-a20b-44e7-b4f2-3a75f55287a2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2af824-bee3-4281-ae26-5ff99ffb693c", "sighting_of_ref": "indicator--ccf584c0-a20b-44e7-b4f2-3a75f55287a2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0743194-6818-4fe2-99bf-0b59ced817cd", "sighting_of_ref": "indicator--62177a37-fbe1-4b76-bf75-f24ac6247bca", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168d1582-a3b1-458b-b5b7-45e431628bd8", "sighting_of_ref": "indicator--62177a37-fbe1-4b76-bf75-f24ac6247bca", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5953fe-e783-4135-8c06-1043522b2bb7", "sighting_of_ref": "indicator--fa6bce7c-ea28-47e5-b263-d49c58608a42", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5748352e-338d-4dc7-89bd-05393f89b187", "sighting_of_ref": "indicator--fa6bce7c-ea28-47e5-b263-d49c58608a42", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31c648c-3f55-4707-a85d-b2544a3948eb", "sighting_of_ref": "indicator--7b7179d4-963b-4521-adf3-3cec4ccefa28", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d007e8-685f-49da-ba07-43d83ebe8a1b", "sighting_of_ref": "indicator--90925e10-ccb2-4ae4-9409-ca12575c7b03", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88704d46-2c84-411b-85f8-6d16007c2059", "sighting_of_ref": "indicator--ab0eb237-ca02-46eb-8dba-2754f52e7cae", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde0395c-9048-4df3-9c10-943fde98aa2d", "sighting_of_ref": "indicator--ab0eb237-ca02-46eb-8dba-2754f52e7cae", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9acbbcf6-90ba-421c-9e04-5afeee5bef95", "sighting_of_ref": "indicator--46fdb33d-a135-4cf8-b52c-03258e4ab935", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61debd7a-ae26-484c-ad20-9c645d7e46e7", "sighting_of_ref": "indicator--46fdb33d-a135-4cf8-b52c-03258e4ab935", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343284a6-2484-4e1a-8184-8e5e8dcc83f9", "sighting_of_ref": "indicator--76e95db5-4fe5-4efb-8127-d602102c77a2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdddfef3-91e0-431a-9f87-925ff0f86e85", "sighting_of_ref": "indicator--76e95db5-4fe5-4efb-8127-d602102c77a2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3f6896-7489-4b68-8e8c-787bda0b7cc0", "sighting_of_ref": "indicator--8fc57b45-221e-4730-953f-c07564af1605", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f64432d-2e9a-4d63-892d-599e902be37f", "sighting_of_ref": "indicator--8fc57b45-221e-4730-953f-c07564af1605", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54066d55-685b-4c76-be06-2b437bd2d4c9", "sighting_of_ref": "indicator--61631528-bcd7-45c3-9ac1-a7d1de435cab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5644895-4fe9-42c7-b573-b63c2f46647a", "sighting_of_ref": "indicator--a9b19cbf-7ac7-4ec7-8703-d589208a19b0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683b1f54-7280-4492-819b-7e7e72361022", "sighting_of_ref": "indicator--a6a00ba8-2f0e-4efb-b15b-5f866ccfeabf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f66303-2324-4e40-ab32-f69ebeea07f8", "sighting_of_ref": "indicator--9b28afcf-49df-4bdb-9f08-b5431ba4f5c6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad6b30f-b1e8-48dd-ae09-61c3db8d8603", "sighting_of_ref": "indicator--9b28afcf-49df-4bdb-9f08-b5431ba4f5c6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4dc2c6-6b2a-4bfc-8994-4db19535fe5d", "sighting_of_ref": "indicator--9b28afcf-49df-4bdb-9f08-b5431ba4f5c6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb38c5ce-d0e7-4209-a94c-b1c26de61bec", "sighting_of_ref": "indicator--814eb194-392a-4ccd-9692-574715534685", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5805c541-d18a-4179-bedf-8d0346f11e59", "sighting_of_ref": "indicator--607ea6f9-761c-44a1-9b6b-61c9be6412cd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdcbe13a-030f-49ac-a4ef-47a2bacb2665", "sighting_of_ref": "indicator--2323a429-a432-4498-bb7c-63387ba3b240", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1649b880-d355-430a-b1b9-af7a4f46f151", "sighting_of_ref": "indicator--29f18622-3723-4e0c-a9d2-a9cf58996ec9", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2393f1a9-1626-4ab6-af4f-3fb5538566d8", "sighting_of_ref": "indicator--35fe0e8a-0de8-4e2c-8866-08523b8b3568", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543fd8a1-76ac-45ef-bc48-ef741e6294ab", "sighting_of_ref": "indicator--3f840480-8792-4709-a87b-2f97b9a617e3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df159a4d-e7ce-4fac-9b58-ec8e44fb4378", "sighting_of_ref": "indicator--be7b082f-5809-4d90-93f0-22ca77a349d5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ab84ec-0abd-4cb0-a18d-3a46978038a9", "sighting_of_ref": "indicator--b5a954d6-c339-4f0d-a963-195a78f9c9ac", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a0229e-cc61-4498-99e4-dfbf9b7b43e8", "sighting_of_ref": "indicator--f390fdae-0cf6-4e94-a3ec-727a4a278d3e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feceb166-b0b7-4594-85ba-9dd997940178", "sighting_of_ref": "indicator--1ecfc132-0292-4418-befa-42a864dbd97d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aba3d94-5c99-48b9-a658-e9abb17d8cf9", "sighting_of_ref": "indicator--fe313cd3-8708-4c8f-a730-2d05dffdac01", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73447cf6-e008-47b6-9227-5201730f8556", "sighting_of_ref": "indicator--a0bb5ca7-df1f-4d5d-942a-bdb1884bfdfe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bd3070-7fcd-4f82-9b7f-1c24674d3cdb", "sighting_of_ref": "indicator--eee891ba-b70f-47ab-8917-7979adcc4b3d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf0fc10-6fb5-4d1f-be52-0c96ab5d318f", "sighting_of_ref": "indicator--e767942f-69b9-4c14-861a-d25abcda7f6f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e2d189-ffd1-4582-98d4-b1e45f57c7a1", "sighting_of_ref": "indicator--e767942f-69b9-4c14-861a-d25abcda7f6f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70940049-888c-4ccc-b013-dffed92556f3", "sighting_of_ref": "indicator--e767942f-69b9-4c14-861a-d25abcda7f6f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e371ba1-bdea-4e33-8399-4cd84efa66d6", "sighting_of_ref": "indicator--a43213ab-e900-43ae-b168-832d6cf19d0d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd81868-dc6e-4870-80f7-dae07505140d", "sighting_of_ref": "indicator--a43213ab-e900-43ae-b168-832d6cf19d0d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882fb652-961c-46b8-abc9-0597c59edd79", "sighting_of_ref": "indicator--a43213ab-e900-43ae-b168-832d6cf19d0d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601d79f2-72df-4e52-bd05-3d2b719ae21d", "sighting_of_ref": "indicator--df8fa655-6302-4f31-9e83-c8568cec8138", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b922e8c-0670-4e32-bc0c-e2adcc429645", "sighting_of_ref": "indicator--2d9b79c4-6931-41e9-8cbe-25f90b310ee3", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae33ce02-fb13-4159-94d2-f9ca015839fc", "sighting_of_ref": "indicator--4f49e004-e64b-4fa6-bab3-227320edd6f4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5f40d0-d594-490a-b153-4043a4c289ac", "sighting_of_ref": "indicator--4f49e004-e64b-4fa6-bab3-227320edd6f4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b4c101-4107-4a18-ae3a-3a90790b4a7b", "sighting_of_ref": "indicator--602b5fd7-fe9e-495e-824c-012bcb73d170", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0490600-fe3a-417f-9ec6-9b2cbd30a931", "sighting_of_ref": "indicator--3885f597-37fa-4637-94bb-c187b98b63a0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae5d232-99a1-481b-9d22-2d56ab3d7601", "sighting_of_ref": "indicator--3885f597-37fa-4637-94bb-c187b98b63a0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c638da3a-2a8f-47b0-bbe2-6730675d9574", "sighting_of_ref": "indicator--a7694b7a-e7b2-4289-9f30-bd067ee3fb51", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5cf06d-13b9-4413-8e80-f5055dc8549f", "sighting_of_ref": "indicator--a7694b7a-e7b2-4289-9f30-bd067ee3fb51", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d70bc1b-b1ef-49be-b865-176f95fabea2", "sighting_of_ref": "indicator--5ebbf78f-1fd9-4b03-b0dd-e8b9487509da", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bb7bed-b7fe-451d-a1ee-32d893b63f17", "sighting_of_ref": "indicator--5ebbf78f-1fd9-4b03-b0dd-e8b9487509da", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bfc012d-bc76-484c-8bc5-042c601c9fef", "sighting_of_ref": "indicator--7af1fbc3-9b1e-4a50-a6c0-6a1d581815ab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9629c726-b3e2-4fe5-b67d-1c9153d6d2b6", "sighting_of_ref": "indicator--7af1fbc3-9b1e-4a50-a6c0-6a1d581815ab", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcd8133-71dd-452c-8a94-48b4dcd67832", "sighting_of_ref": "indicator--bafc2fb7-e936-44b3-8852-5983f752d56c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41a0a93-d093-4bf7-b1db-e61e18702180", "sighting_of_ref": "indicator--bafc2fb7-e936-44b3-8852-5983f752d56c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d50e34-d8b1-4d29-9114-34297b509d64", "sighting_of_ref": "indicator--676445df-b317-4147-b35f-b361f3bc8807", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1139183f-1a4a-43f4-928c-6254a10a6133", "sighting_of_ref": "indicator--676445df-b317-4147-b35f-b361f3bc8807", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57895b3-4f31-4da8-bea5-6945df0b014f", "sighting_of_ref": "indicator--b6faba76-088a-4d0a-8b68-b02398b96e53", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117489f1-c597-4204-922a-018b64f96241", "sighting_of_ref": "indicator--b6faba76-088a-4d0a-8b68-b02398b96e53", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c191a30-08f9-4605-97ff-3968f5e9e480", "sighting_of_ref": "indicator--4bad80ad-dc25-42f1-8247-c6bddb3fe060", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2f906a-88b4-47ed-93ef-f446be05da8a", "sighting_of_ref": "indicator--4bad80ad-dc25-42f1-8247-c6bddb3fe060", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb35fe96-6458-4336-9ce6-d3e72d6b0b5c", "sighting_of_ref": "indicator--ce099471-2efb-40b1-9b41-2bb0814fba12", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4b6cb1-c8a9-424d-a1c9-0b2248d2db8f", "sighting_of_ref": "indicator--ce099471-2efb-40b1-9b41-2bb0814fba12", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c05335e-dbb8-49e9-80ab-cb4b7d97f611", "sighting_of_ref": "indicator--b289af98-c7f5-4ab2-8c64-5b212f6b0f70", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeba6c06-5bf5-4ff7-9bcb-f003ae20c842", "sighting_of_ref": "indicator--b289af98-c7f5-4ab2-8c64-5b212f6b0f70", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10fc888-f125-49ce-890f-b689b4f8b0f6", "sighting_of_ref": "indicator--c9f74278-2d4d-41b9-84c6-32c3d7e5add1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bffd68e-fbf5-44e3-8060-52569d122154", "sighting_of_ref": "indicator--c9f74278-2d4d-41b9-84c6-32c3d7e5add1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5256af3f-9256-4af2-8c9b-543ea61eec4b", "sighting_of_ref": "indicator--794d1e66-7c65-4b36-b7f5-50a816f007bf", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d98dce9-2348-4dd1-afe7-ac06e7ec61b4", "sighting_of_ref": "indicator--794d1e66-7c65-4b36-b7f5-50a816f007bf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5461ee-50f4-42ce-96cd-0a035e2af79e", "sighting_of_ref": "indicator--265255a5-20d1-4838-b8c0-80b439f2281f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a120078d-93ff-465d-998f-be6e1a9afded", "sighting_of_ref": "indicator--265255a5-20d1-4838-b8c0-80b439f2281f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721e1b15-90c4-4065-91b0-fc77ffd837ae", "sighting_of_ref": "indicator--5ac09599-2697-4a32-9205-8e3c258e0fde", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af3fabb-3e2f-4d2f-acc8-ab162c65085d", "sighting_of_ref": "indicator--5ac09599-2697-4a32-9205-8e3c258e0fde", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc9d585-2b94-4e33-83e3-89b2a28261a1", "sighting_of_ref": "indicator--12c1ecc5-9b4a-4ee5-97f0-f0578e8f2a81", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b568e731-5c9f-4cca-bb99-517c76d418dd", "sighting_of_ref": "indicator--41b3fc16-e459-4856-adb2-338e0fe4cf18", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b811640-b571-4f2f-9954-531c1574c2c8", "sighting_of_ref": "indicator--1804adee-565c-4b4d-b21d-6c1399b85203", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b793846-53cc-48a8-bbf7-adcd9b18431c", "sighting_of_ref": "indicator--1804adee-565c-4b4d-b21d-6c1399b85203", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4ef8ae-98c1-48dc-ba43-9823ba4a8271", "sighting_of_ref": "indicator--f7b7296f-e4ab-4a6d-b52a-7e897e9b76ab", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aefe7ec-295e-4654-a162-bf571bb97b78", "sighting_of_ref": "indicator--62bb09ce-3632-4bf8-898b-f0d91bdd58dc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8958667-19a4-4f85-8037-98b95bd3be17", "sighting_of_ref": "indicator--62bb09ce-3632-4bf8-898b-f0d91bdd58dc", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3da446c-b101-45c3-8394-60403ef15a29", "sighting_of_ref": "indicator--689b974f-465d-4ad4-ac41-6fdbccf21abb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a79caf8-2a8a-473a-a6d9-838e119e0cbf", "sighting_of_ref": "indicator--099ec780-8ca8-4cb3-a24b-44bb592e0f0a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307254f9-eb58-49b3-b748-ecd6df1881e8", "sighting_of_ref": "indicator--9d953393-87bb-4db2-84a5-5a22e9578d59", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb3cbfe-bcd1-4a2b-bf43-e4e7d627c16b", "sighting_of_ref": "indicator--b2069b95-50c2-4cb7-b1a0-56f0156410d4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5334b4f7-4b42-4eda-92a0-029eb3a74b43", "sighting_of_ref": "indicator--f3f5d6fb-6820-4483-9af6-1e5cdf6d2b70", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ff10fd-ec0e-4b42-b3bc-7c6706b62bc0", "sighting_of_ref": "indicator--f3f5d6fb-6820-4483-9af6-1e5cdf6d2b70", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7787fdd-2d90-46ee-8255-8cd5cc8f14e2", "sighting_of_ref": "indicator--b97411cd-9361-4999-a95c-b2c3e3575830", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86876f13-83b3-4b4a-baa9-521e0091d96f", "sighting_of_ref": "indicator--a839dbf0-6374-4996-b3b3-a3f4d54706eb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19249ebb-9632-4228-8efd-bbd5efdab001", "sighting_of_ref": "indicator--a839dbf0-6374-4996-b3b3-a3f4d54706eb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ebf81f0-afeb-445a-88f1-5bc66ae7187f", "sighting_of_ref": "indicator--0530d84a-acda-46ca-b270-c6c567439fba", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c53ea2-1be7-4716-a3c6-0c637b8169c5", "sighting_of_ref": "indicator--0530d84a-acda-46ca-b270-c6c567439fba", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0562af0-a916-4f58-8a7d-f072473e8662", "sighting_of_ref": "indicator--33780da5-e593-42ed-b901-b9a10ba84d33", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45c364f-ba05-4af5-88aa-3063b5d32435", "sighting_of_ref": "indicator--33780da5-e593-42ed-b901-b9a10ba84d33", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38fe8e5-d6c2-48d9-b591-7118fc8715f2", "sighting_of_ref": "indicator--de4ddf49-9bf5-410a-9ed0-b805c876cc23", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d31cd5-6cb9-4a7a-a2cb-40456dae46b2", "sighting_of_ref": "indicator--de4ddf49-9bf5-410a-9ed0-b805c876cc23", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29554aad-31bb-422d-881a-64980025701c", "sighting_of_ref": "indicator--74c06d36-efd5-4eaf-a3c8-0ea85d086dfe", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30235aab-1548-4801-8124-cc61d02c0a5e", "sighting_of_ref": "indicator--92a74234-f1bc-4649-9409-36ae56d33caf", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51279dbe-780f-4bfb-bfd7-35fe648f3d7d", "sighting_of_ref": "indicator--063c4cd6-d056-4523-9d3c-ae34dd4e6e58", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b2ea8b-a787-48c8-8fe6-f51a2fadfdf8", "sighting_of_ref": "indicator--cbde8fb5-8573-4107-b2d1-4707dd917d92", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62dd726-d556-4cd1-bcec-d5ad586f08f7", "sighting_of_ref": "indicator--cbde8fb5-8573-4107-b2d1-4707dd917d92", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc981e7-9cac-4e20-9434-8cc3016ec16b", "sighting_of_ref": "indicator--644d2ee4-da73-4b73-934c-74cd1577e30e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ec9e86-5394-4719-af6c-45de4adcd581", "sighting_of_ref": "indicator--644d2ee4-da73-4b73-934c-74cd1577e30e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554ef91e-3dc7-45ab-8d0d-2684f3c324d2", "sighting_of_ref": "indicator--21c92422-36cd-4562-8c88-e7a300217e87", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621f1a30-6dfc-4c2e-977e-64f1ead8ac7b", "sighting_of_ref": "indicator--21c92422-36cd-4562-8c88-e7a300217e87", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2670034b-1fcf-4fe1-9e5a-e7bae57ddae6", "sighting_of_ref": "indicator--e23f5f84-0963-49ad-96f6-56378f0c6b11", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d459f7da-afb6-4c6b-8b2d-4e19d1fd2b2b", "sighting_of_ref": "indicator--e23f5f84-0963-49ad-96f6-56378f0c6b11", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46a28ae-8d74-4a33-8da2-62ca0737b324", "sighting_of_ref": "indicator--473407d4-c0fb-43dc-a998-d1135dd86fb6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791a9af1-f69a-4885-91c9-07fa4971e607", "sighting_of_ref": "indicator--473407d4-c0fb-43dc-a998-d1135dd86fb6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68cebe1a-8e2d-4a52-b6ed-dd938cd1192a", "sighting_of_ref": "indicator--a899be95-8fac-49e4-8f16-b9632e95fa46", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b49667e-c7f1-4b99-8a69-ee6127cacd2d", "sighting_of_ref": "indicator--c44221e9-3579-4b28-9f0c-1d0cf326e8cb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec98e44b-3a85-414a-bbfc-fd9b8f872a14", "sighting_of_ref": "indicator--518b36aa-0d3d-41a2-b66b-ebcd35e1d061", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450ef2e1-ba15-4bf9-bc9d-1d267742f1a5", "sighting_of_ref": "indicator--d4de0252-8390-44ae-aac4-88c05f4e4239", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d5047a-8b4b-4e8d-a6f6-8f401e1c03d9", "sighting_of_ref": "indicator--5f3fddab-c6a2-49e3-8ea5-d3ab6f5d6c37", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2e5f32-b1aa-4885-bf7a-c566cf1c6bb0", "sighting_of_ref": "indicator--5f3fddab-c6a2-49e3-8ea5-d3ab6f5d6c37", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3415a39-a22a-433f-afd8-488e4999b0e2", "sighting_of_ref": "indicator--7c547c4d-d54b-4227-ab15-afc25258bf4c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c0777f-b6fe-463a-9bd9-cfeb058efd71", "sighting_of_ref": "indicator--7c547c4d-d54b-4227-ab15-afc25258bf4c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aae7169-98e4-4346-b090-93ca815aa38a", "sighting_of_ref": "indicator--24ef8d85-2022-4c7c-8fff-a189914c1077", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a78391-25f2-4b82-a7c1-7bcdefcca770", "sighting_of_ref": "indicator--24ef8d85-2022-4c7c-8fff-a189914c1077", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31737705-e307-4eae-a723-4b433cbcb9ea", "sighting_of_ref": "indicator--2ddc2aed-6c89-45fe-9584-3f1048577dd7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3617ab-dd6d-4a40-9d94-987e41dc7b96", "sighting_of_ref": "indicator--2ddc2aed-6c89-45fe-9584-3f1048577dd7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa50af6-760a-4018-a60e-08c4d7c6521e", "sighting_of_ref": "indicator--07dbf21b-012a-4290-84e7-a1cc27dfbf44", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d484eaa0-267f-4f94-8bba-10870b9989e2", "sighting_of_ref": "indicator--07dbf21b-012a-4290-84e7-a1cc27dfbf44", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c869d6-aa3e-47f2-8979-58070d4968f7", "sighting_of_ref": "indicator--acfbb3b2-ba56-4b60-a87c-244c160a2a64", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7dc0bc-cc45-471e-bbe0-835e8696fc01", "sighting_of_ref": "indicator--02da0e9b-862c-45bd-915f-825d1ed9f65a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53573eac-ae29-487c-9106-3e35c8cea7c5", "sighting_of_ref": "indicator--e82da9b1-1d0b-44ef-9923-7dea50a60b11", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37401082-1239-45d6-ad8d-9512d7df6645", "sighting_of_ref": "indicator--e82da9b1-1d0b-44ef-9923-7dea50a60b11", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b54442-b3b0-4d04-869c-17d96aacdf35", "sighting_of_ref": "indicator--22f051fa-1cd6-4449-8da8-6c0fc1678110", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76dd1d2e-5e7e-4c9c-b6a0-798e40643d24", "sighting_of_ref": "indicator--22f051fa-1cd6-4449-8da8-6c0fc1678110", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca88e50-3f36-4078-bbae-2e5bc4f2167d", "sighting_of_ref": "indicator--af61d022-38c1-4098-93f6-9a1fdf16aed0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b51cfa7-0201-4481-92a3-46b1aae4f896", "sighting_of_ref": "indicator--af61d022-38c1-4098-93f6-9a1fdf16aed0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35246f0-30a3-4a58-8c1d-8f35cbf44b50", "sighting_of_ref": "indicator--371dbdf8-69ab-4eba-9eb1-5450de4d0ec3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a785dfa-4465-4498-8c68-eae2a1cb5b0f", "sighting_of_ref": "indicator--371dbdf8-69ab-4eba-9eb1-5450de4d0ec3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef1f05e-de35-41f2-bcb0-a40f939bac81", "sighting_of_ref": "indicator--8722a071-857b-49c2-9e11-9ab61aa97ce8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea881f9-37fb-49bc-b664-857651bd8888", "sighting_of_ref": "indicator--8722a071-857b-49c2-9e11-9ab61aa97ce8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d580091a-319e-40f4-b7da-cc9a742fc0fc", "sighting_of_ref": "indicator--aa3f2fc3-a174-4e29-9f59-ba3f96a0a6c3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b0bcdb-8b99-4c75-91c7-cd5325824c32", "sighting_of_ref": "indicator--aa3f2fc3-a174-4e29-9f59-ba3f96a0a6c3", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207c8263-a562-4313-89d5-8d6e923e10c8", "sighting_of_ref": "indicator--46e11512-e68d-42a4-b1e5-18d90fa510ff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5afb1d8-5825-4b35-a2c0-03e8e64d45b9", "sighting_of_ref": "indicator--46e11512-e68d-42a4-b1e5-18d90fa510ff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfe0d0f-d397-46fb-b9bc-cb75b794d05a", "sighting_of_ref": "indicator--4db346b6-64eb-48d3-a829-41bce7c77c1b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9ad47e-347b-422a-9563-07d293d2ac86", "sighting_of_ref": "indicator--4db346b6-64eb-48d3-a829-41bce7c77c1b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637ceddc-e91d-4bf6-98b2-d2a90998e9ec", "sighting_of_ref": "indicator--9eb98eeb-7b0b-4681-a6c4-63e4857cdfd1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1344e80b-3e83-4bc0-86fd-04f95d0c791d", "sighting_of_ref": "indicator--9eb98eeb-7b0b-4681-a6c4-63e4857cdfd1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fd1d39-4a62-499e-88f2-3785c23ea340", "sighting_of_ref": "indicator--47633cae-7cef-47ef-938f-49e66dfb158f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef3e401-e48e-498f-9d41-be7662c4b245", "sighting_of_ref": "indicator--50a519e4-6707-41fa-b4c6-c6108379c9c2", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d678bebf-d812-4076-a334-82af36941187", "sighting_of_ref": "indicator--9074a975-76a4-4c5b-9ddf-27e29711c0ad", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be7763b-c880-4c53-971a-8d314bb57301", "sighting_of_ref": "indicator--9074a975-76a4-4c5b-9ddf-27e29711c0ad", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87827c26-b51d-47ab-a421-fa3196b5b4f1", "sighting_of_ref": "indicator--cab82aa7-1a0c-4ce9-a0bc-9ea28931760d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6745da76-dd4e-4368-836c-c8676816866d", "sighting_of_ref": "indicator--855e0c52-a6e8-42fe-b738-22d4eb2412ac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09582769-7ac6-43c5-9b87-096833eeb667", "sighting_of_ref": "indicator--855e0c52-a6e8-42fe-b738-22d4eb2412ac", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153950e3-bad9-437f-b673-6f43db9f1228", "sighting_of_ref": "indicator--9e118ca1-f084-4bfd-9378-bc5db237d467", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ad4ff8-a811-465c-a0e7-63786270dad2", "sighting_of_ref": "indicator--8428b8d0-2949-4285-9bfd-553fd08f1c72", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01f7958-7e34-4b80-ba5c-459f0b992407", "sighting_of_ref": "indicator--170d609d-8afd-4244-97ee-e002c3c63768", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd208d49-24bd-46ef-8a2b-44e9473e0805", "sighting_of_ref": "indicator--170d609d-8afd-4244-97ee-e002c3c63768", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab957382-b338-4527-9b2c-9c9bb63c6576", "sighting_of_ref": "indicator--45904c97-a769-4abd-bddc-5e4233bd0ac8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4ddaa8-6335-4cc5-b838-06c07c015b24", "sighting_of_ref": "indicator--45904c97-a769-4abd-bddc-5e4233bd0ac8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97858622-7aa5-4939-b1fb-2ca16559342c", "sighting_of_ref": "indicator--092a2c25-5240-4bfe-9e39-a16ef0b8b0eb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5a1bbc-de99-423c-b409-10a5283e9063", "sighting_of_ref": "indicator--092a2c25-5240-4bfe-9e39-a16ef0b8b0eb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc44a801-e7d6-4233-a1a5-209f7647e5da", "sighting_of_ref": "indicator--299bcac2-5c42-461b-9388-55fb8f0c5d33", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646a4962-2753-4530-877d-8a838dbc898c", "sighting_of_ref": "indicator--299bcac2-5c42-461b-9388-55fb8f0c5d33", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688b8a59-1545-424a-9a53-542d3e115e7e", "sighting_of_ref": "indicator--fcef69d7-40c9-449f-8444-c8ed77bb133a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f9bb20-b8cf-437d-b45f-d88260e93772", "sighting_of_ref": "indicator--fcef69d7-40c9-449f-8444-c8ed77bb133a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5155b0-34f3-44b7-b758-560435feb838", "sighting_of_ref": "indicator--e7dcbca3-3136-4540-bc58-130e7bbc6e2d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c153fe7a-6bad-4602-8967-57ccef9b9c80", "sighting_of_ref": "indicator--deb030ae-1680-4111-81b4-a216c5084e13", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67288fc-8051-4202-aa36-efec95a674ff", "sighting_of_ref": "indicator--deb030ae-1680-4111-81b4-a216c5084e13", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c645074-9944-4881-81ef-f7c779b4a27e", "sighting_of_ref": "indicator--ea65feb6-d435-4b18-a151-89583465842d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941028ac-36b8-438f-8dec-eb7a74de2a0c", "sighting_of_ref": "indicator--ea65feb6-d435-4b18-a151-89583465842d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a383666-a9be-4255-8c5e-0b6fb2234f74", "sighting_of_ref": "indicator--355fe0db-4878-4788-829b-23832a8baad1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c049536-2ae6-4f04-bb9e-d39087e3c1a4", "sighting_of_ref": "indicator--355fe0db-4878-4788-829b-23832a8baad1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6923ce-ea7a-45a0-b026-ffc26863ea25", "sighting_of_ref": "indicator--dad7c9a5-f476-4638-8692-34438f1ecbd6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f43037f-e7d8-4836-bbb8-2b80886f319a", "sighting_of_ref": "indicator--dad7c9a5-f476-4638-8692-34438f1ecbd6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f934acdb-ef72-4c4e-91f2-ee6aa21b4e63", "sighting_of_ref": "indicator--59e88fad-2ed4-493d-b8d9-eb477aad21c2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df94b2aa-0528-4f49-9bab-91e33f149cb2", "sighting_of_ref": "indicator--59e88fad-2ed4-493d-b8d9-eb477aad21c2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a9cc89-ca57-48b6-8193-1365208c4ba2", "sighting_of_ref": "indicator--eead6b3c-780f-449b-b73c-a96431afc77d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104f8d2c-9f48-4994-871e-fa0b1d69609c", "sighting_of_ref": "indicator--eead6b3c-780f-449b-b73c-a96431afc77d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9038b6-d687-4248-98da-51faa819dd1d", "sighting_of_ref": "indicator--5e605b49-1095-4bf0-9a93-fa307b1a36b0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80a46f8-29a3-4ac7-9702-a80a212d9750", "sighting_of_ref": "indicator--5e605b49-1095-4bf0-9a93-fa307b1a36b0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406723c0-3277-40c1-9074-f760ce7591a3", "sighting_of_ref": "indicator--b638392e-9127-4e06-8f1b-55b77edc7f08", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a1c81f-0fb8-4e20-8944-6e8840410a6d", "sighting_of_ref": "indicator--b638392e-9127-4e06-8f1b-55b77edc7f08", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a65938-124f-4e66-af48-5bfedb6147c6", "sighting_of_ref": "indicator--a3d21349-a679-409f-9b7e-c41f999e342e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7acd152-5f78-4c8e-9c58-b374f6c980c7", "sighting_of_ref": "indicator--a3d21349-a679-409f-9b7e-c41f999e342e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ad06ec-6196-45fe-80f0-4bc1fe297367", "sighting_of_ref": "indicator--0db906d8-4c43-447d-a94f-cff36109c436", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c047d96d-34d2-4cc2-9916-20d420586245", "sighting_of_ref": "indicator--0db906d8-4c43-447d-a94f-cff36109c436", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc717f3-779f-4ba5-b23f-116f594dcf19", "sighting_of_ref": "indicator--821391b1-6829-4500-988a-531b7630e5d2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58066104-c095-4ac2-a1e2-6ec050db6cc9", "sighting_of_ref": "indicator--821391b1-6829-4500-988a-531b7630e5d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7996897e-cba1-48ac-b11e-dd3c8a37ecdf", "sighting_of_ref": "indicator--a5152a77-bfec-4aab-81fd-489aaac30fb7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f8fc14-9adf-4527-bc60-8d98d3744fc9", "sighting_of_ref": "indicator--a5152a77-bfec-4aab-81fd-489aaac30fb7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3966d27b-0a82-421b-959c-06b406b1be7b", "sighting_of_ref": "indicator--2f17b234-7622-460c-b810-bcbca9a1f8f6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332d8c17-c71f-4ff9-b9ee-f3a168104d8b", "sighting_of_ref": "indicator--2f17b234-7622-460c-b810-bcbca9a1f8f6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4fdeda-2e0b-490b-a2fb-55f13d3fce9b", "sighting_of_ref": "indicator--39a1b3e4-002b-452b-ad5e-4ab9bad27bec", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69b8439-7cf3-4fe8-8084-1e4bb4676b08", "sighting_of_ref": "indicator--39a1b3e4-002b-452b-ad5e-4ab9bad27bec", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494121e0-bf15-4407-8f11-d235f642abf3", "sighting_of_ref": "indicator--11b72524-79dd-4d54-8838-2f08c47c3082", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c99586-81f6-4da6-9665-2742b1bf5b85", "sighting_of_ref": "indicator--11b72524-79dd-4d54-8838-2f08c47c3082", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5dcac9-aef5-42aa-8b1b-53760057fd80", "sighting_of_ref": "indicator--fcdec514-89a1-4ed0-b4a6-d8a7a9030cd1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2712013-919e-406e-9fe8-9bef70989426", "sighting_of_ref": "indicator--fcdec514-89a1-4ed0-b4a6-d8a7a9030cd1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb1a402-fb02-4159-9215-d0ad1b89172a", "sighting_of_ref": "indicator--beccece3-b6fd-4a7f-933b-950b0950eaed", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f3563e-4f2f-426b-934b-39506e389109", "sighting_of_ref": "indicator--629460e3-8e53-4d92-9f97-5f6d841942f7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9592372-2a30-477a-b6b9-1f9993006c32", "sighting_of_ref": "indicator--629460e3-8e53-4d92-9f97-5f6d841942f7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d576b4cc-568f-4884-a7d4-ae3c00d3a2ff", "sighting_of_ref": "indicator--c435e588-22b7-496b-93eb-45b88e8d13f3", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8698150-c914-409e-b6f7-2b825653dbbd", "sighting_of_ref": "indicator--454b8e30-933e-48b9-bc6d-1e50813ad17f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4f506a-1039-430c-954a-2042689f825d", "sighting_of_ref": "indicator--454b8e30-933e-48b9-bc6d-1e50813ad17f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354f8889-4df4-4c40-8240-9fc78fbe4029", "sighting_of_ref": "indicator--a2ae63f4-e7e1-44a5-9663-e0bf61f82d92", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31efda40-5e8a-4acc-9bc9-1366d9f829a4", "sighting_of_ref": "indicator--a2ae63f4-e7e1-44a5-9663-e0bf61f82d92", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75d6db3-a79a-4ba6-9890-717e91af7eb7", "sighting_of_ref": "indicator--da0e2a92-2149-43da-b9e5-0e1d78553dc2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfec353-c7ad-4c97-a8b9-d8c1100ad47a", "sighting_of_ref": "indicator--da0e2a92-2149-43da-b9e5-0e1d78553dc2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d5a7d0-e170-4bfe-900d-242523bae998", "sighting_of_ref": "indicator--4cc1aee5-49f8-480b-8262-17db1761734a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97eb2264-fe5d-4825-996b-c5476f8ddd95", "sighting_of_ref": "indicator--4cc1aee5-49f8-480b-8262-17db1761734a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc075d3-dd9a-4561-bf61-41b7c3c6c7d3", "sighting_of_ref": "indicator--16e7befa-3410-41ed-b5cd-c7b7e1da030b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1d7e8a-320c-4e66-9316-1390cbfe3c23", "sighting_of_ref": "indicator--16e7befa-3410-41ed-b5cd-c7b7e1da030b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf7bb95-7a2a-4c92-b40f-4ee61441102d", "sighting_of_ref": "indicator--ec991cfd-67e2-4b7e-a5ec-2f4762eb1d17", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59677c7-1ee0-4fc8-a4e9-1d5328b90848", "sighting_of_ref": "indicator--ec991cfd-67e2-4b7e-a5ec-2f4762eb1d17", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1009eeb-34d1-4e46-a375-cdce31e165c9", "sighting_of_ref": "indicator--7695251a-d646-4c02-9470-e93fe1302dee", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95c6c10-d6b6-43ab-b4e8-c686f9c22ed9", "sighting_of_ref": "indicator--7695251a-d646-4c02-9470-e93fe1302dee", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622bee40-6dfa-4c10-8520-7f6fdbd3bb3a", "sighting_of_ref": "indicator--bae3964a-5f39-4b6e-9e1e-ce54f1c2f662", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3aa748-759f-4010-a1a1-d85bcaffd7cb", "sighting_of_ref": "indicator--bae3964a-5f39-4b6e-9e1e-ce54f1c2f662", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0e82e8-e4f4-49ee-9165-ce61fb4b6322", "sighting_of_ref": "indicator--25ae3119-cff9-4c40-91e9-db8919a10969", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7805452a-4e83-4d1e-bda1-242b94c02d62", "sighting_of_ref": "indicator--25ae3119-cff9-4c40-91e9-db8919a10969", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b8eb7d-9a7d-49af-b334-355ea89365b2", "sighting_of_ref": "indicator--2c4feec0-1db1-460b-86ce-dbb597a0bd67", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b348c0d2-cb94-40c1-ac1e-594954f680f0", "sighting_of_ref": "indicator--2c4feec0-1db1-460b-86ce-dbb597a0bd67", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c38e9fc-27ac-445b-9659-605cf821b855", "sighting_of_ref": "indicator--a25d6741-55cd-42c4-80b4-c2a45e424e38", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89f779f-159e-4499-962b-b7b2a4198df2", "sighting_of_ref": "indicator--a25d6741-55cd-42c4-80b4-c2a45e424e38", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4995fe-c406-4cce-8e30-b5d08f96067b", "sighting_of_ref": "indicator--8d41565a-f388-4616-b6dd-d4f6c4156060", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a78f0f5-cf4f-4162-8401-3b3edb9ce3a5", "sighting_of_ref": "indicator--8d41565a-f388-4616-b6dd-d4f6c4156060", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7628e65f-7539-4f28-b4b0-6f80a6fce343", "sighting_of_ref": "indicator--c24e57b9-b58e-4f5a-9ffe-dc2fdc5ff9af", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e976df-89ff-4c4e-b73c-fb9b5209a0b7", "sighting_of_ref": "indicator--c24e57b9-b58e-4f5a-9ffe-dc2fdc5ff9af", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0945ab7-e8f6-4de1-a227-2c91aec9df89", "sighting_of_ref": "indicator--53406da7-b08c-495c-865f-7d31797789da", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa07016-3638-4850-aa37-ce23894a037e", "sighting_of_ref": "indicator--53406da7-b08c-495c-865f-7d31797789da", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c718d6d5-721b-4019-8671-1b88c28c8091", "sighting_of_ref": "indicator--8d5dbcaa-5c1d-4bad-9abc-92652197b8cb", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260e8935-91d0-49f3-a40f-5b887e54cc77", "sighting_of_ref": "indicator--8d5dbcaa-5c1d-4bad-9abc-92652197b8cb", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75a8965-a0b2-4965-b27b-5dceb7c1c8e3", "sighting_of_ref": "indicator--245f45b1-c5fa-46c0-9cf4-ec35fb0d4464", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a7bde9-8f42-49e4-b7f2-4d57360d1e89", "sighting_of_ref": "indicator--9de86aab-34b5-4db9-894e-fb69845fdee6", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68db0e52-7310-4546-bed3-5576a17ea8e5", "sighting_of_ref": "indicator--5bfb1c63-d389-4b94-95a6-6013edd3341a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6a9c10-1f4d-4307-9e63-37e4cc525568", "sighting_of_ref": "indicator--7e2fe0f6-37f5-45f1-aaf9-f38b6ebde75e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923c4270-0843-4b3b-904b-f8af7edd3ba4", "sighting_of_ref": "indicator--8eb0a0bc-1ff4-4977-b832-1a071d1140f0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--402827a6-ea19-4641-85bb-6bae0a419f94", "sighting_of_ref": "indicator--1daecbb9-e854-4851-86cf-867a84526460", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbca7af9-4064-48f2-9c3a-2fe137fd4360", "sighting_of_ref": "indicator--1daecbb9-e854-4851-86cf-867a84526460", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e95943-31b1-4aa3-a0a5-8f14cc55f682", "sighting_of_ref": "indicator--7e12fb14-154f-4453-a468-df14fa1ede2c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948a1bc1-0159-41f6-a36b-538a88ac5913", "sighting_of_ref": "indicator--7e12fb14-154f-4453-a468-df14fa1ede2c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934447fa-2795-4e38-a9ff-2386810bdd35", "sighting_of_ref": "indicator--bfb7a9fd-4ad3-41af-9f42-0713b8829ad4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0754fcd-157f-4ec7-8cd0-69ca24ac457c", "sighting_of_ref": "indicator--bfb7a9fd-4ad3-41af-9f42-0713b8829ad4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ed68f9-e13b-4fbd-b4d6-79e458178ba8", "sighting_of_ref": "indicator--9083364c-c670-4223-851c-cb40ad884dc8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2f148e-2b5b-4934-8c5d-61e416938ae9", "sighting_of_ref": "indicator--9083364c-c670-4223-851c-cb40ad884dc8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd51e3b-2720-4249-bdad-2ffaedc51b0f", "sighting_of_ref": "indicator--de357c78-4481-4068-b03d-65b72a870165", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45fbeb67-597a-48bc-a4fe-8e28796d5f05", "sighting_of_ref": "indicator--de357c78-4481-4068-b03d-65b72a870165", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef85f3ab-446b-4ddf-b25a-d7e09755f3dc", "sighting_of_ref": "indicator--7baa202a-3fd9-4a4b-98ed-c8dc933b8c37", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df1cb0a-9a4e-469e-9905-dbbda0c8a58d", "sighting_of_ref": "indicator--7baa202a-3fd9-4a4b-98ed-c8dc933b8c37", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3559deba-7240-4365-8e0a-4a393adc06c2", "sighting_of_ref": "indicator--649b45fc-34ba-43ed-bcfb-d1b558bb0db6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07b2fd5-da8f-4199-a0b8-4469e756abb6", "sighting_of_ref": "indicator--987d6cc2-33e4-4675-a46e-ea61b8ca2add", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e04d7b-37d6-4a62-9b19-03773a6e4b4a", "sighting_of_ref": "indicator--987d6cc2-33e4-4675-a46e-ea61b8ca2add", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6607f83e-04d0-4c63-ba64-309338533892", "sighting_of_ref": "indicator--cbfdffc6-5385-4943-9a53-845e9887eb67", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7f3a0e-8190-4f07-973f-b0a5e1aa467b", "sighting_of_ref": "indicator--cbfdffc6-5385-4943-9a53-845e9887eb67", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57047a99-2078-4158-80cf-7ffe818d110b", "sighting_of_ref": "indicator--b06ec1ba-32c5-4ebc-865a-b53aa2154151", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc317810-530e-424a-a9e4-b15c05110dfd", "sighting_of_ref": "indicator--1c6dd7ac-66d9-4dd9-b652-252cf12b4e17", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea00a5eb-353b-4ca0-8beb-bcecd98a8f21", "sighting_of_ref": "indicator--2b40f082-3dbf-4caa-8893-32f555ca809d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08309623-f0e5-4419-a97c-af76827a6960", "sighting_of_ref": "indicator--2b40f082-3dbf-4caa-8893-32f555ca809d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424c9651-a573-4c96-8336-7821860679c1", "sighting_of_ref": "indicator--1aabe356-30ac-4a52-885d-5f5a1405e243", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c97de7-60bc-48fd-aa06-231e254fe147", "sighting_of_ref": "indicator--1aabe356-30ac-4a52-885d-5f5a1405e243", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a233a8-2acc-4c06-ad19-893cfb6a4034", "sighting_of_ref": "indicator--a313ceab-b741-445c-ae10-6795be34abbd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c51139-60d8-44e9-be1a-f8088500c0ef", "sighting_of_ref": "indicator--a313ceab-b741-445c-ae10-6795be34abbd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f63570-e4e5-4e31-b5f6-f0213e3e33e5", "sighting_of_ref": "indicator--e06333d1-6579-469b-be10-c503c17d207a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323dfcb4-a3d8-40ac-a385-29d1145c4cb5", "sighting_of_ref": "indicator--e06333d1-6579-469b-be10-c503c17d207a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7276a46f-78f2-4e5b-b656-6052c74a877e", "sighting_of_ref": "indicator--dacfe7c0-b5ed-4344-8e12-425fc9a7e1ff", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68def72e-b0df-4cd2-9139-1133d7a16e30", "sighting_of_ref": "indicator--dacfe7c0-b5ed-4344-8e12-425fc9a7e1ff", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151429f6-9f8c-4a67-90e5-192a03ee84a8", "sighting_of_ref": "indicator--a71b9dd2-7b20-4c9d-8f5d-48372afd4544", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6268fb8a-9b17-458e-8ccd-0418398888ad", "sighting_of_ref": "indicator--a71b9dd2-7b20-4c9d-8f5d-48372afd4544", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fab292-ac71-4dc7-b26b-896019d1fe8a", "sighting_of_ref": "indicator--1141795e-b2e1-483a-a50f-a54a3c40b6ec", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8351027-e622-417e-94a5-4aa31554385f", "sighting_of_ref": "indicator--1141795e-b2e1-483a-a50f-a54a3c40b6ec", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e60a695-eef3-4548-a583-c527e80f5547", "sighting_of_ref": "indicator--47d20545-8d0b-406d-bb8a-d90b901a6e00", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5b17c4-d22d-4b0d-bff2-cf765cc69e1d", "sighting_of_ref": "indicator--47d20545-8d0b-406d-bb8a-d90b901a6e00", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802cab84-b7d9-4f13-93b5-5013baa19faa", "sighting_of_ref": "indicator--42c8e202-28f5-40da-b36b-e361624dd81e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fac11c8-7abe-4e3a-b5dc-95dc12a924e6", "sighting_of_ref": "indicator--42c8e202-28f5-40da-b36b-e361624dd81e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0f735e-c90a-4002-ae23-7c89e7d49511", "sighting_of_ref": "indicator--dddc0130-a6e1-4406-839f-04e975574f77", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104620d3-5468-4dd9-a8c2-75c9d4027993", "sighting_of_ref": "indicator--dddc0130-a6e1-4406-839f-04e975574f77", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1faf65-b9cb-4965-a257-e12aa1b4d47f", "sighting_of_ref": "indicator--0392d1b7-1d77-4773-b1ca-ff3b82f3e2d0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53107dbe-fe2b-493e-90fb-b80c722a7bd6", "sighting_of_ref": "indicator--0392d1b7-1d77-4773-b1ca-ff3b82f3e2d0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a10be1-76e1-45f6-af9b-67445c584f9d", "sighting_of_ref": "indicator--83a4d563-b982-4cdd-81f1-217857a80cf0", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95ac713-cdee-4981-b221-d23b1a1c4bdd", "sighting_of_ref": "indicator--83a4d563-b982-4cdd-81f1-217857a80cf0", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d35a8fb-fa19-4b0c-b51c-513ca1529ad4", "sighting_of_ref": "indicator--a2a83e52-40e4-4079-a0bc-02332d54d78d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed81816a-68f5-4f1c-bb4c-6b7ab353431b", "sighting_of_ref": "indicator--a2a83e52-40e4-4079-a0bc-02332d54d78d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041ea3dd-10f0-4580-bb78-b33f7adc23eb", "sighting_of_ref": "indicator--72d31016-65c0-4ac1-b435-b78f78616cad", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc039a8b-07a3-46a7-abc4-5cc5c5f9cb20", "sighting_of_ref": "indicator--72d31016-65c0-4ac1-b435-b78f78616cad", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7cf35fd-5f90-49e9-9e7d-6e9a6a651171", "sighting_of_ref": "indicator--a36d7281-e67e-40b3-89c6-eebb5456986a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf513381-1dda-400c-a214-cfadb4470cad", "sighting_of_ref": "indicator--a36d7281-e67e-40b3-89c6-eebb5456986a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c863a820-9bf1-4542-8104-14cc0463f2e2", "sighting_of_ref": "indicator--f1c2c4bd-0fa8-498b-99a0-c431149cb38b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b7e3a6-2fe2-450b-be87-23b108703d0c", "sighting_of_ref": "indicator--f1c2c4bd-0fa8-498b-99a0-c431149cb38b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ae7ba0-1880-4157-97e1-77a6f9ab7302", "sighting_of_ref": "indicator--de49dcc2-f52d-440b-b751-41ccf0f30898", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413e51ce-b161-4ee8-82b1-995659ef8171", "sighting_of_ref": "indicator--07c9026c-c80c-49d0-b12a-de6fe6ff5787", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c967afe7-c362-49fc-b3a1-e86dab246dc1", "sighting_of_ref": "indicator--07c9026c-c80c-49d0-b12a-de6fe6ff5787", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a472302b-eb27-40b2-863a-e01f81546da2", "sighting_of_ref": "indicator--7ad23e84-a5c1-4522-ac51-fa023abeeaef", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df0d1fd-84d5-4606-8fef-50138f22c3af", "sighting_of_ref": "indicator--5458d345-5cf0-4a64-adc4-4d7bea0dcc1c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833b494a-1169-45f5-91ce-4c2fad394ec8", "sighting_of_ref": "indicator--d10e216b-28aa-491a-8344-99526a98a779", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee3f61a-552a-4d72-8786-ce1629c15a57", "sighting_of_ref": "indicator--d10e216b-28aa-491a-8344-99526a98a779", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1838116c-3851-4f7d-ac66-bf60a19fc892", "sighting_of_ref": "indicator--ca952c37-0ab5-429c-94c0-c4f16fef1383", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79adc811-3b38-486b-88fd-baaf1cf52e66", "sighting_of_ref": "indicator--2d938ec3-1117-4656-b9ce-058c8ead48ef", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba0652c-74f7-403d-a665-1326b1b962e0", "sighting_of_ref": "indicator--ad599921-f6e9-4038-a729-1013cfbc33d2", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9da2545-8b8f-4b17-a7e6-69088b82fb44", "sighting_of_ref": "indicator--fa03f613-937e-43fd-93c1-5bd0a9e928d7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ecf40c-b232-46f1-b83d-3ae4317adf07", "sighting_of_ref": "indicator--fa03f613-937e-43fd-93c1-5bd0a9e928d7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6febbaf-04b1-4206-ae5d-f436449a2c3e", "sighting_of_ref": "indicator--b8e43952-47ea-4b06-a5cf-e08e66d82f7f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea93e7d3-ea10-4fa9-8a19-bb0709858dba", "sighting_of_ref": "indicator--b8e43952-47ea-4b06-a5cf-e08e66d82f7f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f45fee-8b4e-4f26-a914-aced1a23b9ad", "sighting_of_ref": "indicator--6d19354f-9b9e-4fa3-98b8-c11f75a4a83c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99eb7572-acd7-4649-b4c1-62821ffb0633", "sighting_of_ref": "indicator--6d19354f-9b9e-4fa3-98b8-c11f75a4a83c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7216bf1f-f4c6-46b2-9425-3ae7a72af6f0", "sighting_of_ref": "indicator--0add07ca-c911-4a75-85c9-83429d0a3ac6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ba7231-4505-4abd-9ce0-83941f3efac8", "sighting_of_ref": "indicator--0add07ca-c911-4a75-85c9-83429d0a3ac6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc76d61-7e7e-4bfc-9e75-b7c3a5cc8838", "sighting_of_ref": "indicator--b1fdad48-c710-4d30-9852-99712143a3dc", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99f51e1-a316-438e-86a6-fb8f72027fea", "sighting_of_ref": "indicator--474779b9-0220-4ac2-8cd4-df2ae5229ada", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7f7de8-7108-4635-b6c4-e6912e0bc0b5", "sighting_of_ref": "indicator--474779b9-0220-4ac2-8cd4-df2ae5229ada", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c05084-7368-428b-aec6-b9ff4f2b4243", "sighting_of_ref": "indicator--5740fc39-e340-41b2-bda9-a9828617d929", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59979c7-a0e9-49b3-9807-178123acc703", "sighting_of_ref": "indicator--5740fc39-e340-41b2-bda9-a9828617d929", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d9e8c3-5da7-4848-94d5-5d9f1d79feea", "sighting_of_ref": "indicator--d07ab495-5370-48af-bd6a-255bacdeefb8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a9b913-fce7-4c99-84fb-a258560f9496", "sighting_of_ref": "indicator--d07ab495-5370-48af-bd6a-255bacdeefb8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee657b2c-06d7-47a6-81fa-b2b2d502843c", "sighting_of_ref": "indicator--5d1116cc-b9fd-4e59-98ea-f580f6a1f57d", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2f2d6a-a1e0-4655-8033-878ad15d8217", "sighting_of_ref": "indicator--5d1116cc-b9fd-4e59-98ea-f580f6a1f57d", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fd338a-34a2-4769-a8da-acec49ab47fb", "sighting_of_ref": "indicator--afe20142-b88b-45ab-b395-f1236b821025", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5e6cf7-f23d-4b8d-b322-c7ade7c2f360", "sighting_of_ref": "indicator--afe20142-b88b-45ab-b395-f1236b821025", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7838f0b9-8eac-4171-bb3b-ba97bf24cb3f", "sighting_of_ref": "indicator--b4c44994-879b-464f-bd48-df5153fda8ed", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc324d2-6f76-4642-8080-4cb5b6d8fb01", "sighting_of_ref": "indicator--b4c44994-879b-464f-bd48-df5153fda8ed", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317ee57d-1dc3-45e4-85e9-6d2071fb45c8", "sighting_of_ref": "indicator--433f04c4-980f-44c0-8c57-1daa2390d2e7", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8b35d9-bc53-40c4-bd62-d53064456a00", "sighting_of_ref": "indicator--433f04c4-980f-44c0-8c57-1daa2390d2e7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487d094a-4d0b-4638-8a51-9db6432347d2", "sighting_of_ref": "indicator--8ac4aa6f-b2b2-4529-b29d-1f5169814f26", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034fa372-ee71-4f91-8505-3c6368d0ea60", "sighting_of_ref": "indicator--8ac4aa6f-b2b2-4529-b29d-1f5169814f26", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6038e9da-8179-4b4a-9eb8-e7efd1f044a6", "sighting_of_ref": "indicator--52514ec8-4bd1-4f77-8e7c-1b0c06e07a7c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823cbd9a-795d-42e0-bafd-f09796da8ea3", "sighting_of_ref": "indicator--52514ec8-4bd1-4f77-8e7c-1b0c06e07a7c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0603cadf-12b3-4f66-8048-25e5d6040e0d", "sighting_of_ref": "indicator--511fd99b-bcb0-473a-b929-1c2dfb7151b4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5271cb-4e0b-49a7-8f2b-069f1b344e10", "sighting_of_ref": "indicator--0ac4fa91-744a-43f5-9d5b-f42bc6348758", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83700c46-6eaf-4332-b764-c4c7d298c4a1", "sighting_of_ref": "indicator--0ac4fa91-744a-43f5-9d5b-f42bc6348758", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e61ea2-bc57-411a-bf73-710018d4cb62", "sighting_of_ref": "indicator--38091164-f844-47a9-9cf6-130879b19072", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6c291b-f6ab-406d-b9d8-8c985818bb8c", "sighting_of_ref": "indicator--efff1952-1678-4db5-90b0-c2d1ca4a26ac", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa62a2f-fc7a-43ff-948b-43f8b78172c0", "sighting_of_ref": "indicator--878c925c-5b81-414b-913b-efdb1065e1de", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a605d5bf-f849-4e9e-994e-e661abad3231", "sighting_of_ref": "indicator--80bef7eb-8ade-43c1-9b71-f2c33684b84d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4a30c5-802c-4f59-944a-54cb990feb0a", "sighting_of_ref": "indicator--ac7c98e6-ce4e-4437-a02f-3fa3a4349f4e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ec68ca-6c79-4e7a-b3b8-f5288ccbde54", "sighting_of_ref": "indicator--e44cd63a-37c3-435e-8644-20d191bb267c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815decd1-9f45-4835-83d8-87300cbde5d1", "sighting_of_ref": "indicator--d5ceedee-ffac-41e3-9b14-08cca3d2762f", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e352645-32aa-4494-9319-84addd9ac79b", "sighting_of_ref": "indicator--d5ceedee-ffac-41e3-9b14-08cca3d2762f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7213e5-e0af-43d9-8993-e2d1a37f2923", "sighting_of_ref": "indicator--d5ceedee-ffac-41e3-9b14-08cca3d2762f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a627f79e-70b5-43bc-999f-1513a437c4d0", "sighting_of_ref": "indicator--d5ceedee-ffac-41e3-9b14-08cca3d2762f", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b8f62d-4d25-4ab1-8753-75d7232723f3", "sighting_of_ref": "indicator--a8de0c2a-65c1-45e8-b1f9-867d4032cc99", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abadd6c-b953-49c8-b974-b65e59ba38fa", "sighting_of_ref": "indicator--a8de0c2a-65c1-45e8-b1f9-867d4032cc99", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7726209-3b6e-407f-9a49-f69576981306", "sighting_of_ref": "indicator--a8de0c2a-65c1-45e8-b1f9-867d4032cc99", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f98a516-53dd-486f-8995-6cf1b25ea061", "sighting_of_ref": "indicator--4c6e9c2b-af79-432b-9c01-563fa9dfe2cc", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bc9f45-9a80-4918-82ec-aed5bfa54799", "sighting_of_ref": "indicator--3d4dadff-18da-489e-84e2-330b2f5e7e4c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4a96b1-530a-4dc9-b35f-3f360098e4c2", "sighting_of_ref": "indicator--3d4dadff-18da-489e-84e2-330b2f5e7e4c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65cfa48-cbce-467e-9c2a-3f4904034b04", "sighting_of_ref": "indicator--9a5538d4-3211-45d2-8532-617e92f5ec77", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd52a13d-578e-4814-999f-cd165513e582", "sighting_of_ref": "indicator--9b489003-4fbc-4aaf-a6d9-7d80633cf74f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c8c20c-5731-44e4-a60f-938fe014d980", "sighting_of_ref": "indicator--ac98a031-81c0-4a87-b585-7e48c6c15710", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f786214b-9fa0-4249-aeec-1f1ba9b9d131", "sighting_of_ref": "indicator--ac98a031-81c0-4a87-b585-7e48c6c15710", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c381dc-e6ba-4435-aa0d-02fa544fa3f0", "sighting_of_ref": "indicator--ac98a031-81c0-4a87-b585-7e48c6c15710", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90846a6-856c-4e64-a49d-33f625ee9cbd", "sighting_of_ref": "indicator--95d5cf1d-a31f-4f7c-8088-c72b286eb982", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca71227e-48cc-4376-8272-6aa100eca5cd", "sighting_of_ref": "indicator--e2a96914-86bd-4fbd-b151-79f142570ef4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa4517e-a713-42ab-96db-badcaa6bd4bc", "sighting_of_ref": "indicator--e2a96914-86bd-4fbd-b151-79f142570ef4", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a874cc-33f3-4bce-ad2f-ad6a09c01001", "sighting_of_ref": "indicator--e2a96914-86bd-4fbd-b151-79f142570ef4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df31adc-9f1e-441e-949e-fb3986d70ef9", "sighting_of_ref": "indicator--6fc71358-8149-4d96-a709-9b25348b7c0f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb959a7-f4d0-4388-8068-b2153adbb56c", "sighting_of_ref": "indicator--45583645-8fdf-4a49-b6e8-dba1e7a54067", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c17117-3b5c-4f0d-8225-5769ac9b83ce", "sighting_of_ref": "indicator--45583645-8fdf-4a49-b6e8-dba1e7a54067", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703049e1-24e3-4086-96f6-e4a02ec88a0e", "sighting_of_ref": "indicator--45583645-8fdf-4a49-b6e8-dba1e7a54067", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f18304a-840b-498d-b57f-ddc7b5b3deb1", "sighting_of_ref": "indicator--b72d5d0a-bec9-4242-8cf2-92a7a477dc2c", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21f7947-cb92-4308-bb02-7902b79700ab", "sighting_of_ref": "indicator--b72d5d0a-bec9-4242-8cf2-92a7a477dc2c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326dcf27-5244-441b-ad17-42aa87198429", "sighting_of_ref": "indicator--d042ee97-8d22-4ee5-9303-120a9db4539b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d0609c-0f2c-4fdf-8cec-e373d53bc3b8", "sighting_of_ref": "indicator--d042ee97-8d22-4ee5-9303-120a9db4539b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b0cbe7-28c9-44fd-a240-e03736624dcf", "sighting_of_ref": "indicator--d042ee97-8d22-4ee5-9303-120a9db4539b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d50e902-f4aa-438b-a4ac-32a6419b1ad3", "sighting_of_ref": "indicator--5b04f53c-850e-4395-bde1-75868cf26bbf", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d143b18e-478d-445b-b0ed-abb610fdc57c", "sighting_of_ref": "indicator--2cd079cf-c59f-43fc-9745-54df692d492e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289968b0-a45a-404d-8721-6bc6aec745ba", "sighting_of_ref": "indicator--2cd079cf-c59f-43fc-9745-54df692d492e", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71716ae-8513-41b8-89c7-5da512ea1796", "sighting_of_ref": "indicator--c7b0c82f-b487-4417-861a-7d08e0438ff8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8aee467-25d9-4b37-9b3b-b4c7c0b943a8", "sighting_of_ref": "indicator--d537e723-637f-4a75-bd53-bd9659c1d3d7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dfca9ac-5320-49f1-a407-53923dbe2ff2", "sighting_of_ref": "indicator--db79cb6c-d309-4592-8ff8-0a86070ffd12", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadcbd87-9855-44a2-8e7f-cd8f92dd43a9", "sighting_of_ref": "indicator--444c4f12-4027-484b-91ef-dc4812570562", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e784bd0-06b8-4c11-93af-4ba7bd86a83d", "sighting_of_ref": "indicator--4014b57e-5d1a-4e7c-b044-2448d532353c", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5c8f15-6f86-4c33-993d-89f4d5840d60", "sighting_of_ref": "indicator--8482e8da-a88b-44e4-ac7f-cc8f768b307e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661a7a01-e4bb-4e76-a3af-82622e2e077e", "sighting_of_ref": "indicator--8482e8da-a88b-44e4-ac7f-cc8f768b307e", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cb67b6-5f2e-41dc-8c35-75f1c7b454fc", "sighting_of_ref": "indicator--5e17dfe4-0523-4aa8-baee-0d4d55bfc5ac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d01ca6-1143-4ef1-9a96-f466cd1f36b6", "sighting_of_ref": "indicator--629a60b3-58f0-409b-b068-0691672d904a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60523bda-abfc-4a9b-9122-42ef0e8ce176", "sighting_of_ref": "indicator--4cd01248-c5d4-4314-81be-21817fbb5d86", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae266b61-407e-4cbd-83cb-d78aaf5336df", "sighting_of_ref": "indicator--6998a605-54b6-4667-a72e-fcb61ddbfa69", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d6ae50-5fe5-46a7-89a0-ff48229ad0b2", "sighting_of_ref": "indicator--d957085c-ddf0-40cc-abe5-64d7939c9129", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1c1acb-21e6-4560-b680-dc58a869bd8f", "sighting_of_ref": "indicator--42ade394-8ccd-4434-8564-37dc08d1b1ec", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a348a6-bf60-4847-9463-9499e196e787", "sighting_of_ref": "indicator--928f66a7-d437-416d-9655-b62e5575cd3f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abbdfcc-e1e7-4fd7-b0a5-309a439cdeef", "sighting_of_ref": "indicator--a2df9d45-3d43-4826-b682-46e607fc80c6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6d8ba8-1b6a-4f04-ba7e-cb8e8d00f393", "sighting_of_ref": "indicator--00ea7234-d237-400b-a0bb-9ecaa2b7b5b1", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258632ce-37c3-497c-b5dc-c5fbca22440d", "sighting_of_ref": "indicator--365a5541-4448-4ede-8054-47990bf470e4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90da9ea7-93f9-41b2-8b9a-587141b44ee6", "sighting_of_ref": "indicator--495fb6fa-efed-4f62-9e8b-f5a1a7df4299", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7545a571-7335-4971-9cd1-99c383b4a26b", "sighting_of_ref": "indicator--d4bc7285-507a-45d7-a02b-7956506cc6f6", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eba5878-22c8-4380-89e6-d522e869eebb", "sighting_of_ref": "indicator--4424ed67-8739-41ca-81b6-51d89a2fd776", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6ef2e4-47ef-44b6-b629-353794749458", "sighting_of_ref": "indicator--edd061d5-9b66-4158-932d-ed84bc6d886a", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b960f5-3663-4e33-af4d-90063384f818", "sighting_of_ref": "indicator--963123a5-9b39-460b-9a7c-fc0adbe4d31d", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b026f1-23df-4f9d-a24c-4f4836b07b18", "sighting_of_ref": "indicator--3ea6a293-9ae9-4f52-9a7f-bd539dca17d1", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6bf23db-35e7-48ad-a4fe-588f94d1615a", "sighting_of_ref": "indicator--6160e1ae-a7d6-4b9b-a6d5-bae25f9ec0a6", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a4ab12-7457-43bb-96fb-d8834c9fe383", "sighting_of_ref": "indicator--1cdc09ef-81dd-4493-acca-428c5d41d864", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd94d3a-b80f-4434-8c9d-430ee7b20849", "sighting_of_ref": "indicator--1cdc09ef-81dd-4493-acca-428c5d41d864", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7cf7c3-8597-47e5-a11f-a325b9bd8754", "sighting_of_ref": "indicator--d7e0b611-470a-4bc5-a494-d6f22cd4c514", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7311b4-ef9a-4661-ad74-327ebc911d5d", "sighting_of_ref": "indicator--d7e0b611-470a-4bc5-a494-d6f22cd4c514", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d424d113-685f-48dd-872b-2a9ea73392ba", "sighting_of_ref": "indicator--785d56e8-e1a5-42ea-8a8e-61dfb1d50173", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f73ac8-adeb-488d-b873-fe66fce98c74", "sighting_of_ref": "indicator--a1ab6988-958f-44be-8e57-60bddf07352f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f2d619-dc73-4b4f-a2a3-97947c38c788", "sighting_of_ref": "indicator--a1ab6988-958f-44be-8e57-60bddf07352f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec2bfee-27e4-45f4-87da-24b1517d56ff", "sighting_of_ref": "indicator--610b3b26-9da1-48a9-a6b9-736c3492433f", "where_sighted_refs": ["location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73280904-9c95-4306-99ec-5c63075bfdd4", "sighting_of_ref": "indicator--f1855710-0612-4f88-9f35-30ce946a5629", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bba17cb-74d8-4913-a3b6-a19901490764", "sighting_of_ref": "indicator--f1855710-0612-4f88-9f35-30ce946a5629", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5903f412-f7b5-4f22-a4b2-d40cc05f29b5", "sighting_of_ref": "indicator--48272ebf-f278-437c-a224-2673b8bf5a64", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d718fa-3a98-4122-ac1e-a5031700e836", "sighting_of_ref": "indicator--48272ebf-f278-437c-a224-2673b8bf5a64", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fffd455-5ef1-4311-910d-4a4ecf6a00da", "sighting_of_ref": "indicator--7521b3ce-d96c-4238-9453-4ea06be938a5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f995950-8bc6-491c-a8b7-beb86578c34e", "sighting_of_ref": "indicator--bafacbe9-9c4a-4843-a938-bb5dbb1b2c71", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c77d282-a2de-4c6c-ae1b-319bf9a5348d", "sighting_of_ref": "indicator--bafacbe9-9c4a-4843-a938-bb5dbb1b2c71", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91cb0820-55ee-41ac-a2cd-077ad91811bc", "sighting_of_ref": "indicator--bafacbe9-9c4a-4843-a938-bb5dbb1b2c71", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88667136-6c81-421c-ac70-a398be3c0d76", "sighting_of_ref": "indicator--3325aba4-11cd-4f76-907b-65dd12ee8f44", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc82b7b6-e75f-4baa-b49d-0fc35cfba9b8", "sighting_of_ref": "indicator--3325aba4-11cd-4f76-907b-65dd12ee8f44", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e30025-f84d-47f1-9c37-8d565bb3af38", "sighting_of_ref": "indicator--3325aba4-11cd-4f76-907b-65dd12ee8f44", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9478b5e4-6360-4544-a366-c422a7f29dfc", "sighting_of_ref": "indicator--76177c5b-0a41-4c9e-a01e-4536b571f80a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567798a9-b909-4e99-883e-47324442c94c", "sighting_of_ref": "indicator--76177c5b-0a41-4c9e-a01e-4536b571f80a", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841fa751-9e23-4d45-89e0-12d632ac6227", "sighting_of_ref": "indicator--25f8d752-f3a9-4ab3-9628-43be22e3d7dd", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84b8a73-236a-4770-a2d3-4720b2c73125", "sighting_of_ref": "indicator--25f8d752-f3a9-4ab3-9628-43be22e3d7dd", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d18af7-0032-4eb7-aa1d-5aa9a3c2c5a0", "sighting_of_ref": "indicator--25f8d752-f3a9-4ab3-9628-43be22e3d7dd", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df82ff9-513d-4e42-bd12-5ee45795cbba", "sighting_of_ref": "indicator--781947d7-a1af-421a-a1d1-c047175d65e8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3688865c-2039-4669-9a70-558e5895f5d7", "sighting_of_ref": "indicator--e093c475-d8c6-4819-a996-7527c62a30ac", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0339d9-6fd3-4894-9e8d-5c468cf4c0b4", "sighting_of_ref": "indicator--e093c475-d8c6-4819-a996-7527c62a30ac", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7c49a5-2bae-41b5-9129-8e065f208e9b", "sighting_of_ref": "indicator--e093c475-d8c6-4819-a996-7527c62a30ac", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfb950b-c871-44d7-b23b-1226691bf482", "sighting_of_ref": "indicator--748b0b5d-43ac-4a1b-bbd7-14151bcd12ee", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8a2769-88a3-4f59-9d62-3e9107b67449", "sighting_of_ref": "indicator--281d2daf-661d-4d79-b4ba-dd2857ed3c70", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7d191a-5e1d-4d67-8bbf-7b6061a82fe2", "sighting_of_ref": "indicator--d0f2221e-da25-4874-9ace-71711247f6d2", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68a46c9-84c3-4d05-943f-57ead8e9b38a", "sighting_of_ref": "indicator--466a0206-3078-4072-93bb-ce494a3f04b4", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff7037d-568b-4540-a484-6ec5ee77ed35", "sighting_of_ref": "indicator--e781f592-1002-4c25-9fbf-9d85a017169c", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047e472e-6c35-4582-8326-a055dc863535", "sighting_of_ref": "indicator--705d3d35-65a9-44c8-8e08-113294df0238", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f59a3db-5c00-49de-9297-53c0e6e5db71", "sighting_of_ref": "indicator--705d3d35-65a9-44c8-8e08-113294df0238", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3cd0ae-6b73-41db-8e68-c72ed79f6b72", "sighting_of_ref": "indicator--f2515042-ba34-45d0-a5b4-951c8bcf541e", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9418fde5-6539-45a0-91a6-0d4f335444a6", "sighting_of_ref": "indicator--66123c30-8797-4f59-a354-7c8e3c4a40d7", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13cf5c84-43c7-4102-bb74-6b4602038a96", "sighting_of_ref": "indicator--0cb9ed3e-fa36-4d6f-9bec-0373a3610143", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657eb765-d525-407e-8478-7a50bee09df3", "sighting_of_ref": "indicator--a324fc22-f717-4d5d-893f-4f06af50a257", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f66a38f-2fcb-41f5-9dc4-3824bbb95618", "sighting_of_ref": "indicator--a324fc22-f717-4d5d-893f-4f06af50a257", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6368b2d7-cfb8-4d28-a5b5-12f1ddfd8a45", "sighting_of_ref": "indicator--131bd3d2-3c47-4d3d-b94c-4e237ff65bca", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d79b8a-cf41-41cd-977c-432cf2b72a30", "sighting_of_ref": "indicator--131bd3d2-3c47-4d3d-b94c-4e237ff65bca", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1509168b-08da-4bfd-a679-c4dbeacaafbd", "sighting_of_ref": "indicator--e6cc10a5-b12d-4b45-8a66-05ffd9f96465", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c85e29-771f-4f8d-a44c-a0e630e4b626", "sighting_of_ref": "indicator--e6cc10a5-b12d-4b45-8a66-05ffd9f96465", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0528b8c-e476-49f9-b2e7-d0e74e0369af", "sighting_of_ref": "indicator--9c62e3e8-c8b4-4f3a-8ee7-3a60fd626883", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b436cab-b055-43c4-9771-83839731e0e7", "sighting_of_ref": "indicator--0c590bc3-52da-437b-9eba-970e9eae353a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a15d0cf-08b7-4ade-95a9-1017af5c9092", "sighting_of_ref": "indicator--a5537b07-8700-45fa-92a3-3b1a2c5611d4", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a800acce-6026-43ba-a648-f8f717e00e03", "sighting_of_ref": "indicator--ba9d927d-721e-43cb-bf04-10ecc5943fa7", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3ecfd2-2395-4c63-9240-4e0aa12e8588", "sighting_of_ref": "indicator--92fa0066-128a-43d4-9bf6-f9b00600a50a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a418027d-9773-4671-a65e-69aefacd8c18", "sighting_of_ref": "indicator--10e6c834-b9a2-4064-9f47-7a04b4d29ace", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765ddb69-ee32-4f5c-b758-ba3b34f2ddaf", "sighting_of_ref": "indicator--e3531186-fe1d-4ab7-a5d5-6b9da5e46f4b", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bcd6180-4f79-49c3-8f7c-fabb76390b40", "sighting_of_ref": "indicator--e3531186-fe1d-4ab7-a5d5-6b9da5e46f4b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f1bea7-c746-4700-bb11-98998a37a5d4", "sighting_of_ref": "indicator--e3531186-fe1d-4ab7-a5d5-6b9da5e46f4b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb17f4f-eb02-44e9-b1b2-26c30f1f16e1", "sighting_of_ref": "indicator--4c309946-11e0-4c92-b4d1-6e23865f2d2a", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45caaff3-353f-441b-9090-64d312697d2f", "sighting_of_ref": "indicator--abd9b710-9d9a-4687-a097-078ab30e5ec5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8fda2f-b939-4466-b68f-29e20230f198", "sighting_of_ref": "indicator--abd9b710-9d9a-4687-a097-078ab30e5ec5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fe661b-5589-4a99-abbe-495dfbe3a0ef", "sighting_of_ref": "indicator--abd9b710-9d9a-4687-a097-078ab30e5ec5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e81643-5e36-44dd-bb95-b0e8923b0e01", "sighting_of_ref": "indicator--22e138a9-3cbf-48de-b570-668cff826fa0", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42418e6b-e123-4598-9732-d44fb2992d74", "sighting_of_ref": "indicator--ddad5c41-50c6-4bbe-a653-4230e9c27d20", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4469ae4e-7f6d-4029-8d94-69a7634bf73f", "sighting_of_ref": "indicator--b7070341-9ba4-499c-9ced-b6fe1fcbc9d8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08be47a4-579f-4dbe-b00c-ab4cce4d165a", "sighting_of_ref": "indicator--1f827d45-6364-4ac1-9ba6-6e84382b3427", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c70840-60ab-488c-815d-b49781a259dd", "sighting_of_ref": "indicator--1f827d45-6364-4ac1-9ba6-6e84382b3427", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12a6d2a-9450-4ad2-bb80-18c0d1b40fb1", "sighting_of_ref": "indicator--8e04cb14-aa00-4935-a773-4aca02c29f66", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2e2ca0-75cd-4055-b5e0-3e3dfbf3da65", "sighting_of_ref": "indicator--8e04cb14-aa00-4935-a773-4aca02c29f66", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a833e1f6-6b9d-4f37-85a7-da01546f9fb6", "sighting_of_ref": "indicator--16cffba6-0f3b-451d-8063-aa5de9e71f7f", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7948054a-7834-454c-be98-20abe5eaa71c", "sighting_of_ref": "indicator--16cffba6-0f3b-451d-8063-aa5de9e71f7f", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ddd953-3091-4792-8d3c-873674119fce", "sighting_of_ref": "indicator--f978bd27-a2a6-48db-be07-015d7babb26b", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06703f98-f6db-48cb-8b69-8a0a0eae0ee8", "sighting_of_ref": "indicator--8ee4d972-3267-4865-ae05-3656f46a7400", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2e550f-d02d-4ded-90d5-49faf3c21549", "sighting_of_ref": "indicator--ddb45da4-3bd7-41a4-a3e1-7500c4bc9b03", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd166c3d-064c-4c8e-b4b9-7fd91c32af67", "sighting_of_ref": "indicator--209b4bbb-ad87-453b-801f-4cefa2a7c49b", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a189f408-f420-4f4c-b49c-80623762482c", "sighting_of_ref": "indicator--70ba8df8-d81a-43b5-8a5d-77f21ad97440", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21aef694-fd5d-453a-b0ec-dc325edb7c14", "sighting_of_ref": "indicator--e5bd8a34-d25e-4cb7-a720-ecb815567ad5", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9005e577-23df-4df5-9ca2-67e6a5ff1b37", "sighting_of_ref": "indicator--e5bd8a34-d25e-4cb7-a720-ecb815567ad5", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ae34bc-3a35-4af6-bdff-e9e8c2f202d4", "sighting_of_ref": "indicator--e5bd8a34-d25e-4cb7-a720-ecb815567ad5", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d4acd7-f167-415c-8240-c15883ab7d31", "sighting_of_ref": "indicator--cc3c8346-f91e-4c96-8696-712844a6c7d8", "where_sighted_refs": ["location--efac7895-21a7-4548-b820-2e610f6dbd5d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4284fe1c-db2b-4942-9101-6f570663a9c7", "sighting_of_ref": "indicator--cc3c8346-f91e-4c96-8696-712844a6c7d8", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b66ba2d-41fd-4e08-a7e9-287aea059fdd", "sighting_of_ref": "indicator--cc3c8346-f91e-4c96-8696-712844a6c7d8", "where_sighted_refs": ["location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edfcec00-dcd5-4b5d-8a37-789b6bb975fe", "sighting_of_ref": "indicator--c0b103c7-ee7b-41c6-b765-f2e20988ac38", "where_sighted_refs": ["location--fc20e855-de33-46c0-955f-2a32a567354d"], "first_seen": "2026-06-08T00:00:00.000Z", "last_seen": "2026-06-08T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--2e18ce95-7bef-4ecd-821a-29eceb73be0e", "name": "Threat Report for 2026-06-08", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-06-09T11:00:01.585Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--efac7895-21a7-4548-b820-2e610f6dbd5d", "location--fc20e855-de33-46c0-955f-2a32a567354d", "location--74478c4a-ad57-4a9e-a82d-8f6f61306c2c", "location--3dfa0a36-bac6-4c8c-8216-00caee8b82d2", "infrastructure--c9f6c3c4-a640-42c0-8873-0238d70b06ee", "infrastructure--444be454-fc9e-4d37-b70d-0ab48956c067", "relationship--384c3f50-2991-438c-945d-e931fe4d0f58", "infrastructure--fdc9f421-9093-44ea-903d-6b23807f5049", "relationship--4b26a6a5-3adc-4576-a8b9-4542d84aa1f0", "infrastructure--69d67577-9cfd-42ac-b69b-e58be0a09a02", "infrastructure--f5784069-2f89-4c22-ad9d-5d6e24a31d85", "relationship--a6b03b85-9ffd-4d9b-bfcc-48fc678a7004", "infrastructure--ed64cc28-44f9-4291-8486-ea5abb033d8f", "relationship--9ccfe384-24c4-4afe-b6a3-36d811f84eba", "vulnerability--809e9b99-fe4d-4b52-a298-3116d12d3712", "vulnerability--6c92b5ec-7e5b-47de-9d19-0913f30787a6", "vulnerability--71b293bd-ce50-4291-ad84-3b9a0c60be19", "vulnerability--11fe573a-2ca7-4fb6-8aa2-830511287929", "vulnerability--79e2bcfc-7617-4f11-b0d5-6a8c3611ac30", "indicator--bd85ef98-9da5-4809-9272-a03407567829", "indicator--c9a577e2-c045-4e8f-9ea7-8c41a7725fda", "indicator--4a6dab9c-39b2-4f03-a39c-4e397d67a7cf", "indicator--4734acd6-7165-4d73-aee5-cb49c3416c7c", "indicator--fe2f6a5b-8ead-4632-a68b-9357923bd0d5", "indicator--7fc8cc43-44c4-41cb-9b8b-a9d9dbd3b0b2", "indicator--4f1446af-6861-405b-978c-110578c6be94", "indicator--2a1a8b9f-ea38-4eac-8c2f-95cd8f73367a", "indicator--b26c5d76-810a-40ef-b374-38b7556ec9ff", "indicator--73d9d811-d806-4d62-bfba-eac330574747", "indicator--666f3bfd-b0eb-4760-98ba-56aa9cb3019a", "indicator--b787141a-68b5-48ba-ad9d-21059510c6cf", "indicator--9e489cf7-e719-4daa-8863-2b80eb4e33a2", "indicator--bad5403b-1cb6-42cc-89b7-1d8b8bf007d8", "indicator--a69ae31e-1ffd-48e8-b572-0b1820c7b12a", "indicator--0d2e719e-0ee5-4c7c-b1e4-527a7934b565", "indicator--6c16bca2-e07e-4c23-86b0-6e415eed25b7", "indicator--879d8893-4928-42d7-8e06-cf72e36930cc", "indicator--d1f03e11-94a4-4ce9-802c-7753abdc8f63", "indicator--98c285ed-5442-42fe-89f8-ce0310af6410", "indicator--238c52bd-d035-4cca-9f30-d26370a6590e", "indicator--11018862-2390-4f79-849a-182e2d69d1d9", "indicator--ffa9b66f-deb6-417e-a560-080298833638", "indicator--0ea76da6-5a90-40e7-b7bd-3ddcd9ee848c", "indicator--93229c32-dc63-4d93-b978-c156d7ee76cd", "indicator--b3217cf1-71ca-474b-bb2e-7a5841baec37", "indicator--01f1ab9e-4a4d-4da3-b11c-1a175740fa41", "indicator--7cbcaf8a-eca5-438b-b5a5-bb18d41ea440", "indicator--bdd6b610-8b7b-4b01-8ef1-dd99ccaa671d", "indicator--b105aa4a-4f3b-4d54-babe-87a312297c6e", "indicator--a510c7f1-1c56-471d-866a-9128b9b5837f", "indicator--796439e5-7527-486d-af25-96e63daf6311", "indicator--eea19b0e-76dd-4a65-81dc-a7d47acd89ba", "indicator--65b2700b-4d2a-4bea-bfe5-17405ddfcc8f", "indicator--a14c2076-a728-4075-8e70-774b5c96d84b", "indicator--d6c797cc-2344-4f0c-a75d-0aefcbd22045", "indicator--3649cb57-b87e-4ca4-a8dd-a2e699375d20", "indicator--c60609f2-a974-4d44-ab12-513d8166a994", "indicator--27254fde-310a-4672-a3bf-5a7c4d4f05fa", "indicator--5956b788-62bb-4713-ae43-d77ef4faade6", "indicator--f00d4111-cf82-45a4-9456-3a5ca4e675c7", "indicator--cd6ec2be-1eaa-420a-8353-2c277175154e", "indicator--adcc1dc5-19d7-48eb-897a-6af33dea4870", "indicator--ed68b880-5ae2-4f78-b1d9-3fb20af0796d", "indicator--e9e6a4a7-6f13-4f88-b9eb-599c5689f25b", "indicator--8361087e-c3ed-487a-b28c-c27b7a7216d3", "indicator--7e3ae45b-96fc-4b8d-8962-4b19a48f7afd", "indicator--4a93a747-9adb-465c-82b7-738da215d18c", "indicator--f031d925-9f4a-46dd-b5f2-3394d8b5ea71", "indicator--cf49d309-bc34-4ce0-9510-9c7919079433", "indicator--56624a51-3a0b-48da-a05a-36cce3aaf01d", "indicator--de9f1cfa-4ac6-4569-8569-06b5c3e72f6d", "indicator--9f6658d6-3d81-4651-a541-bd86a3ecb106", "indicator--f549cc80-7d0a-4d4b-91f0-75b7811ce47d", "indicator--8f32fcba-04a0-4730-9956-b6107578961c", "indicator--ff1c5544-77bb-4895-8b3f-4f141f109de4", "indicator--2178e0ee-50c7-4819-a823-a6f67c1e9f16", "indicator--5ebd9376-427b-48bf-94a0-e0faeb2ea91d", "indicator--657e243b-00d6-45bb-9629-6a9220d82a7c", "indicator--3e6c7e42-e600-408b-8350-e38a3ffe7818", "indicator--a22d82ce-91a1-40e0-975b-8ffea6d6c30d", "indicator--7deac7a0-de5d-4b5d-8f97-e2eef941e0d8", "indicator--afacc34e-96dd-46d8-b05e-6c95b69e4871", "indicator--03e87589-fc9a-4aad-81b5-050ea7a227fb", "indicator--f568751c-fe75-46f9-8239-bc5bcd8d3ab2", "indicator--9ee07071-eb47-47e5-9dcb-359b619ae6d9", "indicator--6240b45e-029c-4939-899d-0fa250584080", "indicator--6bb3dc5d-ecc8-4e2b-9ab9-779428df8e7b", "indicator--ef791f67-f7bf-4bdb-85be-3c70788472de", "indicator--b1a47774-3ff2-4ae8-8a19-13b7c31e08b0", "indicator--ead03d0b-fcf7-4ed6-8365-4d8551c902df", "indicator--39b3646f-d4dc-444b-a5d1-e7a2eb9127fe", "indicator--742ae97b-ae3d-4276-a758-47d8ca792336", "indicator--9fb5bad9-1067-4394-b209-d735f4074905", "indicator--1106911c-a082-4915-b055-fe9cac25682d", "indicator--1a434a7d-5159-41c0-a573-107c335a344e", "indicator--282a46c9-15b4-4aab-952c-f6c3cff34a53", "indicator--249d3b53-4ee0-4e9d-8d4f-46730bef490a", "indicator--91d8ada2-a47a-4622-80cd-e43eeee37d70", "indicator--6032870e-992c-4e31-84d8-0a09ab0d1ad8", "indicator--42a6d0c8-bf17-457a-bfc5-53400debba7a", "indicator--b76bfbbc-43d9-4285-9af8-0604736748d6", "indicator--a72833cd-fe34-4a94-a6d9-abd4c0ede750", "indicator--463d15f1-b2fb-4037-9759-a1425087d4c2", "indicator--a5ad1987-c214-4993-9fe1-faee3dc2528d", "indicator--20fe0590-a821-4e28-a8cd-770cea38af72", "indicator--47b63956-b698-4021-a4f3-8474fc6d2ec5", "indicator--36f9af73-1526-44b7-930b-a6da3dff8597", "indicator--32acc9f7-1677-460c-ab63-f4fb46c91598", "indicator--79f6131c-99df-4cf4-a1ab-a5fc132a04b4", "indicator--1eec245f-bb50-451d-9f16-9488d85377b6", "indicator--864074e0-a832-40b2-bbc1-578cc4d38470", "indicator--ce70311f-fa62-4490-86dc-1d214a5243a8", "indicator--68435ada-e5f0-4866-818b-420709e5ad67", "indicator--1d7024d9-0c9e-40c3-8adb-40e59b6dd6d0", "indicator--109dc21e-6c84-4206-b554-db76af950f39", "indicator--b2efd097-f6c9-4242-811a-ca6f6a6c1db3", "indicator--05e697ec-407c-43a9-859b-d80f60c44068", "indicator--354a2b9c-8f8e-44f0-a5bd-1bff694c1083", "indicator--5acbef8a-bdcb-4b93-adb9-f5e234593a1d", "indicator--5cbfe80c-886b-4d61-ab10-56178d8ffe89", "indicator--1b587d32-7009-4251-a8d2-8becfe22c1ef", "indicator--906c4f60-a656-42b6-8dde-bed7c12377db", "indicator--c7d7f4f2-f2d3-4c55-8863-932a6c13b362", "indicator--85b6a703-df25-481b-a3e6-9be2f0ab8cde", "indicator--756c36eb-c20d-4528-8acd-6ffa965b31c3", "indicator--b1443aad-013f-45f0-b1cf-fd208d99fad1", "indicator--8c5b4cd6-0289-475c-b047-5fa3d5a830cc", "indicator--6add61d8-3263-4a3e-9424-a1f0ede0c562", "indicator--84f4da98-d53f-4abe-85b8-ea8a185a474c", "indicator--d9e19283-0b30-4684-97f5-49e2a35ffbb4", "indicator--1acb5983-49e2-40f4-96f1-ed0a084c5f17", "indicator--e75b0289-93a1-47b8-905e-9a5335f72e49", "indicator--b0ff0568-f329-4766-b7d1-25909bf864c5", "indicator--bd98387a-3bd9-4560-bc48-ed093591652c", "indicator--167f681b-aca8-4597-94d1-8cf29b382998", "indicator--775cd132-a224-4873-aa77-93b23d0275f8", "indicator--5828aa28-4c75-41ff-8586-67ebc26c3531", "indicator--f52f5022-3edf-4cbf-b8a9-5aea610199c0", "indicator--7b137faf-2cde-410a-baac-88c704235584", "indicator--8e8cebd9-1a6a-4b26-97e3-c7e5de2aea4a", "indicator--140f29c3-6df8-4203-a1ba-0df052892793", "indicator--5783b220-9831-4734-880a-8ee72be313a5", "indicator--d6509803-381f-4f34-9404-ee2b283e7dbf", "indicator--3a53d011-4f2f-4173-b9c5-cbf648e1af1e", "indicator--fb8a2516-27bf-4f9d-aac6-4282107aa375", "indicator--e326001e-8063-442a-9f5c-b674609683ff", "indicator--d94da358-a92f-41c7-a719-47d9e7d1e101", "indicator--4ccd0ae8-b3f2-48bd-9e11-492bfdb0cf0d", "indicator--25d300d1-7873-44cb-a307-204ab0e91f6f", "indicator--ac67a671-edc2-432e-a9a6-5298267b65f9", "indicator--73d3ca5a-7672-4aac-bd5b-66811563c22c", "indicator--bb839d50-8f1d-4c22-b502-dfdb25b54924", "indicator--bb0ab61d-850c-40f1-9776-fdc1e46dcf8a", "indicator--56ec4021-7464-4b91-8510-af4347bb38fb", "indicator--b69f5463-2e4b-4c5d-8f48-00917b85940d", "indicator--d24c34ff-93df-40dd-8a66-4970f628711f", "indicator--47320a66-deb3-4206-9e9f-80ad84a51210", "indicator--982e940e-210b-4232-a096-dbacb0b0ca70", "indicator--e269dea9-3a93-4992-b6e6-92b75b515782", "indicator--f555d403-e8ec-40a5-9a60-22aedb3db5d3", "indicator--7364c867-66a1-47f7-ad65-3c028cfdf84c", "indicator--58ecec7d-604d-40bb-8740-0a57ce17c1c1", "indicator--ee635068-001c-4f10-9d49-6774ec9d6799", "indicator--19d6e4a5-cb57-4b64-9bae-370258874f76", "indicator--6e6b22ce-1f72-4178-8644-8e2a2bf3c25e", "indicator--2b4be0ff-84f3-4d64-9e28-e7e7487d87b1", "indicator--99374364-fc50-44f8-9e3d-79746d21793d", "indicator--1b650aca-4243-457f-ad58-87675724cb82", "indicator--e1ca7653-5ac1-425f-9a70-0cb3800a6ed0", "indicator--8fb1b8e9-1cc1-46b9-abb5-fc1e85190e93", "indicator--620f7783-8e84-4438-91c3-f42fee97e445", "indicator--a80e2615-960e-49bc-825f-75f7425d24e3", "indicator--6a16fdd2-e106-465a-8cdc-be07ce9fa5d9", "indicator--f9eb58b9-b224-4d0f-82c1-b431f9f52e5b", "indicator--6ba6d3e7-e159-4aea-80f4-10feb713126a", "indicator--5213f383-ab06-4962-a52f-e85b55667110", "indicator--400970b0-0a99-43d4-88af-a7d9bf3c4838", "indicator--c59ea888-a294-42c8-8ef0-6d8121b0a06d", "indicator--fa553669-6f23-44b3-81f4-f977403aa2f9", "indicator--329cfe06-33a3-4d1d-9348-3b6bd9b999b2", "indicator--f3ce4e2c-ea80-4085-87ed-790b5bac65b5", "indicator--1f8cb739-5321-4a96-8d0a-1478c113a434", "indicator--f3ea25a1-1370-48a8-a6cc-6984cc12a43a", "indicator--d6dcd72b-abba-4526-8e42-63ccef1f6561", "indicator--8d76615d-feb4-4f07-9274-e31cf56c783d", "indicator--c7d04f4e-fd7b-4b7f-831a-e09526c5019b", "indicator--26ed0998-64ad-46d0-adc6-ab655d8711a4", "indicator--8036256e-29ed-42a2-9bec-8f3ba1feb4f2", "indicator--35d23654-cfc5-44e3-8b7e-1b92ca71f50e", "indicator--0fd2b93a-6db3-4f69-a8c1-8f951f413b4f", "indicator--2f0f8d53-bce3-4281-aa5f-4f0e0b00f499", "indicator--b6e45889-8e5c-4e9b-8763-e9991350654a", "indicator--d01860d8-3950-4f1b-bf23-725efd597cfe", "indicator--c84ecd68-cb63-4159-91ac-88f7b12b0208", "indicator--00959f23-c371-4fd3-8d0a-a55df79866fa", "indicator--787ff54b-7859-4419-aa04-c79355e2edd7", "indicator--b3805b3a-618b-4e27-a9ed-ca8f23fb2281", "indicator--aad61814-7ee6-4268-913f-4bd504e9284b", "indicator--ed30b151-69cb-41e2-8bf1-20664919dc22", "indicator--c40aac06-006c-44e2-aa17-0363fed45f6b", "indicator--8808a74b-ca9d-408f-a3f4-5deb28506d7a", "indicator--3056ece8-a498-49c2-a638-ef6b4d88a26a", "indicator--5a7bac35-5a6b-4fe0-a423-f58c80f5387f", "indicator--d27f5285-9d16-4c79-930a-6f7cee1e476b", "indicator--22f02ba1-e947-40d3-90d2-ba5e2cf1aa78", "indicator--4ccf74ba-7edf-4db2-b4d6-645394d5787e", "indicator--9950e76b-84f4-47dd-98e2-4ae1f24c1321", "indicator--b9e400fd-3610-4268-ab26-464f3724d3e2", "indicator--393e3b42-d5b0-470a-af4c-39628575ccc9", "indicator--f9c06ee6-f264-4e3d-8d08-ab8098947717", "indicator--d0346bac-58dc-4d2b-ac92-2ae2dcd2f1ab", "indicator--860358b2-50ad-4340-ae7a-8e881f71075f", "indicator--272ad5dd-e6c3-4748-8dce-c0a8746634e3", "indicator--a512a058-a12e-4ff2-b529-2131f66e19ee", "indicator--bb3d9f97-9daf-493c-8026-6613f196a5cb", "indicator--69c0084b-72b8-4b1b-b663-b94b2c816f6c", "indicator--d722adfe-d74d-445d-b5c0-b9861900fa36", "indicator--780042c9-d655-4745-af76-7bd7277a87eb", "indicator--bedd670a-749a-4e7b-9126-403544dbdfe1", "indicator--7c24e2dd-8a0e-4a7a-ae20-d922c21ea1af", "indicator--81a14631-dcf9-43af-9bc7-82ab381866f4", "indicator--2629d036-e53e-4107-b5d5-0246212e9e08", "indicator--b59ac257-b1f1-459d-97d6-91b64c2bf3c0", "indicator--9633d6d3-63d4-45de-9e98-73ec3233d3d8", "indicator--55d51975-8339-4ff0-b686-a0840e0935b5", "indicator--e63193d1-a01e-4567-911d-9f2732ff45a2", "indicator--8dd2242a-aa00-4a8c-a025-e2e030bc17fb", "indicator--2f986e6f-bfd4-4cad-a476-593462137183", "indicator--4ce1c2f6-9792-401b-8e50-b6a66011c35d", "indicator--7df5081f-1e4e-4a38-9832-d443cd536e21", "indicator--55fc3b46-42fe-4cff-999b-b5e917586701", "indicator--8c01bfa4-ed8e-4008-9d1b-23c733d7fe0b", "indicator--f7e405fc-484f-4b07-bdb5-cb073be06e6f", "indicator--9951044f-f5ba-4043-867f-bafc8733447e", "indicator--7e6465c8-daae-406b-8f3d-3093ce067036", "indicator--830702af-6f9f-4802-bb45-d6d0df727b3e", "indicator--51f9dc6e-9c02-4d00-b873-4f8df127096e", "indicator--38a79582-d33d-45b2-89a4-91f3421f53cf", "indicator--aa6bd2f4-c487-4535-8450-2ae9f949a355", "indicator--1079b772-1b63-47b4-baa8-c67ed0b2d571", "indicator--7bf12848-65da-409b-bd45-1e71f093b0d8", "indicator--0c760585-a577-4afb-a439-88cac8163c40", "indicator--f6e05246-8c0e-4caa-8659-1f714c943ff7", "indicator--4be00f27-8be0-4c14-8c44-571781411615", "indicator--dcf62889-cebc-4c38-9e6f-cf435c44d3d0", "indicator--cee982de-f62d-4cff-a341-d9d540b70e57", "indicator--a081a338-ba38-4396-8262-18213e38acf0", "indicator--48297bd1-a50a-4461-a977-7a05d7ba04d8", "indicator--613a824d-96f4-4f31-9e97-19ece6ede656", "indicator--7bdef821-8736-4b91-9185-fbc660aa972a", "indicator--711900dc-44e9-4202-af48-953c96fb583c", "indicator--0d3ce636-74ce-49fa-8102-55bbc733237c", "indicator--a3a0b45a-a7ec-486c-801f-ce7a4b729249", "indicator--e0fdca66-da7b-4896-b541-198815182284", "indicator--42aa714c-4d97-44de-9772-1c6783ca9558", "indicator--94ea872f-0b50-4b8a-87af-228bfd8a98b3", "indicator--e92a9b5d-cc18-4a66-b66e-c5ddbc3b9d6c", "indicator--5d2b490a-9eb4-49bb-b8bc-f1efe20394ff", "indicator--7c979706-4361-4a0e-9b3f-d8d87ccf2bbf", "indicator--79ff71c1-fed8-4ccb-9da7-b4f659b08566", "indicator--7946f7ff-f867-412f-8aff-92adb24efe45", "indicator--d6499794-b5bd-42a5-b456-854178e3c856", "indicator--e449d8e6-388f-4aaf-8454-5eb8b0850d38", "indicator--32a59915-ca2a-491a-9263-a9d77bd77a13", "indicator--7d281dcc-e4e4-410a-8319-225d4ea20fb1", "indicator--4904a4e1-99a8-4c16-8d4c-5acfdeb82430", "indicator--0e0d1b2c-a5b9-4b19-8a66-c608e03b6005", "indicator--53ad5e19-b1bf-4466-9f3c-502beecc4fe6", "indicator--d20075f8-26a5-4a43-b295-5af4a2b6526b", "indicator--7f075e6f-4b5b-48e3-8d55-3c671ecc210a", "indicator--48617de2-ad8f-4006-82c7-625442f3b1ee", "indicator--5d1f8851-1f81-4cb0-bd6d-05b2df3d0cf3", "indicator--0480e168-cd27-4d86-b675-9d02a2bbf4e5", "indicator--4323a1c8-fe30-427c-98e7-c72708a4d997", "indicator--fe12f0fd-e95a-4189-8567-2f54c1550460", "indicator--1ce58112-12d2-4f80-a054-aba3b5b5b12e", "indicator--31df063f-5247-4268-b032-87bf933b0fdf", "indicator--a7009221-f123-4139-89f6-a51a20e365bf", "indicator--62f6bb71-d505-43b9-bf3c-646333a32cbc", "indicator--bdd4e869-570e-4936-9bf2-eac88b3129ab", "indicator--b350e875-37ef-481d-9431-78b6f52a663a", "indicator--8b8d9ab4-c704-49f8-b3d9-8345bb7f1b6a", "indicator--dc2c7a87-40b6-4e1b-b6a1-7fa1e5708df3", "indicator--d228508a-6be6-413d-bf82-5914abe91d2e", "indicator--49731ead-3d92-4747-b3b8-d2febeeec531", "indicator--ad5c5cb6-38e7-427a-91fb-aa68e5fb347b", "indicator--c2ead4b1-fdea-4360-a179-5caa718d8eff", "indicator--60b4937a-38da-4222-854e-dd953fae7446", "indicator--309fc235-b626-45f1-a4cb-174f87ec6692", "indicator--238c4f5e-d395-4a64-9177-663140b6d108", "indicator--329fa29a-6070-4a10-95c6-be328cab449e", "indicator--d72c5b05-e329-47d8-919e-21ee3922067a", "indicator--df36ebf2-4f19-4055-a630-75925894b5e9", "indicator--7a2c1084-1142-4f12-8753-9327f9e28545", "indicator--ee124904-8510-442e-b997-c90f29d18a54", "indicator--a41f17e7-fb44-4549-bf74-d3728c02e3b7", "indicator--82bf67ef-6bb2-49f3-b922-f9084ff48a57", "indicator--9ba5c0de-eeb5-48a6-a36e-41d7ede8bdfd", "indicator--64671deb-fabc-4e14-a4e2-a6ef0828bbf1", "indicator--53b8f7f0-9800-48d6-912a-0ef990add7d7", "indicator--7985d366-6fb0-493a-af15-82ab27b16bd6", "indicator--8d8b99ce-b866-4fbc-9f9b-5cfa0af8a025", "indicator--a2d1656f-31a7-4f0c-8c2d-649960944d41", "indicator--1b05798e-ecd1-40d9-9777-bc07effbc095", "indicator--0bcedbf0-e509-440c-84dd-9c7c7daf0f65", "indicator--cf862656-1ce7-407f-968e-481def349941", "indicator--1df6761e-db6d-49b3-b90b-81256c2bfd79", "indicator--5b9cb8b5-5ae4-4d14-94b7-7357cc85d074", "indicator--92e82c4d-ca11-4efd-88da-5d5a0478376d", "indicator--d22aa26b-87d0-4f96-b24b-5d088efbfea8", "indicator--4f769126-c206-4d38-b28f-ab87b2437937", "indicator--0b2b20c8-6eb9-4bf9-8348-393dff7f2146", "indicator--c2f50ca7-c1ea-43ed-9574-d95fea4de7a9", "indicator--a5509a06-20d5-4ca4-a0a2-ba679b055e53", "indicator--09338e88-fa13-4a3b-8e64-5bd8b95f7758", "indicator--5e20f7ef-41c5-43e7-9c1e-8220b9c1986f", "indicator--a16fa719-bc29-4242-8c2e-af148b34a439", "indicator--fc87b9c7-2ac2-4f61-b46e-f456558f407a", "indicator--c3de75b9-4c80-4e66-98a5-1e18cb43a80c", "indicator--f9baaa81-d748-4689-897c-21c25085cbc9", "indicator--840ae0fb-40f7-46f8-bb6d-55193c0cdf4d", "indicator--13516445-cfa2-48cd-b90c-ff320582f63b", "indicator--c8836697-23ae-417c-a484-3aec9cc96f33", "indicator--02a50643-e6e9-47df-942f-01bf68b77058", "indicator--efd1293f-0cc0-4c04-894d-d8416ea1425d", "indicator--d86bab95-6e03-4737-9863-11a5e0cf003f", "indicator--8b7a17b9-bb81-4bbf-8497-33cb1398889a", "indicator--fb4acd1a-8e95-4191-b67f-0d9d99d9ec35", "indicator--49e408fa-0353-4786-b6ac-bddad7ec42f0", "indicator--7549b23a-e49d-427d-a4cc-b1c412ef091f", "indicator--dbb705d5-e30a-4901-9377-45d087ae5270", "indicator--469f9017-6e83-40b8-b325-7e72ac890a76", "indicator--eca1e9de-d03c-425f-aff4-3397df233510", "indicator--f53a2721-4336-48d5-9a32-3dc36e79754f", "indicator--228b98b0-4870-4872-92f5-ac112a32c88f", "indicator--8d165dc4-41d6-4fb4-86e9-9b8a271409f6", "indicator--3fbaa3be-5ba4-4b2e-9ee3-6f420dfb1d52", "indicator--b2d93308-e345-4245-8101-c6cc2947f6a1", "indicator--bf83590b-d80b-49b5-a2d2-73952afb5936", "indicator--9f254fc0-ad50-4282-8e51-c84c122385c5", "indicator--16e015db-5c9e-472e-8feb-6d4ed29043a9", "indicator--c330269a-83a3-4e38-b546-7ec4438d113c", "indicator--98c7445b-fcd3-4097-9ddc-ccb353e90a7b", "indicator--cf21344c-0d7c-4f4b-9725-4710b71d7d95", "indicator--de181499-f242-4a38-8c3d-d7d492266e0a", "indicator--5811ee55-6e86-4b66-bffb-8c54ee6a35b4", "indicator--e60f740a-5c58-43aa-b8ef-4ecb1fce13ca", "indicator--36937454-123b-4064-ba42-56683b08c15e", "indicator--78a9c076-4ed3-485c-b905-6748941c1507", "indicator--4cb93a47-2574-4d63-a14a-13f5a76a416e", "indicator--ef16e86e-830c-4195-bc31-82fc45c042bb", "indicator--b52efd71-f1e9-444f-9821-15935f213a78", "indicator--025b36f6-252a-4d84-9751-73c3aa8e5e5b", "indicator--2b6b839d-7584-4d4b-94ab-5ad771d8e5c3", "indicator--e66f69d6-1dd2-4298-807d-36703d3fa662", "indicator--c34b1549-1a0f-4d1c-a5d9-4e4ccbeb19be", "indicator--da844a1f-d058-4640-b03f-0ec5cb642e6f", "indicator--da5e9487-6e20-4279-bad0-33817621d19d", "indicator--ec77f5da-14ec-408c-a247-f4b4a2f1ea84", "indicator--090acc46-84d1-4c9c-952a-e496bdec66d6", "indicator--061c7dd3-308c-4972-ba06-97710edbb163", "indicator--34e9384b-31a7-4b0a-ac48-f08f94654b5c", "indicator--6f176cc7-2150-4423-b8c6-b4188b35f43b", "indicator--13d0fab7-2c63-487f-acd8-08f16704d60c", "indicator--3cf76a5d-6dc4-43ca-9309-f541bf65a9d5", "indicator--83692148-f37d-457f-93c3-4f981a29dad0", "indicator--34639314-dc93-4687-8189-ba7656d5b931", "indicator--7a91ee77-7e95-4358-8d31-a1c9c1bc3d31", "indicator--dc32d00c-1c8c-4b1e-ab05-4a311695da58", "indicator--f36d2fe1-ec79-440d-8ece-a387d9997eb1", "indicator--d1e78802-ada4-4b5b-81ee-a1e74a780ecf", "indicator--e64eaeb1-ee25-49a2-a1c9-3063cfce5196", "indicator--328629b7-d6c1-4b58-9a14-9798a0e9ca62", "indicator--8d12f52b-64e0-47d8-9a0e-3fdd2114c1ed", "indicator--6c029d33-a538-4095-8063-1ba5c3de94a6", "indicator--c02ef719-6085-4216-af82-36ffba09db98", "indicator--8e8a02ca-7c5b-4ce6-9c2b-076a980f9926", "indicator--9f15f667-104a-4807-bdcb-535c9251ee45", "indicator--dfe1cdbd-6b2d-4814-90de-8ba0694790f6", "indicator--be1f891e-4af8-431e-9fa3-d33d986a1843", "indicator--2fb177bd-6c54-4ad7-95d3-af30ca42b17d", "indicator--7ef52d81-d298-4049-b633-6acaf7161faf", "indicator--13c2aa65-86aa-4c2b-8129-6500ae36f3e9", "indicator--d768099a-9b3a-4532-a332-98952ee34596", "indicator--856f41cd-5cc1-419c-a9e3-1910363ed823", "indicator--bbe22e60-7033-4249-9dcd-e635ef371c57", "indicator--e6cba287-0bb5-4da8-bbe0-7f083182fdb8", "indicator--93e98fb3-35c1-463d-ba47-730ddc2b603e", "indicator--79c88179-f505-4a4a-bb71-d5a5a46037da", "indicator--3de0633a-9181-4a0e-b9cb-925e92fd938b", "indicator--b882d712-f659-468e-8d21-49f3e47f42c1", "indicator--e2db775e-206b-44b6-a87f-afc73073ba8b", "indicator--1a4c6b04-dbf7-4a66-86c4-9dae05155bd0", "indicator--221a9b4e-6609-445f-93fc-e65ed0313e4d", "indicator--c2b1411d-840b-4b84-a406-922ebe31ea69", "indicator--c2c0129a-61a4-4f0f-96fe-ef6407c5b342", "indicator--94391472-036e-462e-bdce-d45b49074166", "indicator--f5148c19-cafb-48d2-81bf-3cf16f9becfb", "indicator--98ae1ff1-f0c1-46b9-bc79-c6ae188f9d9e", "indicator--8b864b92-c5bf-4fb0-9423-527768a867d4", "indicator--f0e6889c-b686-47b0-8090-225e938dcc73", "indicator--8efb556c-75bc-4444-a712-4d21decb3397", "indicator--29830d01-971c-4921-b877-f02bc0faf8d4", "indicator--eb4d351a-dae3-48ad-a5c3-be4b1afe80ad", "indicator--1e230d8b-3007-4cad-8af9-0822cc31b09f", "indicator--29f5d415-2a08-45f0-b2f4-3ff04715918d", "indicator--f0060824-fa3c-41cf-b9c4-8c33524045c0", "indicator--ede9edb3-e890-4e69-ac02-29f1d7a2bfda", "indicator--be9fa2ed-5fae-4eec-8e63-bf2e4838bf01", "indicator--1dbbf047-6509-4bcb-b0fb-e75401991a99", "indicator--da8fb1f0-86ec-45eb-a207-972f82354e12", "indicator--754026a3-41ef-4b46-8dc3-af0432b6b208", "indicator--487342ed-b79f-40e6-918b-6fd3b8a4f721", "indicator--74e128ff-5e66-4412-b00f-e4ee4bb63774", "indicator--2a8df994-7a6f-4a74-abf1-8bd65bc54f15", "indicator--c3c72209-e723-4fd8-b539-c586681fa85f", "indicator--b8678811-ecea-4590-a9d9-f687095c789c", "indicator--31ff68ec-545e-4325-93d4-671837da0d4c", "indicator--cae67157-4f56-4e7e-9e7e-a766bc307691", "indicator--a584bf47-03ed-460d-bcfa-7a739381dcf9", "indicator--768e749a-85f4-4916-b93b-1a122950133a", "indicator--af63adca-0b95-4b2d-a470-65ccb3b3fa7b", "indicator--ac615a86-30e5-4edc-a7e6-7b17b9b226a8", "indicator--80dcce2e-b957-41f6-9fef-701d48b1f8fd", "indicator--550d64a2-7cde-4803-8349-25946e5e9487", "indicator--888da556-f325-4f14-80a0-214f774bc7d5", "indicator--30dbe2e2-26ca-4d11-8c1c-edea251dfc43", "indicator--c76aadfb-f176-4fd6-98b5-71ab877af472", "indicator--ab57c052-3285-41fb-a578-a9b648d990d5", "indicator--60c628b8-109c-4fad-b4c4-91e304496ed0", "indicator--03183106-1608-4c17-9b00-9c63055166dd", "indicator--680aa51a-6143-468e-8314-8d8223eaec20", "indicator--4f9731e9-d9f8-454e-97dd-428f11c3429e", "indicator--5a7d9852-2a09-4767-8ea4-0e4e943f84c6", "indicator--5d49b394-1158-42ef-8abc-e31088150562", "indicator--fae77904-cf04-44a9-be5d-7dd3230fae8e", "indicator--7bc648ed-629a-4fa4-9681-995aca5a3a3f", "indicator--5fad6954-9195-40ac-b898-0a21c147a877", "indicator--16448e6f-0f8f-4aa9-ba03-1a31c8e3ca46", "indicator--6e61f973-6d28-4dff-a45e-27dac68e477c", "indicator--6443bc62-3e5d-48ac-852a-29b10562f164", "indicator--f7644525-dc01-46a7-85e4-79a48e9b7c17", "indicator--2e1a3373-bba3-470e-b22e-bb4f9fe910a6", "indicator--085a7c4d-6345-4e9d-986d-01ff0c5ab5d7", "indicator--b06ed57c-5a80-4300-a446-f5d8531b30a3", "indicator--7ac5c81a-def3-49b6-9a9d-f17a2b685983", "indicator--a9d1dffd-e63a-4599-a0dc-0fdc167e564c", "indicator--1535c09b-7c33-424f-8c5a-943a6cd94bb2", "indicator--13e497a5-9e56-4539-80e4-0af5799a6524", "indicator--2c60967b-4008-4faf-9e78-683babce6415", "indicator--2b614c9a-aa8a-4cc1-b135-3be802674d03", "indicator--2f0fa8ce-d0cf-4753-b0ac-c9157fee4a45", "indicator--6eb532bd-cb2f-43d8-a9bf-2810dca048d3", "indicator--7d5e4019-ee39-4d88-9262-99fbe0a969bd", "indicator--06c8675c-917a-4a5b-8887-75176898a232", "indicator--ea120f65-3492-48c0-aeab-bff2aee4e96a", "indicator--43af2d60-17b9-465f-b74f-823494b14c35", "indicator--b0f1ffda-2cfb-42e1-bffb-420511eb95e8", "indicator--5b162f6b-e55b-4c73-a7da-17f33b784316", "indicator--b8366247-ce0f-4a77-82ad-9b88a8e1dc3f", "indicator--a83471bc-2bb1-4045-92e1-22ac0afd1055", "indicator--a9b059e1-d637-42bb-88d2-28b60d93413e", "indicator--764e24ee-cecd-4d03-810f-86a15a63d2eb", "indicator--34542ab5-5ccb-41f3-aff4-7a60a8292142", "indicator--7d5dab3e-af0a-4a4c-bc2b-1e3f68c9243d", "indicator--19cfd761-825a-4b5f-8927-cf4d780a324f", "indicator--a39eb8e1-73ec-4eb5-b007-726fbe1a499f", "indicator--20fab0f0-7ea4-40ca-9e7b-21820f605f9e", "indicator--1e6bf2b1-a330-4869-85a4-5568385c60ba", "indicator--52968ffe-e044-424f-9161-f41e537ee9cf", "indicator--ee4ba530-613f-4967-bb2d-7cf30c57518e", "indicator--3092a33c-5ac8-4d3d-b72c-6d7b4381ccf5", "indicator--ee980a1a-4ada-4e7c-9625-2f5acc3c0db7", "indicator--15cec041-d5ea-43ec-a3f5-c829dd1351b7", "indicator--4d1f0d3b-c22c-4517-9b68-34a4d3c3f937", "indicator--ce03703c-e55c-4af8-ad40-8f65373da428", "indicator--9fbf0707-34de-43e2-b946-98fcf73f6532", "indicator--e98deb92-5818-43a6-b46b-64f88eaa66cc", "indicator--ee45463b-a61d-4926-8b2f-875aaecc0ea1", "indicator--c85da388-3844-4374-87e4-f0837f286964", "indicator--110b4a7d-9cf9-4a30-95e6-309cbb99aecd", "indicator--67e7d1dd-c528-46ce-8994-b7bc35d60df1", "indicator--c4389003-7324-41c8-a6d4-557b39382c43", "indicator--167d06e0-bd44-4c2e-8202-fc17c61463d1", "indicator--aeeba20b-6117-4ec1-8aa5-be818fdecede", "indicator--61153e8f-f6de-43e1-9c66-80d46e4694a5", "indicator--d6511005-d795-4220-94c2-02812104bddb", "indicator--7db6bf6e-c76f-4e20-b241-4a26abaa10c0", "indicator--ac54f84d-42fa-4498-acae-1e7fb2aa1c32", "indicator--97bce0df-d735-4809-a22d-ad3c88f114c2", "indicator--b528e129-442f-45ce-89f3-ec07c409000b", "indicator--d4330f99-46a4-4f6a-a58c-451f2b22164c", "indicator--dd686bf9-95e2-4fc9-b343-d94111646adc", "indicator--beab4ecc-77bb-4f4f-bd56-3a0a66dea1ab", "indicator--1b9eb0a5-b313-4223-9289-ae60599fda65", "indicator--53b25bc4-f365-4dd9-959b-a0630099e411", "indicator--f33fd0d0-1889-4f85-ba0d-3b9c3727b6a9", "indicator--f08b657b-f2ee-407e-93e6-a069a9204b63", "indicator--106a79f9-d525-4fcf-a2f3-c9f2754ff4a9", "indicator--6743f654-cf41-4d90-bf6e-d085006a8a7b", "indicator--33559635-4405-4dcc-8b56-c918c9397070", "indicator--18805233-7730-4fac-96d8-478460a52c2f", "indicator--de31855b-0bf6-4d00-8c06-d429f5a19368", "indicator--2c1851b2-d6ca-4e57-9e34-1d854b5e1ac8", "indicator--f0e306cf-2b04-494a-adca-05e447187b26", "indicator--337dba5c-72e8-4526-95d1-3654297183af", "indicator--f30f94c6-517e-4895-b89e-e1412e603cf1", "indicator--4274cbf4-e460-4196-8595-1b513f521612", "indicator--7bc1fa93-114f-4a40-b785-fe471cbe63a8", "indicator--aa6e80b3-b883-4c33-8d94-adc06cf5315d", "indicator--08d08e5b-73af-466f-8715-af5c12660f14", "indicator--692a5ac6-82d6-41a4-83b2-8a280cea5197", "indicator--00ea30a5-1725-426d-aafe-f2c5974feefb", "indicator--c797af3c-91b9-47c5-a91d-fb21de1d4267", "indicator--29160848-5d4a-43f9-817f-d9897562cdc4", "indicator--a0e31aea-1fcc-4565-b46a-52e952475612", "indicator--6b201795-9725-4c85-8fbc-12b13ecd2c43", "indicator--d9144b99-bf96-4cd4-bcfc-1a93f5be2062", "indicator--2a3dcbfd-1e89-44d9-90d7-4d81e87e4ac3", "indicator--1ceaac53-9d2e-42fc-bae1-a67e229e568a", "indicator--c354f9ec-de5b-4fbd-b765-b3304a07ec77", "indicator--1d853b77-0959-4d32-bc82-c783c6a415ae", "indicator--6c7b8f40-ebff-4d1d-8b0f-7e7ff338ce3d", "indicator--e9ac6345-96e7-429a-85a0-b422a007c662", "indicator--7e8537c7-946a-4c29-b430-b7a577928bc2", "indicator--5e4368bd-970b-49f4-81ba-4dc53fa2567d", "indicator--4b2070a6-338e-431d-9bea-a0a583a62b19", "indicator--5bcf7b9b-71e4-45dd-8282-4b001c2fb6d9", "indicator--eeb930ae-c3a9-4167-b8d8-5ccbd2289949", "indicator--31b4a00a-2053-439b-9f80-21971f7eaedb", "indicator--c2faaf55-4834-439e-82e2-909fdffcac01", "indicator--63451c48-b960-4dfc-b322-e998b7cfa36b", "indicator--6ccabd94-d467-4c6b-8018-cc466f7f0ccb", "indicator--ce919078-a022-4b20-a417-a71340d6c4f5", "indicator--69e486c7-4309-43b6-ba3c-1ac9741b3951", "indicator--80333a7b-3146-4c91-86eb-44899690cfa0", "indicator--4c77aade-3afd-405a-9dad-c5d3c186ce04", "indicator--abc15895-1e5f-42d0-bd86-aa7baa1aeb90", "indicator--91c94123-0f97-4ef7-ba34-f8b2c5cdbc10", "indicator--69b0a921-abbe-4185-9d12-205db4ec1d49", "indicator--ad002308-5037-4974-a8e6-88a659e16698", "indicator--fb5a3861-d142-4dd3-8d6b-4ab830e12d24", "indicator--f64c248f-1057-4ab9-b6ab-c6796cbd6772", "indicator--c67e9df1-977d-454b-98e7-0c3aeec97bd5", "indicator--93a3fb4f-084f-4445-8a73-347d8be76f3f", "indicator--062912b8-9cf7-4d46-94e9-cb027a3ca240", "indicator--080cef5e-ed19-4122-93b8-862f62ffc627", "indicator--12723b36-fc29-40d7-88eb-c2a15abd89b6", "indicator--1f013b7e-8439-4096-8ce3-2f610e72ab90", "indicator--b55cdd13-2410-4a17-a40f-762e0f2a0afe", "indicator--a4cd7756-a5c8-4551-b019-3764b864523f", "indicator--e152ba5a-4abd-4f50-bb74-20cdc65522a9", "indicator--41da0118-c1ac-4244-8e0a-539ac169e5df", "indicator--3e97ab26-fce5-4e7d-ada0-f20f068724b5", "indicator--70dbbd0e-a986-4df1-a75f-cae5316c3055", "indicator--c8c73194-ccca-4daf-b257-8bdaf626fdea", "indicator--82958d84-255b-456c-bda4-754de5534f5f", "indicator--6b84b9e8-eae4-4853-8b5f-16da2e6c7bd9", "indicator--5bdc80c2-97a5-483f-9bab-04ed620dabb2", "indicator--d9128cf2-50ed-44bc-9f17-e8ca0153e348", "indicator--3c6fc761-e6da-41af-9d15-970267843637", "indicator--c20545c5-a838-4071-859e-65eecae77d8f", "indicator--d6cf91c6-dd14-40e0-8a4c-2976fffb2418", "indicator--a05f8b7c-36c8-4b16-bc22-7dabd115e633", "indicator--9b20cb03-ba12-4b3b-9bcc-e85163f9e760", "indicator--8897a50f-2368-4cb2-b6ff-f6ca9d3d3075", "indicator--a2d8a034-b263-4419-98cf-78e91b6dffff", "indicator--921802ac-5f55-43f2-b115-7178fe25a2eb", "indicator--6de18d32-3658-4b7e-bcf1-3d2c488d44f3", "indicator--0949827d-1159-4c55-ab3c-42b1d5c74a2e", "indicator--11eb1274-8807-41dd-a877-fd04f9f6811e", "indicator--55549334-48a3-436e-a469-40bb0eef76a9", "indicator--a007effa-1210-494a-9b43-915ae29ce7e2", "indicator--5dace034-b948-44df-af26-3493ca6240d0", "indicator--7a3d528e-e19c-4941-9a1e-a0d336e9364b", "indicator--ff9694c4-f2de-4bf1-934f-dad983c04710", "indicator--705a4b0f-9a01-4160-ad4d-54461bd8f3b0", "indicator--feca24b0-421c-4306-bc41-b8adf9a3925c", "indicator--5d2f40bb-b8ca-4780-9a8c-4cc85392fa1c", "indicator--33745db8-f056-4fe3-9ebd-f97d9a057177", "indicator--cc80fc74-c7bf-4801-b2fd-97fbfacff102", "indicator--1bdd61c2-c996-438d-be13-e4730eaede41", "indicator--0a04c2a7-541d-40fe-9e64-a66c40dda2e9", "indicator--7ab3aaac-8983-4581-99a2-422cfed939cd", "indicator--bc868b51-ebb9-492c-8bd1-5cdb49fc4550", "indicator--211028c2-5cb8-4a8b-bb21-d2d792858320", "indicator--5c8f6a8a-18b0-4436-ab15-b1fe9f3a39df", "indicator--301e200b-0629-4948-bb29-9653a8678630", "indicator--0c38baf8-b355-4070-b1d2-c88ef200312f", "indicator--d4d99ba9-5e30-466e-8649-51955923dbd5", "indicator--e2791d19-9b98-4338-8d57-c0a8b1ae8a6a", "indicator--399ff1ad-b9e5-415e-ba25-d5ca084063d1", "indicator--46487922-4809-4958-9735-9559ca9c467a", "indicator--5dcaa339-fcdf-4ae2-82d5-2c9c53ed9ea8", "indicator--005bf386-4f8d-4401-956e-d35634eb0f5a", "indicator--7939a130-31bb-4135-9210-87286919461c", "indicator--e7c76639-008e-4a09-9054-44bf0c206810", "indicator--8e47849c-45e5-4be1-b717-ed1450d958ef", "indicator--e907241d-fb74-4867-9eb2-bd5b7bd7b0b7", "indicator--b3b1bfd6-b881-475a-9c79-aa4c8f106eda", "indicator--68a17819-3e70-47d2-bb1b-aa7dae8ce15d", "indicator--85a53160-a996-47af-8e15-6373f5585165", "indicator--05b1f8a4-0f56-4d0e-8012-f6048e8fba3c", "indicator--81bce1a4-82fd-4940-86b5-dbf9e0d6a19c", "indicator--85a3d0d8-2669-44a1-bfc7-3c8fab84cea9", "indicator--f17ea801-740c-4bf7-bed2-7eba9333c6ac", "indicator--fb00d349-ef09-4662-8f54-091396a8e148", "indicator--496961f0-e640-473d-b802-55fcc1fd73c9", "indicator--b33d4052-7f4e-4ab0-b6a8-37ba0a6b6512", "indicator--725c2619-1ad2-4b64-8ef6-2504f37ab034", "indicator--bba7ad4f-26da-4886-acd5-b67576253eed", "indicator--ace35278-ec80-472b-b598-94980bc16849", "indicator--ea72fb89-357d-43d9-9ed9-0b7d7c8d41af", "indicator--39342b0b-d261-468f-b50b-ac7c6db2e8fc", "indicator--466c3c64-9a6b-409c-a3af-5e66be9a8ea4", "indicator--baf829ca-a2c1-44ec-a9f8-284cfb0bd77b", "indicator--81633b26-e644-49fe-b393-6c9e5a576085", "indicator--f32ec00d-4ec7-42ca-9c78-ca4e84dac80c", "indicator--ec10e614-3cd3-442d-960f-f84f3c125835", "indicator--c47d5f93-6975-47a1-b69e-ba29a239e242", "indicator--7e39b2ff-b6b9-4e1a-b859-522ea20f5351", "indicator--21b9bbea-5df4-4f90-8e09-c9feb910ed21", "indicator--310e97a7-f615-4442-a20b-de0b3706c6de", "indicator--c7678a4b-f9e1-408a-9e56-4978a1868321", "indicator--02e568e9-4664-4518-9c9b-5063aca9c389", "indicator--9877d1d1-1b86-423f-b556-21322eb55c75", "indicator--e61ba88c-b287-460b-a091-366f6c5c3101", "indicator--035c2607-6999-4991-b109-2c9800470a43", "indicator--b98637ee-df62-4c84-9215-151ba82da9cf", "indicator--244e26bf-db4d-43bd-8d79-ffedfffcbcd8", "indicator--5a139802-625b-47ec-ae40-f22c1bd95940", "indicator--1da05c24-d797-4a25-b5a1-56a9391f4751", "indicator--4b39744c-e5a8-4ea1-9663-41c8357d3228", "indicator--c2bbbec5-caf7-4643-a7be-cca23cf8eaa2", "indicator--73d073bd-98ab-4694-b7f7-f924d86f5cb5", "indicator--2d0da969-0250-4050-930c-d9c444afc9ee", "indicator--0a6485f9-7dba-498b-b39f-fc9764ca2033", "indicator--43152ab9-7987-4893-8b2f-65bd0876fe6c", "indicator--79061b46-97b5-4b07-879b-f8e95567f014", "indicator--81ac0294-9699-4ac1-88d7-45bba8aa424c", "indicator--dc4fc8e7-88bc-48db-960b-c0f4344f9c88", "indicator--e71ebef3-e3fb-441f-ae12-e462c2f9f6b1", "indicator--e5879ce3-fcf1-42f5-b0c4-0f78a4b2889e", "indicator--cd974b4c-d601-4795-921c-a1319aa6b578", "indicator--00e9ee35-a6bd-4022-98de-c6b50ce6e3a9", "indicator--dbfaf504-9930-4382-a682-af8aa14358fd", "indicator--c3be3ac4-2777-4ff3-bc2f-9346eb462355", "indicator--903ace61-b9fc-4d0c-bb09-0b68c70b1362", "indicator--6f8389b2-3360-4219-a6c5-845750167f36", "indicator--31db2b6d-7596-40f4-ae46-a47aaa7e0861", "indicator--82999225-45fb-43fe-9aaf-93d2134f7725", "indicator--2ef9411c-3bc0-4d6f-b281-14d8f58729e3", "indicator--baa18a31-03c6-4c8e-8a9f-46af22a8e22e", "indicator--fadcd67b-2e20-4b8a-aa3d-375f2603c66d", "indicator--b5b81591-5e06-4b8b-b12f-5f7e93ea8920", "indicator--5b0ca778-3462-4669-8c65-c3bfade32e6b", "indicator--50f8d2b8-da28-4944-80e6-01b876f174a8", "indicator--fe7bb48b-891a-4300-bd77-cfd686820fd1", "indicator--3e5fb67a-6465-4e22-a304-abe6814ea682", "indicator--ed8d2bf6-44a0-4155-986d-396863b518fd", "indicator--9bc16c62-c766-47d1-b19f-70b2731b4119", "indicator--47799778-dad7-4b36-b9f2-9145086f7811", "indicator--7d1544e1-3430-4908-b479-57ee63e81aa3", "indicator--afef6a77-a697-4e03-835d-1f778af7031b", "indicator--09efc688-9e56-422b-b957-2a51913ff7dc", "indicator--ca1910a9-bb5a-4257-b2a4-5151a618310f", "indicator--c7477476-eb1c-40e5-8ec1-f234dc55ca94", "indicator--989c8413-d659-49d3-bbcc-fa01ec848516", "indicator--1e1e75ec-5ac5-47ee-9b04-09491c02e281", "indicator--82f4a0d2-882a-4ccb-9477-ec7080bd9908", "indicator--69668e6d-e4de-4f8f-b385-69aaa870b955", "indicator--005aa69b-5586-4dc8-8ba4-44d4fedc45f2", "indicator--7f352e7b-63d6-4fc8-95ee-8043d6af010e", "indicator--5e5a0a65-37db-49f6-9ad1-9e2076cee979", "indicator--03cd6d92-99fd-4864-95cc-2a1556718173", "indicator--efbeba99-4ddf-4fca-95db-d03e7de1acf9", "indicator--4bc59944-0747-4b22-8355-6e3f4dad4548", "indicator--0344871b-3365-44c9-88f0-dba49e27896d", "indicator--45acfb0c-aad2-49b8-9be1-ba5726c5c02e", "indicator--69842d8f-a9ec-4fb6-a573-e4aa6b18309b", "indicator--0ca09165-c989-4f2e-aa9e-3fca64fd2764", "indicator--5e2e9e97-12ac-4aca-85c2-4147b18af299", "indicator--43539cd9-9b43-490b-8c96-be6a9f5c1cfc", "indicator--1ab5eb68-c9cd-4acc-b6c9-e17184cf6c7f", "indicator--e7a74c23-fedd-48c6-b574-91a70aff7694", "indicator--e21d5654-4e16-472d-ac3a-4cde3dd87544", "indicator--c856cdac-e53d-45b8-afa4-6d871f64e426", "relationship--51d3836c-e951-4e6d-ac75-2f16c7184f5c", "relationship--2afb80dd-f7f7-4aaf-a673-84c5eff4c080", "relationship--af091f45-36b4-4049-835c-e8a312f10de7", "indicator--48b11f82-86b3-47db-80c9-e76da465fb24", "indicator--4bac6fdc-0df5-41ab-9bf8-382d881ecb03", "indicator--f0e2cff4-b4e3-4dff-8b51-14c748ec3a31", "indicator--8087ed1a-a300-40c8-8c75-db6fcf5eead6", "indicator--04347646-5822-4300-b777-13a724812dc3", "indicator--879dd48e-e99f-4fb0-a5b5-a5b07fe03059", "indicator--6d09181a-042d-42bf-b9df-331fb543f0bc", "indicator--1b9a516d-4f2b-4e27-afb7-7c98b8d3b6db", "indicator--9f0572e1-5fc5-4d7c-a163-c220acad55c1", "indicator--c91beb5d-1131-45d1-a852-f65d2d9a113b", "indicator--4cc54c46-13bb-44d2-b23c-3dc8c9f00bcc", "indicator--1c60ac8c-706f-4924-a64a-7a4dc959762b", "indicator--93c8ba4e-131f-4137-99cd-0b2d8beff587", "indicator--65808cac-d263-4ec9-b22a-12625e6e5c35", "indicator--60c1367e-3261-4556-88cf-057c47fbc367", "indicator--9c76aae5-1297-42b4-b17a-257c7bd230e0", "indicator--53bd6f65-a51b-4aa0-b4b7-0582c5d37480", "indicator--36e7e859-9598-4b10-9c81-dea4bb4eb867", "indicator--69339781-3f4b-426c-8f27-4033abf837f7", "indicator--b337c5f2-6ee2-4fda-b465-b47df31e7ece", "indicator--97a37371-ba0f-47fa-867f-1b871400bade", "indicator--46bc24bb-2d8a-4dfa-b96c-958f8caca0ab", "indicator--dc13ab25-6531-4629-9969-e975e3951044", "indicator--9e6f4c6f-3e76-47e6-8655-0a9df234d828", "indicator--254887b8-f29d-4b4a-96e1-232ddc1d91d2", "indicator--85cbe128-a18e-4c90-924c-48b689525616", "indicator--af2ab9f7-0c41-46b2-86dd-b68d63546be2", "indicator--5d0f4488-475e-4609-998d-9fceb1942ed0", "indicator--e1d42f97-9d15-4ddf-a5c1-6053fedd8aeb", "indicator--bdd2c706-b68a-4461-891f-d8ee516e850a", "indicator--31082420-fe96-4feb-ad34-fd83e3453d66", "indicator--3a976830-dec9-4e77-8288-ab1f581fd91e", "indicator--1894c493-d703-4d0f-b3cd-a384037e699a", "indicator--43e56b7a-4e10-4482-8ed2-695cbf7414ea", "indicator--a5ef6f26-50a5-4099-996f-015b89f4743a", "indicator--eb9d5a61-6ce1-413d-95f4-315a8849471f", "indicator--e46af71d-8a36-40a8-aeee-941dfcebd534", "indicator--054b9967-d039-4313-907b-416548d5178f", "indicator--4ad4a50d-5071-4419-b7ea-91958ba63223", "indicator--d11f0c58-af7d-4214-a5dc-dc73b9f98204", "indicator--0db618e8-3c97-43bd-a547-e901cc927959", "indicator--9b17087d-1ebd-4a76-a7ad-9e38009dece8", "indicator--40eb2218-823d-4911-832e-ace2071298da", "indicator--d954d362-dddb-4116-9bca-0da533c29f8d", "indicator--56269666-2ca5-464c-9c59-cdfa85346fbe", "indicator--d8a1eea9-aacc-4ffa-b645-91b16eaf5bef", "indicator--177bc40b-309d-4c62-a9af-91a43527bec2", "indicator--3427868d-f41e-46af-b6a6-a37bc049a8b4", "indicator--dc2f0801-357c-461f-8cb3-cf877f0622ca", "indicator--982524d4-96b5-438b-a5f4-2998514514ee", "indicator--5eefc390-6778-4cb3-bc00-e08a2edcad01", "indicator--d7cdb6bf-2c2b-4a37-943e-4f3e203ca574", "indicator--d4309848-096f-4058-a843-0591f61396f7", "indicator--b9e134e7-e677-4270-8552-3d33579a0189", "indicator--e56b32ca-6333-4929-9944-40389eb2576c", "indicator--179c89df-da47-4b4a-be21-005b05b9e5ba", "indicator--3ac9a886-0e6a-4008-b1c6-737f93de8f2d", "indicator--50a5497e-e09a-4dbb-bcc7-6d97c7467873", "indicator--dbf7f3fd-23e4-4cde-8b80-503a166da949", "indicator--de735201-08bd-46b7-8390-6173ea25fdd0", "indicator--cfe09e7d-458c-41b3-903b-78028d00a254", "indicator--c7318e6e-9490-4460-b16f-b6722ac706c0", "indicator--af7a8313-9686-4a25-b682-7009d42eda16", "indicator--c566dec4-6081-4d4e-aca5-49a7e657bce1", "indicator--ca76063a-a80f-4edb-b961-ed5a37cd8509", "indicator--86154a46-337c-4f79-b000-69908ac87348", "indicator--8e760861-c4e6-417a-8813-25c21d168d45", "indicator--06cef7f7-f11a-4709-8336-f84128c9aa4b", "indicator--216479df-254d-4f4f-99c6-38c556a09b54", "indicator--06bff8db-8533-4e03-8933-23c340611212", "indicator--251d0ccd-8e9f-4d65-a033-ae0042ad34b3", "indicator--f41915fe-c1bf-49a3-9087-3bda8677c544", "indicator--5c326ba5-7e4a-4d4a-8193-477e495d6f65", "indicator--2b25d745-e146-42d4-a805-229c2cb5c62d", "indicator--c84e7c4a-b198-4760-b5ac-0a2d6214233d", "indicator--6840566e-bf03-4746-84b0-e603cdcd263f", "indicator--06849982-7ce8-4474-a432-abbadc0ef0d2", "indicator--72d53816-2023-4836-928b-71d47894bda8", "indicator--0e6362da-bc54-4e6f-96eb-a7730893d764", "indicator--3b8f36cc-3ece-42c5-9c73-bdb57046b378", "indicator--ed91a46b-e620-4a50-8bf2-59cbfea1f712", "indicator--e9e49011-e26c-481e-818a-af90608cb37c", "indicator--30c390db-f1cb-420c-8cfc-3b9a12ef7f01", "indicator--1529ce27-c770-4dda-b733-6fce16fc94b4", "indicator--6dea1366-d7e8-4365-9eb6-1d8b0639ff6e", "indicator--5d7c9a75-c108-46a3-87f7-2409af12e5ff", "indicator--4edde5f4-a643-42c5-b054-0169d2be5117", "indicator--b7112f07-39bf-43eb-9ca0-21738d620a9e", "indicator--1c7ac355-db49-49d2-98a0-8964ab17d6bc", "indicator--e5f3e919-8b50-41d3-92de-858b22496906", "indicator--0ce71634-f8c0-482b-8d55-264e4b28df76", "indicator--edfc9af7-07d8-4230-a041-992c3b3739cf", "indicator--9ffaec27-f2a0-4859-8101-98ed1f4e5f65", "indicator--fbe915e3-c6c2-433f-9893-ead1afdfc91e", "indicator--ddeb0780-6d4b-472f-a8f7-0bcc5fc181b7", "indicator--7d833f12-477f-44d0-96c6-c64d6aaea92d", "indicator--c0ce533d-53e2-4648-aa30-394f2d4aab4f", "indicator--9143b435-c188-4f42-92ad-b7f1969c25fb", "indicator--47b8264b-60cc-49eb-92be-bb3823cad40c", "indicator--1af6e981-9f0a-4b50-a704-4caec90eb5fc", "indicator--501e1ead-1001-494a-ab91-964371aafab9", "indicator--60f45f63-9c7b-4751-93bb-b1e3ea7294b6", "indicator--ff9fa475-7e52-4c3e-80f3-76e601025410", "indicator--157aab6c-da15-482d-a01e-281d4fe3e4eb", "indicator--1115b18e-4fab-43af-93c4-db0242254a40", "indicator--473870fa-de00-4e91-ab10-af848986e24b", "indicator--d38090ad-0224-478c-a1f9-4d666c600e3a", "indicator--2effbb91-c0e8-44dd-a691-e4dd29264c07", "indicator--0160a939-f132-4b53-809d-abe6175f4b6e", "indicator--ec899d52-debb-4220-ba7f-162ad4f04cb5", "indicator--ab89b95e-1fa0-4171-95c7-77faa6b618fe", "indicator--c58eea80-fc1b-4592-8541-b2b8345c8e3a", "indicator--477b2129-e30c-44e8-af2f-63107e5505f5", "indicator--9d92890f-3cea-46bf-aeb5-3475614f7a4d", "indicator--a7adf7e5-e3bb-498d-bb0c-9d1b82231857", "indicator--8b25d3d8-6763-416f-b6d9-42510b97fd3f", "indicator--0114fc30-dfb7-4039-be00-27b066bbacc3", "indicator--f8f14e2a-0153-4495-a7ba-3c2f1d983416", "indicator--a9a1ef45-c528-413b-966c-57becc7d7b13", "indicator--329486c7-2cd0-4aa6-90df-8695085590d4", "indicator--992c636b-082c-4944-891f-78c9ce3a84d1", "indicator--ecbc0ba3-40db-4028-b0fd-004385b0b3e5", "indicator--348b8441-0492-4af5-90c1-11162c17d252", "indicator--4f583980-6ee0-4868-abf7-23fe31c12b71", "indicator--2fc2a1c2-887a-47b0-bec4-872c8db16695", "indicator--5e237e8a-b6f8-401a-908a-cd1cdcad7812", "indicator--e82b02e6-bc57-43dc-bc1e-d4eae61d54f2", "indicator--5d49d8b1-b464-4819-b8f0-1c523615d3f3", "indicator--19b7f335-ddd3-4825-9994-fd5881981c1d", "indicator--1621785c-c270-4e40-a44b-eeafc29e3060", "indicator--0363957a-5648-4a95-b96e-7692bbdaf5bb", "indicator--e1fc878e-0c9d-44a3-8644-52ec7b0a5136", "indicator--e4338654-439d-47ba-b5a6-14a8d49240c7", "indicator--759c0ef0-0d63-404f-8c0e-b9321f77d734", "indicator--43bb176f-c295-4979-881c-d894f6d90b35", "indicator--30bd161e-c2fc-4191-b1b6-550f4da5d3ab", "indicator--f821a172-2b7e-4179-879c-fa0c5fcdeb33", "indicator--08c9ad85-e619-4ce1-ac02-6269134d6525", "indicator--cf0154e7-c339-4f5e-9ead-6a8bb0571fe8", "indicator--660a01da-d4e7-46c1-a810-522d9ea40c50", "indicator--091fe6e8-4d2f-45c9-bb10-8c39020afb47", "indicator--83711a69-cead-401a-8bce-09bc25a9d137", "indicator--6c87b2b6-610e-4bc6-9138-6dfc339302ed", "indicator--f9e06901-398c-415e-8cdc-c1981904e433", "indicator--3e24b384-e938-4c22-9f77-39eb21bf42df", "indicator--8b375e1c-0939-4e50-ae4b-1f536a656f6d", "indicator--0ec1f009-932c-4e40-ac56-fe2c17073f53", "indicator--6ff7be96-13ee-40e7-97a2-ef52f0a17453", "indicator--c2986f81-b821-4d52-aaa4-d0201e9d93fe", "indicator--14bcb96a-6b55-4710-add8-d43950b2087d", "indicator--043dc2fa-3ad6-4e07-9a72-d108aa5519e1", "indicator--f9972559-ea90-44bc-86cb-b6ad8c18ae31", "indicator--c29f769d-a8da-4f72-bc55-13fc30963cd6", "indicator--7487bee3-b5aa-4fd8-875f-8c065782eb27", "indicator--a5ae371d-580a-476c-a562-89fe146ee8ce", "indicator--757cb40b-8812-4e79-9dab-91286af22862", "indicator--d6ceaf19-5af6-4055-93e1-8338725a2d0b", "indicator--65576ecd-03fe-4b50-96dd-3dd36811ed41", "indicator--b12d6e6d-ab00-49e1-aed8-c0b871ffabcd", "indicator--ab040c78-f5c7-40c6-ae62-8c90ecdbcbf2", "indicator--622efb6d-d9fb-4f00-83aa-b22976793c3b", "indicator--605b5e12-934f-4b6e-ba2c-17c2c9492447", "indicator--cd292ae5-7039-4cbb-a8ee-bc79fbcab121", "indicator--04264791-8e1a-45da-8e4a-312d34252073", "indicator--083d5eae-259e-4e62-948e-8e8a9122d920", "indicator--74a70e3f-f491-46ff-985b-7fab964e1439", "indicator--b66f51fd-9512-4a4e-8e05-e670630cfe12", "indicator--27b286c0-bef4-49ba-9d91-ad49cd950e58", "indicator--e0362aa0-827b-4689-8ebb-e82dc02a4507", "indicator--eef896d8-8054-466b-a68e-e1c0d7dc5af7", "indicator--2672e462-b386-4ddb-b4b3-bd63f5e85190", "indicator--c4706f30-2837-49d7-af2b-fac36fd8b2d5", "indicator--8c312159-bc26-47ad-b39c-165866cf8106", "indicator--c6497cfc-d403-49ed-9b0f-7dbd3b445213", "indicator--2e2f8733-21c3-4611-b947-e77935332098", "indicator--e5101591-9549-4136-bf67-6e4e72fe3950", "indicator--2cfd4f2e-140f-40e8-b2c3-92284c7f35be", "indicator--2c9ea63f-4f63-43e2-b11b-42e11136f8d2", "indicator--8de2ad6f-82f5-48ed-88a0-35367dfd0f6a", "indicator--9bbe58da-8167-4d1c-a5de-87c153fdc707", "indicator--0ca17879-071b-40fe-93ef-21a68542cb27", "indicator--b1214f7b-944a-4e22-81d3-c0272944ab65", "indicator--77b2948f-356c-47e3-a192-ecccfdd5b28f", "indicator--efc22b4b-c51c-45e1-bfa6-596b94048edd", "indicator--058723fe-6a76-4e05-87ef-26bc5a6c0204", "indicator--51fd6ca0-9a27-4ff6-9ed7-1da366f93630", "indicator--fae7ead4-85bd-40bc-b1d5-9eef47c41d00", "indicator--24ad5e0b-d2f6-4fc8-8247-f0400c03cf08", "indicator--2838d8d7-5547-4592-998c-fc9c47eb7ad6", "indicator--feb9b738-fb1b-4441-81c4-4c2796ce5e90", "indicator--b4b2a602-8346-468e-a08b-7ba1815884e5", "indicator--2da93153-3c5a-41f8-b7db-c532361fbee8", "indicator--1b1dcd6d-9ca9-48c3-9b88-ec0d425782bb", "indicator--b5760973-e93e-4f22-abd6-4611aed1b52c", "indicator--a9131343-ea8f-4a8e-b3eb-235b3e30340d", "indicator--f9f3509f-2d56-4659-8c27-ed711f1d9800", "indicator--a763691d-de95-40c3-a578-ad5c649105f9", "indicator--e1ba799c-034c-4e0d-8370-3e2740d496d4", "indicator--889ff3bc-838b-41fe-bce5-a45a8bd29ccb", "indicator--a061c2e9-0e65-49b9-9d8f-ac65f43e8fa6", "indicator--7d1cba03-c661-4fa8-9005-05697d074e18", "indicator--f7374072-fdff-49af-9862-f7e627cb40a1", "indicator--68a52de1-722b-426d-b05f-f17505674822", "indicator--049a8bbe-596e-4987-baa2-61bf276eb691", "indicator--9f5ab422-6d1f-4691-90b6-e8bf318d4989", "indicator--62903f59-4c9f-4d25-8646-9b6ca3f1f909", "indicator--497d24cc-e3ad-4ed7-bf44-2aa35f26b727", "indicator--6cfd7baf-2f44-42a0-9a13-103a99c0ab8e", "indicator--a9632ff1-803c-46cc-be01-35e585b81a51", "indicator--663be1cb-ff4b-4572-aae2-8306b10ca412", "indicator--4bc1d892-450d-497e-8002-2d5ce318fb38", "indicator--da2cf11c-9d7d-4244-ac6a-eeba1ccbb099", "indicator--410757f1-2946-4455-a745-158526569e91", "indicator--3d6ad79a-fab3-4d6a-bbc2-9a2f98f6fa9f", "indicator--f99f6809-02ed-40e7-b53c-d6a07a6bb7ab", "indicator--ccdcf2e9-c517-416f-805e-8a7cf862f3a4", "indicator--dea9b6de-42b3-4087-9720-81dc7445d855", "indicator--6a0f09a1-b315-4f0d-b9d5-7c81599d3e1a", "indicator--d6a0bae2-43ec-433d-893d-236418f1a218", "indicator--aa7b3410-20e1-4f0f-8fcb-b47f81d0c20d", "indicator--d2a24f88-b874-48d0-bfa7-06caf9c7b371", "indicator--b84fdb55-1c20-4036-8291-ba3b07385935", "indicator--2a594c51-7b3d-4688-934c-1d0a9a91e2e6", "indicator--624e818f-02b7-4a65-a73b-2e9c435880ae", "indicator--0ed6eca0-8084-4bed-bb53-612246509228", "indicator--0c0610e2-df81-440e-bfb8-b119a639b7fd", "indicator--9c84e978-eca3-4c83-a319-76e730b7742e", "indicator--d8805fa6-b873-45b1-a97f-b690a28bd898", "indicator--b364ebe5-118c-4095-b27f-85c1b630efa7", "indicator--fe92e59b-e0e6-46ca-b3c9-8fb5690c0d79", "indicator--59c92ebd-d4af-4008-9980-194e4e44c417", "indicator--f57846ef-4cf2-4ca7-a0c8-e8216a49d8af", "indicator--70f11b1b-a532-43ac-b38b-be6b7d37ad1c", "indicator--2baf65d7-d9b2-42c1-99a9-7525c7bcea91", "indicator--539c3807-a770-441a-971a-4c337c649976", "indicator--bb0a3d75-92b3-486b-bcc8-378f2c11ef05", "indicator--e5aa8a08-3e2a-4c80-94aa-d09e2f764176", "indicator--436195fe-6a2f-4b0e-84cf-3d54d2640d17", "indicator--b575390d-e3b7-448b-9678-31491a017320", "indicator--e074c2da-cd83-4ec8-a8ee-325889e64889", "indicator--ea364f35-ded0-4599-b795-fa1983a5caaf", "indicator--3c619c33-c04f-460d-bb7d-d2f086f066f9", "indicator--f059f563-c44f-4333-add3-2d9f15392a2d", "indicator--b2e62887-bfe0-4a75-b8c8-980232f1a69c", "indicator--a08fd55e-a8c8-48b6-8ea9-f3b06eb8b845", "indicator--ac8892f0-a9aa-42da-8ce7-dd584f3d2fa4", "indicator--dd5c2131-5cd4-427c-a1d8-4aec22353b05", "indicator--cb9d5bf8-ac39-4543-a260-8e37465d2fd0", "indicator--7f80ac78-2cb0-421c-b790-6599bb325d80", "indicator--3d9bd416-c9e2-43c5-81cf-b63ddf33f0c2", "indicator--5eba91ff-b245-46b5-ac48-403494bd53d3", "indicator--e4eee89e-2a68-42ad-85f7-76dc0fc26a7a", "indicator--61bced8c-79a1-4119-98a9-ee883197e374", "indicator--557c84ca-5fa2-4e7c-a8b2-13e9d98c2b96", "indicator--1167368d-d3b5-4dea-b88e-696d02a78a47", "indicator--fea15d21-6639-4b29-8167-77d28bccbde5", "indicator--37d44cb1-4b0a-400c-bcfe-f98e9c5ff7a1", "indicator--940d1c45-188f-49e0-a1cc-aab08a61768d", "indicator--1d12357a-5c02-4071-a728-628c3fa04f44", "indicator--f76e6a90-ee6e-4f1e-8b8b-8341e15de6f3", "indicator--a53b84df-6eeb-4ac8-8b39-f98317328e9b", "indicator--9326cfeb-d1b1-4293-a8b7-c859aaa1954d", "indicator--6c68fbc2-a014-4559-bd53-ce372a1ae81b", "indicator--3d793b24-c617-47f0-9eac-cbb0b308243d", "indicator--d6a05cf9-4e01-4483-b8a6-9ae93312b99c", "indicator--3412760a-f90e-46f1-84b8-e4d4e54e18d5", "indicator--a49b4cf9-af0d-42c3-8b75-df9f90bfa558", "indicator--3e3dfab2-4b9a-485d-ae3c-2e89cc270dc8", "indicator--aea1fafa-9535-4d5d-8aef-95a47ee62129", "indicator--56bb4adb-7787-4b9a-8534-aaaf0179d99c", "indicator--80c681e5-42f6-4445-b5be-43fd08e35f58", "indicator--ab66375b-3c4d-4b58-bc5c-94ae61c965a3", "indicator--0663d2ff-e94f-4a3a-80c1-6c794c137bd6", "indicator--e3297862-0fb4-451c-b269-fd412449f943", "indicator--88fbde82-b979-450b-b7a1-3608f1978177", "indicator--7789e189-3ca9-4142-a65c-d8a5da2b2880", "indicator--85ea9c1e-dca8-4864-9005-2a9cdd82abe8", "indicator--de6463ff-b61e-4e83-b31e-d929f1cdf5d4", "indicator--b90e6d25-53f2-4391-aacb-e1276bbe38fe", "indicator--bf567543-bbc1-41af-ac64-53f5c93d9baf", "indicator--4f18c4c2-00e4-4529-abe6-e24cd107cfbc", "indicator--015f444c-9207-4cfe-add5-343939940ee4", "indicator--3e2507f2-72dd-47fc-aa34-6930d5fb3dd1", "indicator--32fea7e2-883a-4f2c-a7d3-72eb9f23ef65", "indicator--256144fc-7cd9-4d34-84e8-a6c4f81a07a3", "indicator--d28a6b1a-aba4-4561-a2b4-2e98df38214b", "indicator--a1600192-a319-40f1-8863-a3e42e84cdfb", "indicator--6aca5a55-032b-4cd2-b746-4da5dd06ab4b", "indicator--6dec5b0b-5dfc-4b69-ab7b-e38b5484bc43", "indicator--c9fbff7a-54e6-43d1-8723-37e30a1535d7", "indicator--d6a660c6-76e5-49db-9f96-fadef4301a50", "indicator--3dabe178-042a-421d-8ab8-d800fbb642fd", "indicator--c6dc800c-e33b-44dd-b42e-f7e05ead1947", "indicator--a87f2d96-dbaf-4438-9c36-b519d63227fa", "indicator--3c1330e2-7c67-4a8e-a496-a251a4b8e002", "indicator--3f7b14c6-c364-40ea-9a09-40fc2201644d", "indicator--4275403e-f9e8-44de-a201-5621ec9d9cfa", "indicator--e0b75259-b297-4385-96f5-788d1122d782", "indicator--1bcb81b1-9ef0-4306-bfed-931049f0ad11", "indicator--cf8899d7-ccda-4865-8509-407dea0d3db1", "indicator--5813fbe0-ab51-4d5e-a0ea-01e421da5032", "indicator--62a65f65-6892-48dc-8098-4cb3b7aefb62", "indicator--d3ff45ff-9889-4843-b788-e1bd2e9842be", "indicator--13a2e908-c14b-4e2b-8210-5a7c2d0e8212", "indicator--549f2655-f3e2-4f98-b6f1-9196a2510c91", "indicator--043cc6d1-980c-4247-a8e0-e09c25950167", "indicator--14718bdc-08c1-445e-b5df-ef07c11019d4", "indicator--276ed64b-1dc2-4ee0-ad33-f37654cde74e", "indicator--8363219e-59fc-41ac-a338-7204886380b8", "indicator--28f63dbc-2351-414e-af75-504ff929bde9", "indicator--b419e2f1-036c-4d74-9b9d-4421c6c4ca5c", "indicator--3d32e695-7245-416d-89ef-376c71170710", "indicator--565c0e15-1eb7-45f0-bedd-293a6d060a61", "indicator--e6983ff4-229c-4a14-b807-29a0dd76eb76", "indicator--cf7dcb9f-cc7f-4b3d-9385-aeaee3e4fbf8", "indicator--a8a649ce-5252-48e6-9765-2b3712f7778e", "indicator--f367ba74-9ce6-4ac9-9caa-b3220e2534a8", "indicator--7bf7ff2d-9fbc-4c82-86a8-a89e2cb26884", "indicator--b74347d0-0700-487d-b5ee-2b7353fd9f48", "indicator--cbbc5afc-9001-408c-9521-0e0c517d47be", "indicator--77c76015-266a-4427-8cb7-8f819d34da3a", "indicator--104cf417-2937-4e68-8ae8-ce8a95868734", "indicator--ef395474-0f32-46ce-8963-72d4f6d7e41c", "indicator--25323260-6bb4-44bd-a89c-1fe4443c6629", "indicator--b37aedb3-f682-4c6f-a95c-81fa0e68b890", "indicator--eaeb7a58-8e6f-4a74-ad9f-993b50f5deae", "indicator--443150cf-3b49-4cde-95a8-8c295d5542bd", "indicator--cc87bc36-31ab-4653-8737-b05b66e39c57", "indicator--85b0b632-8a9f-4107-abcf-b86ada7003b6", "indicator--f7e458c9-060d-4615-bee7-e75ef6f85e2f", "indicator--1bed6df8-9349-45b7-b343-d1f2cf8417c9", "indicator--67e47b2b-79be-4d90-94cd-1eeb8317b5d4", "indicator--049ae77a-2c38-4575-b19c-f13f1191bda4", "indicator--1c6a1750-f5ba-4aba-9af2-52f8d16c983d", "indicator--33971489-4e9e-4a12-bb11-dd229f11d14e", "indicator--036ece1d-4862-450c-93e9-e16238d77ead", "indicator--e26a9214-87d7-4d1d-b894-9db272d7882e", "indicator--6509746f-ac46-4112-8e1c-7c6f1100a3fd", "indicator--70d90364-d1cd-4638-b996-9c7ac23ff5b4", "indicator--60b1f7f6-0384-44d0-abff-abc879acaa79", "indicator--109d25d0-9d6f-4e1a-a1f6-557d583db79f", "indicator--7b19d1ba-9db9-4d59-9f07-92c6ca5c9fcb", "indicator--a02800d8-59cc-45a6-9b68-0ea467e0ca57", "indicator--34c28ac4-3a8a-407a-8a5b-da3498adbe80", "indicator--013a593d-028e-4c08-8982-275517ae2599", "indicator--2eda262c-2408-4b7b-926d-0b6d12f68a27", "indicator--280466ca-7bf2-4933-ab39-7c800ba522e2", "indicator--f3c483c3-abf3-4116-9b10-4515891bb14c", "indicator--3399aad2-7035-4538-89fd-28672e4195b0", "indicator--9157ec71-d344-48e4-99b3-e6196026e98b", "indicator--1dc3ddd1-f483-499f-9a57-7a7c95a3fff1", "indicator--0ea9a30f-4443-4f88-af5a-28d86476c811", "indicator--f912c372-ec57-4cc2-bf47-1fd36792bb5a", "indicator--87f3c2c5-336e-4892-8ab7-10eee66cbc5f", "indicator--618bbc05-e453-4756-bbf1-e7d8df4c6bb9", "indicator--6cbba9f2-4761-4ed4-a0d2-b1f0cf044449", "indicator--46d2ace2-070a-49c3-ae5a-e2a1e3b72395", "indicator--04a0273b-0902-4733-8e56-53a0fe52e73d", "indicator--3783c9d9-9c7f-4b4d-893f-74bc95f9b9bc", "indicator--c122d154-7d4f-4016-938b-e3be95024701", "indicator--87ccf04d-c852-4663-9007-664e36b7c651", "indicator--38d099cb-05c5-4ed9-8371-d4d517e2a4be", "indicator--953a2897-8d0e-4328-ba43-2baf34486ee2", "indicator--f602680f-03c0-4dc3-9cf3-696f044ea1a0", "indicator--efba7cdb-19e1-4237-ae81-6dcc8d87f9fb", "indicator--e9b31b35-6118-4a1d-9648-70540561e608", "indicator--4dfb9d21-0b7c-4adf-be99-4a7484fd0d54", "indicator--8bc6a20b-b6fa-4b5d-a7fe-576a7061951c", "indicator--ec6cdde5-75ef-423a-a7d7-cc42369cdf18", "indicator--39b776ff-133d-4b4c-b44b-0b2d8357f24a", "indicator--10a1aff9-4d8e-461c-814a-fd523cf14af7", "indicator--9dc35848-5f60-46ff-8242-f4e4c1d5308a", "indicator--5705a4d8-216a-48fa-8a01-daf0b943ce49", "indicator--336ce7af-7697-45e3-b2e6-909913458a0a", "indicator--55ac58a4-5f75-4bc7-99ca-b4bad8b7d43c", "indicator--a2bb09a6-ecca-4a1c-9139-a4cb7cbc68c7", "indicator--5f7396c2-624c-41b0-91c6-7c137c88ac73", "indicator--a98276ad-3479-4156-868e-9d4257223aa1", "indicator--fe46a288-def6-48a7-a7f6-744a8fd2fa15", "indicator--8eebfe7d-c39b-4775-8340-d42d91a57f3b", "indicator--588e32a8-4a80-4630-bdf5-f2261e767c28", "indicator--b072d4cb-0eb3-4057-a38e-509e19300ffc", "indicator--ff1dfff0-2d8b-4a41-a970-c4d8882da38f", "indicator--abc60e1f-4fc4-4632-8dde-fe910e030981", "indicator--187c6911-5a83-417d-8cb6-1eeeee6a76dd", "indicator--12987520-a38e-403d-aced-fb42f2ca3598", "indicator--c0d58210-a050-4112-863d-1fde63b340c9", "indicator--5eb4c6f0-2fa3-4e7d-8287-41677523663c", "indicator--9cf3cf32-8f1d-4505-a131-bc983f896001", "indicator--e60a56c8-c5b6-48db-9e2d-0c304906cba8", "indicator--8fa18c2c-c575-4861-93f8-e0e76e42febf", "indicator--0e521229-e34e-4268-a688-8e674987ae9c", "indicator--fe8e1018-9634-4ed9-89f4-cb10c0e3b8f5", "indicator--2dff46b5-e94b-467b-b6e1-28178b09ca6e", "indicator--6cb1592c-5c0a-48d3-9170-157bb0016eb7", "indicator--9fda69ba-9803-4fff-a4a7-dce53759464a", "indicator--8c9b251a-7298-4f7a-8982-a355d8dc024d", "indicator--cadfa310-845f-4fe7-a157-a41ab5903be9", "indicator--e32d25d4-ca71-4f74-862f-1301f496bdf6", "indicator--0e028bdd-7317-4546-b220-3ed985e8825d", "indicator--66d58714-d609-4392-b7ee-6efbb7f5d27e", "indicator--abd71030-c3bc-45e5-9ac5-8276f2a9bb43", "indicator--d09b1b9d-d430-4055-acca-d5787b082baa", "indicator--16d300e1-3ffc-4685-b632-21fe318418db", "indicator--170f9e5b-7f55-4972-8fd3-1d41b68d2e4d", "indicator--ebb5ad85-69d7-427f-b901-f232a265148f", "indicator--325e6670-3fc2-42fb-beb3-8d6c2dd5e679", "indicator--0d4ead48-6be4-4fb9-b014-2a7e03176fd0", "indicator--e21aa934-8a04-4fea-a616-13097a7c3f13", "indicator--3abfaee5-d31d-4ead-a377-e99c28d8a1b0", "indicator--8cc48442-cc9e-4108-b715-db5d899925fa", "indicator--83d03af1-e704-4368-92b1-f8c3a9853fc5", "indicator--ed846a43-54b9-4cf9-9996-bf6a80f31d2b", "indicator--693aeff8-c62a-4e71-b20f-2e761f54e9de", "indicator--777820a2-abf4-4b39-9d55-f9ddfa1e2a86", "indicator--aa9baf26-d34b-42f5-9df4-968b3f39ffa1", "indicator--4f9fa016-d23f-48e7-beea-0da60c918234", "indicator--26737082-80b7-4ddb-a101-30f0d6c56004", "indicator--3fac8fdf-52d7-4d13-b325-8ce6637620ba", "indicator--c15c5ca8-013a-4195-9cf0-a30afa15e402", "indicator--1a07d4be-2d76-4861-906d-d26e18d29e84", "indicator--a6f47af1-976b-49a3-8753-ab0497daf2cd", "indicator--8e824a99-382e-4fdf-946e-12e71241b434", "indicator--698bf9b4-24ec-415a-bff3-3ec9e1a19ea3", "indicator--cd8e4e71-0eb7-4d12-afb1-dbd0369b3b49", "indicator--9a600e2e-3bfc-4666-b423-d8bb58586f35", "indicator--43f9e761-a610-4ddb-bd06-859a2a745ad5", "indicator--5c050c9d-b208-49e2-bf82-c2af89ff430a", "indicator--27670f84-ceae-4e60-b3ae-812c7bb48325", "indicator--68f3a59a-a44a-4fcb-977b-75038ee91a39", "indicator--ed9404f6-8113-4a94-a0ef-163fecbfe7a8", "indicator--0ab29551-1f06-4cfc-8f18-3775e8b6ef4b", "indicator--9a9618aa-9136-415f-a082-6d8c98a674dd", "indicator--5ba6c5b0-ea4e-4db5-9076-59ca65914a09", "indicator--18d597f9-a760-4ab7-a3e5-36c60478b44e", "indicator--77f4e10f-62cf-47be-91b6-2cda15f3a18c", "indicator--edc3593d-30ad-4383-b880-5d0e2d63cce2", "indicator--082bd480-43c5-49c5-bfd1-1815cebd73c2", "indicator--ba09e07e-70de-4a55-85ab-a3d0b6bc5fdf", "indicator--7f0ee444-92c8-420d-950f-300adda663eb", "indicator--763c7f39-c888-442b-bf73-f7151252d323", "indicator--f5099374-1d9a-4169-b964-b68a77f07017", "indicator--a2090e42-c8eb-4fc5-88f2-e2d74f1415c4", "indicator--537d5c51-709a-4fef-98d3-00652a664d35", "indicator--1738effe-f88d-4a30-9efe-f0942f0cbcae", "indicator--aa22080d-f298-4b52-b9e9-962c782cd047", "indicator--003e7676-f85d-4320-a0a1-ee79c43f8e2e", "indicator--38c26c46-9bd5-4a22-9ef6-2ca340cc0103", "indicator--d5514920-eb40-43f8-9bea-183c47f6a736", "indicator--17ec6334-4b8f-4b5d-bf1c-18c2fdbc7635", "indicator--c7c53dc3-282f-4048-85ee-0896aaea2f42", "indicator--4cb2e1f0-9c22-4478-a5b3-67d8cf145a63", "indicator--b237b4b5-5f7f-410e-8606-9e90798870db", "indicator--06fac8cb-747d-4996-95e0-28848bf4a6d6", "indicator--16dae21e-0fa1-4948-b71c-c29eaef8a538", "indicator--9b717f64-59e8-4fb8-9fb3-02204f479c30", "indicator--a8d9fe0c-5004-45c0-b5b3-a828420566a9", "indicator--9f263492-bd2a-479c-a6ad-25aa67e13aec", "indicator--3e2b1782-a6de-4d4b-8a55-3a270b173fb4", "indicator--70fda70a-80b7-4d02-8195-4c068e827862", "indicator--2eea2be9-cb5e-4666-8b92-dc6fd83a3ca2", "indicator--7b22c8cd-4148-4d34-bb4e-5fe2d742aac5", "indicator--13f6e25b-9410-4922-a21c-65fe755d8e3b", "indicator--4b3d19f9-0503-4f44-b798-4596074af429", "indicator--1a79a957-91a6-4c00-a102-b400bcfb6e1d", "relationship--80c47bd1-5c78-4c1f-bb7c-b88f54b67df5", "indicator--86ab671a-f1f5-43bb-9882-e444428b43a3", "indicator--b024ecb5-0a5f-438d-ad43-1e25c344ce94", "indicator--b37fe960-2e35-4e3e-85b1-93a58acdf88d", "indicator--f4e8b9a0-59db-412c-a136-5c8ef5a3db9d", "indicator--56ef3266-5fe3-4443-b75a-27efa69e3cb2", "indicator--7d71dc9c-3d22-45b0-bc18-80cbe1988d5f", "indicator--d299543d-1231-470b-a7be-73e3da42fa56", "indicator--bbc8e892-da5a-42ed-8060-60135cb206ca", "indicator--51dff5db-c770-42bb-8db9-ba9392d05008", "indicator--f5be1ecd-263a-46b4-8ecc-e54dcce92562", "indicator--c6cb4406-e40c-4abb-a8f0-6ece88900559", "indicator--5e6df11e-1839-4821-8668-d33197f45fc8", "indicator--9be11719-1b96-47ad-965e-0abb06e00551", "indicator--9877d935-fff1-47c8-967e-a3d4b97be994", "indicator--f5e511e6-3794-4d8f-91e7-c32dcbeab9a0", "indicator--7c127935-5ee2-479a-8964-8bbd088e2738", "indicator--87cd98e4-ad4f-4de1-8e2d-0d7f6fc949e1", "indicator--f2f5ef0a-ac67-4cf8-9d56-75a8e267738e", "indicator--f648bb00-b217-4439-a393-a8e66d840598", "indicator--d7f092d5-e3ac-4ee3-86e0-fb923d7ec215", "indicator--fe85de79-9617-4219-b711-bdd08a7fd163", "indicator--af0a3fae-153b-4e76-b4cd-403f1aab4861", "indicator--7cd1d26f-2e7f-4e09-ad10-42b0f03f278e", "indicator--945c2f41-6cf4-4f55-9a68-c56383cbadaa", "indicator--0176f852-0b5f-4936-8268-10f301463a98", "indicator--491c5664-6f7f-4555-bea8-3948433a0860", "indicator--33235c24-7177-4d35-98eb-ce924522bc8a", "indicator--f59cdb71-aacf-4caa-871c-6dd9954df461", "indicator--ba7052fe-b007-400c-9357-4f7f8553a3b8", "indicator--864cef95-46c5-4852-a3f6-bea94d788094", "indicator--d069c993-8c0c-4330-a3ba-1bf70fd010f7", "indicator--b184f7c7-c8aa-4fb3-84de-9e9ee9c94d25", "indicator--8e69a72b-bd0b-40de-a798-db1a5cedea61", "indicator--16aeb218-50d7-4045-9196-182e0530712d", "indicator--8d4f4326-e6ca-4bbc-a2f9-454e67ec8942", "indicator--9bcbe3f4-ba0c-4aca-9de2-74103b2a1d55", "indicator--ce376b21-5acb-49f5-9999-f6a682dd2bb1", "indicator--ee189535-8140-4eec-9918-5cf25631a8a8", "indicator--f886c827-9e24-424c-9288-b9f62704d659", "indicator--4aac0b3f-42df-4d10-8eb1-68e77bd83c59", "indicator--a24d55d7-2ca0-4768-a5c7-c25c7565b7ae", "indicator--5fe999aa-b295-440b-828b-050170ae1efa", "indicator--694cc04d-5c15-4f1d-bd76-33e322caa843", "indicator--6095d589-32dc-4c0b-9936-f93dc1eea1a6", "indicator--5bb98179-bc06-4e42-b205-f6a984de0406", "indicator--683d3c3b-ed74-4ee8-862e-8145b408baf4", "indicator--c85d9391-d4da-4b03-94b6-ba7153ee3ad8", "indicator--6ba049a5-2dc7-49c9-91cc-4d0bc7587260", "indicator--f92f754a-e76d-4d5d-a77f-027b22e1f171", "indicator--c46a32b4-7bb4-412f-a0b6-df6b1267b62d", "indicator--9f8abfe4-3007-4a4b-b6c7-0d45c9ce4f74", "indicator--4a1d633d-f27f-406d-a4ce-af84650f7985", "indicator--2bc5a038-c3e1-40e7-affb-0fdb46703bb2", "indicator--42a713a1-d0e9-48e8-9fbd-237400121d91", "indicator--ccdbfb20-6ef1-4c6e-bc1d-d4d1aeb37555", "indicator--bc30afc7-4fea-49cd-9c6b-74c5417ad894", "indicator--c95696c1-ab4e-49da-ac04-885edc80cb06", "indicator--6d7e7a35-a759-495b-93f1-444f512d8ddf", "indicator--f40144f5-6000-48a8-8677-32dd828b2567", "indicator--21ca2083-3429-466b-aca9-8e064f9b0581", "indicator--c2e3eaf8-dbda-4c60-a6a1-8e30b575acdf", "indicator--7a694168-051d-4474-928a-f632a88c6640", "indicator--e764bf85-483c-4cf2-986a-46733c5557cd", "indicator--2affaf2a-c41e-483e-bd47-72545fe58b12", "indicator--a579046c-4c76-4c1c-9544-a9c917f7897f", "indicator--fe04fc46-27ff-4687-837c-5c61158772dc", "indicator--315b86fe-75b7-42a2-8a3b-9942f6cb406d", "indicator--8a0a8a33-45ef-4c97-a33d-297e0ba7ce14", "indicator--ef6d9973-8a1f-4158-85b2-767f50a7b2ec", "indicator--2e09887f-e011-481b-93b5-ce5dbb4396f3", "indicator--18d6866e-e389-40fc-a224-d670223f5ba9", "indicator--042aaeac-dc32-49c8-81f7-273d97b8bf99", "indicator--a646ea69-2af4-43ee-ad36-8e0485cb22b6", "indicator--09ebd4ee-f9bb-4e24-8bd9-7995cfefe926", "indicator--7a839002-cc5a-4d00-a0b8-9607e1f3ef19", "indicator--a9412b34-ddbc-4809-83af-41ace5315d39", "indicator--f204580a-49ee-43b5-a704-639969e979ba", "indicator--e54d338f-3fc0-45cb-899f-eb9b9385bb2d", "indicator--2063aff4-1eb8-49ca-b891-b342ea36a98d", "indicator--1109d93b-3f46-41fa-934d-5fba9f5aeea9", "indicator--b0296215-154d-4a74-b1b6-d85b400e9127", "indicator--f103235e-1d8e-49ca-a892-205467e4940c", "indicator--7ed8bcf8-020d-40d6-9dfc-f720d2fd42e7", "indicator--babdab0e-5399-40cd-9299-035fb3e873bf", "indicator--24ce83ff-d52c-413e-815b-4c933d870aaa", "indicator--b54db00a-dba9-4521-bea0-d5ab69a4a613", "indicator--bcb73347-f47d-48b2-95ba-615d4df1f6b1", "indicator--0a03ce8a-9492-4b7b-87d5-706af9019c05", "indicator--dc5dbca6-8ffe-477a-a9fd-df86f2f965a6", "indicator--6510b34d-17ae-4f9b-89db-ba1a4ede6df1", "indicator--5383718e-fefa-44f0-ad77-a16840ccbe8c", "indicator--cadb9060-3d82-4f40-af1f-10129d7b8c5d", "indicator--a6f885c2-ba92-49f3-a9ec-090f47ff28f5", "indicator--1f4e9544-2c3f-4c96-9e32-cc3a8da57b2b", "indicator--bd9f3705-62a1-4731-99ba-23e2d85fb2fa", "indicator--df905c01-2279-48ce-b2ef-777695d2b16e", "indicator--0718823d-7546-452f-bf01-5f495c7a0f2b", "indicator--b6022541-899f-4573-b913-688e493b44c5", "indicator--1ec4a348-1ab6-4135-a060-e4cee0b14953", "indicator--bdef7f6d-fcc5-400f-9794-ef64fa0c486c", "indicator--733a6f09-e7a4-4d37-bd30-859891a7b0c2", "indicator--9efc62db-723c-4a32-9cdc-a278e5315da7", "indicator--eac7e88e-cef8-45ca-8836-141d85085831", "indicator--b08cbc74-adce-4a79-b299-2f36eb394602", "indicator--2da1c164-c84d-4f18-af9d-b66a4f1f37ba", "indicator--61da154d-373f-4487-ad1b-99f090d242ec", "indicator--ecc415e9-b101-44ca-832f-ea6456cce2ac", "indicator--d3a0d777-111e-4822-bb6e-e0dd5cbe76d2", "indicator--4ff06a79-ee19-4519-9c8b-153c1da49177", "indicator--fb4cb76c-79ef-4f40-bb12-48fd0979641b", "indicator--24eb9904-b53b-436f-b085-909223845b1f", "indicator--65aff3ae-a66d-4693-b94d-91e4a121656e", "indicator--c0151024-58e2-4555-9f96-14676ea3e397", "indicator--082c6cdb-5084-49e7-917b-5746d484c198", "indicator--18f6081c-5772-45fc-9db8-348710c45344", "indicator--2200da7e-f849-4399-b97c-baf80db87083", "indicator--4bdfba49-5037-4e5d-921d-66e344730788", "indicator--9b4a56a8-34fe-4f4a-8e25-96d7b6e49d8e", "indicator--399eb72c-efb5-4538-bf26-3b599a891186", "indicator--bea160e4-a9ac-419e-9019-03499fb0e7a7", "indicator--6c8be4ae-abc7-4bca-9df0-d701f1c54211", "indicator--dc6b7a24-3e9e-4c43-ac29-03535f5ae140", "indicator--8848a338-7508-4ff1-a7bb-94c288a9270a", "indicator--6ca609f5-fb90-489a-987c-99b438e0c68a", "indicator--54a3d296-3934-4077-8c98-7cee09c11ea0", "indicator--ff02e745-bab0-4611-96f0-a49ada7baf59", "indicator--202c686d-ba08-49ee-a0b5-7ad9b5f0b4bc", "indicator--5facb402-1103-4a08-ae70-fd4fa0e3ca47", "indicator--e98e165c-6033-47b6-bf87-38333d34782b", "indicator--2c2a9169-e811-492b-90a7-436cabbf11e3", "indicator--7c2f4297-ec64-43b4-9bec-936b73559ccf", "indicator--eede4fe8-95ab-44eb-b1e6-4c456cf322e1", "indicator--26770892-c7bb-4dfa-8345-a7d8be33fd84", "indicator--9106be1a-07c3-47e5-bee1-918dc6738a15", "indicator--b692197f-17bf-4d3f-85cb-b6c7ef0f2ff9", "indicator--486cf641-91a4-4863-8675-a10e451f0275", "indicator--857bd7b4-f38b-423e-8a38-90963bc59d4e", "indicator--f86fcc7d-0ea0-4f62-ab8c-6c0653812f26", "indicator--0aef677e-577e-4215-b1d3-57c9ab2cc59b", "indicator--d68467bd-211e-41b9-b6b7-ab6803b83e0d", "indicator--f3f12175-7d8a-4323-a357-fd9cc546a1dd", "indicator--96bc98ba-6adf-43da-9cc0-b93c9ba05174", "indicator--ef4b7d05-ad68-4fc2-a6cd-ef0440a28f1b", "indicator--85386a1e-02dc-4cb7-bb7b-f158f643fc0a", "indicator--280acf44-320b-40fc-9781-92d56fec3807", "indicator--8162344d-c547-49dc-a6a0-0263a182a952", "indicator--f7b57a4c-30b5-4151-b6ad-669ebd4a5b56", "indicator--a99e4c94-daaa-4fa8-93d7-53125cd1179e", "indicator--335e6f10-d2dd-464e-9ce4-2858c2eba6d8", "indicator--455f39e7-6755-4161-a3cd-9434cc66561a", "indicator--c6ec1710-26bb-4d73-90d8-a808bf32eace", "indicator--200ad3ac-225d-4260-9f87-eadd37eaecad", "indicator--39435ed2-e8eb-49c3-9676-2b887f3512ee", "indicator--3740c5e4-fb84-4111-a3ae-fa11c8a857d0", "indicator--84563b70-d5c4-4417-bd6e-77cc471b9a33", "indicator--6b56829f-e090-4000-98d0-ebbb01864b4e", "indicator--946da925-57e0-4c9b-9402-7c28ae5a221f", "indicator--ca7a65e0-f7fe-47a5-b0d1-4c94ef3c4d6d", "indicator--17da96fa-22f6-4130-a07e-2114d3060544", "indicator--1565637d-7cc6-4a44-9076-92546e531f54", "indicator--38c2d80f-2d08-4a3c-8a37-8ee54c18ace6", "indicator--ba78dd8b-5fb1-4e7b-a9c8-8862b7dcff0f", "indicator--bca0c04a-3673-42da-8a5c-fdbdd503bbd2", "indicator--fccd4da7-4331-4276-962a-589c9018af03", "indicator--9be97f15-8664-4f2e-99d4-d14b34a15d68", "indicator--6bc7d4cb-c885-4b02-af5f-7dade3fdd3d6", "indicator--8a3ab031-86df-467b-9d4b-2f3449423b2a", "indicator--34a11aa2-4e62-4dc8-b644-2b41e53ae519", "indicator--ef506c6c-4414-4acd-a11d-0174b478667d", "indicator--71359afe-96a2-4ecb-b44e-e5306b9a5ca0", "indicator--cba4f9a2-dfd7-46f5-82bd-532ec4c366e8", "indicator--69a59942-404f-4521-b5a8-ee3900b4043f", "indicator--ba18a0b3-9ce6-41bb-a890-c7e22848f16b", "indicator--16c4ac90-77a5-41cf-9fe2-5724c4454703", "indicator--452090d9-cf8e-4368-bcb0-eebf66388bc0", "indicator--23ba673f-a954-4f97-8d3f-b10ee97a38dd", "indicator--04acae75-aec8-4783-b582-2d86543bf9f6", "indicator--5fd098fa-59c2-466b-85f8-d57bdb13e739", "indicator--6d8b00cc-3443-484d-af11-afa24c64dad2", "indicator--cedbe61c-66cc-4093-8a22-973644cf6e93", "indicator--00095584-8827-4ac6-a158-ce8c445b3b9c", "indicator--e7227159-8242-4c4b-929a-46be92be0fe3", "indicator--6dd15fa5-64a9-4396-9161-4bec526c0cdd", "indicator--3e2234a2-cf14-41a1-b799-2a47e72b55f5", "indicator--4c5a0ee2-7964-4ba9-88d1-8d69d8778e9f", "indicator--2461ff7a-c715-4910-8bb8-c344176d30f8", "indicator--92eb839c-0883-4338-955c-012958b8d475", "indicator--a2a6c46c-9bb2-4901-862c-220ca1828254", "indicator--c521976b-20eb-4ec6-8539-3af1828e9fef", "indicator--fbad0074-c753-4b73-8ed9-3cee99dbc308", "indicator--828cc618-4d0e-41bd-850e-63533f2b85d0", "indicator--4b98a4ea-4d3a-4375-8bd6-b0c8cec67dfb", "indicator--c526c54d-b9d2-48cc-9554-09da2feae255", "indicator--1304523a-13a9-4d1a-b7c6-42b84a2b0e85", "indicator--ac79d9be-7362-403f-a9ca-9e5a33757ab3", "indicator--8ada55aa-26d0-4890-a62b-472b35ab5a0f", "indicator--1d1ce7fd-ec66-4bcc-a289-80799aaa701f", "indicator--dde2d290-f779-43c3-b80c-97b776696a78", "indicator--fcd2696d-4b2f-432e-8b44-328df7b6bd93", "indicator--8fef4816-bb50-4a8d-8a4b-779663335d93", "indicator--d29a687c-12a3-48f2-b030-2275464e2972", "indicator--2276b737-9012-47a0-b613-44399a6c73d2", "indicator--335c78cb-fcea-40a6-a930-347c59d0bd98", "indicator--03119e3f-303c-4a8a-8a85-feb5afb16e36", "indicator--95401644-5764-4306-a3b5-40923711c455", "indicator--921b505e-d388-4ecb-afa1-00bc60671356", "indicator--d5468b9e-c9b0-4e28-88c5-83cb44cefbd5", "indicator--9ab2e3a4-df2b-43b6-850b-17d4aa146d53", "indicator--7d3cd1c0-5c41-4ab5-bfcf-912622beb8dc", "indicator--5319a3c5-4b14-4add-8c22-51a392ede83a", "indicator--8153d52e-3a00-484d-a246-36fde2713858", "indicator--0cb0cba9-e507-49fd-9cab-a6a9adef505f", "indicator--cdcdd58f-ab11-433d-877e-7bb1f4b19f58", "indicator--0b798fae-1438-4d50-8c29-48fe8104e0cc", "indicator--d25fcbbf-037f-438c-b9eb-c5676697084f", "indicator--2a5813d9-ba1f-4e8b-b92e-26ec73ffc5f8", "indicator--2d45f39f-6aac-4953-9ff2-d497ce714b4c", "indicator--2249c7cd-6409-48c0-9744-a1b7add27bcd", "indicator--171b8742-5dc1-4eef-b80e-0cff108e7a44", "indicator--2153b432-c2bb-4182-b035-896eefb0163a", "indicator--68b6580e-e794-465d-8070-82b3a413b4a1", "indicator--7cdb2c2a-dc84-4e88-821f-85414cfc7d4a", "indicator--65b71276-0025-4d3e-9bc3-167c8f66d112", "indicator--a12f02a6-1a24-4072-873d-c457646536e3", "indicator--e4b375d3-f771-4b30-8579-f28b5b785d35", "indicator--6a9c139c-a4c1-4681-ad0e-1596b1f88a62", "indicator--dcd87b83-92fb-47a0-8dc2-9120098582a6", "indicator--ec93dce8-0335-4702-9c2f-dc3d425b1d2f", "indicator--e43dd33e-7cca-4bbb-8821-8b14112f29d3", "indicator--bbbfd93b-7604-4974-b3bc-7cb27d756b3b", "indicator--5019a7b2-2adf-4ffa-9bab-e6e0cf150ad8", "indicator--969ce51f-730b-4775-a720-4b290a3c2a96", "indicator--5fd0249d-88d1-4a86-a41e-f68fe33e6399", "indicator--115e85b8-5167-4e45-b9a1-5c6ec0ca69d2", "indicator--05308cb4-bfc5-4fde-a856-530ce6a94842", "indicator--bc55c6fa-3214-4127-b720-8613b9fc1688", "indicator--63a0611d-ef93-463b-ab4b-bed21cb6371b", "indicator--2f0dd96d-a502-424e-a27d-df76dafc8d87", "indicator--368ad29d-5fb9-4d05-88c9-18d24d04497e", "indicator--878b8e22-3051-4397-b655-64d4ad458da8", "indicator--ab6e8779-2b21-44c5-9a50-e780b3f0a631", "indicator--6dbfba37-fc71-437c-9b58-07936e1544b4", "indicator--d7418f74-002b-48e7-866b-499b1fde9649", "indicator--58fe2168-1a5d-4b01-b240-b57db87a2cbe", "indicator--d5a2a9ce-7292-4da3-9e65-157d2264150b", "indicator--991e7deb-6e1c-4189-91d9-68a543845b31", "indicator--5e4d4174-6c86-4b01-a10a-a1b7be299af4", "indicator--f44578e7-bc23-451f-832c-b0486b39815e", "indicator--e9c17976-87c5-4d80-b9cc-655e8bb24cb1", "indicator--bc41e6e6-c681-4b78-bb25-7c5416b07d13", "indicator--ce79f683-848a-4d57-9c62-a1d698a1b9c9", "indicator--d8987859-6341-4480-be22-c47f4fcd354c", "indicator--88dc55cd-37bc-499a-a9f9-32701a89f51d", "indicator--3038021d-505d-4dc3-acc1-acc1b8ef3824", "indicator--5a8df523-0f1d-4f27-ba6d-522ca310cab2", "indicator--0c3927ca-3d0d-4054-8846-f3f665688345", "indicator--4a5c2be1-b60f-4e51-a975-13513dc34217", "indicator--997bff73-a6fb-4c79-a0c5-ba88daee323c", "indicator--d41f252d-01a2-4d3d-b8e5-96355f4efe26", "indicator--1c84116c-26cf-4bb8-8290-aeb329af55e3", "indicator--a5fb6efa-0edc-4af2-be7e-1ad44c6f5de9", "indicator--9b361323-ce94-4e09-9731-7b265ccf281c", "indicator--0fe30f56-ee8c-4de7-aff0-a52e9b13ff61", "indicator--d41601e5-e5cb-437c-a74a-2368d6ef0b72", "indicator--5c1db4b5-04d2-4788-adf2-0097edb61345", "indicator--f931a60c-b237-4ba8-b156-bc7e20713082", "indicator--1687cc71-4232-49a1-bbf4-c93b74fa1013", "indicator--3c647e7c-b3a6-4974-82cb-3fd6d1d7b873", "indicator--adff1020-d61b-4e58-befb-4eaf48c4630f", "indicator--a654ddfb-33fe-4413-bd72-670805e1f931", "indicator--439d6664-8cef-4ebc-967b-5b12afc9662e", "indicator--780f28ab-6c35-48a3-b642-ac440a031017", "indicator--8deb9f71-2a19-4621-ae5c-ed446c733bd4", "indicator--7bf5562a-7e00-4199-9a78-66ef0067c8b4", "indicator--71310bcd-253c-4b50-857d-232b1b7515d3", "indicator--ea50550a-3bd6-48d5-8ae1-c654f31febe8", "indicator--627c455f-b725-47d7-8ba3-27a888bed1dc", "indicator--4fb76460-5914-4a8f-8127-86ad0d48d8f6", "indicator--549616df-6586-4468-a89c-99e4c08c9ba2", "indicator--767812de-0bcf-4628-85ee-9f59037ae54a", "indicator--50dc5b96-e62b-4339-8e6a-c17be1b36bdc", "indicator--82c2039d-bdf2-4266-947a-ac9ee20dc35e", "indicator--95a690c7-4733-4d9b-8bf6-93b2f27d65d5", "indicator--aed15043-2785-4d53-9636-f2b4f6f9644e", "indicator--c823bc7a-7679-4328-b8ab-3e5ab5cdeb1e", "indicator--6b15ba82-675b-4d4c-8292-2b936e488e90", "indicator--70ffe997-6a9f-4a3c-9bca-1a02930b083e", "indicator--bbdb8930-a8a9-4f26-9b4d-01d7fb3fe9f1", "indicator--8d9b3bdb-4aa0-462c-b013-069586da840b", "indicator--67ac1245-8316-43a7-9b0d-ec3158cfb74f", "indicator--31d4db2b-a6c1-4a79-8ddc-48440880aada", "indicator--8ce5b4fb-71a5-4f98-b185-0dcf819e1296", "indicator--5388728a-b9d1-41bf-8fd1-8c1b516e5156", "indicator--36733281-06bc-4f2e-bc40-a6ef28ae6fe2", "indicator--530751ac-f271-4d10-9f7b-8b282726a00b", "indicator--783ca54d-89bf-4ae3-aa20-c3f1ceb35ffe", "indicator--0dd40c05-c684-448b-a51f-c643504e218a", "indicator--7a1aaac4-96be-4a4e-b39a-cfd0ff5384e0", "indicator--4136a805-c813-4f56-88ae-a81f6f2544a3", "indicator--affaec3c-e848-4691-9be3-1f260ba7e363", "indicator--213377f0-a85d-4dfc-bd19-19c28cfb92ae", "indicator--3b72357a-6e60-48e6-b267-2464db74bf45", "indicator--8707d201-3685-4757-8965-f20a3bde00e7", "indicator--bc65a116-115d-4440-8309-07779c1f4aff", "indicator--f0cda457-5ecb-48c5-9ac6-ac269c5d21e2", "indicator--8a2bd0fe-439f-464f-9e2f-ae4392e1b2d4", "indicator--f6fb13ad-fcb0-459f-8890-e8ae8ab1f060", "indicator--6fb9e277-5c02-49d9-b81d-14d49b866f21", "indicator--4ed74d57-3133-4c76-b9d5-8b0a0d2580b2", "indicator--17a7ab5d-cefa-444b-9a5d-58c5582907d3", "indicator--4fd49d9a-ba40-49a6-8f76-d14c6be651a5", "indicator--e9804e29-bd59-415a-aa37-ea54231d73bd", "indicator--7cda762a-f811-4e7e-890b-8ef8910667db", "indicator--65da6739-7894-435b-b6c4-5fe18d90bb50", "indicator--34640858-d020-4498-a243-ccedbe17e459", "indicator--3dd9d369-9380-42b3-80f6-e42f6029e4f4", "indicator--b2c70408-592b-4999-8656-66de663f8c5b", "indicator--da84582e-70d3-4c3c-a950-882fc1c61d8f", "indicator--9d9a72b0-f4c7-4f8e-a3a0-1f5dec01b496", "indicator--0a551271-7940-4deb-a497-ebea21f3366f", "indicator--60c91977-78e0-4f0d-8dc7-88f7d9133a1a", "indicator--a71bb3ce-5b4d-4ee2-bad2-b03c3318a37d", "indicator--e12895c3-f67a-4ec0-9f6b-e08a6b7ab0c4", "indicator--9cb4a095-ef2b-4070-951f-e5a103782675", "indicator--a3560bc4-a91a-401d-b614-5980f33ca0f7", "indicator--bab655a9-b2ba-4c0f-aac6-4db550b85f3f", "indicator--790d3848-d284-4cd2-b5e6-59f4a77f1e18", "indicator--fbdb4b3f-aa62-4e28-9f80-4dc25afe1183", "indicator--d2cd5999-2b53-4289-90ef-988af221cc11", "indicator--8414a2ab-d96d-4a50-a570-ce0ac9de39c8", "indicator--5eb18707-44ea-471d-ba2c-031793df097a", "indicator--202563b1-c48b-437e-a9f0-f746571864fc", "indicator--6995b6b3-8f72-4454-a3ec-4944ff7543ad", "indicator--5c38d1fc-6f82-4010-834a-afd4fe696bf9", "indicator--6419bff9-a696-4f41-a66b-4524db5d17e4", "indicator--e1921b19-467c-459c-8069-f91e2921702f", "indicator--4dca397b-6846-43b8-8382-4d6272076670", "indicator--a077dcd5-4ebe-43b0-913b-0e37eee70a4b", "indicator--485ae497-f549-469b-b046-d31fb3c726c8", "indicator--d0eda55c-3178-4c23-9bf9-dd9e31ede76d", "indicator--fa762d2e-4be7-4bc8-8230-caffae29975b", "indicator--57ecbdd8-713a-4d70-bf4e-4681604cb4ed", "indicator--8653c180-b547-4a84-83aa-3a2f53563dde", "indicator--b3796a3d-ab66-4074-a90f-97d348743897", "indicator--52825697-d51f-46f5-871f-c14ec749c0a5", "indicator--d4d55d99-54f4-4d18-b739-94d4893e8f3a", "indicator--baf04dda-9d56-4238-8a03-dc466368c766", "indicator--20f00c01-7089-496c-8fa0-7b60b0fd785b", "indicator--8c805deb-ac91-4e65-9c59-11dd52cc983d", "indicator--c79ab52b-5679-48c7-b21c-5ed389a5aa98", "indicator--893b6d59-f834-427e-8124-3f8ac551f393", "indicator--e8c096f5-12d5-4899-ad97-d9332c6f89f9", "indicator--415caba5-66cc-43ee-8f01-8b31cc474341", "indicator--d849ff29-20e1-4ac6-b922-42d43f7eee84", "indicator--e65d6550-9574-4248-863c-64913b7d551c", "indicator--c1f59ac3-6850-430e-9379-ed12da1bb777", "indicator--fcc8765a-770b-4ae7-9d0a-bbd470f09bb0", "indicator--3a061c3e-48a6-422e-bf6c-c430edb2a80c", "indicator--5d222e80-c35a-4d7d-98fd-136c9099cd01", "indicator--384e0cff-2379-4762-9645-8f7293a01c76", "indicator--ebee639b-e46c-4794-b8a2-3862edd0a5e2", "indicator--cb660e5f-a4a2-4b1f-86cc-173162fe33ff", "indicator--43a7468f-3e52-48e4-8997-962b5f458c6a", "indicator--05043992-301b-4064-bcf9-1c3cafeaf860", "indicator--fcefc165-98d9-4c23-9649-ab7d09e9e4f5", "indicator--4b738fd6-dfd2-4398-b420-4d97eb9018f7", "indicator--8f55ea8c-806f-4f3f-b181-6e87763f5633", "indicator--4738a110-a6bf-4e3f-91ff-0315c36ed94e", "indicator--97f09fc5-a87a-4e9a-a08b-6acb4321fdba", "indicator--48d0cc6b-9462-423e-9d45-ed4eb4cf1307", "indicator--14f25c2d-9f49-4f43-a4dd-c72c4b53f0e3", "indicator--f2aae8ca-0b50-40de-9e9b-845509cdb114", "indicator--9260e401-4b6e-4c6d-9940-866916febdba", "indicator--3a55eaea-eca9-425f-afa6-3285966dfc31", "indicator--401e0f53-3c65-4604-8335-31691617a952", "indicator--afee12e0-5ce9-4e1a-816f-43f4fd9b6403", "indicator--576278cb-0358-4293-95e2-1e0b0072142e", "indicator--6a5dbc51-e9ad-4d7a-bbe4-5db1ff923ada", "indicator--d2c4d775-d026-4d39-baa3-906392c8ea7b", "indicator--446c9fdf-1bcd-45fd-a6e5-60de4f83dd75", "indicator--66d1147c-03d6-46ce-bf4d-84b444accea8", "indicator--561e11ce-81f3-430d-94cb-d1de88640b61", "indicator--e6297128-2e35-4ecb-928d-370e11e41fef", "indicator--b5709443-54b6-4fba-9b0e-238504b68af5", "indicator--396557a0-0685-4b20-ba68-dc9a963a5029", "indicator--28ac93bd-a445-47c3-b78f-22cca228c09f", "indicator--55eda37f-dc10-4114-9547-ca29cb2d4979", "indicator--c401814c-1812-4aed-a5ff-4c8c8e43b75d", "indicator--93072903-14cd-4742-bf02-fcd892173e08", "indicator--063a9f41-b534-4478-b9d3-fd58432ac0ba", "indicator--80e7c09a-5af9-4758-a2ae-4ffe97e2b0c0", "indicator--43484a3f-6ed9-4705-bf71-fac6651762c5", "indicator--77f94444-d2d1-4162-83c8-1b5072d372f0", "indicator--56736716-c235-4b50-9c03-e856f649f032", "indicator--ec026446-69b4-42ac-a10e-46ddc09d4bff", "indicator--56f0dd42-e21a-4af7-a307-95afdeb51d76", "indicator--d6e40518-18f6-4c6b-8ad8-fee215ae11dd", "indicator--78ff8ca0-41de-4ef2-bfa7-98e24ed6bf9e", "indicator--a3183a1a-8a0a-4587-8f5e-b06678b644f1", "indicator--a9d5a59f-58cd-4551-ad5d-7d4057a54fd5", "indicator--2b8ccd64-acfe-4179-ada4-adf5ef75ff91", "indicator--46411103-b28e-424f-994a-c89623873226", "indicator--5ef6b46e-d71f-4837-aae8-858fe8c7256e", "indicator--9ae6743d-cd29-44ee-bd27-513d4ecb59fe", "indicator--4433db1d-e62b-4672-807d-11c46fc369cf", "indicator--29b7b11e-c193-40c9-82c0-4c91c4f767f2", "indicator--b9ff403c-810e-45a7-a670-8b0459f2d85c", "indicator--16e22156-8233-48b2-8490-ab7d6640851e", "indicator--e6172231-ca65-4a81-9c3b-f36ff57f4033", "indicator--89e6bdb3-c301-4ddc-adec-8b3ba06a1d64", "indicator--b90c4f19-60d1-43b3-8fd6-3b2152bab178", "indicator--812c8ffc-ea18-488a-bf99-c452c4a021c0", "indicator--1b43f2f4-d308-4f15-acc8-1d4bcf24bbc1", "indicator--f6869b17-1d3a-42f6-9257-1f406bdfc62c", "indicator--182af272-6147-45a2-886d-e4c30afefa87", "indicator--b31ca9ec-12f0-488d-bc64-a6558c526157", "indicator--842acb3b-c971-47cd-9d7d-66d2b479945c", "indicator--2c604659-b93f-4b62-81f9-7922c2b60b87", "indicator--48346b19-aba3-44c9-80d0-c32d45c74f0e", "indicator--5ce5b011-338a-4f9c-8737-8c069378fcbd", "indicator--9e308991-7803-4567-87e2-8e414b634aaa", "indicator--28e0c964-aafc-470e-b5b2-afb72f912d02", "indicator--d26dd0ff-99b0-41ff-b1ce-65b505fca0cf", "indicator--4ab46737-5da8-48dc-9c99-fe741eb90772", "indicator--7f77372a-bdd5-42bf-9047-d3281c624b2c", "indicator--00ef6789-4fe2-4cda-ada6-3bc7273ba85b", "indicator--88876f5c-759c-4fbb-9703-ba23014eddfb", "indicator--30401eb0-628e-4d83-87e0-8bd121b5c5f2", "indicator--f748ddf0-d801-4e23-9a7b-ee81e1cab852", "indicator--21dc5b63-c231-474d-a313-a54a27c945a8", "indicator--3144880e-63eb-4222-a17b-50ff2cb46a02", "indicator--139868c2-5b24-45a9-aa8c-92a5c00117c0", "indicator--d18c0d80-49b6-4d88-90bf-3d8621e91197", "indicator--4caab174-2c2a-4a06-bc02-9b3854a78369", "indicator--88b0d4ce-5f65-4e38-a654-cca6b9e26049", "indicator--0b1be441-bf28-42a8-9f19-215c2d5d29ed", "indicator--f49dd937-6dcc-4b9b-add9-e52b4e0b88b9", "indicator--e7a40778-6edf-4e65-b7de-eaab72572fa9", "indicator--891c9190-7425-443b-82a7-562c15f23a22", "indicator--7672717a-4180-4459-8fc8-a2a4580f9228", "indicator--4a33636f-90cf-46bf-bc5a-d6b5ee316368", "indicator--d7bbf1ba-f8bf-4a89-9773-426aee8796a3", "indicator--31c3852b-0d8d-4286-a855-7a36a4acb771", "indicator--5d40b1b8-7cf4-4824-a672-8b57cc89ca39", "indicator--58e53813-0070-471c-8e32-846f5ee7cc8e", "indicator--54ad2e2b-ed52-43a3-b781-1a9e84c81273", "indicator--26833c01-7e35-4cde-992d-c39568a33b7a", "indicator--d5e66d73-3c6f-44e1-a676-2e5488dd908b", "indicator--c81d7c47-e115-4040-9fe5-3296aa6afb4e", "indicator--4678a255-1e50-4964-b862-a6b7cefe2cd3", "indicator--344224f1-0384-482f-a325-df8cb5c202fa", "indicator--cf38e6e4-fd17-4552-bf87-cd08ac66c681", "indicator--d8458788-63f9-44f6-84ab-3144751707dc", "indicator--6d6f82f3-c191-4875-801a-761072bedba6", "indicator--89155176-3e32-4eea-8a76-3e775e5561f7", "indicator--47cd2d12-fce3-4610-a7da-032dd37af648", "indicator--c8555ce2-c6c3-404d-9934-ed485380acba", "indicator--baa39d97-72be-42da-a435-c99e8a18b1f4", "indicator--4d3bff49-12bb-43b9-b808-d6993e46639e", "indicator--1c64a943-9426-4f11-ab05-b0a9a64e01f7", "indicator--3a5a3efd-1f92-402e-bf44-38277b624342", "indicator--e33d1344-9718-419b-b3e1-148c39b33915", "indicator--68248185-a620-46fc-867d-0571fe1fb0a8", "indicator--584c4a37-7744-4dea-b960-1a7ea7e20d4c", "indicator--362c28d0-6303-497d-b043-8b0b81a99c51", "indicator--a5317bbf-3237-4c0d-b80e-000b079f26dc", "indicator--85c409eb-6ec0-4689-b5a1-c6f8089c555c", "indicator--8614b94f-e27b-4f8e-8401-4a78cefbb575", "indicator--e77dd065-9c92-40c0-887e-a994369ef740", "indicator--9e51f570-d65f-4402-aef7-8b41f0cafe94", "indicator--cf882aeb-aa36-49e4-9145-cf2183ea9e63", "indicator--2d1bfeff-c23e-4396-bfd4-6487c81feddf", "indicator--9042ec7a-07bd-4ddb-b44e-69e48410a4be", "indicator--53b785ea-eaa6-46fa-97c0-bc3e44720b41", "indicator--4f4da9a0-0c8a-4cfa-993b-0bcfdd96c7a3", "indicator--5020cafe-66d4-4cdd-8dba-f6b05d4855e2", "indicator--7fd42ea1-c0ef-4af3-a957-82ad8a16910e", "indicator--7a4df84d-7114-4e9b-b75d-ab146fb0a924", "indicator--3dfa5b1f-0d32-42ce-ab28-ac63b172fdd1", "indicator--12843392-c087-4694-adfc-c35c5e3a2dc4", "indicator--31662e43-a8b7-452f-a15d-b3c8410ca40b", "indicator--541e9400-301f-4964-8266-d673f439afc6", "indicator--02a9f1cb-d725-4b2f-b989-db2a094e201a", "indicator--fb3197c4-b956-4398-9832-f5448c22c463", "indicator--f4da94d1-70e5-4b55-8724-d2e85af96ae4", "indicator--6334109c-d538-4f04-9923-f59de165557e", "indicator--0e9cb133-08d5-42aa-9e4b-0a12d1255b64", "indicator--6b6cf2b5-4858-4a42-9fc4-6a91d2df8622", "indicator--5c489ec2-8ac1-484b-8e3c-a83a47750deb", "indicator--f37b6ec3-25d0-4b36-ae8d-7cfebc6c4a46", "indicator--fe97c17f-0171-4354-b00b-96563212e5a1", "indicator--28e53bfb-8c25-434e-b3d7-7af1808ea60b", "indicator--8007cec1-a51e-464e-80b9-3ef83f668b17", "indicator--4531a116-236e-47b3-8ea4-4309f3cd341c", "indicator--cfec55fe-009f-415a-9d62-9abf4cbd9b93", "indicator--b2a41fb5-3fea-403f-893c-7addbf6aa653", "indicator--55de80e1-8428-4c9b-8d8b-64624bed1654", "indicator--76799e30-1364-4cdb-aedb-bad288e458f1", "indicator--5a3a8e61-3a5c-43c0-b48e-97d1b2d59eee", "indicator--611408d5-5e9d-4d55-afcd-364edae1305a", "indicator--74cfa833-6a7c-4ae9-83b5-d1419230da4f", "indicator--1a2945a9-4870-4157-aa09-52dc75c38b64", "indicator--6344e832-9c65-414c-9040-36aae17864e7", "indicator--d01c472c-2163-4773-9a9e-2f759c18705b", "indicator--bb7d83ca-cb71-4f30-b9ae-272791f83650", "indicator--92879fe3-d56a-4a0c-ba66-2d0edd1c3369", "indicator--4e7d286b-1ad5-40a1-b301-a153a3cc157f", "indicator--2d50e04d-964a-458e-9b84-d458afd5d82a", "indicator--af98d89a-3eb1-4c9a-99aa-bddf7b4fa6ee", "indicator--4188e507-aeaf-4d1f-925f-8d71f5f07d6b", "indicator--889d404f-fd3f-43c7-ae8d-532c502ebeb0", "indicator--415d4223-5169-45ff-b033-ba51df2e6abb", "indicator--f0308861-8184-401f-9bde-78e45f830c74", "indicator--b16b6b3a-b9e0-44a2-965a-6697885403d1", "indicator--1693c852-cbfe-474a-855a-27b5ed2aecc6", "indicator--fa06288f-f4d7-40bf-926e-fce20e8adf55", "indicator--1b5cfef3-feb3-492a-9053-0f2aa5869425", "indicator--6ccbfe91-8628-47db-97a7-d83a3c252019", "indicator--b321edb2-0202-40f9-97ab-8fe1e401703f", "indicator--e168259b-b54b-4c50-ace8-abc0d1cd43ef", "indicator--b505804c-9388-492b-bd3d-76d85d44baab", "indicator--3cf0ca0d-abd6-4203-af82-e09cb6f62ff9", "indicator--e0bfa357-5a95-474f-a208-0150e16cc6ae", "indicator--0a40f9dc-1207-42f2-a9f7-1ff777c1b581", "indicator--d7b779d2-3a96-4e68-a592-f26b0c750e1b", "indicator--04f3e067-01ca-441d-8b4a-a88f54676bef", "indicator--255d452e-5f7d-414d-8c16-15bc61614a93", "indicator--472a6fb2-10fb-4b80-8483-d3f74832fb8e", "indicator--8c4485fe-d0b6-48bd-8c2e-fd5ef33f3cb9", "indicator--f8cf0303-511d-46ac-a250-748f12ff136b", "indicator--d87307dc-44d0-4f26-a517-517097f63273", "indicator--b30cd594-e589-4c00-bbe1-132d87440d91", "indicator--7f44e0f0-c2bd-470c-b9f0-11cae980ae33", "indicator--947947ec-2e32-44ea-b4c7-9ecaba9a6482", "indicator--9d89d8a3-ee33-43f0-8aab-cc7bfc94dc1c", "indicator--6cab1f95-39f7-41c6-b414-1993500e73bf", "indicator--94c497bd-faa2-4b4c-bd90-e7ced75d7bee", "indicator--748151b2-87b9-4583-b2f6-5875671fb587", "indicator--b55d0296-5f1a-4b93-a3ae-f2c4368a6369", "indicator--d005e7c0-b016-4067-a34e-a223f2f4e2b6", "indicator--2cc4a1f9-8508-4adc-806e-ec041b067ef1", "indicator--e2fd14bb-b228-4962-8f85-29dcb0499f5e", "indicator--6e7be48f-a6a7-4f31-b748-ca4b0c77dcac", "indicator--a36ca13c-17d1-47df-930f-feb1205a6247", "indicator--4a3f4250-a1d4-4a42-8a6f-ab0b401fc358", "indicator--aeec74e0-0047-43dc-8093-6cea5d07b6da", "indicator--80a8dc1f-3460-4422-bad8-6acabe6e996f", "indicator--b9ca2716-f06a-414a-a75f-b21b8def850a", "indicator--7629bfee-bf24-4acb-8dda-ac7c83ea1253", "indicator--b166aa5b-03c2-4df1-9e6a-1bc091e1e973", "indicator--e66bddb4-b4da-4424-aceb-c9e85fc2fb59", "indicator--91279ebe-4640-4294-bcdd-645df0bad103", "indicator--44144510-09e9-484a-b71d-b283b371b14b", "indicator--fdd915b8-3421-4803-ac78-ff1bc7c939f8", "indicator--9502b4c2-b1e1-49bf-ab4f-0b16dc3087a9", "indicator--dfd2d000-28f4-478a-8a6c-9b59f8dbe99e", "indicator--9791229e-c568-4e50-b4b1-e3a63fd4bade", "indicator--fc9e5fbb-f320-4fbd-b219-87c16cf6e623", "indicator--13a23cc4-4a33-44c7-bd50-34e9efc3b7e3", "indicator--67078377-af90-4963-b8c2-8e0aea56891a", "indicator--5e09e087-e0cd-43b8-b94f-e088ff79c514", "indicator--591b367d-2e21-4447-ac73-7b47c950fa78", "indicator--0e82edaa-1b2b-4fa5-aaf5-d7c96dccd2fa", "indicator--cdc02103-f4d2-410b-b38d-94067bbec817", "indicator--69d899c9-b611-4e50-a7b2-4107db9a883a", "indicator--d779eb4f-7d56-467a-9ec5-45dcbb3a3532", "indicator--e612eece-2386-4575-8012-7ca87f6c63eb", "indicator--007dd91d-8460-4d9c-886b-9682055e5740", "indicator--4bbf5135-2034-4720-97b5-f754335f47d1", "indicator--ba8ad73e-451e-47c8-a13c-ec49067b5564", "indicator--7d7a52d4-8c05-44fc-9017-3950a50050c8", "indicator--399fbf12-6adb-4359-9b1d-611434579dcb", "indicator--e0fee88a-d5f6-4ee7-aebf-cd11474d5ad7", "indicator--d430886e-9d3c-45a4-afdb-76f5e9934954", "indicator--441c2882-eadc-4bd2-bf80-f870302db387", "indicator--373a3182-ebc8-43cf-87df-ca215f246109", "indicator--2d301111-918a-4fd7-a21d-522b03e94861", "indicator--e0e7d9b8-1628-479c-842d-b0def92d7f7d", "indicator--961e0435-c808-4b84-8c27-e74bfdf3b6fe", "indicator--18c5a062-3d7a-410f-a55e-29eca3134e68", "indicator--af94929b-a239-4457-a4e9-7337ed5f263b", "indicator--8b979cf3-f247-4589-bef7-90be1bd0076a", "indicator--e3895a3d-d8ca-47a5-93f6-2eb857317d15", "indicator--395cd31a-b688-4cd7-8938-fc9853e2b5df", "indicator--62b5f1c5-b5cc-4311-bd8c-48e2879a69cb", "indicator--1bae85c4-b728-411b-8bd5-ad259be8ce9d", "indicator--847a9491-197b-4c3f-8627-33203ac50016", "indicator--3e58d0c1-c154-4155-89f5-156a0c9fbb48", "indicator--33de4680-08ce-4be4-9470-9ed220fb9655", "indicator--96924881-bfe8-4090-baf1-269ab476674c", "indicator--f5bcbf1f-91d3-4895-bd31-1b88eb41cdde", "indicator--bfa8831f-34e9-46f2-bc04-42d9bcbd75de", "indicator--4659e162-23a2-419f-9e65-ff71832182b2", "indicator--3e0002f7-b665-45ef-9030-d08836a4b28e", "indicator--ee56f0b2-b4c5-4801-ba1e-dc850ae584fc", "indicator--ee0dab00-623f-4268-8279-e81178a470d9", "indicator--76db5260-8e86-435c-ba02-398feab5f02f", "indicator--625efb14-0cde-4cc9-8a00-d787d0dc3a61", "indicator--4900f083-34e9-4fe4-80ca-9ceabf23fe31", "indicator--cd61d589-20a9-4350-a60c-a7996fd6102b", "indicator--900825e7-4562-4410-9142-0ab0d88a99ed", "indicator--e11868fe-3bb4-4b94-bd3e-7813b80c39a9", "indicator--d81a0d41-defa-4e9d-afd7-8a7aa19c857c", "indicator--ea6c3763-2931-4cf6-b740-0d720cfe564e", "indicator--5b99b960-76c1-4acc-8599-4009315d56d3", "indicator--fcf0096a-f39a-49d7-8028-20e63a6d9501", "indicator--48e2bf88-195e-4fa4-b120-22391eb820a8", "indicator--3052f191-2f6d-4427-8bc0-b88ca70a2494", "indicator--5bf59dae-f690-4177-9316-e3c18d35e22a", "indicator--dc7116c2-4847-4473-bd37-c75571382d60", "indicator--4029eab1-4d70-45b5-8196-7886f7484b5f", "indicator--2e4299c9-4579-4d83-9294-cc39ab1a8f09", "indicator--af12cc00-9183-4ce7-93a1-aa1f20b4bf24", "indicator--d73a76d0-3414-463e-b4c7-1a663f646a26", "indicator--10777352-11b1-4142-b692-d3097a0b362a", "indicator--9dba6bb2-7522-4bea-95ae-a4363451ac6b", "indicator--604d7bf6-e2c3-4f69-9126-8f5c409e7167", "indicator--7592ae15-241d-4d95-ad90-16af3b6f5d42", "indicator--962d686b-9da7-4bf6-b8ec-df4ec05280b4", "indicator--9879038e-19af-4b2a-aa06-85f4282b3390", "indicator--031ce32f-e6a9-4852-9a2c-c08f64ccf788", "indicator--bd3cc4af-092b-47f9-bdf6-9172e9839ec5", "indicator--d8bb878a-e840-49c6-a0b9-2bd521a784f0", "indicator--9b3d35fc-04fc-4777-87b9-8607c30529f2", "indicator--71ac65fb-bd7b-4a77-aafe-3ec90f92b052", "indicator--a6fa1b46-817e-4af0-a7bf-8ebad8f09a28", "indicator--85c3dcf1-78f4-402e-894d-6d9af9959b06", "indicator--1019427a-3021-49f7-9bba-ced061af3532", "indicator--be7fb466-73db-484f-9ffd-be14429da911", "indicator--37478843-93a9-4a2e-a1fd-2a4e45272ff9", "indicator--c842146a-a9b8-4ec5-af54-d67575e63f91", "indicator--2a0c6600-bd8e-43af-a120-17dc0c6591cd", "indicator--13b20f68-c73b-4351-afdf-b522f333a0ac", "indicator--54a291dc-f963-4268-80a5-1430e7658b16", "indicator--28b221ec-50c8-4f74-8083-408d92b02834", "indicator--69eb7b2f-ea2e-4703-8e36-c85acc1a7221", "indicator--fcbedb6a-b76d-492f-bbd4-68e55b9a4e2f", "indicator--b6edfe43-bcad-4331-89d1-87b4825d1d6d", "indicator--021c49a0-35a6-4e01-be38-ff07bbbe1df1", "indicator--65c00c9d-b589-475e-bdc8-dda9649e2469", "indicator--746896c1-4f62-40ee-8aac-27adec59ba87", "indicator--66ec67dd-d6fe-4b0d-8a32-29c619406bf4", "indicator--1d187fcd-712e-4a13-bd0d-dc4638c47e7d", "indicator--d115a3e7-1edf-496d-ac95-4174502dcb8c", "indicator--0eb68e28-a9cb-4ad2-bda7-a0ea9281af71", "indicator--bd298cd7-963e-4008-b316-4d5529933066", "indicator--34cc181f-84e3-480f-bd52-f11fe5f9551f", "indicator--cac09ba8-67e4-4af9-9b65-b246d7e47da7", "indicator--a136be96-9df9-4475-a1c3-70a043d346d1", "indicator--4f7236a4-e47d-4198-a8d6-550d520ad498", "indicator--62166724-fc2f-4616-8062-68769e7876bd", "indicator--1986da45-4a7c-4946-b6c4-608aa778bb03", "indicator--6c1697ea-3123-4c61-bae7-0941ff849037", "indicator--39f55567-2fe2-455a-8938-48e1fdd3b2c9", "indicator--03571465-8c90-4665-8e39-a24ca77c8d3d", "indicator--2377974e-a7aa-4978-9382-8c55a1c643f9", "indicator--f194e6e6-8689-49e0-a033-84f9e12e61a0", "indicator--8f4eca1a-83fe-4895-ba6c-75f13ff529e7", "indicator--332e6aeb-bc42-4f91-86cc-be8ad58054b6", "indicator--10a189b2-1b8d-461f-83ba-f47508f812a0", "indicator--6e2ba92f-31e7-43b1-9cec-766bb3a10709", "indicator--b6ba7d91-a98c-4fb5-a637-a289401bf0b1", "indicator--fffe8333-20c7-4d8b-a67c-434601372df9", "indicator--faf6cead-00ee-4410-bd30-51c21e3268ae", "indicator--327b3484-4e56-4c77-ad13-493b26176b29", "indicator--8955da4e-3170-4e12-91e1-0dfff8e48897", "indicator--74a83be0-9659-47cc-a4a0-1ee3611410ce", "indicator--74f17de1-78db-43a0-9c72-6ad4e1939230", "indicator--832bb353-2375-4a1f-91e0-5233807e3837", "indicator--53f33f8d-6dfe-4439-8e9b-036c71dc14e1", "indicator--7cb5cc75-b1b5-4737-9748-622dd2cee5f8", "indicator--e7dac4a1-4353-4543-ad82-8f11394906a2", "indicator--3dfec508-7fba-47bf-a7d7-278729b9a6dc", "indicator--3fd11578-e001-41b5-94b6-659be54c271b", "indicator--65c73aca-3234-4fc8-910e-0f809a632b34", "indicator--c266298b-b04b-4f2a-bbee-dcb1a6f1473f", "indicator--e0ca9362-8a09-419d-86d1-f32fd4b5fcab", "indicator--54288665-3e8e-4ef4-b3a9-3339e19f1ce9", "indicator--4134b30c-7304-4c67-b31b-f1f849622f81", "indicator--5abbd516-0d82-4e2e-ae70-8cc4602fb46e", "indicator--3aaa9c7a-77bc-4bf0-b73f-6778e1857a56", "indicator--8b225841-b43c-41a9-b169-240f2e79fb9b", "indicator--e14063e0-2ac7-4946-a00d-bd7560c28e30", "indicator--2aa6745f-e9a9-4872-add7-159ea949956b", "indicator--bb003893-f453-4720-8060-33ba476e54d8", "indicator--b2658eaa-7699-474a-9574-d99420006658", "indicator--c55cbd63-d205-4335-ab59-f4283d52f9b5", "indicator--3ef6f697-793e-4855-b9fd-2a93832e6aff", "indicator--f1c735b9-1664-4402-921a-117a44efc5a2", "indicator--fbba34b5-3f38-4325-8eec-e1d6fd24f14d", "indicator--8050ac61-b7cc-49d4-bba4-eaf1442df175", "indicator--f041c416-729c-4622-b894-ed886d314587", "indicator--4dc63cb3-65ee-41b1-b61b-ff9a857893cf", "indicator--dcea4c77-4ded-48c5-9193-6826b4cebe74", "indicator--1dceae4f-2c6a-4dce-a75f-a86cf6bbc290", "indicator--408bf723-0881-4596-86a0-6eb74552d489", "indicator--d849a472-7ee6-466f-b9b0-5bef9fcc33f8", "indicator--c6aea7ec-50a7-45bb-b07f-13fe6c01a3a6", "indicator--198a2b27-2fd0-4c40-aa61-5b36403b7232", "indicator--cb4dd9e9-bb15-4e0d-bfaf-d92e40863677", "indicator--40585271-a88b-49f3-9b70-25404566b55d", "indicator--e6a0622a-1664-4d36-9215-6f0906da8ba7", "indicator--a5601d67-25af-4df8-a63a-e3c9f90dc394", "indicator--fb2e623d-2444-40b2-9ac7-7630d5dcb08c", "indicator--6a8fa5b2-4f21-45aa-9995-4de5239c6bfc", "indicator--af8f2990-6d69-4b10-b09d-d0602cd21ac9", "indicator--51b051e4-2142-4a5b-b86c-0a90173eeb5c", "indicator--29778cc1-9c68-4f5b-9ca4-7dca9583227f", "indicator--40889f50-fdd2-4a78-9a14-43ff37c0b0ab", "indicator--a2163a44-116d-4920-81a7-2b33b08475e7", "indicator--bd12f360-1514-47dc-9878-ef719ef408e6", "indicator--f4cf412c-c567-4f78-983e-04c8f7218a55", "indicator--0e0e6888-75d5-4f02-ac26-e45f33c9affd", "indicator--4139962d-c2cd-468d-b1e2-7b7d76960d42", "indicator--c3b61654-d9ef-4c8e-b99b-44baa0dc2889", "indicator--19e16da3-13a9-432d-a804-99b9d02e72ae", "indicator--bd38d1e0-1971-45a2-adb2-adee21173585", "indicator--e5821e3d-1640-4fe9-9f5b-2a694b2d784e", "indicator--9ae1be6b-1ab2-4c41-9bf6-3d8c4d74cb42", "indicator--be25d072-f4ad-4785-808a-f4ee0381beff", "indicator--9f5ada73-1fd9-48e3-b1e6-dc18e305c904", "indicator--abb7263c-61fd-4288-8aca-894d5cecb291", "indicator--edddb859-5fb3-43a8-a5fa-70acfb0993a8", "indicator--8059007c-6f75-4396-a456-cce89bd348d9", "indicator--6c0a0a88-ce18-408f-8a9c-97f3e2af28b8", "indicator--26c42348-8deb-45bb-af66-207c94dca7e7", "indicator--d235d0eb-7e4e-4984-a103-5331a4e0e95c", "indicator--dc8236a7-b3ff-48ed-9663-ab7d55855c36", "indicator--30161729-9d28-4c56-b1fc-fdb258034123", "indicator--a5cef013-f981-4c28-947e-d77785f81c3c", "indicator--57b7c42a-e71a-4032-bd72-40c24c397e04", "indicator--c712a018-c55d-4069-9ded-14af6a06a6fd", "indicator--c782e9df-548b-4d15-a3ac-34a474f29fd2", "indicator--a084da43-5f27-486f-86ba-abf4d5c3ff54", "indicator--75c3631b-c5c0-4c05-9ffa-63dd2b8606ca", "indicator--87401e06-b335-41d6-ba0d-e73de5370053", "indicator--593e6099-bf2c-4edc-bd21-311e6ff91266", "indicator--ce47fe40-791f-4a51-9486-deeb3a30efcb", "indicator--19418323-e986-492a-8eb4-69fceab3a519", "indicator--f1b871df-aa2b-4484-8e17-f091ad0bcc47", "indicator--4851b304-a5b8-407f-8273-5f903692733a", "indicator--78a6fd9a-8aaf-4d57-85a0-114a5716d003", "indicator--5d09547b-cf9b-436f-8a20-98885ff195fb", "indicator--7c073aab-3e15-43db-97a0-e140aa495290", "indicator--d29e0a99-53d5-4c23-b820-a7311767b748", "indicator--d869812d-7f54-4c46-b7c5-31ff2091f7e9", "indicator--791b597c-5d91-4638-bd97-2d143f4b1039", "indicator--abcea839-2bc5-46a2-a932-9da14da99695", "indicator--bfa5dbd3-c318-4eac-8198-01c9a7df2935", "indicator--f785339a-c3ed-4f07-870a-dc5421d77007", "indicator--c981438e-c7b9-4b66-aa33-f469e552d27e", "indicator--18143cbb-8e47-47de-af4c-c1d6f1c3501a", "indicator--fbfc50b4-2c82-4832-90dd-a308087a800f", "indicator--8b9f9c73-3924-476b-b3ec-44bb79ac3b82", "indicator--61cf3c68-63bf-4581-8298-ec2a0b8f263e", "indicator--554f9927-1afb-4efd-baac-1c1cc7d2ee3c", "indicator--cdff7be4-a2d3-4935-9906-b1777ed118e1", "indicator--a45fb07e-6511-4f96-801c-8f8a3f5044c3", "indicator--34acd8e5-6df1-4d92-8a72-4aa95b55e722", "indicator--b03071e7-1477-4a39-a692-509f2ba6b5c8", "indicator--1f8df801-1aed-4c35-910b-ab97763b94d2", "indicator--0c977a95-2c11-4d41-b5d1-3b7a370947be", "indicator--f6654281-7562-4730-9469-1f031d482f6a", "indicator--783c2237-e21e-40a1-8c55-4a17a198e805", "indicator--41083ed6-a485-48c5-b931-c00e2951d0f2", "indicator--94d5bf4d-cfc9-46eb-8f3b-104f3d56af31", "indicator--33a462e6-01ea-4b4b-92ce-34046e2fc68f", "indicator--bd419a8c-1807-4ae3-bbd8-102316f39d23", "indicator--5ddd7a6e-d3c3-481c-a98c-4745e1ce37a4", "indicator--190d596e-53cf-4fca-914d-373b900817f4", "indicator--77e4d1b4-d7f2-483e-add2-2efd50d7eeba", "indicator--ba957d40-d415-47a2-9fa0-fdd0da7694c3", "indicator--736caa41-d570-4f51-aae3-4cc0b645554a", "indicator--d78e5acf-577a-49c7-903b-cb0cde644391", "indicator--7f0c1c0c-76ac-47d5-9010-fd52b6b035bb", "indicator--a2eea6d6-ae9f-4483-86f9-858f722d4981", "indicator--52723952-2278-42e9-8099-38994e0efc95", "indicator--d5abd8b1-0a2a-4410-83cc-aa3472755321", "indicator--be38dfca-84ee-4697-81c8-cde338737648", "indicator--16b76c75-b9ab-4ec6-8053-efd861fbaa17", "indicator--d5e35470-8dbc-499f-957e-5cfca7ed01ad", "indicator--dc425af6-4465-4bed-aa2c-b874721f2c47", "indicator--3bf78888-1b1f-45a4-963c-e626afffefba", "indicator--7b97dd4e-9fd9-4833-b9dc-164588a58f74", "indicator--cb788f2f-d787-480a-9f92-2dfef933d958", "indicator--4f2980a6-0fd2-4f18-84b5-467bc7545680", "indicator--c0b8af6c-20be-460a-a190-ac2d2ae0b76b", "indicator--370161b2-5049-4d99-a6f1-18c67a0d9ec8", "indicator--06f4dd3c-3e02-4ddf-86d5-2e5e09345eab", "indicator--77660a42-19bc-403e-a768-8bd93b70bb5b", "indicator--7c40b33d-4eb9-44bc-b222-dbf52bb60a73", "indicator--4e788956-475f-4cba-9c99-516252a5885a", "indicator--c0ad80fd-ec49-4b20-ae6f-b783a45a2ee4", "indicator--54c64c81-66ca-482f-b322-452b3eb1a5ec", "indicator--d871c715-5f9b-4e5a-965e-8ec9b4ef22a0", "indicator--bec2d034-af80-4ca4-a3dd-41da22edf0a0", "indicator--400fb5b3-f65e-4c83-8ef1-dffe421121bd", "indicator--5d27f0e2-47b7-4e60-afa0-118032d4fb1a", "indicator--4b5ed478-3131-4ce0-a5e9-0eac98dcc943", "indicator--38fd086d-ae75-4726-80fa-22d9233487e6", "indicator--c46f3003-20e1-4ba8-94c8-06219486b68b", "indicator--b93dfd0c-a09e-4950-8604-e41f460350eb", "indicator--7701f2b0-8fe3-442c-bf0f-9600e69c8c51", "indicator--0ab9e33d-3fb2-4987-be9c-56c788d15577", "indicator--17569752-c450-4a65-b1cb-730754d5e6e0", "indicator--fb577c22-ed88-4f57-8d47-1cc02e11a8ad", "indicator--5f799a98-36b8-4194-8555-aed20859fef1", "indicator--a95b3146-fdd5-43f4-8508-f50e300c17a6", "indicator--14c62338-9441-418c-b806-6b829ec12e1e", "indicator--bd0e5f35-b182-4e10-9b78-2c6e2c34a5c6", "indicator--7039881a-e059-4f2e-beb2-1310f7f6db54", "indicator--3413d807-5f90-4784-aecf-ba277825d6ae", "indicator--2e811bf2-3c08-410f-88fa-bfcaf3babdce", "indicator--df262d78-ab81-449b-8adf-8c4a674e9e31", "indicator--1ec3c7cb-0d9b-4bdc-a981-0b5520a682f3", "indicator--26934110-c43f-4df1-94ec-d82ad8212554", "indicator--28571362-30f3-4f5d-81e9-ea246aab6e2f", "indicator--e4970ee8-618a-4edb-a97d-fa5ab9ca0b49", "indicator--a9b5eba1-1f73-4905-8f2c-7b56e21a21aa", "indicator--4a56ad7c-a051-4987-b1ff-aa08dc1e6916", "indicator--9d59c0c9-55f5-4b1b-893d-637c82bd5b6d", "indicator--ea45cf61-e58e-4e19-a6fa-3993515d5709", "indicator--bafbf21e-5b8e-4ce6-9c88-13fab321bcc4", "indicator--9558d9a1-734a-402e-81a5-666fc2f64040", "indicator--f7da3f19-5d5f-4093-892b-40aed989fb70", "indicator--f34922d0-6239-461a-a4da-5720c12e6c2a", "indicator--a0ecb51c-173f-43d1-a26a-a1922fa5c60d", "indicator--df72a3a5-c8c3-4b47-ba3f-c642230b56e4", "indicator--4e650c0f-91ee-494a-896d-e69c3a14c9ca", "indicator--7ac19838-f0e2-473d-a234-9e208bdb9169", "indicator--4a8cd6ab-dc1e-4a64-b84c-8291bedd3ea0", "indicator--73f0c7e5-1736-41bb-8a9a-e1a5af34e376", "indicator--3e4f7cd1-3063-42e5-a093-f94f999009ac", "indicator--ec2603ba-4e7d-43f9-afcd-ace12449cea4", "indicator--6b7030b3-5775-4a30-978c-6a4030f07020", "indicator--75a1c009-60a8-4b52-a4af-6bf8f09c99c3", "indicator--45d8ded2-c53b-4886-b98e-b34422344f7f", "indicator--d4a41cd0-3ac0-4cc9-80e9-8ff85b4c9381", "indicator--86387153-a6b6-401f-830e-308d9b00c8a5", "indicator--dbfd4f61-72ff-468f-ad38-0e7c962c87c1", "indicator--84ecde72-339b-4657-ac9e-3f45aa00ec2f", "indicator--a4909332-faf9-4870-a174-12e60b397624", "indicator--b5faa0e5-5f21-439b-a0e7-2303dacaba8f", "indicator--3b8273d1-74d9-45d7-b998-a38577dd599c", "indicator--0b25a3fc-cdcf-4654-a04c-095877c6cc08", "indicator--0baaa409-d885-4bb1-8ba0-d52421f7857c", "indicator--2e291d15-6a6f-4045-b7ac-62a108e95e25", "indicator--a31b1e1c-51a9-406c-8e6b-220418cb1b53", "indicator--521fd7b8-fe4c-4ef1-b0d9-573954d1a692", "indicator--76fa4f01-d0a9-41f0-98a5-35c91e557b5e", "indicator--937080a0-da7b-4819-ba73-c2bbccaa433a", "indicator--3c260f96-7e29-49d3-83e5-ca588ced1e2b", "indicator--5409944d-dd1a-4522-bdee-d370aae71f4f", "indicator--5c2f3237-cb05-4bec-b09a-773e812b0468", "indicator--baf7b9f3-0653-41c4-b045-091ee68cea63", "indicator--4f66dad4-42f1-42c5-8951-81242e77635f", "indicator--d86b49cb-edd4-496e-920d-04ecb1d62ed7", "indicator--4e9936af-b645-42d9-9b12-cdf587a261d4", "indicator--daa295ff-7642-4245-b107-1d33e81b5d09", "indicator--6bcc4e7e-1fdd-49ee-ba6f-6a5fde6ff5a2", "indicator--b57fd936-9f8a-4364-8ca6-0fdc6092adb1", "indicator--d487fa97-cab2-4c4f-946b-74c02026fa5b", "indicator--c22a4200-dcdf-4540-8dcf-97cbed5d8235", "indicator--a4958583-deb9-45f3-b0d3-2c376e5cd5c6", "indicator--2f9c61ab-193e-4a0e-a43b-8d9d6a68b8e4", "indicator--e98b9105-8537-40ce-92f2-dd51d48833c8", "indicator--10ec5f1e-f0d4-4136-aef2-32d5da09e8a6", "indicator--a0b6e8b3-d744-4dc6-92c7-a238b23c1383", "indicator--5c1445c0-9f6a-4215-981b-7b8ff4e4bc7b", "indicator--6db1b37e-a128-4a06-9c3f-e0532f246f67", "indicator--4f59abcd-6cd2-44c0-a6b9-ffece8e33c44", "indicator--39df7430-b98c-4c53-b616-ae0ef71b0245", "indicator--87846008-1379-41fc-8a6a-e984c137b697", "indicator--fdd28e85-1035-4793-858c-869908221f3f", "indicator--8c87b8f1-3b6e-4d8f-8a46-ca71733e1a70", "indicator--a6e4700a-4bf8-4dac-a607-5d2e7a6947b3", "indicator--c6a839df-38e1-4dda-b702-20f23fca1d6f", "indicator--92949e7f-f495-4698-9d9a-dd4bd64ff415", "indicator--754e29e1-396f-4b63-9d80-a25628524927", "indicator--7af83842-5c67-4832-bcfc-5a8cdfd0ca5d", "indicator--e835dad7-e0d5-448e-9e0d-1ec77db4bfc6", "indicator--1ae829df-4756-4f18-996e-65247b7d5655", "indicator--3f4149bb-e394-4fdf-96be-074bf2ee122a", "indicator--c3e75fc5-d35d-4334-9489-9f95c6673298", "indicator--7dfbf17a-24e5-4c86-9512-137a58b10514", "indicator--11563bc1-a526-48d6-9bd5-fdccd11a5a1c", "indicator--02946dc0-3617-4ae0-940b-2a62ecbe8c95", "indicator--dcf74125-46bc-4b39-b900-08b81788ead9", "indicator--482f1c7d-a422-4c78-a673-9fe0803fb552", "indicator--6adb32ae-fe94-4f8a-93d3-f5c9010f4469", "indicator--520209a8-e8e2-4881-b6c1-c34264b8d5c1", "indicator--aa824d36-b1ba-4859-8c65-9e6bc923dced", "indicator--5ea0b81a-2251-4c23-98c4-1f0c320ce9cb", "indicator--08f54f93-5631-46ce-b48b-53be6347ae3f", "indicator--828974e8-9aab-40f5-b218-25beb34d0739", "indicator--94c4b9c6-638f-4695-a10b-b46cf75beee0", "indicator--8c8ff909-3460-47cd-9e7a-30beb3914fe0", "indicator--fb470ed5-c06a-47e3-9c47-1571e199ae1d", "indicator--a4c3527c-0c57-4ed8-897a-8f9274af54ed", "indicator--7bc1d43b-2d28-4493-aad0-2d4ae8821b7f", "indicator--18743c91-90ae-42ab-b5f9-5f7b03057a03", "indicator--9cb0f700-99e8-41a8-895d-97f121fd2811", "indicator--094f2995-52d3-4d23-85f7-f40becfa3380", "indicator--e0e1d8ac-da9d-4b0b-a961-0d6b91a8315b", "indicator--dde1f791-2a0a-40d0-84ac-23f3d099ee9b", "indicator--5856c028-ad72-4b3d-a844-e10512d48a37", "indicator--4d0cfcc9-822f-4ee9-906d-0ee2d0d4de82", "indicator--c2217683-25a7-4f88-b8b7-b27e5f3e48c8", "indicator--e146d3d4-1650-44a5-b15c-5d8ca8b77523", "indicator--2b40d302-6202-492d-9f02-7324e7322a43", "indicator--3661a7ba-5e89-4898-ae9a-8e48541e3c85", "indicator--94c4362e-8a1f-4b5b-b4d9-cd2cf3e8b419", "indicator--5df7c94e-b872-4b9c-b86d-79271e4d3297", "indicator--a237fd14-5111-46a0-8aa9-716f4b5402dc", "indicator--37e84851-3857-4795-8706-f5407223c32a", "indicator--0bd29c91-6806-4a1d-87eb-871256138f58", "indicator--498c5f0d-cb96-4946-9ab8-05632b7e1bab", "indicator--9d53fb02-dff9-4d12-9b39-2c750a9a6224", "indicator--67a88eda-731d-4c6d-93b1-9e13384ee919", "indicator--8189ea3e-b136-4571-99fb-c9de6aa26d1e", "indicator--62b59cd9-389e-4a4b-9f5c-d8a1d21c642c", "indicator--6e844612-5ee5-478b-98cb-2905761e14f9", "indicator--64c2b6be-ad05-4490-b083-b7676a73bdd2", "indicator--e01e52c5-fd21-4663-b4b8-d75601af84bd", "indicator--8c63b3dd-926f-43c4-9823-102d96ddc67a", "indicator--033c2326-5ef7-459b-834c-fde692af66ea", "indicator--152ba5c9-d7ef-4720-80f6-d4ea57c60eff", "indicator--3c06bc5b-2ff7-4c18-99e9-86b6346f785c", "indicator--3ab88e68-b455-4da1-85a9-e32b2113883f", "indicator--4904b811-9a10-469b-bf24-9675f61b5273", "indicator--312e5b3e-58a0-4282-b34a-0f81848803fd", "indicator--be72fa9c-daf7-4eff-89f9-48d72da2eba5", "indicator--b7a4f8ce-64da-4c1b-9d90-8c50b3bfcaa7", "indicator--74f5f9a3-0b43-4e1b-b727-7f46a8fadb69", "indicator--262267d8-82cd-402f-8977-509bbe30eb85", "indicator--871f9b3c-5d56-4920-8517-38060d43957a", "indicator--fd0cf66c-0439-472e-b302-911907bd8ecf", "indicator--fe38d009-9922-4834-846c-140b3f359e8b", "indicator--961606bb-e72d-45d6-ae97-95b6cb6aca84", "indicator--7306ce8f-a062-4ec1-8f2c-e5d92d2f61e0", "indicator--144e8bc5-514f-49ea-aee2-040214ae251c", "indicator--fe2ecac3-405c-4aca-8cb3-da52033a208b", "indicator--787ee569-c424-49fc-8c1a-f1696df4bdb1", "indicator--cbe634d6-ff7b-4435-baff-4aac36539be1", "indicator--c0d60ce0-ab0b-4ff6-b42c-5fb9facc5d8c", "indicator--de5838d1-e35c-4499-8bdf-f6875f5229c7", "indicator--c35c8537-3648-448c-ae8f-0c4a410afea4", "indicator--6c38d74a-05b1-4491-8b5f-b794eb5beb92", "indicator--6f163863-335b-4021-9211-7fd83b374c0e", "indicator--1826e596-3559-48f2-86dd-ce357a06280b", "indicator--64a4b81a-44bc-4a11-88d3-07992a18116e", "indicator--ed6d540c-cbf2-4a19-950c-fab3570c1f21", "indicator--beccfb41-1540-4a10-8b04-888352564f3a", "indicator--44dd457f-a782-4604-a4d4-c19ce4531a0f", "indicator--bf7c014d-0199-424e-944d-72e8d735e474", "indicator--fe134ecf-50ec-44af-8d79-b022e8ac06be", "indicator--e4a19111-7ed0-4db4-a0f0-89a6c6051e64", "indicator--38ece642-00b5-449f-a45a-cc8c17975ac4", "indicator--266f4aca-f7de-477a-bdd4-ce1905eb0c4a", "indicator--4d88aefa-7dc9-4b80-b05e-d329298cb107", "indicator--ed779e4d-b2e4-4cf0-86e0-50b6ffa1751e", "indicator--02544515-2617-42ff-b2b2-653f3c933700", "indicator--afe54632-40f4-49f5-bdaa-2fd438e2134e", "indicator--0894104f-c05d-4044-ad00-835beb868832", "indicator--2f7ba998-57db-4f6c-8da1-a2809a74d4bb", "indicator--cbded124-a72c-4ac4-a177-0fb39d169da8", "indicator--55e7bdd0-2167-45c8-a88f-f4bbace7a1e7", "indicator--d37baa0d-be3f-47a6-bb9d-0e40443089b7", "indicator--8122344e-5abe-4656-aaf2-58e17ed88d7a", "indicator--ab327130-eff4-4cbd-aff6-5aa9d6c25033", "indicator--ef6b0a35-f7b1-4e1e-9cbc-8329825bf904", "indicator--717bc3f7-8d02-449a-85de-33f4bb0119d5", "indicator--ec69102f-920b-4413-ac19-531bb3c1583b", "indicator--c8b77f63-811c-4f41-9cf3-60c2586c03b4", "indicator--cbd5fec8-e7b1-41a4-9aa3-c439ebc4092d", "indicator--c7521fd4-3f3d-497e-b68b-78bb63451a38", "indicator--0c39fb11-fa07-4349-9cb5-7988a352818d", "indicator--1f9c72f7-ab3d-4eb1-9d08-d966a11305e8", "indicator--1e0ea68b-fc4d-4a8e-a8ad-4f2463dae7fa", "indicator--112f09f6-edb8-43a5-b2d3-fb5eb0938be7", "indicator--65a407fd-9bda-4063-8ba4-1e068bf0e765", "indicator--1d8138ba-0a9f-49a7-b669-17a6f534c2ea", "indicator--ba34ce83-2e0b-4b2a-99d7-479447ed451a", "indicator--ce0fe4ba-e307-4e76-983f-6c9bd98df163", "indicator--a2c0513d-71a0-403e-88fd-f4f2a7648dfa", "indicator--820bda4e-c53a-4710-b3e9-4fc709feefda", "indicator--aedbca55-892d-46b0-9cea-ef210dea1b9d", "indicator--c3b2566e-47da-4b29-9fd8-cd28903141e8", "indicator--5e53cff5-dc0d-42ae-98e7-f21e9f8738fa", "indicator--fe931c86-8882-4429-bfaf-704973d738b3", "indicator--bfa07270-7ea7-4684-947d-0f43585c48b8", "indicator--70157c34-9d9e-4159-b540-6e5bcdcd60d0", "indicator--39d3b977-1a7a-4fb4-9f48-b07e47594e4b", "indicator--cc154020-5d13-40a3-a7bc-f770b0812bb0", "indicator--6964d148-db7f-46fc-b456-4cc0819c9528", "indicator--3b5be259-2281-4b63-9f23-6688d4af56e3", "indicator--112d15f4-a634-4e6a-a424-a4d8a3b51449", "indicator--b0eae3ce-ee80-4034-9324-48946bc66dd6", "indicator--0b23c6cc-cdd0-45e7-b482-9dbd987a568b", "indicator--0e2e9c00-8a16-428a-94bc-5cb3b19f522a", "indicator--46ec9301-8c47-41c9-b135-4539c6039d3c", "indicator--9d3ade7e-82d2-4135-ad73-55ec061f59f4", "indicator--5255241d-a52e-41f6-aef5-864590d0fbe0", "indicator--d4a995de-83f7-4927-aa3b-a547c476619e", "indicator--bf467269-d624-4384-af90-10e830110bf8", "indicator--7ec9fd6b-1fd7-462a-a5d0-44a62eb67596", "indicator--bf3718dd-9d7e-4dbb-b774-a97b2b49ddd5", "indicator--446b4246-b728-40dd-8827-ce51c1307285", "indicator--4ab795ca-588f-491d-b068-e65090d3d9de", "indicator--a5782101-f882-4d69-b28d-d49d0d6e521c", "indicator--cc701294-55e3-4ef3-a5f1-7b000f8e389f", "indicator--bcdc6bae-9401-4fc8-8eda-263f8c1af4ba", "indicator--bc9e28b6-5ec6-4f05-aaad-f41969d5fb24", "indicator--ee85a350-f4f3-454d-99dd-f0680deced38", "indicator--faa8296e-f52b-41da-98c1-3d15abb5aa59", "indicator--90d46954-2df8-49c9-9bb7-52d7fcdaa0d1", "indicator--1fff0408-e59f-4bcd-afa8-36cb4860e089", "indicator--cb992639-3b40-4ed5-b1ca-bfc0a771bb49", "indicator--d4f85662-3e2a-4784-879c-a1f0a5d389dc", "indicator--598bf969-f3ef-499a-a60d-27a635ca1aef", "indicator--25dad8c3-292a-4ab4-9c5c-63fb46de5a08", "indicator--74599e50-fdff-486a-81f5-fd6b9cd2a419", "indicator--3972832d-5f5b-424e-bab6-3a703c3827e6", "indicator--9f4120d5-d04a-400f-b395-c284aaeffe3f", "indicator--62018ad2-386a-4802-8622-9d2a5199381f", "indicator--f40253f7-95b2-4b5d-8339-b720585f44ec", "indicator--f7706d62-c09b-4ea4-92e4-36277653e754", "indicator--40531529-f6e7-4e8e-8002-88f9f6aa4246", "indicator--0e64a9b8-f8fb-4866-b8c3-605ec3d5c56a", "indicator--f90980ee-6c9f-44c9-b75b-452965ed7529", "indicator--107c7d9a-0d32-4671-98ca-3b2493c24408", "indicator--a48158ae-8bd9-414a-9c18-c1865ebda7b0", "indicator--9900c069-ad38-4ff3-a13d-ef013e706621", "indicator--7b9e8758-d0dd-4add-8c3c-54d98b15cfc7", "indicator--645c5e43-4b95-4f2e-9c6f-c92230a1e3cb", "indicator--4bc9de14-d6cd-4d16-88c1-79d5fdac889f", "indicator--5e04abde-9fe1-4a13-b145-67a1b25bc9ab", "indicator--a82ed710-4b79-42bb-b1b6-a1716dfbed09", "indicator--e637e668-8b78-4b62-b85a-9fd16d5a70bd", "indicator--b999ece2-9956-40f2-abe5-a87764e60ad4", "indicator--8d6b7637-72ca-4cce-bbe6-0b561635f205", "indicator--f5679c0c-7f09-42eb-ab0a-a13cc8a54106", "indicator--b42d7f68-5810-445f-88b1-1effa3b13ac7", "indicator--ed55f8f9-a99f-4827-a187-5fbe0bfe4f5c", "indicator--7641079a-fc6c-47e1-b9fb-f378392cce1d", "indicator--d517d027-be65-499c-9a11-355004b85ea6", "indicator--6fe8a020-f55f-4436-aa45-edab99c6686b", "indicator--a351c0c4-c998-43f5-95c7-fcaa0432d994", "indicator--e9f68d6f-f582-418b-b647-1fb42f918176", "indicator--aba6c3f3-d7f7-4563-bc6e-a0f63e400989", "indicator--f847f0fc-d1f8-4f18-ba39-d02c26e59530", "indicator--0dd59f7b-4b67-499f-8c2d-23518741626a", "indicator--b26f3ceb-7642-4a17-8a90-d506d99ea7ba", "indicator--fcbac93a-d97a-49ea-a36f-fb9066068be6", "indicator--c93a18dd-ac8e-42d5-9aca-038bbe55e314", "indicator--fc7ece43-c884-45c8-8848-c5a6a7ad9310", "indicator--dfd5cee1-9835-4b31-8bb6-765f80866d22", "indicator--ec87c94d-fa1f-4653-8394-4459f7b7b3c4", "indicator--a0d0d0b9-ef0a-4845-97aa-8f9a9d14758e", "indicator--865a91d3-22f5-43f4-95bb-00e758528bf8", "indicator--f3075a9b-3c4f-4746-a994-3d8276c5ff72", "indicator--ae2b4927-8366-4ba3-9a9b-bf2f5b9d6d46", "indicator--8fb1f7f4-faa0-4f3f-b2e2-29deb20d5d20", "indicator--767792c5-16c3-470d-8d56-2224933d9f9c", "indicator--93ed8adb-7488-4b46-b0ba-4190057d407b", "indicator--14517fee-61da-42af-8e30-3088910c508f", "indicator--35b941f1-af2a-4d68-bfdc-10d4e8535ca0", "indicator--9b34c89a-fc4e-4211-a2fc-e96d5c548011", "indicator--9553facc-61ca-4afa-8ae3-19b04c5a6830", "indicator--f0c67752-bede-4ee0-8915-b855f52ed21f", "indicator--dbfa963c-7ec2-4691-b173-1a3caf811db1", "indicator--e2e84a1f-aaad-4ec9-8cea-9aafd79dd9be", "indicator--67f92491-9448-4782-8a69-2a3d03f1042e", "indicator--abaec167-0f14-452e-b232-1bd41d7abd37", "indicator--beda9b4b-eb4b-4b9d-aec8-46a3469131fa", "indicator--a0a49d18-fdae-41d1-abbc-97b13d2c1e90", "indicator--d8cf0a55-7ba8-4fb9-8d57-e1695832fd52", "indicator--ed5147ff-5e90-4c77-b2cc-d11f58d8296f", "indicator--b0840743-c0a1-4bc8-a927-116d901d6616", "indicator--4b6b784e-2e64-43bf-8b55-a2324e21331b", "indicator--2ad278cc-7557-4a34-988f-f42d3a741e31", "indicator--3d40dbe4-7f39-4b8e-b0ff-f1db5f09f024", "indicator--5c447447-7837-498b-b2f9-413143846043", "indicator--95998c66-ee88-45b7-8ecb-0ffe32f2657d", "indicator--5bdabcd7-0ee7-4374-808f-7fe3472836b3", "indicator--ae6b91b3-2f2b-4e0a-a6b1-a03fae7e2eb7", "indicator--eb2779c7-9a9e-4f66-bc9c-a83cc9c43ed1", "indicator--86a7f232-4ae4-49cf-a5d4-c1c6609db61f", "indicator--3adff496-6539-411a-9800-ed3da68c60dd", "indicator--5a948038-3342-4508-a6f9-d113dc6b023b", "indicator--79b27f8e-e3c5-463c-b495-b7b8042764d8", "indicator--0535c70e-1e0d-4e42-ba0f-adac0499e140", "indicator--50d96728-a3dc-416c-839c-11d7d0cd982d", "indicator--2848e89c-b27c-4f39-89fc-a91778ada50c", "indicator--0321150f-761d-494c-ac00-c393c25648c0", "indicator--f8d8f96d-3a99-416a-8078-b53931252296", "indicator--faeab41e-855b-47fb-b617-4e18e20260c7", "indicator--ad5a1897-1ce9-447e-8926-c0b370460570", "indicator--2f833f3c-5f30-4e95-8e13-7addca3ef8a4", "indicator--af6a934f-06fd-45a2-8188-a62c93db0aac", "indicator--de02b305-05e4-49e3-9650-34afdee851b5", "indicator--4e324f79-1e25-4992-87ef-8e04783680f0", "indicator--62aca7a7-ee14-447f-b592-4b610533ff8b", "indicator--b3635e31-a23c-4fb3-8ecb-8a50574a9322", "indicator--b4b8b17e-a5f9-4388-bbb1-18ffcb7da7ac", "indicator--973d1c22-950e-4f1b-a697-7e534f98ca1f", "indicator--c7686d93-fde3-4694-bd2c-a3e6e386a329", "indicator--549477bc-1d8d-4dee-91c2-4916e8380e05", "indicator--a5e993fc-b52e-435a-8722-f7abddbfdb7f", "indicator--fd510e91-54c9-4b1f-8190-8e50ca24b521", "indicator--310d26a5-932e-4134-9e64-98d09e3796aa", "indicator--22781175-3c65-46a7-b2b8-490713bc4ed5", "indicator--ca6ed8ab-838e-47a7-8c3a-228c7558342e", "indicator--83e5122c-a483-4169-bf3c-1d53707a3b8a", "indicator--3bdb9cbb-e9ae-4b32-aa28-8fef953b7f8b", "indicator--a5127365-8cc2-42c6-bdb0-f6030e717eba", "indicator--2562dd68-0dec-4478-8357-4ffcd0ad7e61", "indicator--bddc9582-14ba-43fc-9867-4f2dfc5aa795", "indicator--405a41d0-69e8-47e3-bdff-0303d8e2b71a", "indicator--bae87c7a-dd64-4662-8268-68ff6eacf845", "indicator--85e31c7a-17f9-49b2-9fb9-436da0d0c29a", "indicator--cf405cac-a4e2-45bd-afde-8feb922a6bd4", "indicator--279acb62-f8d5-4bbd-aae3-f6ea8e928b54", "indicator--33f29a19-b26d-4375-b7cf-8e6963ac59b9", "indicator--9ec574ee-da13-48d0-b6d8-b7ff83c52cff", "indicator--7e82e1c0-83ff-46d0-9b8f-0d9dbfc41b0b", "indicator--56cebc6d-603a-45e5-9095-cdebbb7a9f09", "indicator--c78f92bf-28e9-4454-a58a-dc8c95d58cc5", "indicator--230b1b89-4788-448b-b2fe-fccdaedf018a", "indicator--60fc4d69-1cc8-45d6-a8f5-88f67c7fb01a", "indicator--93409960-3904-4c14-a057-cb4a0f896f22", "indicator--ee75b6c1-b235-4bd3-a8a3-b2ebafbc6935", "indicator--458f7683-5606-4dea-adef-37fc548d4376", "indicator--950d9f00-253c-4c30-9702-3cb543c070c1", "indicator--36f89dd8-0da1-44b1-8d5d-89dbace60672", "indicator--ef6f0906-de5b-4b01-878c-1da05f3549f6", "indicator--f76ef397-7e65-4a3c-91d4-619b782b14b2", "indicator--df4db11a-433a-4f24-b6f5-b6fe60a523f8", "indicator--40cca623-8902-4988-8809-c02b1d4188df", "indicator--727cc58a-7dae-4116-ac1d-25c2f61ffe0c", "indicator--da9b6a34-3cb0-49ee-8862-7ff700dc95cf", "indicator--b918e328-eaa5-485e-b65c-2fe30effa52b", "indicator--ba90149d-664a-42d0-8b16-09e29d42f318", "indicator--23e482cd-6ca3-45d1-ad9a-125eae56842b", "indicator--ab5946d4-ccab-4af6-9695-f52fb3e15386", "indicator--07dc4c44-7d79-4676-a945-2b430d5c6ca4", "indicator--a8dbed3b-0990-4bc0-993d-065cca6c03b0", "indicator--3b6f56a9-174c-4a7f-9c6d-c686d0c572a0", "indicator--241900e0-0824-439d-9d4c-82250e3c9fc1", "indicator--c55e17c0-270f-41d7-95a7-bc67e53d8f3e", "indicator--d6ca3c89-e512-43f8-a992-ffbbe2d21b84", "indicator--02796c4c-cae5-4907-9949-e2dc53531bec", "indicator--b034d23f-d5d0-4ffc-bac5-cbccef4fb7e6", "indicator--6e8feed0-e602-4372-858b-2fe52f0bc897", "indicator--ff964ec9-b966-42d4-8ff0-a638db6554ed", "indicator--8ae20c9b-ddbd-4f26-ae72-923d2b618678", "indicator--2326a86b-a7cf-439d-9820-5783dc4c5144", "indicator--b5629610-7ce4-46eb-ac0a-7374f0dd74a5", "indicator--08c592fe-e662-4800-9208-cae4962247ab", "indicator--b9457365-7418-428c-8bc1-e5a2ff8ae67e", "indicator--5c4af7e8-aacf-4a47-80d4-626cc03cd351", "indicator--b5520c87-a22b-414e-8c40-a891dae2ec36", "indicator--0e2d679c-49fe-4ba0-8705-527600c86538", "indicator--54f3bfd6-7766-4f16-b6ae-79a5daff5bbd", "indicator--6dd0b106-0720-4cda-a73a-07fe68c5efc7", "indicator--7ca250fe-8868-47d3-b1a8-294a9af89b35", "indicator--d98fb992-e877-407c-b0d3-3ebda8ca4f76", "indicator--6f63657d-4b85-42a3-8ce3-169b9b784e52", "indicator--b1338a55-7b98-413c-b8e0-0ca6131647bd", "indicator--5f01897b-0d25-42cb-97ee-72b718051aaa", "indicator--a57fbccc-76cf-4f5a-8f07-9412891dafce", "indicator--657149aa-25f0-4623-b7e3-ca2e4fb713dc", "indicator--e5ba67e4-bf0c-457c-a33a-1e8213b07014", "indicator--a89dbc84-1db3-4462-a210-524002af3965", "indicator--59f0f06f-eb71-43f5-bbea-a630ad881740", "indicator--911253a4-880d-4d59-9383-c4b3d2adeded", "indicator--9d84999d-cffa-4e54-9225-8a2b6a466997", "indicator--1654863d-cbf3-4e39-bbf8-815b799a643a", "indicator--d7f7a5a2-3b69-418c-bd8e-0b2d7ad349e1", "indicator--abfcd762-0609-4c8b-96b3-46f841480ab4", "indicator--9f68a48a-9efb-4e32-a01d-b97ddd6a4869", "indicator--bf7ac76e-2628-45c9-882b-f48c8633f6af", "indicator--4d0501d8-4cde-41ec-ab37-7ffbf8128fa5", "indicator--351a1d15-cac9-4796-ba5c-2db3b9fca361", "indicator--f216e224-f7b4-4280-8fa3-a022afaa2673", "indicator--b57e7114-45fd-480c-8fa1-e9eb7cd59923", "indicator--0c3c1ca0-29c0-4f5d-907f-3fd2f2c311b3", "indicator--65820731-332c-4f83-b302-49184fe8d172", "indicator--136c967f-ff66-45d9-806c-3f63abe98205", "indicator--1430add4-14c1-4858-8942-0065801276c5", "indicator--0a498240-b6d6-4fff-ae91-bd6bdb15a54d", "indicator--34165d76-d340-459b-9099-9ca3c47be911", "indicator--956c7fee-96ae-445a-91ef-281649192887", "indicator--41c686e6-1c83-4183-8c17-e0912c26d755", "indicator--d8bfa09a-2f59-4b3e-b4fd-bcf656dc98c3", "indicator--531cf591-ed3d-4b3c-8eb9-fc57958c61b9", "indicator--e357c852-e4e4-4fe7-9812-faaa4414e33c", "indicator--c07fce67-cccf-4e7e-9a91-69f4ecffe9af", "indicator--61dc078a-1758-43d1-84d2-4bd561dc4d95", "indicator--649d5520-ddc8-4e2b-bb2e-70ba32d4a0a7", "indicator--ea98652b-7a11-418e-ac18-640444271854", "indicator--35021cf9-ae3a-4458-ac81-b6fd1f1687e2", "indicator--a10e11cf-f8b8-4587-afb1-d85809cc3d8d", "indicator--37337f9b-6dde-4250-a7bf-08c16c564541", "indicator--ad057276-0e39-4b01-b4d6-6731ccc87bda", "indicator--bd443b18-8acd-47b3-8d5a-cffea57037ad", "indicator--ad234997-416b-4fb1-88b7-ef950ec49ef4", "indicator--96ceaa95-44b2-44ef-aee3-791dc344d7ae", "indicator--7896de1b-e0a0-485a-91aa-86d22e85e391", "indicator--cdab0bc8-1337-445b-baac-aa26b159a2cc", "indicator--cafc3386-7a3b-4337-9f38-25e9f42e8b70", "indicator--173a6eb7-102e-4c85-9cea-29d5c4d03084", "indicator--334661bb-9879-48a9-86a7-2953ae129eee", "indicator--0eb31c45-d792-4ae2-af08-860a460f6104", "indicator--880cc01f-8b67-43b1-abd1-583c8179b13d", "indicator--d6776e35-ed7b-4fac-9646-03c79835012d", "indicator--3e4b1e73-5ba8-4bf9-b3ff-b72d9cfb693a", "indicator--0b85ee3b-4f79-4691-96ea-7360dd7e2992", "indicator--2b972ef9-5c49-4569-bede-45d7a2992488", "indicator--baafdf53-0e4b-408a-8677-6578737148d9", "indicator--cd6bc011-f1dc-4a60-a81d-908150c8a1aa", "indicator--b5eb60fc-c5eb-43f7-b8d6-b8821f43cf0a", "indicator--d7dfd555-acfd-4759-84d6-1b70202bf52f", "indicator--9972121e-b073-4216-85de-7dcbf41544f3", "indicator--8201e770-d1c6-4daf-9818-f5d9bfcfc277", "indicator--80ad7839-89b3-44b3-a306-132802a7a889", "indicator--47ccacd8-cce9-4a87-936c-a989a197066e", "indicator--d3aabfae-e5af-4045-9b38-5097587923e2", "indicator--1d958d84-bd40-4b02-82f8-de9a21d2f189", "indicator--36a9257f-a783-411e-b34e-7c24cb609793", "indicator--73169ce6-bcc7-4baf-ae1b-ee7b7ac4567e", "indicator--c489e9ad-e00f-4b8b-9a14-646e59debfde", "indicator--c2e18076-4269-4c24-bea7-a9923110fdae", "indicator--d5a9041d-f56c-4234-9cf7-b3dc12a34a06", "indicator--d95a0799-bca8-445b-aada-f07437a9c445", "indicator--ea226b53-dad0-49fa-8c40-4326cfa3c77c", "indicator--6dfe02e0-68cf-42c2-bca6-575759c82ecf", "indicator--4a589e2a-2655-487f-8132-c355d7f0e966", "indicator--7ebb9fe9-0616-4fa0-846b-e8ce2750effc", "indicator--43c6b287-c769-43df-b577-0eb048d6a818", "indicator--e18887ba-6c9d-4033-ae9c-a66e703e8403", "indicator--7c4d9d4f-203c-4d59-9519-85d32ee66ec8", "indicator--044ce97f-b8ac-45fe-9b6c-02b1158df97e", "indicator--9dd8bd8f-e58c-4ece-9714-7689e63782a8", "indicator--33238350-e5cf-4752-bbaa-57141d5a96d1", "indicator--62181abb-37f8-4913-86b2-5e68a75e4b99", "indicator--882c5c4e-7525-4d6b-9d37-d925463bc33d", "indicator--b7d6400d-6902-4f7b-afe8-f139909d093c", "indicator--3762907c-9ffa-4e7f-aa9b-8491bcae9d44", "indicator--31f9b1cd-8d6d-41ca-993c-a7e7c55f5f7e", "indicator--f9a12b29-c82b-480a-beec-795ae60e56f5", "indicator--a2a284b1-b6fd-4327-8050-d97de1851ad0", "indicator--93e47b6f-a9ab-4a9f-856b-1c5b92032cf3", "indicator--aba25ead-71eb-481a-9c0a-e9a613ccbfad", "indicator--d042c27b-2875-418b-bffb-224623040d26", "indicator--1c4a5457-2845-4146-9c95-bbe2879e75b0", "indicator--4d93aced-2daa-4e86-ad44-ad5726d478b6", "indicator--8a5e2f7d-2587-4ef0-bf01-ccc3ef133a75", "indicator--1be2cc5b-b162-43f0-96b2-ee5ba50f7d4b", "indicator--1df7f8c0-8d1f-4aac-94d2-53e8c8f3c89a", "indicator--e7bd6ae5-7298-4ade-850a-e74746379f52", "indicator--af0d19f4-874a-4e2c-8cab-d888baa731d4", "indicator--84775b0f-dce8-40ca-9e5c-71e225192e46", "indicator--5a62bc02-3f08-40d5-82ef-3950ab4a8dbc", "indicator--38259894-90ca-43cc-aedd-0896013f9a77", "indicator--6181409b-84e2-4597-ae7a-2a6d3e431b4c", "indicator--9489bf2e-642d-4c6e-a102-3098ba6144a9", "indicator--9f9aceb1-d517-45a3-9b46-eaeedf7b1901", "indicator--6958d527-aa04-4ac9-b2c2-c54a17b1dc93", "indicator--6d1c85f3-ea7b-4920-bbe8-8f82ab6b44f2", "indicator--f8baacb5-506e-4b00-a6e6-f3b8e7bd7120", "indicator--4926f1ac-1e4c-4c38-aa62-78337acd890f", "indicator--faf6cea2-179c-4b42-93f0-ec2145e43ecb", "indicator--f523fa93-7602-48a1-80de-8d0f73326af5", "indicator--5433f0d3-4a40-40bd-ab36-d60bb27b032c", "indicator--e54093a0-3465-4b3f-80d2-a4fe1148a1cd", "indicator--ef862640-6fc7-442d-9f79-11c03bda2c7e", "indicator--0e4daede-54f5-4755-92fa-27d1066a1898", "indicator--d9aaf3f0-da4f-4537-a079-253bfca56fc1", "indicator--a3142c92-4f91-4860-8d6c-4410b4d745bb", "indicator--6d0c1347-4b4d-4a39-a72e-d0fc3cb4a096", "indicator--577236b4-6576-4355-9dfe-83b02ff7f07f", "indicator--e07c4f35-df6b-4a35-bfc3-214dcd90a85c", "indicator--8a3478ca-f04f-404b-ac4b-774035409794", "indicator--4043c9e7-ceef-49ba-b425-04e51e2d0c7d", "indicator--0f323e83-a4bd-4bf5-8b5c-51fc67608776", "indicator--8ce7b4b0-e7b4-41d6-91c6-0166b4b81b64", "indicator--a8b6b39f-3c5a-4a41-aa1a-8d633ca0cc81", "indicator--67819122-bc98-4393-abe1-823bb82de29c", "indicator--0ca6065c-098b-4321-86c5-66805279bac9", "indicator--5d7deb39-6d7c-4af7-afe2-8304b97d6f79", "indicator--e27ea846-2ce6-4ca6-ace0-89cc57cd488a", "indicator--29fee7e7-74c2-45e2-9d83-431a458d3169", "indicator--de0b1a81-b84c-482a-a4b1-f3630a5e050a", "indicator--4c3328a3-5e09-40ad-8c9e-0cd6d9737aa5", "indicator--afee74ce-be4c-4fd9-a8b7-113d27c668bd", "indicator--096094e7-8f5f-4053-9a0c-b43988f49279", "indicator--4513ee4d-3934-4cf9-b083-63a90e44864c", "indicator--6d0942e6-a34e-47f0-9f03-bc95cf987b5f", "indicator--b47447f8-5fe0-4d76-a27c-0acca48672ed", "indicator--56a38b89-bd4c-4375-9c2c-e3d23d31f962", "indicator--3bad3f04-b3bf-4df5-94dc-21270bc53a04", "indicator--6eb83743-7055-4bd4-b0d2-4f3e1b8dbe74", "indicator--42f9851f-d0b9-48e2-a9e3-208640854526", "indicator--037215a9-7880-4bf4-ad54-3cd3dae3fbeb", "indicator--f1046399-666a-4209-9f23-d925cccfac65", "indicator--f81c914a-b321-43b5-bef5-3baa4f577852", "indicator--2c0057b5-8381-4b19-84d2-0d1c5c357b39", "indicator--f336f209-4fc1-4ca9-b399-93df82175659", "indicator--6813704a-5779-48bc-b4db-fb96c89f6d17", "indicator--8db42c39-69c2-4a9e-a4a7-023223074980", "indicator--860fef79-4d2a-4144-827c-2bacbf4febee", "indicator--934f2e21-b1a8-4b88-8542-bff507d01024", "indicator--d001466d-1f18-40f3-8bea-ffbdffb2ab36", "indicator--ab11ff1c-80bd-4328-9580-c0ccc05f8660", "indicator--25369246-e996-472f-a449-ce3890f068a7", "indicator--9a64b9a1-3f66-45ec-9a23-38619de8b834", "indicator--39725a64-245f-4a0a-90b7-3e2b9c3672fe", "indicator--713e1ea6-743d-4592-ac35-ffb3083ed5fb", "indicator--eca0d1b6-435c-4f0b-a1be-79689e5d3cce", "indicator--dbde302b-6af4-4471-bee3-d77711b4da7c", "indicator--199c91cb-fbf4-4c37-a18f-48e39abc1671", "indicator--06f6c07b-3868-4173-b1c0-1d22372c91c4", "indicator--388e2671-668e-400e-8db8-5e42c5c09935", "indicator--99ff001c-e838-4486-984f-0289420608b9", "indicator--f71dd7d0-ee1e-4323-bff6-c5e0acd0bf38", "indicator--299772f9-2c6d-48d2-88d5-e79a6538a8b8", "indicator--f6c4281b-9514-463b-a0ac-fa7640e709b9", "indicator--529affff-8b6b-43e9-a446-f6509af932ab", "indicator--8de4c039-99fb-4ac3-8d2f-796f6ed68a57", "indicator--dd25bd98-67b1-4b89-a45a-267db0a0ba06", "indicator--164a9829-05f8-4103-abd7-15cb5f3ef562", "indicator--cb9ec874-3580-4a73-a907-7584c2de010a", "indicator--4fddcc5e-718b-4e3d-8f28-2e722dd62adf", "indicator--60870f7e-f2e0-462f-88aa-313a379a0351", "indicator--686f1176-1d51-4a95-88ea-87d4b3b9f90b", "indicator--cb30a863-43cc-4233-a824-9313cb227c6a", "indicator--291caaba-de0c-4e80-a285-a5b8a1a2ef75", "indicator--9c0d1b6b-6455-45d3-819f-3a4e81cd5ed3", "indicator--816c2e77-2f62-4714-8621-50e9e87a88cc", "indicator--1437bf51-ca35-404e-8080-6fc2bc15f61d", "indicator--afe5bfa8-1a03-465f-ad6c-f1ba37df8793", "indicator--f5f44c5a-e484-4a80-ab29-a29eabe39596", "indicator--4f7b02a5-b831-4a93-93e4-9e0c65a74d52", "indicator--d6cde08c-b263-44e3-82d2-8de1b1ac20ee", "indicator--f1b178e4-1e8f-45b4-a929-23135649eb3d", "indicator--e0a3ef9c-0881-4c2e-82cd-9e25b4e77f13", "indicator--2988621e-7cfd-46f2-9dc5-bfdd393422a6", "indicator--79838fbc-b847-4a33-b37a-38478b5a9046", "indicator--4b26f643-54aa-4fd6-89b2-3c79e6f1cdc0", "indicator--10002d3e-7b8f-4dcd-8f72-1b52d51533ec", "indicator--b9ad6740-beac-4b0f-a948-6234b7337b94", "indicator--48d05904-4bd2-44de-b740-486bcc0bba26", "indicator--d07b12a1-93c0-4b08-b372-bc081197fec5", "indicator--c514eeea-4945-4676-9794-56da8d71d40b", "indicator--108a90c9-be3c-40ed-8bda-c83e54008e6a", "indicator--ee3264b8-83d4-4917-b1b0-dd147288ac4b", "indicator--ca78493d-157e-4b64-bbf0-f3064f56139f", "indicator--1ec93574-615a-4d19-a21e-fb61e5687a16", "indicator--d118817b-321a-4d54-8f37-7b363d34c4f4", "indicator--4822dd64-6d98-4faa-bd48-5abd7002913f", "indicator--148bd75c-ff52-4d7c-90fc-286d10b30e60", "indicator--cc855d39-b50e-4324-b917-0c4d88580a1d", "indicator--0d55b192-7a5e-4930-a234-c3305e758260", "indicator--cb24c95e-57e3-4dfc-8c79-da2c2e69e061", "indicator--27a3bec2-f453-43a4-bc9d-328188c1e680", "indicator--5983431a-1f88-4e6a-941a-9ebed6362146", "indicator--3186e1b4-8f25-4e4b-bb08-7e66654f855c", "indicator--e07df1e7-54b0-414b-89b5-5bff7211c74d", "indicator--4c088f68-65e7-4e07-b984-793f734a4f1d", "indicator--9cc84bd9-5b19-414a-9209-2fab8dd6a914", "indicator--ae4c0bc0-0eb8-4639-b78c-9815ec58c246", "indicator--88d305c4-06a2-4acc-a882-6657b3e16079", "indicator--9b8452d0-984d-4e3a-887f-b717dccd11e4", "indicator--35177333-d5bb-4dbd-9992-eab4ddd9e9bb", "indicator--5921647d-117d-4309-ab24-27db87c24e88", "indicator--6a49f4a0-7666-45d2-95c5-2abfaabc4cca", "indicator--d9eef14a-0d9c-4b70-b92e-9a1ccba3df33", "indicator--197f8c1a-bd37-4883-bfae-6241e423381c", "indicator--c138e0c8-d11f-478c-a279-dfd2ede3e46c", "indicator--5caed475-7d2a-4762-8e2b-9b718905e24b", "indicator--4833f5e2-b4d1-471c-afc3-2a9dc4fce07d", "indicator--67236a86-7d65-493a-bf5d-121653e07bea", "indicator--314ccf59-3db0-4ee8-bd78-24b0ccc29275", "indicator--d3c0f2f6-0e3f-4790-9c30-d131abcd7af3", "indicator--b0881201-b156-4d4d-bc4f-f4aa373b79e7", "indicator--c198f584-17b3-43c7-ae76-a8ab22c0a520", "indicator--d69806eb-e4a5-4c44-8f89-07938d29d722", "indicator--2e54397d-8d74-41b6-8196-7942512fbfc4", "indicator--8009b908-f1f4-484f-9057-fc03c1f0bac8", "indicator--84d2e4da-d7c3-4bd2-9ab3-d86d4d65e9f4", "indicator--674bcdd7-4868-413b-95b8-c1baa68b4820", "indicator--d61f0f05-4dae-4d80-9550-71b162afe4d3", "indicator--c7caaef8-17ac-4699-a84b-5cf85f1e237d", "indicator--528b2b2f-cc9c-4066-938a-453a23e7b8d2", "indicator--487aedf7-063b-48d9-af2d-0a7e879ea86c", "indicator--57fd3c71-a236-4dcb-aacd-bbc2248cca09", "indicator--cd68a694-f630-4b32-bb48-64257cc69af8", "indicator--f8108c6a-f488-42b3-848d-0ec08c022ff5", "indicator--03605ab9-6d73-4a0e-8e08-b718e18bd5a0", "indicator--e18e075a-92d1-48cc-a733-acfb4337d693", "indicator--f0d3c519-a282-40da-a474-fe1a4b1d8215", "indicator--be5f55df-8e77-4499-9030-de4e591f228e", "indicator--33eadbfa-d707-4731-a33f-f7c9a932e807", "indicator--672db1f6-df38-477b-a956-584edf47389b", "indicator--6ebb799c-bba0-4995-ab6e-9ece128c834b", "indicator--52f73f99-4e28-4948-880d-ffd76ce95628", "indicator--25a454ee-cacb-42db-aa83-1e9f300e9f21", "indicator--9e37a3fa-1849-415c-8ed6-e44df4533e44", "indicator--40af70f5-81b4-4fcf-84ae-0fe279c87a5d", "indicator--c26e12b7-e045-45cf-8f5b-222ba64444b6", "indicator--b5256dfa-afca-4653-a169-c99c42f6044a", "indicator--7f4bd605-7916-49d3-b36b-04dae18436fc", "indicator--f7db2ec2-e7ac-45a6-ab55-333fd692ae0d", "indicator--dd928237-56c7-4b4d-9a33-05052c279b50", "indicator--aed201e6-85f7-4d48-be35-faceccb6bfec", "indicator--e11b567d-af52-4474-ace6-0e2feeb98130", "indicator--7af252e3-1bef-4076-b204-b0b8830d3043", "indicator--7bc9608d-71c3-4cbe-a305-9d8e8d62406a", "indicator--484f6550-1ca8-4d9c-ae3b-1972ea45a059", "indicator--a7510215-8d9e-495e-b5e4-20fa7eb0e90e", "indicator--52e2ea2a-5b86-4e57-b8b0-5a7235ae094e", "indicator--b817fe0c-d594-46bb-b8d6-7e6f2f532de5", "indicator--05492632-a249-4d8b-a8bd-03f9dbe85f92", "indicator--acce7796-b655-486e-90f9-a0f0228f5736", "indicator--cb61b463-f222-4ca1-a150-44d76b39dd46", "indicator--055b4de4-7b50-4b02-8d19-908a2b1fb00d", "indicator--c948b8f2-54b8-453d-82af-6f835e6ad395", "indicator--028b0f4b-b435-4849-a271-f0c060be5388", "indicator--2b428b6c-3e69-4772-b2db-dda8a62d6b21", "indicator--b6100e2b-36f3-4b88-b35a-3c48dcd5c75f", "indicator--30cf8e4c-231b-4968-b26d-91fd90d3da3d", "indicator--1e0292ad-c337-49d2-b9f3-a8c630fceef4", "indicator--0974e8b3-427e-4cc9-8820-ea9ca95cd35e", "indicator--bb2cff4a-eda0-488e-a8ca-a997e27093a8", "indicator--aa93a21a-ea8f-47b1-b2a5-a05962f6ab79", "indicator--25764a31-c966-41a9-814e-97e17d0e4af1", "indicator--dc51811f-cf9d-49b2-9680-6f6eed7cc261", "indicator--aca799f5-1309-4f62-8634-d2276a354197", "indicator--66fe2e03-9253-44ff-afd2-7c5f2f567034", "indicator--704a9300-f7a5-4fb7-b5f9-2278bcf76bd3", "indicator--6adf3cce-deb3-43d2-8c43-348c6222cb66", "indicator--c6942f65-2d56-4104-a2df-cbeeff1519cd", "indicator--4f0586c4-dec9-4e47-9a6f-aababcaa32a3", "indicator--fcabcab6-bc4e-4910-97b5-82924ab6283f", "indicator--6da4a83c-7901-45dd-9aa4-84d3305b18d8", "indicator--f74890f4-99d9-4124-b34f-543e8bd568c7", "indicator--671c7e45-99c4-4c80-8005-467b8c4223f4", "indicator--052a7818-6a40-4334-bc2e-bbd62614f5fe", "indicator--6ff4b0ac-43da-4503-b5ba-7e6d6d490edd", "indicator--a93409e0-a201-4d49-a26b-71d32381b857", "indicator--8067cee3-f5ff-4cb8-8456-b40f669bce74", "indicator--2d102188-0fa6-4db5-930a-5f1173ee2326", "indicator--eb9a9b0b-d0b3-4f99-bf3f-c81d9124174e", "indicator--6ee6c182-2d2a-414d-bcdd-ce07d10da37a", "indicator--81ab69a7-1097-48e3-b7cb-66754c70999c", "indicator--d61cba58-72fa-4a6f-a8b7-21404a37374b", "indicator--842fa80c-5195-496f-ac2b-37b1c157a5bf", "indicator--0e406a34-775e-480a-8b1b-6a9620eff8c4", "indicator--bdc60d77-e15b-4bb9-89b0-b8672212e2fb", "indicator--26f46375-d424-4217-9876-2e54cf911683", "indicator--79d5043b-d317-4a01-81a1-3d8243702619", "indicator--bc05f90d-236d-4b1b-84bf-0f9cff1964b5", "indicator--b35e313b-a219-49f8-8fea-10c1235abc00", "indicator--a0460bd0-7a82-45f9-9a40-942788fa1ee6", "indicator--24e02a31-fbf5-497e-844a-d596ec836dd9", "indicator--8902d236-2a7c-46e7-8e88-5b743733c995", "indicator--668d9ea5-807b-4113-9a42-ded4b095a270", "indicator--2e894594-19fb-4dc1-a9d3-4fb4bcffa59d", "indicator--ffbbfe5b-c586-4b6a-88d2-ff8a1c0b9493", "indicator--125b07d1-435e-4c2c-b056-a08c0dbbc97d", "indicator--e8cd9555-2ce5-4ef4-9622-94d8580dc10d", "indicator--2e04c2e4-a1b6-4331-b4a9-c19a3b641cbc", "indicator--d5debc57-e6fd-4fb4-8984-0307bb1dcf34", "indicator--76b8ced4-0dc9-455d-9ec3-a00379a982fb", "indicator--338ecf91-f6aa-4fbc-96da-1845346dbed8", "indicator--a6a24c0a-441e-45fa-be4f-aabbef2175bf", "indicator--9651fd24-a815-462d-9009-e82748c739e2", "indicator--2e59c5d6-61ac-4cf3-84c6-15d8eb65e4ad", "indicator--377532c2-afa8-4438-8d7f-e25bd55ac176", "indicator--f2be2f3a-6776-4ee3-a94f-64e8bb07cd89", "indicator--40c3ad00-0dcf-480f-83a7-2be16690f01c", "indicator--95b3d731-a16e-4a92-9d07-11c3502059e3", "indicator--1a530e05-881e-4311-9179-585b65d1232d", "indicator--78a0ebdf-4151-47ba-be0e-b2303a5943e9", "indicator--5cbe7083-1ed7-468a-a418-33eec036dd29", "indicator--c3f7a886-80fe-489a-baef-ab2300dfe089", "indicator--ba60702b-b12b-41b1-b7af-bade1aea1fa4", "indicator--f7b87af5-8353-4ab5-b2f0-d8d45d245880", "indicator--3e0d8eab-680c-48ba-a9a7-322e5f56cb0b", "indicator--19ef190e-0d93-4676-a878-400ef6a26889", "indicator--68c6272e-1e21-4928-84c7-585933b0c250", "indicator--f5a71c07-2ac0-4420-80a0-7d069ab7501a", "indicator--864a69a3-6055-46d0-a5ed-9e45b642cd84", "indicator--a71cef75-7e08-48b2-aba0-033ade08c257", "indicator--40d1d031-3218-45b8-8502-87aefeb9f95e", "indicator--b5c0baec-814c-4541-8bba-1a7dc036ee88", "indicator--fe5827af-f97f-4c0f-ba2d-79b87a45c99e", "indicator--0041ecfe-bd40-44f1-99f6-a867f221335e", "indicator--1e494f59-8c65-472e-a0fc-612a9f6aae6f", "indicator--d8c15caf-b75e-40a7-85b8-ea89337de38e", "indicator--4f60afb5-6474-4c40-b6a2-bcc6e4a04a72", "indicator--50c334bd-9ed2-4b3b-ac3b-f6755ab9cc2b", "indicator--954e717a-4167-4366-adbd-2e89ec693594", "indicator--cc183784-a0e4-4f43-b8fd-ea8f8dc03f97", "indicator--5c95e355-313a-4d4e-8e01-a7eaed3ab4fa", "indicator--5a1b6827-9f7b-4f28-9517-14aa042ccaad", "indicator--3bd31ebe-2ccc-44ca-9e32-fb267d842e44", "indicator--28bb9f78-53e8-4b65-be6c-cda293f43b46", "indicator--7bf4d333-4e46-4503-8fdd-c204ae971ab3", "indicator--fc3b5e32-bb01-4e03-9beb-95c417c158b9", "indicator--8eeae703-3eda-4ddc-9b97-11cbbcc0f016", "indicator--d87e29ac-a53c-42a4-a8bc-b637fa132755", "indicator--b4f0f620-550b-4f67-8035-bab971b9141d", "indicator--b1572fe6-fc21-4e2b-9d31-1ae99972f347", "indicator--5a535cba-7834-4154-b3d5-ad468ce0ba27", "indicator--8892ee20-86cb-4f7e-87c4-af3b26d1d394", "indicator--8fb374e0-a879-4ffd-9c0a-23010e0a3cce", "indicator--56e00d9c-f07b-4498-937e-3c0ef82cd990", "indicator--670bc9e3-9ce9-41ab-a1a5-fb21a094f06b", "indicator--050c81c6-5312-4ec9-b967-517a56df1b60", "indicator--b55f0fbb-fe9a-41c5-8dfa-eafde0599178", "indicator--0d96533b-4a40-4ad3-add7-0d5f716f73ac", "indicator--6d52e638-5297-49bf-8711-ca342abd1169", "indicator--c79f04b5-7cc9-4c21-b780-0dbcb807a213", "indicator--a50d29db-221a-4979-8e21-4656a2ade442", "indicator--495186ce-f578-42c9-9854-ffa8e6d8b046", "indicator--80556c90-da12-42c1-ad7d-7d448b4ef085", "indicator--b426d28f-06e9-4005-9408-cbb230242fda", "indicator--d2ebdf4c-6c4a-448d-a987-3352deb1abfe", "indicator--0e86ff00-d21f-4ae1-8151-d33af1a85094", "indicator--43ca4549-a960-4c27-bc05-06cee1a6ca2d", "indicator--c5be9d38-4b89-4ec8-9637-091412eee562", "indicator--bfa8d5ea-7920-4c2f-b5ad-66b18684e3a4", "indicator--f08f8d95-cd70-46c4-aff0-e2702387b4c4", "indicator--8a126538-e6e0-43e2-9e01-4d4c3fc8eb2a", "indicator--3d24c361-46e1-4071-b1f1-5db8354f0780", "indicator--7a8f1630-9c6b-4fe2-adbe-e4bd17227673", "indicator--40357ec6-60d7-4ff3-b262-e30fad9b72fd", "indicator--b949d978-93c1-40ad-b9b4-421331fb95d9", "indicator--4a7fb3dd-85a9-4aa7-871d-4b24cc367ad2", "indicator--304a55ca-6c99-4b12-aba7-69d8ece4acea", "indicator--4c5e7144-8821-4bbe-8c93-e702eec0da9d", "indicator--c006c726-bc16-4a87-86c7-1cd7e965b176", "indicator--ec6ff8c3-019f-43f4-8fbe-40b53f7c93b8", "indicator--7c956417-66c6-46ad-b03e-2f080335efd8", "indicator--8039b99c-2d12-4c71-a4f2-60de5338c2f2", "indicator--7762fa7d-2f8f-47c7-8346-c2cd1e6c706c", "indicator--708722eb-5077-4c3b-8114-1c9a3c930b6d", "indicator--3dc5295d-77f4-4d0e-b763-4d52f0677f77", "indicator--b27298a2-cad9-4adf-bd5a-ffc376414a18", "indicator--bb98c9cd-81f5-4fc0-b61a-defb2aad9ce3", "indicator--953360d8-09a0-432b-94f4-590c0e59f553", "indicator--f26a9316-9eca-4f1a-bba0-6c4766167da3", "indicator--73a13933-3e82-45a3-a253-d9a6f3585df6", "indicator--0bbd486a-3ead-4b4b-9a4c-5ec5558674df", "indicator--d6d6d61a-a646-430b-83d6-914578a18318", "indicator--bf577016-3676-4673-8360-41d1114ebeef", "indicator--3633788b-5a05-4608-b1fb-6c3f0b0d18b7", "indicator--c8272b6f-bcb2-43f3-b173-9f27714ff53c", "indicator--c63c5c49-db4d-4e76-bc19-2d2cc41f5b44", "indicator--2465fe19-3ef3-4ab7-a0b9-ce2235fb7ffe", "indicator--6fb31195-705f-47d1-83b0-dbd4d4ee5b8b", "indicator--22023531-f8a7-4e00-a22e-65eae63f9478", "indicator--8a986d51-c830-49f5-9749-184718c32626", "indicator--82e01e0c-6538-4aaa-9b74-67351953e512", "indicator--dbde248b-bf3a-4ae7-8a64-59e44e2553a6", "indicator--4b20edee-c408-4c36-a41b-0382b1aecc05", "indicator--d45ec42d-62d1-4bae-b4bf-441894567438", "indicator--361f2749-6e04-4850-bb36-89888bc0e537", "indicator--e68eeb65-39af-478b-ad26-b82ceaabeba3", "indicator--ede07fdc-b2d7-4844-a75a-2cc36af33ed8", "indicator--487332d4-07ca-4aec-a151-7753eacd5bab", "indicator--fe2bac53-5082-43bf-8833-cfad5f2c4300", "indicator--3ff86539-b9b7-4728-939f-a285a59c2071", "indicator--d18c05b7-6b8d-4c76-8aa5-131c0188500d", "indicator--00c7c33c-7372-445d-9d33-568f3151372b", "indicator--b45d3822-36ca-4004-be00-83b2cae05201", "indicator--126a4615-f2cd-43a5-9476-a5a1ea520805", "indicator--1f41ec95-baad-444f-8f46-c533c1fcf6f2", "indicator--4edf91a8-d87c-4f2b-9ff7-6db42a792174", "indicator--d100ebda-1460-46ef-85ad-e6088ecd91bc", "indicator--6d4c02d1-9a05-47da-8b55-0fa8fd88a01f", "indicator--82b81c5e-852c-4cc4-ad0b-bb54b9ce4670", "indicator--f946df23-ad45-4192-873c-20a6308346fa", "indicator--89aef7a8-fb01-4ebe-b49f-94ef5bdc5731", "indicator--6cbaad29-1aae-4629-8236-178998e93134", "indicator--fad2b426-1479-40eb-a8f7-dfaa833fffb4", "indicator--560e0ea9-3bfb-4fe5-86d7-4403a23780b3", "indicator--cc58b7cf-589c-4ba9-8c47-5e3fffe88d5a", "indicator--0dbd4fbd-bd38-48c5-bd62-fff3b61124be", "indicator--d99e1ad9-54eb-4420-a3a6-8dc584a0da2c", "indicator--b5740589-407e-4cdf-be5f-91de13d3ac9d", "indicator--e20dc781-6326-4d96-8e82-1494e6565eb7", "indicator--cc8a0471-bd5f-4fde-acef-a6f7640c0f8f", "indicator--55f817b9-0661-40da-a6b1-9ebddcf7bb31", "indicator--15f44cde-ee0e-484f-a3a7-7a8cef0cb4d7", "indicator--d790c746-c5c0-4249-b71b-2b864fddf3e7", "indicator--ca077f96-1d60-43c2-8454-ef1f0c6e82ac", "indicator--9218e228-e0ad-48db-baca-01df8745750c", "indicator--b0576fb3-f1ea-42f7-84e5-61e1407868fb", "indicator--20c0c6d9-7d2a-4f45-8f72-c7d1cae9e37c", "indicator--e17996a3-0deb-4cdb-9e61-20e6062d4254", "indicator--3a785e18-31f9-4806-854f-8a5f501a25a1", "indicator--b6cab8e2-3c9c-403e-b54b-00d4c75aa7ec", "indicator--29b2fa9a-d520-48af-ae12-cdb970958769", "indicator--4443db08-269a-4ad3-8055-5a98d3a977f0", "indicator--4a8a249e-5bae-4939-b12d-3a9efb5b80de", "indicator--def1195a-7a77-4ef3-9a4f-e549464341c6", "indicator--f2258aa1-578e-46ee-9d09-62a327c2cecf", "indicator--a102ad20-f8d2-4ce6-b8ea-1326f94c2de4", "indicator--8b67436c-c983-4a61-90ea-97ef74d10854", "indicator--283296d5-89ee-4894-8db9-d4e759144e9f", "indicator--a8c70840-be27-4054-8454-284a75649b44", "indicator--7c94f6d5-97b1-41bb-8608-8bb086d4627f", "indicator--8e89079b-0992-441f-b6f4-0b8fdd4d7a83", "indicator--6034c240-2369-48a3-b458-e30bd9694aca", "indicator--2abdb463-6034-4164-8727-8456f0c7f368", "indicator--7da29c36-35d4-49f7-a94b-a128dd224835", "indicator--edee2822-cc28-4ba8-8d3e-c41abdf538d1", "indicator--d2c95d0c-c6c6-4161-9665-36006d0df09e", "indicator--cff16123-ecbe-4b57-9d25-d3c78829e580", "indicator--fc31481e-2073-45c8-9e60-73e7d79f3e98", "indicator--9a22a07e-a027-456d-a63b-dd3e8c64318f", "indicator--41bc3c9a-b79a-4dc1-a236-c5f09bf2e03d", "indicator--054c65bb-027d-4af8-aff8-f312e3f14ee6", "indicator--440d7d1d-7f88-4d11-b0db-644dac6fb4f3", "indicator--381c03fc-db83-429f-9ae8-6c7ee8a043be", "indicator--6a4ba3e5-ffb3-4d72-921b-0356b214137c", "indicator--441932b2-8176-4598-b29b-9bcd633dae4d", "indicator--3abb107f-f550-4753-8779-fa7a9c77a1c2", "indicator--1e446adf-83eb-4ccf-b2b2-8df27c097e1e", "indicator--05772613-09f5-4dc4-bac4-bde3cb41789e", "indicator--c4bb817b-3df0-468b-afaf-2b923e5b9eb2", "indicator--9f71595d-ff78-47a0-b777-b9e6d65a6c76", "indicator--47102932-b02b-4be1-a2f6-f9a19bab331b", "indicator--b299e035-cbcb-498d-a9cb-76d5084193b3", "indicator--4eae45ed-6b03-4c1b-a922-6e1c789612d5", "indicator--a133671e-7a7b-44f6-a8c0-2d38cb20a00c", "indicator--d7634a37-7eff-4dca-b6ad-bf7a6c14fc6c", "indicator--29f53631-5798-471c-ba32-27989f3df5e5", "indicator--33b63257-4fe6-481c-a968-3ff28df26622", "indicator--6028b2e4-60dc-4837-81f5-27b93b75df7b", "indicator--0aedf474-76bc-4bc4-a445-127cfb9fff4e", "indicator--53f0615c-289a-4503-8fb1-f4c6d1987882", "indicator--aef05b02-3dc7-4b7d-99bd-96f0efc2c63b", "indicator--a354d453-b0bd-4fbd-97f0-5f77ab2aab0d", "indicator--48e4290c-ed3a-4854-9491-8f425739784f", "indicator--286e4659-1b08-43a9-ae88-637f12f4df4e", "indicator--59b56d5b-25c7-4e73-a6da-e7e2a7bd4355", "indicator--f38be212-2b7e-4da9-9a8c-2e9962cacb44", "indicator--3f00edeb-9eed-45f9-a4c6-7b97e40478c9", "indicator--001dfb45-96bd-4612-a945-c50085617f4f", "indicator--d8d40081-5792-4209-b65e-3e69d5374b57", "indicator--ddf71b96-f39e-4e44-b8fe-6351a81f65a0", "indicator--2666e215-cf79-4cdd-84d3-e87ec2729cc6", "indicator--21262431-12ef-4eca-9078-a3226ad5c270", "indicator--d0f82dd6-c275-4d98-8d11-fe7eb7dc2928", "indicator--c4f3e700-6608-417d-bbb7-769aa94a4be8", "indicator--ce9492fa-464a-42a5-9afd-26721ef6b1c5", "indicator--37e1ef9d-46b4-4416-8421-cc3454d2c1e0", "indicator--0feab117-4f87-49d3-9f09-e4bb204fe4de", "indicator--649aee13-61b3-4100-858f-9bdd960d25f0", "indicator--3718aec8-0eb0-4880-aa66-db3e7115f9c4", "indicator--119bfc1f-8ac2-45c5-ae2b-f4aeadddba42", "indicator--2cd77e85-655d-4f2d-8a0d-4ed595adf353", "indicator--1cd78ed5-79b6-4005-b150-9796554ad58c", "indicator--0b574818-4f10-46f4-a396-d457ae7ab88f", "indicator--738c3560-5e0c-4b9b-b740-47bec9ed6475", "indicator--0b73b436-78e6-47d1-bd3b-5786445d3d80", "indicator--a8668816-63c2-4aeb-a74c-9c2f45cc4ee5", "indicator--0e577df2-3821-4040-83b0-01d6bb76823d", "indicator--08e3cfc5-d22b-42b5-971d-2947c2f08280", "indicator--70453a2c-bde6-4412-ba15-c09ee67a190f", "indicator--2fac8506-0fe2-4b12-b20e-460a899ed4a8", "indicator--56202d9b-b1ec-4d67-aee9-f4bd9fd35f81", "indicator--a84f1329-5c0b-46ca-8472-36aa3c73ae74", "indicator--3ba46229-247b-476e-8096-20796365e3c7", "indicator--3df66658-3bdc-4744-b2b4-bf07fb906246", "indicator--fd5f2226-0e3b-4209-af3a-fffa08afc00a", "indicator--1a1ccc83-a66d-4e67-b677-c84c8220ab5b", "indicator--66e77a28-a79e-435e-ba72-27bc697e65b6", "indicator--6e827ed8-ee83-4ee1-873c-4bb6a508fddd", "indicator--94294fd1-ac9b-43ad-baba-dd30e60cfe7d", "indicator--2e48d064-e128-4bba-a137-d5629d5ae75e", "indicator--eb1cdbfb-2635-4086-985f-10f00f714436", "indicator--1da52e06-d5c2-47f0-bde9-351ad41e6f89", "indicator--f550002d-f580-4583-897d-92a747bc37c0", "indicator--960ca4e7-09f4-4455-83de-15223de91287", "indicator--946cec89-8184-4cd0-87d7-8a60fb904887", "indicator--fd718767-6000-4047-8fe4-1f608bc1f42b", "indicator--dd3e73e3-7088-4d1f-8448-670d853f40bd", "indicator--55830657-ef30-4f80-8e31-345f1069e861", "indicator--1828784d-5e04-412e-a7f3-9f7a89b67e36", "indicator--5a45b252-78f6-4212-859f-fcd7fcdc89df", "indicator--53c0226a-c329-4507-9d16-bbd5a3545ff2", "indicator--aa3735a3-1270-49f7-9c89-27241f34fed8", "indicator--a3375a8f-914c-406f-9fad-be75e69eca2e", "indicator--3d0d08bb-03fb-441e-8b0d-7f0f23434dba", "indicator--17bed51a-e3d7-49da-8cc5-98c6a96dd9aa", "indicator--a87b6e42-0355-4306-beab-50061050e5eb", "indicator--513acf26-4a80-4e91-8f74-829fc3b69474", "indicator--5a260de6-886c-467f-bdbc-1a71c8a08aec", "indicator--9a68bffb-d2ae-478b-a4c6-09048a765f18", "indicator--eab0e66d-8f96-4c7f-9e1e-1dd5bd08f50a", "indicator--9df8b2c4-2ad5-4f0c-981f-f0a90f710b00", "indicator--04d2726a-7e11-439b-a008-0b062a98d5f9", "indicator--6349b040-5a7e-4e7a-8773-82ef241ddf1c", "indicator--865b1b86-b254-433d-9968-52a834ba7a07", "indicator--8bb3fd04-b32f-4f32-bfba-b6cfec30b41a", "indicator--ab4073cb-f084-4cb5-a5e7-b8d405ade669", "indicator--b5c16d6a-63dc-4f76-96c9-3fbdf5f2219a", "indicator--149e80f8-ece8-43ab-a4df-79a07459946a", "indicator--d2d18155-cdcf-4a83-b23b-8d144f616813", "indicator--65cca725-fd7e-49b2-9ff3-85d788283822", "indicator--1dc62a4c-5b86-4ff4-b013-70d3ce91f5a4", "indicator--e957581f-fc28-4267-88dc-12ab649d5c48", "indicator--99d106b5-cff3-4455-98ae-8310631cced7", "indicator--d95827f4-d335-4210-934c-8f8f8176ac92", "indicator--ee173a06-f6e2-47d8-91f0-a81abebd23c0", "indicator--5ff7b056-4d40-44b4-8d2e-ae88f179851a", "indicator--ccba06d6-ab86-4c9f-8ce7-cfa2e66c3b08", "indicator--df856c01-c5e8-4914-be58-c7517f094305", "indicator--ee3f222c-5089-48be-9ca7-a3a3bb27fb03", "indicator--2f605c17-1a60-43de-8df5-2b0f7378399e", "indicator--912d410a-92b0-408d-b242-93f486e7adc7", "indicator--f411dc94-b08f-484a-bb35-09c477c3eb5c", "indicator--d726a5c9-aa57-4850-8b45-51761a6f7794", "indicator--98ab6632-0564-458b-982e-37f6ecbec293", "indicator--1ff8cb3c-7495-45dc-9131-c26d133f08c3", "indicator--700b3676-27c5-4a20-bb42-3b62de32069c", "indicator--d5f6f909-ea96-4f64-905e-17de439dd646", "indicator--679b9b07-0eb2-4ef6-a632-c4e0103029fd", "indicator--163f88d4-3f62-4b83-8b46-abd9a268135b", "indicator--c667b72f-c657-4bf2-989b-59dbe8f38304", "indicator--d78db79e-4f9f-4b70-a1cb-9a9ef827052a", "indicator--077e44d4-a553-47b5-8b56-56409790369a", "indicator--e2f82122-0332-44a0-9d9e-30b8840a2988", "indicator--0bd8caf9-e989-43ff-bcb1-66d42342f649", "indicator--e0355dfd-04e5-4ce7-bd35-c2ceddc2017f", "indicator--ea00102b-54da-4fef-8675-334824f385c5", "indicator--e419c061-18fe-473d-9896-e65c0fc84467", "indicator--90710ad4-06f9-4032-94de-c1bc7904d200", "indicator--71ae5579-bbbd-4fac-a8ac-443dcae58214", "indicator--3803f7e7-e93d-4d05-985b-92849aa8f68e", "indicator--4f58a8d7-195a-4afb-a33c-0491dbade736", "indicator--1542e451-e1b8-4e4b-9d89-9a54298eee94", "indicator--7caccefe-7e72-44a4-b6bd-b9866f70989b", "indicator--d2984bfa-e91e-438c-bbcb-952198597c43", "indicator--064a5d35-5638-45b4-bad3-43e80ad2162a", "indicator--550e5461-0011-4ddf-aa89-c23471674f74", "indicator--5936287a-4b0c-4db7-9c28-976c9c0f3897", "indicator--6f1b9a8d-c87a-477c-88fc-2ba940296bd0", "indicator--4c2c389d-d3a7-4a91-b126-b793a6ab50b2", "indicator--5963105e-8fc9-474a-b964-fea2d103948c", "indicator--1ef252d6-71f0-4f7e-ac61-34d570cfeea6", "indicator--ed15b51f-e16b-40b4-a511-469f460fd225", "indicator--263ca908-5eea-48bc-aa16-a0fa57e59f55", "indicator--8c9d464a-8ad9-4a7c-a0e0-9e5aec02e652", "indicator--fd9009f5-58c4-4d6c-9f87-97932cbb7c03", "indicator--3176a963-27ac-4cfd-9a0f-643f6cf0b8f8", "indicator--525325e5-6d15-410f-8b52-1d77542222b2", "indicator--c9f8c3c0-9048-40df-aa58-78e204ede7cb", "indicator--3aaf27dd-5aa0-4d40-8b99-6a611a76fb17", "indicator--26165ab0-24ba-4dc0-aac6-c516eb7716eb", "indicator--aebc50dc-a2d4-490f-8ac9-55a9a28a22cb", "indicator--357a821f-c96b-4125-abcc-da0682c54248", "indicator--bdb3de5d-abfa-4f8b-bdae-77bed5a6a02e", "indicator--b2261759-7b10-4fa1-80cc-e8d9b183f566", "indicator--ec5f9960-76f4-4f95-84f6-811bbdb63018", "indicator--1e057a5b-bc46-4ee6-b2eb-9a419f284f38", "indicator--5533418c-0fc0-4827-afae-5019cf9d0db2", "indicator--cccd3dd4-1323-4de5-a6ba-c882bd014434", "indicator--c01fc0ce-330f-45ae-977c-b0251be90bb6", "indicator--4e632650-fd35-4f2a-9d3f-fe363c59dc56", "indicator--ee11b1ca-42cc-480c-bc2b-fdfc0aab6ea3", "indicator--5f946f79-c679-4f18-9ad0-f5f047c898fc", "indicator--57d2969d-c904-4d64-b635-8485460f39fe", "indicator--4903c554-012e-45c5-8fc1-68012cdcb714", "indicator--5b42b4c3-535e-480b-82ee-3b6277dba1d5", "indicator--9bae3209-00c2-4bf0-b192-7ed84e7c1551", "indicator--aad568fe-e4ba-41fa-af12-716c24d35027", "indicator--788a192b-939d-41ef-97ae-471d6c29789b", "indicator--73e4e5c6-ef9e-4fc0-b9ba-d05d12d2240d", "indicator--053cab03-54bc-4441-a091-f39417faab33", "indicator--9d0e92ab-3a5c-46ea-8a91-84395f80baf0", "indicator--4460d022-e359-440c-9193-1f3f075dd14b", "indicator--d3db840d-ff2e-43a9-b817-7a601e9fb566", "indicator--354492c4-40e3-460d-a1b0-378f6ec95c53", "indicator--84587823-9083-4dbc-92cb-3791dc632533", "indicator--3bcddeff-c5aa-419e-944a-9310c2fc5502", "indicator--7462c01f-f529-4972-ad0b-28595226d79d", "indicator--d4bbf547-d32e-4e7a-b6b7-692754bd0567", "indicator--bcd9907a-e363-4cf5-985e-07776f983e44", "indicator--ab8baf3d-8a1d-4be4-a7f2-b4b893bf5db3", "indicator--819e9f35-dbc9-4395-a3b0-c1f349306d04", "indicator--7cfa003f-83af-44a7-bdcb-0974d183b167", "indicator--60cde80c-e09f-470a-85b8-87af3e3b9753", "indicator--44521e84-30f9-42cb-8f1e-5d0f84603b13", "indicator--bc37beb4-f585-49b9-8aab-10764f457fce", "indicator--1966f10c-6ec1-41c6-8f45-8afee1a87dee", "indicator--3157d23b-2cf2-4f93-b224-467ac029738f", "indicator--d0c169c4-17dd-4124-8a41-d3f9bbac0edb", "indicator--9470e865-dea6-4bfa-b853-34c4bb4f1b21", "indicator--d61d9139-b672-4a6a-9e59-2e17e5966d8d", "indicator--d97c318b-b95d-442b-8c12-fe9ec19f546f", "indicator--0e8896dd-ecc7-4222-a3bb-5b07867ca1d2", "indicator--dcd7528b-ef64-4ac6-9708-479342931fb0", "indicator--4f0fcb05-b95c-4f46-a44a-68a5f0510796", "indicator--2d8650ae-d49f-4779-b5ea-64fff9c4fefa", "indicator--718cbc9a-4cf0-469a-b324-cac6466546fe", "indicator--eba2beaa-0a27-4ac6-9dec-4bfcdc1503b9", "indicator--1645b6ad-3af1-4367-8840-968099ab1d6b", "indicator--ceab8d5a-6c7e-4bff-9309-02fcf627d717", "indicator--f8e76267-b81f-4ee0-bc6e-622cbfbbc935", "indicator--154650d2-e770-417c-94b0-a0b7ce4ea064", "indicator--6a32dbd0-4dbc-40b9-8769-f0f84a65e9d2", "indicator--78ff848d-f178-450c-b5da-cb04b45c906c", "indicator--82581327-34cb-46ca-b179-07316c5498bd", "indicator--5aa1d6e7-9a01-4136-8bfa-d51520cb0115", "indicator--6d918cc6-013e-426c-9f84-1eb7fe4809bf", "indicator--bf02d456-d8ef-46b1-9e21-dfcc33c704fa", "indicator--6fede4da-6b3e-4167-8138-faae1405422e", "indicator--82fe60c5-031b-4879-8ebe-cadcab0e76f2", "indicator--d67b8a97-1d09-4e9e-90c7-24b2dd00202b", "indicator--1ff1da0e-476e-46d1-86b8-24b15efb0475", "indicator--946d3e2e-ac20-4297-9f7e-d660c56200e3", "indicator--7afea2bb-b1e0-4728-ad66-af65f25dbd55", "indicator--c91a129d-059e-4cdc-ae74-58024203ebb0", "indicator--725a59cd-1b03-4bca-8547-b845bb268171", "indicator--ac021a14-0fad-4b2c-b761-686e37527b7e", "indicator--c1842753-2a13-4b25-a5b6-8170d43e9b36", "indicator--58902586-348e-401c-bbb2-85821bcf4fe7", "indicator--d4126c5e-1a3b-43cf-bebf-8dd07462efce", "indicator--5927f06c-c89b-41b6-8733-9e20f575f6e3", "indicator--c8156db1-1203-4d93-95c9-d4d6cc011d96", "indicator--22727245-0436-4fbb-9bcf-64a730e60602", "indicator--16abdb33-1941-4a32-9062-4eda95848efa", "indicator--87a5379c-d77e-4dcc-9361-6d60121391d2", "indicator--22b9dad5-04b4-4a61-b71e-a49e9517dfc1", "indicator--f0f406c9-4993-4fc4-9fc0-707e0a685b09", "indicator--45987643-0fcc-4ba9-bf87-7ff05f6e6929", "indicator--cef3908d-c427-4e0b-abbe-7d2425a1e67b", "indicator--049b81d7-879e-4d76-96ac-8e8450d2ab2c", "indicator--907fe458-2bdf-4c3a-9159-6e893aefae90", "indicator--8d7fbd38-f822-42aa-8cb1-0e0ea8e4064c", "indicator--b700c27e-70ae-4344-948c-21bccc1b6197", "indicator--e2971ae7-9689-4de0-afbd-aa6431906325", "indicator--1a6a2188-b946-4d96-ba3d-04a5547288a1", "indicator--fd7b71d8-bb62-4963-a810-a73efd7e96af", "indicator--56c8403e-163d-421e-b64e-bf84767337f3", "indicator--ea7f8534-9a05-4e8d-bc65-dfe115553358", "indicator--50d028ff-9d56-49ea-b157-9a0698643ccf", "indicator--3b5e4ed3-aaf3-4df7-b9b4-70967f2dfc29", "indicator--0a4d8690-64a7-42e9-9e6c-d179824d8261", "indicator--67703a61-abf3-4c30-8408-d884c1f3f80a", "indicator--3cab8d24-f66f-4ff0-ac4d-11582a9612fa", "indicator--d536345d-c188-43ef-8c45-4dedf914ffcf", "indicator--af56af23-eec0-4c50-bb39-27055de12ae2", "indicator--e64d8cef-0b4d-4d90-a77d-e848f3d71454", "indicator--0f085ef5-1c48-437b-96e8-414d29fbc877", "indicator--ce8b6645-7531-426f-b900-f0d91273be56", "indicator--1eef21b8-980f-488c-b90d-f9215d7d9b97", "indicator--bc753b67-9ed8-4abb-916a-1f8407b3e565", "indicator--efd00ba6-cac7-41af-a70b-4d1ec065ab96", "indicator--2100f03d-76fd-427b-8129-bbea7123d68c", "indicator--aafc6fda-dcda-4f7c-82ea-16435924a9e0", "indicator--84289371-ddbe-4043-8c6d-eee69c875244", "indicator--06031e00-472b-4d52-a1a0-6769782d8f2e", "indicator--9d6f8833-841e-4548-8297-06930e0eefe2", "indicator--d5fa5cce-6d01-48e9-bc3a-d967f0d0c213", "indicator--df01512c-a902-4e8b-ab26-74676d6716f7", "indicator--316e7ba6-3111-4ee0-8d51-009fe703905c", "indicator--9053e8ca-d130-4b98-b56c-266fd8c7bd91", "indicator--a3b33088-4907-4a88-a0f6-3a6aeed0d1e5", "indicator--d9d34fc1-44b7-4ff4-8658-1f87e954463e", "indicator--e1ee3ecf-0dfd-4801-8017-6eeac1991fa9", "indicator--773541cb-a982-43d7-bf19-332bcb0237ce", "indicator--b77cb0f0-e80f-4485-a49a-a62270ebe60e", "indicator--529d85cd-d349-47d9-b3e0-009303ebea31", "indicator--57cdf113-0058-4b5f-8d36-ec8540fa378a", "indicator--34084e62-d069-4964-9a3c-7166a27cf471", "indicator--475ab29d-30ee-49ea-91f6-220e3b269923", "indicator--d34b5d2a-54ef-4532-8cbf-5048d2fa36ef", "indicator--03bb6fbb-6612-4497-b821-39f0486c8f40", "indicator--d65b1ab7-a67c-45b9-803f-dc82c29c3b1c", "indicator--82b240af-2cc0-4ff9-a8c3-bb6d8e10a1f2", "indicator--d8353c25-4679-443c-99b5-5d62c9920465", "indicator--4a72363b-135b-4fe2-86c3-aa4f2133aa64", "indicator--3678fe66-8048-40ac-8a03-26f01c96c46f", "indicator--4087b4ee-7339-4420-8a45-2b4defdd48cd", "indicator--16fd6d8e-0c25-4cfd-83e1-b7401b7d7e3f", "indicator--9cb64711-dfe9-4983-8f08-c29e603fa935", "indicator--a52439a6-8269-444c-8a4a-4a2edb4c39c7", "indicator--edb1cafe-06f7-4433-8276-b8f984359adc", "indicator--1281ab61-0835-4a61-8356-f29dac522076", "indicator--58b955a0-ae93-4f52-9339-a3e3f48887f2", "indicator--bfeb845d-ff7f-4858-8c9d-92948ca5a68e", "indicator--bb88aa15-51a0-4bbe-9fac-44089f907db9", "indicator--022382bc-0278-4c31-b160-3ddb5df012a3", "indicator--99fa0ab4-3ec4-4f16-978e-09c21c889c53", "indicator--99980390-41b5-4a5c-b6a1-31cac0b44f06", "indicator--77130c45-3da0-4919-ab64-f3a58c411f3d", "indicator--e773bdd6-27fc-4677-9941-815b983f2dbb", "indicator--bd2b63b1-3d99-421c-8229-8aabb291d445", "indicator--328f6e35-343c-4212-808d-feff616777e0", "indicator--d5fcf932-1718-4cd8-9d46-f8d9edb1417e", "indicator--b1ddd0f3-8fe1-4f22-8670-a78a284971f2", "indicator--0232638e-0dee-4f59-95db-4056a89c88af", "indicator--a223179f-6af5-46b8-b106-c21fbc9981ea", "indicator--64d52d1f-1e61-48e1-932a-d5d30c2eafd1", "indicator--6b193334-1dce-4250-a9ae-027594b58ab4", "indicator--b6902141-7f08-456a-887a-6816c2cb6413", "indicator--afa6a6c1-0511-46e6-b200-0be6b36c4a55", "indicator--d71e6eb8-df05-455a-be65-e01f7123e352", "indicator--aed1af7c-0ed6-472b-b5a1-16f47e8a88b7", "indicator--78611f90-4736-45c1-8264-8a8ed8d3c2e6", "indicator--6afadd4a-ca8b-4d4f-a997-c43ff3c722e6", "indicator--859a83db-5ec0-4f4f-aa34-95ea16a4a1a8", "indicator--42b59f1c-bc3c-4fd3-8e54-b0337ac2d08a", "indicator--222d0b70-b9de-4c54-9bc0-86961baa0bf2", "indicator--ce9803e3-525a-4e8f-a5fa-ddfd3f445c16", "indicator--33ae1e40-81d3-4f82-8139-fda208d59766", "indicator--aa9267c5-74cc-49de-bb1e-46d4e43142a2", "indicator--63800566-dc36-40ce-b794-78c8856acda2", "indicator--cf283ba8-2ede-4107-a0ff-b413d71ab600", "indicator--41e94265-8235-413d-b224-127ae144e9a1", "indicator--1eb16c2d-20cc-4116-b0c6-885dc8120b6b", "indicator--00ea1610-86e1-49cd-8c05-11e681ac81e8", "indicator--dd838801-d3d8-4dfe-9f38-55aa22d94376", "indicator--e1ec23da-3fc2-4be9-b58c-3223079fe723", "indicator--dd234910-df65-45dc-982b-234cd94db409", "indicator--621e24b9-0707-4b9a-9cc8-0df89fd238bc", "indicator--0e78580b-3bdb-43d5-b1d4-3339fa27a122", "indicator--9f110b44-603c-4423-a539-4b1555afad78", "indicator--88fe05e2-0f97-4966-9aba-082c58320a09", "indicator--b068515f-facd-4a2b-926c-9ed711458c7b", "indicator--8419ebc4-d163-4f87-8b42-0e915e1ab328", "indicator--39044dd0-897e-4659-825a-ca5879dcf092", "indicator--1f5c4d4e-ef62-4bf5-a0d1-a29fa8b74d2c", "indicator--12d16d22-a82b-493f-ba66-a2d42ecf82ee", "indicator--a3a9c710-9278-4192-beb2-24461d4c4aa5", "indicator--0366f4ef-bc78-46b7-8a12-b5559d84cbcd", "indicator--eff33a9e-e4ac-483f-bb58-e24142039eeb", "indicator--9749b079-c865-4cc8-aed8-8f158cdc47e4", "indicator--725a5882-6586-4f04-9f11-c3b1e18d139c", "indicator--c1cdef78-4fd7-49b7-a31e-a5e6d6ca4ed3", "indicator--85ef6e1b-1e10-4204-9f4a-f45b31dd0d84", "indicator--9064e6fb-1fbc-4da1-98d8-42fa29a5ddbc", "indicator--90a2c41c-03a2-4a01-9ee2-284d6af0298b", "indicator--6ccfdb19-1e50-441d-bb26-29560d442254", "indicator--caf2523c-eb87-47b7-b8a4-b967a1bc17e6", "indicator--26db7e38-be22-4c4c-9a84-217fb1c79a14", "indicator--85097348-42d5-46d8-8eff-db161054e32b", "indicator--169b5a31-3370-46ef-a9b4-f64d76995dad", "indicator--baa5265b-89c8-43f6-973f-59fe700cbb2e", "indicator--c25455ae-72b1-40e9-b8fe-202b26b2b601", "indicator--566d5c04-41ac-49f7-a038-8babee4ab685", "indicator--ee6e8c49-e55b-4cfb-ba4f-0318d0cdd31d", "indicator--c9926a60-f82a-4e6f-9b35-575436505e5d", "indicator--15694f7a-d865-4e95-a285-e79c34a6d217", "indicator--0ebd56b6-4066-4f1f-a3f4-a9e711502cb8", "indicator--fada68d9-ea0a-4745-bd94-3210787125c6", "indicator--b1cea9ae-e31e-4bd0-8e0a-970b498dc152", "indicator--e5166991-0399-43c8-a215-96c04d5e675c", "indicator--7f469ab7-8d7d-4567-aee6-28825cb0e338", "indicator--9da0fd90-33a3-4abd-bfe7-f2e6b913cf21", "indicator--aa55d805-29da-4669-a719-284f680b8248", "indicator--2951665e-cd5d-4b19-83e2-52e3edea562a", "indicator--9f91fa95-0aaf-4fe2-8281-a75304fe1261", "indicator--c4720d19-f5e8-44f4-b901-7b9ace3ced76", "indicator--6ee15fb7-5fc7-4360-9811-312858a4b42b", "indicator--87eba706-6541-49e3-9a5d-87557e2ac3e5", "indicator--7c496d7a-6a79-450e-8407-90db6f37cd38", "indicator--71cfdf01-f411-4991-9c3f-d14787712e41", "indicator--99004f19-fb36-47c8-9f6d-e09ae4a608eb", "indicator--18b832f0-7f9e-4658-8c37-f327b5319397", "indicator--0cbb0287-8408-45a5-9f89-48ce3ab104dc", "indicator--cb5170cc-5459-4dfe-827c-27bd7ba26f2a", "indicator--4a161ea3-b18d-444b-a839-8f195eabb43d", "indicator--26036638-8adb-4750-b677-1e5c66c9aaef", "indicator--5fe27a1f-546f-4535-ae76-1ce2ced869fc", "indicator--a1cbe035-4ef4-427b-85d8-e2c6ba93d3f7", "indicator--dc8bfaf8-2645-4567-af14-dad8a3624906", "indicator--2de7e2b8-c85f-42eb-981e-e08b9bd38109", "indicator--28dbce70-4be8-4f54-9548-1633d84e88d7", "indicator--33566ab1-7a76-44c8-b9a7-a54cb40f72da", "indicator--641978ef-7d1c-4060-abba-4d12ec38ebaf", "indicator--dd302b81-2eb8-4f26-ab0d-5fabfb72cefb", "indicator--ed7eb8f6-0c9a-4dd6-9eed-87efe8af295f", "indicator--2a7fedd8-1506-4bec-9c87-3ce8035a8a3d", "indicator--9505eda4-3abb-461c-850d-88ea5c79bdf2", "indicator--1051e67c-77d0-422d-b76b-3c1833b47991", "indicator--5f3af4e8-5579-42bd-b37e-9d14fc0ad745", "indicator--20f9660c-3f04-4a81-b8c3-548d219e7e2d", "indicator--d5183cb2-9eb2-4628-a41e-fcfe4826b5df", "indicator--5468acd5-6882-4954-9623-3f395e5aa70b", "indicator--33537df0-ef73-4acf-b0df-17fbc75d37bb", "indicator--5fc91470-2a70-443c-a0e0-3664b37c9c38", "indicator--fd46fe73-8547-459f-a719-f798554bbf20", "indicator--594bdea9-a08c-42f8-89a2-e2c3e7d8300c", "indicator--c82e48e0-0ef5-46fb-95c4-39876f25e7f0", "indicator--07a60d98-1a97-4b9b-8ef9-c964a2865069", "indicator--2db29443-88fe-45fc-b84c-0c9237c65d6f", "indicator--a9d900c7-1718-4cd9-908f-397059b93e3f", "indicator--0eb3250f-86d9-4596-8c31-a088acc007dd", "indicator--fe40591c-3643-42dd-8c02-2e8f7c9305f9", "indicator--c2922f32-67a3-47fc-b836-dc4ea1dfe163", "indicator--7c5b4f1e-c21b-42ee-8400-4d839fa414e7", "indicator--9240bb55-5667-4caa-b2c3-68dbef9d764e", "indicator--e45819ca-e330-4790-8566-502afaac6b22", "indicator--c4f625ea-d409-4f62-8706-41c4d1023d39", "indicator--52bd52e2-eed1-46a0-9172-d22c66c1c990", "indicator--ef8aa6b5-a312-4aa5-aa05-24c5863ee37a", "indicator--798098fb-3922-4c28-b0bb-497c8d2cd378", "indicator--94f55741-7585-4579-885d-1ab5b3f22557", "indicator--26c13e8b-daae-48ef-89a6-8ac493eb9253", "indicator--7ab71e7a-ba7f-457b-a74b-8f5016de466a", "indicator--1ea4f740-7d64-4733-8470-8f75f508d529", "indicator--e284e67a-b0b0-470c-889a-0e8e44821514", "indicator--f31cb243-67b7-44a4-81c6-752e91aad2f0", "indicator--3f0e098c-f65d-4f54-8add-22504e9f0901", "indicator--8d302117-8801-4b57-a0d0-a207029b2979", "indicator--a1014b69-cd54-405d-bbe0-fa2e30e19ecd", "indicator--c3193ec2-5f0e-4f2a-acfa-8d992542b246", "indicator--04b78d70-0525-4a63-958e-b16eddeb6e72", "indicator--6e2ee8ef-8b4d-4d37-a159-21574b7e21e4", "indicator--e92ecce8-cff6-44e9-9d3b-3ffc0b353020", "indicator--ae0dca31-c1ee-452d-baa1-9f43f11c7fbf", "indicator--7fc23728-a587-4d78-9b70-cab38b96e899", "indicator--baf6270a-1ee6-4d07-a1fa-27423e852014", "indicator--70f422f3-24c7-492a-bfb7-78d093274ebb", "indicator--7daef8da-0a02-4547-8372-478b411f8306", "indicator--fdc3088b-4592-43f5-920e-570a8bc1d81a", "indicator--f90c7baf-1817-4faf-b7eb-2358cce36e3d", "indicator--8316ef5b-cfaa-4a93-b4ba-81f1d7b906f6", "indicator--61b76def-c7a5-47d3-b16b-1be841e8e383", "indicator--771e11ca-2ed5-4846-881f-23a46b4a4011", "indicator--ddfe3fba-e1f1-467c-88bd-e4d4867b978e", "indicator--6a977ae6-fc6b-4d10-ab5d-910bbc041901", "indicator--255eebd7-2d8a-48b1-8b7e-1f11e9bcf8fb", "indicator--86fa81f1-05e3-41c0-b8ee-6a4a9c0bbd3d", "indicator--e8a6b8c2-2c17-46a1-9832-effff0b6a13a", "indicator--94d1520c-a58d-43e9-aa80-ee0b1f75dc44", "indicator--342b80c0-16f8-414c-930c-7d1b27d7f6d4", "indicator--ef7a78ba-1bb5-47af-ba51-5f90770052f1", "indicator--2f9849c6-644f-4b9e-8d79-278ed5b5a0a1", "indicator--1f7030db-1ec5-48cf-81d8-d32b745f5c45", "indicator--ac8d9e7f-7877-411b-89c8-119c10bc94d3", "indicator--8b114449-4f29-439c-8494-8bdedf256b9f", "indicator--bf994709-2b0d-4868-bd1e-ebcd4c7b6f83", "indicator--8cb4085f-860c-488c-9a9d-470e6de93cd3", "indicator--8b48cbb6-4afd-4724-9b44-a8f1c02f7668", "indicator--ccddc518-fa32-4c28-a988-e6f1f2f93584", "indicator--48120b64-12a0-4701-8181-ca8b4f483148", "indicator--6151f40f-8570-49c6-b280-0512c375e4f5", "indicator--3078e94b-32d5-431d-98cb-c786f3932844", "indicator--cd4f2c28-3dfc-4aaa-9447-22ecede9cf24", "indicator--0979d696-a530-4c9e-8090-deabf9ec3c4a", "indicator--42174022-6e8f-4570-9729-e929ba055d1a", "indicator--2de41d31-ed49-4898-a09d-ecc86aebad75", "indicator--a759da60-191a-4f0d-aa14-881a14fb7805", "indicator--3ca43318-7921-4c9f-9a48-ba8f4cfb2c3d", "indicator--da35300f-ae80-439e-bb9b-abef70b4f361", "indicator--7f9465ea-42ba-463e-81ed-a52365d449be", "indicator--be7ed167-7ae1-4c9e-a81c-4ce7760274bd", "indicator--2850205d-4326-41dc-9444-87989c1e64db", "indicator--3f0f8125-d372-434c-8771-28dc196469a3", "indicator--a9d560f1-f1a0-4c68-b428-d7fc3b143d15", "indicator--0a1d1eff-44ab-46ca-ab67-566c3bc96bca", "indicator--c2cefe0e-1495-4e39-b7d7-619c197981ed", "indicator--91cb0818-ca8e-4ebc-8d2f-deef9e70cf38", "indicator--378f81ce-44a1-4eb5-90d9-0038b2885f00", "indicator--b171e9a9-705e-447d-b890-3c989038781c", "indicator--13bba950-293f-4347-926b-b37549587bf6", "indicator--cc569e15-cdef-4c41-bb72-154a50988a45", "indicator--aa95f584-980e-451e-98ad-68fbd7d63dae", "indicator--b183e3cf-90fa-4aa0-b913-a0664ae6db2a", "indicator--7380ea6e-f1c6-48cf-bafc-08d58c8adfea", "indicator--f5c1fe21-d280-4a66-9a13-b3bdd9d912c2", "indicator--68dc6c9b-bb59-4937-88d5-2b6d1f6a8b23", "indicator--1e9359fc-28a9-4c7d-bae2-3663375b3332", "indicator--dde84c9d-1c69-46bf-b94e-bf5d78ba58e6", "indicator--eecd03d0-bf8b-45bc-aaf7-85f1109be115", "indicator--c8f0172e-fc69-40d9-bdee-2868a6910e7b", "indicator--2d4f5025-9dcf-4a0c-a2b2-19cc2b689958", "indicator--89d1fe86-937f-4089-916b-3b70dc11fa36", "indicator--108c40af-d556-43dd-8c18-a315a35ba83a", "indicator--a256af2e-1b8a-43dd-ab0f-67ebe7c52e07", "indicator--bd95bffb-bd63-423f-93b7-5db9e005a4bc", "indicator--29730f8f-0651-4fac-bdf1-bf1e64ceb349", "indicator--9878ae39-3c5f-408d-acb7-a221e7a0e072", "indicator--6b6ea62f-bed4-454e-a692-f3b42283d97d", "indicator--2edd3eab-25de-4107-ac1e-d5e67a67db3d", "indicator--82e91bb2-8693-4795-915a-3732d140d9d4", "indicator--ee84863a-2e8e-4b43-97a7-c955be6a7d8d", "indicator--b9041aba-af8f-4ab0-8197-6f00c2ee297d", "indicator--2bcac746-1f95-4ca9-b7f5-399c1a2595ca", "indicator--4795903f-d688-4497-a82b-7d26a8ef81b6", "indicator--67e61d14-66d9-41f0-bf3e-36ceb6a5827d", "indicator--ab425492-679d-489d-8ef4-74950019e2f5", "indicator--611809ce-26f5-4be8-80a5-3e811fdf2355", "indicator--f856923d-6265-444d-9a76-c6f4d32a5b32", "indicator--a1c4bd7f-b132-4016-a434-7018300fe031", "indicator--348e8437-475f-4810-8f9e-f582cdf55dbe", "indicator--cd9b4421-c4b9-47af-b41c-72f1002461ce", "indicator--a4276b32-ece5-4e17-8119-921411d37215", "indicator--37c3eb21-8997-4c0a-92d8-d2b9d4698cbd", "indicator--149b6bc5-716c-4e64-8c8d-c00c57f6c12c", "indicator--855a04df-8d43-44ab-80fa-402d79e4ec18", "indicator--206afcf0-a444-42b3-9867-a2fc6e7d5cb9", "indicator--6526dfcc-a4bc-441e-af4b-f064dcb653a1", "indicator--0aab0e38-678b-45c5-82ad-0610dae3eae3", "indicator--b69550ea-a54d-4190-8163-9d08febbfb51", "indicator--9679ff6c-2178-427f-951d-b36992384b35", "indicator--83ee90cb-2dda-460b-a556-c46b15a08678", "indicator--4fbb6a08-579b-447a-b71e-e8df76e1ae95", "indicator--d874191c-b8d4-4185-b880-9f5ac5afc02a", "indicator--53d1afba-e913-4bfc-8081-14f7b87d72c1", "indicator--ef5bcd63-5d49-485d-8333-947d0e9391dc", "indicator--4b1b7aaf-0adf-4d23-8a71-43b6c1e701e6", "indicator--39d1fe8b-fc84-43e2-b11d-cbdd3583e408", "indicator--f8999ec3-1f93-4887-9d7f-7cd691215ee6", "indicator--c881fa67-feb5-4c4d-8b1d-e52b637eb38f", "indicator--bde6a49c-48d6-4870-89df-5c1894506e8d", "indicator--74259e7d-28b6-4617-b7a7-4ac61ba35bf2", "indicator--9a65cb28-0f03-4b3f-bc2f-a3e513b79e2e", "indicator--9a7bb27f-68b3-468e-b59a-727a3ae4f5d2", "indicator--5adb0880-85c8-412e-bfa6-95659b9cb2e9", "indicator--f94bef55-53ef-4c7a-844a-d8d7f4b72cc5", "indicator--c5574b32-d3ea-4bab-89b0-788b33e7200f", "indicator--169105f5-ac66-41f5-b76d-3de70c26991b", "indicator--77c5edb3-ca21-48c0-bd54-6c9ff9a5a219", "indicator--b61351c1-093c-4587-bcdf-d326ddd70d7a", "indicator--4349cd08-cf8e-48b3-a26c-020f8a7050ea", "indicator--e0ff8bf8-9a41-4489-9c1d-aada63292dae", "indicator--dd7bf80e-25b6-408f-a55b-5ec1393ad7a3", "indicator--cb33a25a-1c3c-402b-bec0-85ba1ea91ad8", "indicator--b34b6304-9ca4-4d9e-a1fb-8f1554131af7", "indicator--dbe8ccba-2d79-4f2e-851b-4809c10d7dfc", "indicator--3d120983-6386-46a6-83a5-2d0b9e3f0002", "indicator--2396102f-9fa7-4460-8bf0-53dfff2548b9", "indicator--93574ea9-3742-468d-bbd5-f1d99b3f5e3a", "indicator--fe928c05-ac6e-41d5-a624-f9fa3d53246f", "indicator--a2464ce2-b7b8-41fc-81a2-8f1bf3a349ac", "indicator--d8e6ddf5-8d80-4d38-9900-f2c2aa3e5e1c", "indicator--b5981627-a652-43b0-a0a7-e9254e2c68d6", "indicator--21da97f7-a62f-4f17-b7fa-1004a1a54e9b", "indicator--fae24fbb-027c-4905-8c14-4f6cba7c5c4d", "indicator--6ed842eb-a41a-4885-8535-aa1b00fa415a", "indicator--9db75ca3-9225-4cce-9701-50c3fcbd23ed", "indicator--39da4f28-6b3e-4b7d-a65a-aefd5fd1a48e", "indicator--04f2a724-a41c-4cd3-a65e-8d0f481cc8d0", "indicator--1fbc6041-3cd9-471a-a884-1184d8d752b3", "indicator--9e97f103-bbaa-470f-92fd-01289d716642", "indicator--e8393bef-9511-4aa4-b2cd-d1dd48fc4c36", "indicator--72adf55a-aec0-4093-83dd-c27588d736fd", "indicator--991f7d3d-68ed-4d4e-bfd5-89cf1d8bf525", "indicator--1f143155-273e-40a5-b6b1-2bdc3f74d242", "indicator--f7c00a9f-c0c0-4fee-b6c2-f7e7f50b15bc", "indicator--e6e46697-c7fa-484b-9967-197fa8bda457", "indicator--e966e945-87fe-4ad3-9f24-14a74d38964f", "indicator--0d550c09-9fde-4729-941f-abb095bef281", "indicator--de398b29-ee2a-418d-8af1-eded642a7306", "indicator--525653ae-ca94-4b52-a509-5ea56a288eea", "indicator--3e972cde-105e-4471-8702-d53206af0f75", "indicator--0e2ff0a9-a593-49e7-93f5-b720944c812c", "indicator--21ad78ff-1bf4-46c8-b3f0-318be9d9ebc2", "indicator--b8e06386-fdbc-4a68-8b0e-d3d71c506995", "indicator--e801ed62-4a6f-421b-bc96-3a2277e13ed7", "indicator--7575e60b-4b90-47d2-a0cb-ed954f601e30", "indicator--25ab0fed-1349-441b-81f5-00e04591f3f0", "indicator--a37272e3-e086-494e-a468-9895a95f7377", "indicator--c2924432-8d1a-435f-a855-6ca16d430f86", "indicator--c0c8f278-f170-4c7f-86f6-43255a100151", "indicator--d5c5ac95-da30-416d-885e-5d4b5c089640", "indicator--23eb59f5-09e1-4734-b107-d69e3cb383c5", "indicator--46286a37-92a9-479f-b04c-3db31060eec8", "indicator--b97ae90d-d999-4b76-bc56-0dde4dff8afe", "indicator--072691d2-85eb-4242-90c7-c212b4fde79d", "indicator--9644c833-300a-48f3-965a-7c0fa1b5c5a6", "indicator--8df03439-6621-4694-b6d7-40aa12c94de2", "indicator--1f19cbf6-2a78-4e03-b682-cc334b3beb42", "indicator--19782490-ad7b-4149-b81e-8bb84c0d9575", "indicator--cba76dee-8df6-4586-9121-7b7b14391235", "indicator--75e76eae-7849-4587-b312-8c9b8f00bd3e", "indicator--5eca8ecc-067d-4704-b0f7-fe744587ca47", "indicator--d9ed61e8-613e-4c2a-90dc-8544c3f244c3", "indicator--18eb6fd0-181b-4715-98c5-ed0812f99c5d", "indicator--cfd2d2ba-2cfb-4c93-81f3-0390505928f8", "indicator--6c31a731-c6aa-402d-b76b-1b38b515c863", "indicator--cb4e81c7-3a26-4fac-b922-eb1e2a505eb5", "indicator--c06cc833-4e1b-420b-9e85-092a2b9730b2", "indicator--978c7ab0-2887-4cb3-a86a-c6c9258b5d47", "indicator--43b6256a-0e99-4d63-a538-1047c5a9d429", "indicator--737c6850-fbd7-4734-870e-6fc5fb704846", "indicator--2e06522b-deb5-4754-ad68-8714f274112c", "indicator--7448ab85-feb2-4c2a-b309-2d61893e19c4", "indicator--64cd8789-f370-4adc-a9a8-228f858595e3", "indicator--10d1e3ea-6381-45be-b32a-69ecd6569456", "indicator--8ab9d04f-5b23-4025-8b19-4bba73671591", "indicator--9c66f687-617c-4631-9aaf-b1dd343bf575", "indicator--a545bc6f-0314-4868-ba05-d64bf4f25658", "indicator--f7d40857-23b1-492f-8588-05f29262e45a", "indicator--c2427ac2-3b49-4eb9-8cf3-584c552576ff", "indicator--4e1871ae-7619-4e44-997e-8243e3db7924", "indicator--5da97779-12df-432a-a3ac-db818aa82111", "indicator--f5aca453-955d-41f0-b904-b8b0cc9fd336", "indicator--7482ba22-8a84-4627-bae9-95589d7a6831", "indicator--146e1e5c-c3af-4a62-acbd-ee56a84fbf51", "indicator--37114761-56c6-44d1-a8b1-7f5bcce03efd", "indicator--3bbb91f6-077d-414f-a93a-aba860da0669", "indicator--968b6ddf-f569-45d9-a739-0f93735ea9be", "indicator--4cddbfab-d29b-499f-bf17-942cc1f57a8c", "indicator--eeb75daa-cad1-4067-96ed-524b94803d9c", "indicator--9840bb50-aafd-43f7-8247-862c60ab85ea", "indicator--841f50cc-3437-4d9a-91c1-484aec947b73", "indicator--115630b0-d043-40f9-8f86-630641008bd5", "indicator--a96bafc6-57a3-4dc5-8708-58df71a7c728", "indicator--e232120e-8029-4378-8760-cf20c921360a", "indicator--0c7c1d35-c697-439c-a15b-78cccb893cb9", "indicator--e0e39a78-b33c-46f3-93b3-d5e87137e03e", "indicator--fcb7bb9b-6256-4e12-abbb-11fcac766f37", "indicator--470c7109-0304-4485-be08-d647f4526443", "indicator--11750d83-1537-4754-91b1-06420d4acf28", "indicator--d032c5d3-be42-48ab-8fe1-584bc68d8e22", "indicator--45ea64f7-7e35-439c-b191-c3f21fdb3e6e", "indicator--094545a3-7d00-4f63-bd7a-2d3ca17c0ebf", "indicator--35caa92b-44ff-4235-ae5b-e7b800e88e89", "indicator--db47313d-d7d0-4624-b645-7252aef3cc6c", "indicator--dda03fa4-2139-4907-99dd-1c4469d348a6", "indicator--0693e558-4b6d-4c2a-b2ea-7bbff5afda51", "indicator--6fab758c-ce47-48c0-a718-d3fe973e8f8b", "indicator--5a753d69-4cee-4fe3-afce-a2ba3b60df3b", "indicator--d9a501f2-1546-4bef-b2fb-2cbeb4d81a3d", "indicator--936c9be7-fc7c-4572-beb2-b4b14c6954e0", "indicator--5fe2876c-e03f-45e8-8e65-7d9bf33b5a9d", "indicator--57952fbc-6902-4493-b25d-780d6c12a51a", "indicator--e642e811-a550-4dea-b984-acf2c8bfe710", "indicator--c9153a20-44e8-4c6a-ade5-5718592e9ac0", "indicator--57f963d4-8bfd-4829-ab3a-05d80c78f396", "indicator--605270fa-97d5-419b-8bb3-a9360dab643e", "indicator--a4cc4234-27be-43a3-a263-a55d104b5651", "indicator--63f5d931-ceab-4d2f-8af8-c209c012daf1", "indicator--eb413138-d3bc-45ba-bfe1-7b085b40068a", "indicator--941aa49b-bfd3-4679-b4a9-6915fbd67a21", "indicator--214ba8a3-a3eb-4aca-accd-6354bc559b85", "indicator--3ed2e55c-0faf-4e9e-96cb-a51d2ee139b7", "indicator--749db61f-4f4c-4cfe-96cc-13c21122254c", "indicator--e74cbdce-12cc-433e-a36f-c5ac1482e00a", "indicator--47786e10-1d8b-473b-bd3b-e99e20c24fa8", "indicator--70c399ab-49bc-4446-966d-3f9ded036800", "indicator--e4f5c266-148c-4d4e-9908-00c132892851", "indicator--bad2aa97-e2b8-40a3-b2f7-3f1c8904917a", "indicator--4e258079-8d5e-4cec-9a81-f686dfd28e2b", "indicator--41c3f262-f5dd-448b-88db-fdc7ae2e8910", "indicator--24774b6e-6fc0-486e-9a8f-87306f4af92a", "indicator--55451822-d51f-49ac-8857-a87f75c493a5", "indicator--845611a6-cd52-4064-aab3-5b883b8c1a3d", "indicator--fde35fa0-8581-4b9c-a40d-718b1ef7374a", "indicator--da0b2afd-18bb-4bc1-af6b-4940797962ff", "indicator--724a168a-e62a-4a6c-87c6-066aac947457", "indicator--59798214-eb7d-4b36-b7d9-61c075fcbb7f", "indicator--8eb7bd81-f8a3-4638-864b-4c9c25cf363e", "indicator--df9d59d9-5f8b-417b-8a87-a12243af659b", "indicator--2b406448-ccbd-4a2a-96d8-9686be909172", "indicator--79cf1f51-6eed-4113-aff4-f214cee0c12d", "indicator--e29de16e-094a-4136-847f-aeca96ad9f25", "indicator--bc5c9d19-c0b5-4900-920d-92b067cfa5e6", "indicator--82d66fac-b98c-4c91-88cd-604c4275eda1", "indicator--93ab7bf0-8ac6-4dde-bed6-789d3c9a1db2", "indicator--a77fcd7b-b885-4f91-9100-c1a4b66c644e", "indicator--6ec299d6-0c37-4e51-b222-b1e9769fe6d5", "indicator--0390d395-30f5-4893-a89f-03b04711a6cf", "indicator--6f033dd6-eb8b-4569-876e-5f7ea084936c", "indicator--4d733919-1b43-4282-a9a5-410e7a0e2a64", "indicator--0538bbff-6043-45d7-bff7-ad4edc94b9ed", "indicator--90bc0cd8-4e2c-4a46-af73-ed459e363957", "indicator--4ac1b2c5-b103-44a1-b1f5-a9d04715f23b", "indicator--e140f8f2-a3c5-4988-8cf7-e2449c413768", "indicator--c5627960-e017-4b7d-a3cb-c928b818c4d5", "indicator--08df3c10-575a-4b0e-b4f4-bed333a6506d", "indicator--25359677-0db6-4e11-8d92-a3fe3603b3ce", "indicator--0eb1292e-f171-4b43-bb75-d8918e553571", "indicator--1de79b32-6f7c-4713-88e4-4182c91ba6ba", "indicator--528c5715-7d1f-46ca-aefd-1b56d6b7d4f0", "indicator--c278db0b-ec52-4f86-9cbd-e164edefa7b7", "indicator--e6600d7f-9e8e-45b2-93f1-b135c305d933", "indicator--79c9aae6-0db9-4289-b944-55134717a53f", "indicator--1dde1deb-1f6b-47d0-8c96-3dde6e1e65de", "indicator--5b2ed40d-830b-433d-bb2b-b7dc3f6a91f7", "indicator--8e29751d-607b-4ba6-9b94-5365bd9a235a", "indicator--2e1d769a-4616-40a0-9a4d-a24c4c7d6a85", "indicator--184dc6fd-c3d0-4e39-8bfd-a51190a9d6fc", "indicator--bf40ac77-7abb-404b-af91-2731f86e99cc", "indicator--509d6ad4-04f9-4f4e-b841-0b86c300b6bc", "indicator--bd447b3d-5870-48f9-8196-ea60febdc316", "indicator--2bb85c27-317a-447d-9ec4-28e1a9ededfe", "indicator--c71c3b59-afa5-4750-b514-5759cd1ac6c6", "indicator--1367039a-1990-422e-991f-7738af45d64c", "indicator--7aa8c341-7567-413f-afaf-812f4b884a37", "indicator--71eab8c9-0f2c-4281-913f-6bdf023da59b", "indicator--1261837f-3ddf-4b69-975b-77372401880f", "indicator--3d410eba-448e-4922-94f7-3f1d1738d6d6", "indicator--d6ad92e4-a638-4c89-b3e1-d4e05df57643", "indicator--bb69d6c9-5cfb-4191-993f-427f443f62a0", "indicator--9db76d96-f411-4543-bf51-29b1950a8f60", "indicator--c2aa0e4c-709a-479c-b636-b89d12ea562c", "indicator--7f0e5839-b9ed-4aba-b707-f5f2ff7968f6", "indicator--fb4445aa-6d5b-4ebc-a4df-9691fca53b7a", "indicator--8794e331-b70e-4e07-a4fc-c437fc208fd7", "indicator--2454d950-1c55-4338-925b-41a294ff9519", "indicator--352d7fe0-09fd-4534-b2ad-f09de0378efd", "indicator--57acb370-f498-4e56-a612-fdd2a6540ae7", "indicator--cf7ad773-1a8f-42a2-9a18-255c1f9a0f6c", "indicator--14f455e9-8bf9-4f7d-a1fd-7adfe13c3d98", "indicator--fb84b138-4576-4935-a39e-c7d60cc69343", "indicator--b85458e3-22aa-47bf-bbd8-bb867681d5dc", "indicator--943f807f-82e1-45e2-8e98-79d85d4e55c8", "indicator--446b5a51-bd95-4d7a-9a02-e5984a1f08bc", "indicator--bf680739-fbbf-4439-846e-ff2629018bd8", "indicator--8f3e3010-1886-4264-bd1b-0a27d4304dbe", "indicator--546ac15b-2055-4da4-8491-ba56814cc332", "indicator--00af0ac9-9bc4-4068-b9bf-813b48cccb23", "indicator--d5a57340-e393-45cd-93de-2821f33210c0", "indicator--76d3152d-cc91-4c84-af7b-26e949375f08", "indicator--95b91bf5-6966-47e6-9fe6-84fd64912124", "indicator--75508485-c14d-4d97-8e37-29b672320bf3", "indicator--f5739add-7b79-4ec9-823f-05647b358471", "indicator--88a97cc6-2630-4d69-afa2-7289dbbbd04f", "indicator--da4a3efd-4f20-498f-8e7d-88f392003367", "indicator--d6033b1c-5397-44d6-a664-b6fdd682f33a", "indicator--5d4e2c30-57ee-4768-a1bc-1348b1177152", "indicator--3dca413a-5d4c-4de3-a468-f9394807162e", "indicator--bdd7d66e-9bc6-4f13-955b-850c8796f088", "indicator--29b1b111-0fb1-491c-8eb7-6fafd7599f8e", "indicator--5ac50525-fa47-481a-869a-74b2088dde57", "indicator--9d220100-0494-417c-a87e-d7ae02059257", "indicator--09f72b9f-0c76-4422-abf6-c96c2fdfb98a", "indicator--ab946d9b-7b25-4754-bc7b-4309e10c06de", "indicator--9fb3a3de-ff33-4cfa-a7ff-e062038e1813", "indicator--d4c914c8-2474-4c28-87c7-a0a72830e1c0", "indicator--7a4fa04f-a671-4b22-afe3-9b43638b112b", "indicator--d54f3f7a-38a1-4088-8b84-d86d626b36cd", "indicator--ea6d1156-bfb8-45ee-a808-6562d02e8274", "indicator--776de050-8482-486e-94a4-6efc3113f7d9", "indicator--6aad87a6-d3a2-46b9-9faa-4dfcffb5b312", "indicator--cdf31096-e57a-499d-8e7c-d46f506325b6", "indicator--f57fc3c0-606c-4a74-9131-5bc3225f6801", "indicator--eca4ed3c-9ba2-44c6-adbd-a219dbe07ac7", "indicator--cd59afe8-0106-45f8-b62f-fd302bdecfa5", "indicator--e80bb2f0-1eb6-47ec-aa78-e134d38da045", "indicator--4f11ebbb-2f57-48b3-8e6b-47b1b8353c87", "indicator--dab4ae5c-44c4-48e2-b5fc-a9c719a989a1", "indicator--a6b875df-e4e0-4b91-a788-2ea049047dc3", "indicator--ccf71fec-9248-4418-8d32-ea0375f96eb1", "indicator--08d77d91-6256-4dc1-b4dc-47b1dc9a6d5c", "indicator--a5c1b77c-2aa0-45d3-aa70-6ad9eca4dbe4", "indicator--5727a357-f782-446f-b72f-71de4e5c4d68", "indicator--c70d1900-a08f-432f-8af9-afd3ff96a107", "indicator--a1ce5809-b05e-42d7-9f34-1728542630cc", "indicator--df17f6d1-ff4b-4fc2-80a2-619ba91ae4f2", "indicator--33451b59-898e-46c8-afe9-8e9bea9d1dd0", "indicator--bfc366c5-1cd6-418a-a4ee-c21f2c306781", "indicator--59f7cd5c-2b5b-438f-bd71-e8f7af3933bc", "indicator--491454df-08f8-4b15-8c72-f9c1f3094b8f", "indicator--e5189b39-bed1-45b5-a2eb-c3af00309309", "indicator--3148b5cd-bac5-45f9-9296-01828be63d55", "indicator--7fc593df-dbdf-458e-a2ae-1bbb40ea0830", "indicator--a246c5ad-b2d2-4b67-a8e5-e126c47908b8", "indicator--042cb9ac-5e35-43b3-8aa4-1dd66f3ec495", "indicator--2ac594fc-cf3e-4808-9e1c-c52a234c52e7", "indicator--a45cc916-9279-40ed-baae-c1be9de79277", "indicator--c1e41d5c-37f3-4d3f-baf6-0099333e390d", "indicator--5940647b-30df-46d4-bd48-29a16a286938", "indicator--1a4d658e-8d45-4a4e-a27b-5c014aacfe41", "indicator--d489cdb1-2082-4e25-97f7-da1dd23f683c", "indicator--3a0eb647-43c9-4ea8-936a-eef8fed5bd9b", "indicator--358c5d7f-2816-4801-a51f-5cac8a361864", "indicator--e8bc20ea-5dcf-4e9d-98c0-647251a0b903", "indicator--2c090ade-1526-4f66-a4b7-651c0b2ee439", "indicator--68279271-62c4-49e3-95f7-200fc52d397f", "indicator--2a1f0131-0414-46be-9e62-216be1332005", "indicator--269e8d97-e294-4fba-bc94-71385cdea26c", "indicator--69c4a0ca-d2d8-4f79-9cbf-815aa7f8c171", "indicator--29cdc126-f577-467d-a040-c6065f2e8393", "indicator--9240d12b-a221-4b86-950d-90830ed55707", "indicator--ae7f3652-0b09-47bc-af28-74f3ce275bbe", "indicator--4551c5a1-06a7-436d-ba88-afef446314ef", "indicator--8fed1a60-52d3-4ecd-9737-007be0ca3dbd", "indicator--7695cc05-c15d-4c50-a6e8-a43217235e3e", "indicator--e4cb8e64-a49b-47d8-a1d9-4c0e9ef57ce5", "indicator--b4e483a5-f8e5-4431-adad-92fe7461d20d", "indicator--d2d94cf3-39f6-442e-9a6a-a721db0a547c", "indicator--a298be0f-68ab-40d1-8a9d-2773b204bce2", "indicator--181af18d-8ecb-4152-bf29-4015ed858ad5", "indicator--e150bb57-ef97-4859-9473-8201ca2faf6f", "indicator--5fb8ab26-b027-4d5c-b4dd-68673a6b2819", "indicator--7b078cc4-886b-461f-aeb7-0e428aa13811", "indicator--89c0d677-4854-4bda-a776-6a5b04da23b6", "indicator--192de271-c46a-43d5-9f51-5c51877b5219", "indicator--439838af-3980-4a67-a2f2-185ac55fee92", "indicator--19e8648f-dc26-4865-9988-ec45101e5186", "indicator--c1bd94aa-c3e5-4b89-8308-8a87abbd0a69", "indicator--a1810a57-27eb-426b-8d95-61ad78313ef8", "indicator--6366f72d-9531-46fe-ade6-26cb5bb1ccbb", "indicator--1a86f678-4531-456a-bf69-fa53c7d1fac9", "indicator--419dbbc5-ac3a-4721-8771-571ec91207a0", "indicator--5ffb4ec1-60cf-4f53-b18f-624869ec2696", "indicator--f0e3bd0f-2fea-4726-b9c9-7f829f9315a1", "indicator--9b4b2c29-2358-4c0b-acfb-7b45fe3e7a93", "indicator--68588665-47fe-4fc6-95e6-96c154dd287c", "indicator--da5aceaa-98ef-4049-86a8-c1244bb33e79", "indicator--4569829d-dfed-4b88-91c1-cb1e4d4a1633", "indicator--4fbf1b65-dffb-41e6-b5b1-28cdfee42cf8", "indicator--4434c416-9063-4761-bebc-4c8c24a2ba26", "indicator--76372bf2-576b-4dbb-8c1a-7c038b73dd05", "indicator--36624068-27f2-4f96-85f6-7e0ed81cbc3c", "indicator--c663056e-a27d-46a6-a5ba-3079d6c77a20", "indicator--92830a9f-4a1b-4af3-b4bf-f409a02c71d3", "indicator--69aad3d8-cd9e-49df-818a-f1259fcfdea5", "indicator--038f1ae9-a16f-4e6b-8b38-7b1eeb184508", "indicator--287e2492-6c4d-4410-8ae5-ffc0f3ec38a5", "indicator--5f7a01c4-3683-42b2-bb5e-012d952374ae", "indicator--4d9674c3-13a7-464b-b2a5-85a30ef8e5b8", "indicator--a837f620-6d83-4c8f-9414-f90f527b2017", "indicator--b3cfb4f0-df6a-4bcf-a047-3c701d44a0c6", "indicator--092d9623-3593-4f08-be16-b6b83482eb72", "indicator--227e4090-bfe7-47d4-a85b-7979cd32e859", "indicator--f53ca163-5818-43d2-8dd4-c0f9b1ac24ee", "indicator--8e092f69-5c33-4f99-97b4-3795126f0f15", "indicator--91228517-c8f7-4e36-b51f-97ceab77901e", "indicator--32c768f9-2dd9-439d-9daa-df735208a71d", "indicator--cd802907-9b19-46a6-ba49-95637504ef88", "indicator--19c98fae-d59a-420e-8061-e437a55f944b", "indicator--45aebf4f-77e5-4ade-9c83-282ab2b121d1", "indicator--69df50de-3220-464d-b5cb-f266e1e4ff54", "indicator--d0dd4e4c-de5b-4fce-9293-47eb34c889ec", "indicator--2e26b762-7943-46e5-b333-c4a60497ee01", "indicator--9a1c4b20-a552-450d-8201-4de1a0b018a2", "indicator--ae7269d8-b56c-4336-afbb-1fa8d7478a78", "indicator--d559905e-25dc-4d93-a52f-106572213a9e", "indicator--e741286b-7abb-481b-aea3-ee50d51ee117", "indicator--ffbc231d-1070-4411-a0e3-0713d281f37e", "indicator--46f200e5-e6fb-4bc8-9ac5-9c4788e1219f", "indicator--e7fcbae1-a1a6-4c05-b3d0-f39d6662d994", "indicator--b6f672e7-8ae0-4305-b624-2a15e9b11e24", "indicator--642cccf6-8975-4b4b-8fc9-8661b1aaa1e9", "indicator--64871ef4-f1e8-4f17-986d-6fb7d9313583", "indicator--d9b61eb0-4fec-4d05-9a92-50d653dcd1e7", "indicator--45e8ab56-eef5-4084-8886-2b77879faad9", "indicator--29376f2d-0351-41ac-8f16-e48f8f63bf4a", "indicator--29c769f3-e83c-466c-9836-ef3bd66ebee3", "indicator--0d2e9b32-9e9e-44d1-9895-620f009166d0", "indicator--d115523b-ddb5-4e1a-bb9c-fd1a25f38c25", "indicator--4e43374f-3b25-4f63-9e80-2fb650c27806", "indicator--2f1602d1-9bcc-4991-ae13-0bfe119d2cd1", "indicator--4fa52943-21c3-4c22-8ec2-224788a468ab", "indicator--f71a6a03-baa6-4f1b-bd3e-fa93bcf7b995", "indicator--feb11e1b-ccce-4a3b-b9d5-bc5eb001f599", "indicator--ea434bc9-367c-4f7b-9c8a-8080a56937e4", "indicator--befd078c-f7b2-475d-970e-48b5b9a4e267", "indicator--16cdbfd3-214b-48cd-8406-692155528eda", "indicator--837bcb4e-1c01-46c0-9f1b-5351456cccef", "indicator--b3d56fa9-49bd-412e-a809-516459ac8b54", "indicator--c3284211-be10-4e4d-aecd-fc703bbed3d0", "indicator--c520d43b-a065-4ad5-8238-79d648dc2b63", "indicator--25fc244a-bc40-4b80-abb3-2dae2014be35", "indicator--9e4eaab5-76d2-4cfe-ab90-973929b6460d", "indicator--3edbc109-0618-4bef-9751-e7c9c1b8c86b", "indicator--350777f8-6234-4fac-bcea-bd497fe2b346", "indicator--a0f1b263-e325-4e54-89b5-0100e69b34d3", "indicator--ff85364e-2980-4741-899d-6016107a169e", "indicator--f5f3e474-0bb1-4adc-a826-a252f57fb020", "indicator--2b38a442-eb46-41c3-ab60-19714477e166", "indicator--52fbb87e-522e-45a6-a30e-c1e9eb41ba80", "indicator--03d0f61d-fa4f-4c99-a3fb-f8cc00e690f4", "indicator--82977eca-7327-4999-b15e-44607f62ba86", "indicator--6b076c42-eb8e-4bda-8652-fdd0812c1a8d", "indicator--0f116138-f340-4783-8ad9-71155e02f449", "indicator--ce86d876-3941-4e1b-925b-6cb9e3503caa", "indicator--f537c090-7c06-431b-bffb-f1a6c668173e", "indicator--0768bf4d-f50b-47fb-b1d5-ced3252e93c5", "indicator--99080aa4-f113-460d-85ea-49a1623bb637", "indicator--414f3a9a-9fe2-49a9-a964-d5cd427b7912", "indicator--d5377fc5-b5cf-4a4c-bf99-0db3c055b943", "indicator--b83ef2d4-b9d3-4846-b7c9-bbd7dace018d", "indicator--43102241-b575-4d95-9a23-09ecc8407b47", "indicator--228c11d6-61a9-4dcc-afc5-a1c33f95618a", "indicator--fe49be6b-4b98-4b2c-b0f5-d036c0822765", "indicator--5a60e369-9bf6-40ae-9f0a-0b29a0c5870a", "indicator--cc86f048-4165-4b7c-bace-06b066d9c489", "indicator--331f92d1-d465-4ffb-98d2-d05c0a4a7129", "indicator--eabf2ca4-7f84-46b4-a847-89909acb95ec", "indicator--560c6701-5889-45eb-b5d9-22651702fb0e", "indicator--3be0ecc0-2f16-48cd-8e5d-1b2aaf31682b", "indicator--ed182301-09eb-4f40-a24a-eedc51592494", "indicator--c65cbf23-e9e0-4a97-802c-66be524b6622", "indicator--f06fded1-2273-4ab3-90bc-ec4ba2dd7d08", "indicator--4191a849-a459-4a29-ae0b-8d1dba460ae5", "indicator--c26c6cf6-b7b8-4b02-b46e-e7d49a57a90b", "indicator--574a3d10-d961-4984-bfa7-91afda10d511", "indicator--a41b17ed-dc25-40e5-8771-aab0ba4afbc9", "indicator--08003996-b020-4da0-b99b-59611f1ad046", "indicator--f3cf0a26-3209-4baf-9200-1cda96ceb163", "indicator--9fa674d7-36db-46ea-8280-9eb042f00379", "indicator--c8836252-9851-4733-bc57-4f55e963c128", "indicator--4c0de670-a264-4c83-b942-c1ea750d6330", "indicator--9626c040-e232-4f36-8ead-8ba5ec4878a8", "indicator--a32b0f0a-d3c3-4d71-8d87-fcd6af9c1efd", "indicator--81469473-05db-438b-8e6e-0e3d1d0bc9be", "indicator--38921fdb-5db6-4daf-9ce7-903cf7ff2c23", "indicator--f07dfeb0-5f03-41b0-bd80-dad73cd1c306", "indicator--24d824c9-667b-4e1e-84c1-daff73600f50", "indicator--4ef92dff-1678-4d51-a5e5-269d9438ee7c", "indicator--bb63cab4-42d6-44e7-8260-ac52113dae8d", "indicator--e45b8cc8-1210-475a-b456-c3189f553ae2", "indicator--d5941efb-2a44-4e06-8846-4d17a3575309", "indicator--c0baaf44-e73c-49a3-ac44-55a59b9476ed", "indicator--3461811d-961b-4d66-9c20-043f6003f1f2", "indicator--1418ce11-82a4-4ad3-90ca-f3facba4556e", "indicator--e4d579ed-c44e-4de0-94ee-20509baafbcd", "indicator--7e5f64ae-d757-477c-b1cf-92b2179b51fe", "indicator--b40ab264-6eba-4583-b763-85ed21f4af10", "indicator--41aec433-f8ed-4808-b993-3a750b35e82c", "indicator--190b98bc-1035-4946-a298-3fdf702a10c9", "indicator--25bf3a34-2f79-4710-852f-dc3f7480c90f", "indicator--1f022f72-524f-4642-9a9e-82c664c9c5da", "indicator--5a649229-132a-494d-a003-eb466c3cded3", "indicator--2185361a-56b9-45cb-83b7-af0c66e9c8c3", "indicator--3f37d8c9-166f-4a81-807a-506ac8819767", "indicator--1890deb7-751e-451c-9938-fc0629e1025f", "indicator--0a1f9938-fdf3-43b5-9590-76b96994d04b", "indicator--b797ded0-afe5-4360-9a7d-c8eb32697205", "indicator--bbe506a0-d043-4ff7-acfd-fe5ea470799d", "indicator--81d42ab0-07e2-4719-909e-32bb9f57afef", "indicator--9ed04e14-95fe-4132-b9a6-336ef7b8d34f", "indicator--51dc9bfd-3c0c-4b39-9def-d10d0f7e086f", "indicator--326ffc43-5ba1-4af3-b86b-5e4c14df0a84", "indicator--9e5748fb-e2b9-42ad-9793-cd6938a58ef2", "indicator--cf0a1423-d9d3-4afd-ac49-7e44039a0206", "indicator--6d5c9e12-dec1-4a35-b520-8231681e6261", "indicator--f53fbdf1-9b92-411d-b3c0-df773a684d67", "indicator--55e68fcc-fa40-4722-b6ab-50ca960a243a", "indicator--3e666e29-8d66-416a-9b58-56c3e9b1f319", "indicator--da834ef1-b8c6-49c4-8201-7b295ddd433f", "indicator--928a7da5-e2a9-4c06-af97-ccb14c90cdcd", "indicator--1ef075aa-d4dd-453c-873a-c45e097e5738", "indicator--8dc9348f-2144-48bf-8b4f-6a1c6920d2be", "indicator--91e0184a-cb4d-4f0c-b688-a782d5123bcb", "indicator--1af0f21f-6e68-45ef-b094-0532e1397340", "indicator--42db2139-5a03-4d8f-8517-5602d25a8073", "indicator--e32fa8df-4af7-40da-8811-548e21a993db", "indicator--89674988-809e-4d37-ba5d-30f3b797743c", "indicator--de9ff8bf-5970-4e38-aa15-f39865183152", "indicator--61041526-1b89-47e8-8db8-7d320fc81ef3", "indicator--4e037366-df80-41ed-82dd-e01409bdc6e5", "indicator--7c826a81-38f1-4606-912d-18b60e147341", "indicator--f0ec6245-0f2f-4e3c-bdcd-ee5c82b5688b", "indicator--6b9291d8-0a0a-4353-b964-fc7ad7cd1342", "indicator--8ab5a0d7-9900-4db1-b96a-715503e9e6fe", "indicator--ef56dfa0-b4d0-41ca-a9d3-ed2ad33d7b45", "indicator--3f2f4479-f3c2-45e9-8d37-aa7caa82fdb5", "indicator--7f9a9bcb-b51b-497a-82b9-6de38b2fe0cc", "indicator--afacbbe3-877f-4cd9-8d3f-08e758aee602", "indicator--b7ca8801-1e1e-4882-ad44-919d5eb8f787", "indicator--1b4f7396-994d-47c7-b332-024d2c3ae236", "indicator--4f6b9974-f2db-478e-ba21-6a2352e0f3b1", "indicator--8d74aae3-012a-41bf-90a8-08935a539821", "indicator--66814ae1-e0f1-4306-b49d-0f53605290ba", "indicator--2ac42158-585b-406e-ab10-586172b6e608", "indicator--e57c3ae3-b9ee-48bd-8a92-239aff387d6a", "indicator--f662b11b-f9a1-46c6-973b-9fdd9d61fe2a", "indicator--cc20c991-fdc0-40dc-b827-866b5bccda01", "indicator--505a79fb-fcb6-45bc-9fe8-885e0302065a", "indicator--18c5090e-8dc7-44cb-b313-038aa27623fc", "indicator--93fa14f0-5e63-4a27-a8df-a07765e2bd8e", "indicator--9ce9a9c5-77fe-4004-8212-729f41b54fb1", "indicator--8ab35cd7-ccc3-4ade-93b2-d14e50536719", "indicator--306883ea-d36e-414e-a962-29435f0ee37a", "indicator--ad47e619-6d01-4497-84f7-8e85e043e5de", "indicator--658390f9-982b-4415-9356-cbeb7ee1ea6a", "indicator--8d093a9e-8a31-42d4-861b-8649f73cbd27", "indicator--870aafae-9a3d-454f-8dcd-304335f59dcd", "indicator--0dcc083b-3e88-45a1-ac68-aea211138e9a", "indicator--5c7962fa-5ec5-4895-9f1f-080eaa85da7c", "indicator--ed5e8fa6-4ee3-43e1-9af0-e3b50cb5ec48", "indicator--f1cd9bc8-822d-4e6d-bd0f-1993092269c5", "indicator--936ef8af-c037-4575-b973-e5f6c9653a59", "indicator--b8b7e46e-7424-406e-91e0-69b3f2c1aa62", "indicator--1dcdce97-20ba-4861-a912-ebec970b1b8e", "indicator--d1b9dcd8-2d77-4786-bfd9-491fdf534e66", "indicator--023cccd1-d6cf-4ad2-8cd2-baf9f45def4d", "indicator--96ff17d7-f97b-4b6d-b121-b5ce389033a6", "indicator--ef75eeab-4296-4f34-83d3-434d36b1be7e", "indicator--9cfc2582-b7bd-47fa-b4ba-1f5265fccc7a", "indicator--235132be-cdbc-40b2-929e-de1c06995d2b", "indicator--e5b65f55-ffd1-4003-9797-65d185d68e1d", "indicator--f06eae46-e9d7-4a82-ab64-d47bfe2e4c39", "indicator--8e4ff488-52b2-4e2e-9afd-bf038a446232", "indicator--f69bb06a-3d37-481c-b3e9-96cf9cb66fa5", "indicator--9772ba02-5ce9-4d7e-ab0b-ecd626e5f920", "indicator--97f9fd81-1f56-441a-9e8a-3ee7052564d9", "indicator--13392148-49f2-4c5c-97e8-dcb019757ea1", "indicator--d46d0321-d95d-4429-9b01-f3660f9fa2bd", "indicator--e4584ca0-0da6-4cac-8551-0aa02a592a25", "indicator--04a74860-cf04-4e9f-b656-1f029c1f18ec", "indicator--122895bb-1be0-469d-8799-0c1c2112bab4", "indicator--b161936e-ddc7-4425-8433-8d45b8ca28f4", "indicator--85af94ac-f547-4e8d-a20e-c042a647c912", "indicator--52291443-17e4-4485-90e3-0df961c98e9f", "indicator--8ad00dad-b4a1-4e8d-929f-b58b2d267a17", "indicator--fb7f1133-9e06-4708-9c17-7e3fbb6cb85e", "indicator--a8dd018b-3e77-46dc-81ac-9dba42f6ffba", "indicator--9642d534-9094-437c-88ae-89dc2c9fd5a8", "indicator--4c8434e4-ba3d-4ef0-952b-e776cb49039e", "indicator--5633f58b-c9b4-4cb1-868c-cadccb1043e4", "indicator--f3088671-8437-42f9-aa7d-847c784a766f", "indicator--dac296fb-c585-4e8e-aba0-f04304bcba18", "indicator--69b9ea07-18ab-406b-8b5b-b56102559748", "indicator--1cddfbbf-f311-42e6-baa9-abfd993f8c22", "indicator--06b24847-9665-49e4-9c5a-d4cc885c163a", "indicator--7df93f29-2f7e-4371-a2ca-7fa3f4ae06d3", "indicator--99280a81-e6f2-44b4-9d1d-a8bf1690a765", "indicator--4194598d-a0b9-473e-8b61-ed4cf61791c3", "indicator--5b1250b5-a4f6-4786-94c1-0c32a484b70a", "indicator--65e6775b-26d1-4431-9eda-8e71a6102a19", "indicator--ff6593bf-4d62-4391-af5c-4043654f168d", "indicator--fcca1043-a555-40df-b5d7-be3ae283f97e", "indicator--d4455eea-9ced-4de6-888a-865813eabe04", "indicator--176d8ca8-36fe-46e4-abbd-d9000686ef5e", "indicator--8da6064b-0492-41c1-8f89-f9aeae7ecf40", "indicator--bfa86c20-d67e-4ad7-8b4f-9ad9df4044f0", "indicator--1ecef0ee-3d65-4bb0-9b38-b44d8b2de526", "indicator--da38daca-f96e-439f-87ef-713f975db845", "indicator--5e0b399e-b3f2-4fc6-9b60-d53cf1abf688", "indicator--de00a6da-1b01-40f1-8cc0-5999be2a92b1", "indicator--72be8026-8d5e-457f-a9dc-91f503f02bc2", "indicator--f769f82d-99b8-4c60-b453-e396a95b7045", "indicator--25cc8747-d93d-40bd-ad0d-623e666ff4f2", "indicator--1b34b3d8-c822-48aa-8380-4ec325410643", "indicator--9d65e548-4368-4e43-a583-6a531c5be77e", "indicator--750d930f-ee0f-47b7-9194-07c9e158879f", "indicator--6edc54d1-17e2-4c4b-b1d8-39c0a6a8a3d7", "indicator--9207ef73-e082-4ebc-9aa7-810eeb670532", "indicator--41e3349a-e359-4804-bc9b-c51400d97879", "indicator--9c6da319-af84-42d9-a878-31c626aae931", "indicator--eba87dd9-f6cf-44f6-92ac-b49217a70fbc", "indicator--bca203d7-34f1-42c3-81d0-7143b32dac61", "indicator--05b4b2a8-7482-4a12-aa52-bae7e456296d", "indicator--2b875bdb-3669-4efd-829d-fa270cc10987", "indicator--66e1ace7-8682-474c-985b-b4b01b39b90f", "indicator--08f4f5e4-8f85-46cf-abcb-285542b41ebb", "indicator--eff5d200-de1d-43f2-b771-52f17d064ea4", "indicator--34ca8f65-78cd-4226-93d9-2f1464bd4e77", "indicator--e370a906-1a49-4324-88cc-2c5c5024ff7e", "indicator--2977ab92-2f53-46f4-b99a-7a29d4358660", "indicator--1af44680-695d-44aa-8273-014738e6d0de", "indicator--82462542-03b4-46f9-a4c6-4bce316a76d0", "indicator--d5748861-1cf8-4de1-9194-63e5d9d72615", "indicator--234a3b4b-3973-4831-905c-29b13cd76ccf", "indicator--a240df75-be2b-40c5-8f39-f1fa7e3b545c", "indicator--393d03b6-c419-44a7-9cb9-3a89585d4aaf", "indicator--7bd3198f-e0fd-4f3c-adfa-5c603bcde588", "indicator--879458ca-4eb4-4ede-8c93-5fc2ab813313", "indicator--b4fef512-8f6a-41ce-ae43-b62da85ecb37", "indicator--bf1c23a9-66fd-46e3-8020-2ec7d9fd2df3", "indicator--e0f24e56-728a-4780-8358-b5c395ddf20a", "indicator--5af1f9b3-1191-41ef-b5e2-21ebafeef196", "indicator--f941e6c2-9ae9-4256-8d5b-a05945c8a797", "indicator--50ebd264-7073-4e95-ac22-53553ce3d4d4", "indicator--5f279c59-51b1-488d-a205-cc61daa43e1b", "indicator--eb55ee89-a72f-437e-ba57-b374fa13c249", "indicator--2a585ec5-4b6e-4664-ae6a-ecd14e0df999", "indicator--2318e106-86e9-4054-802e-93d2be5ea8af", "indicator--8e3dd5d4-55e7-469b-bfe9-e882b6f27b08", "indicator--18cbcbc8-a215-4728-9282-57488891470f", "indicator--3d7903f4-ec47-432e-b962-998e3f0709bd", "indicator--daa01926-aa8d-4cec-ad64-f0d873170d6e", "indicator--191b3f0f-b846-47c0-afa5-4fac508ea6fb", "indicator--f9224d5c-a3e9-4fc4-a743-3b907b4bfef4", "indicator--a492d00e-bfc8-4dfa-9295-274cd7988be6", "indicator--e916103a-9bdb-4da4-b2bb-afeae338ec81", "indicator--1626dcad-0aef-4deb-bdf0-8773b5080d30", "indicator--6688c21b-371e-4294-9997-e7f31debbe3a", "indicator--09f0af84-dd0c-444f-a967-56bcc45d4e09", "indicator--a2af3473-df0f-45f4-b20a-ceb653097a2c", "indicator--29ba31e1-225f-4a8c-b64a-7fb7b5cd7822", "indicator--2639e31d-59e5-4085-9d4c-21debd5758d2", "indicator--c3457baa-ffe7-4b63-9028-49feb9d7ba05", "indicator--06c8c591-f016-4ca9-a96f-2360501b49a9", "indicator--79b337e7-4233-4909-a967-e9ae7ae91b4b", "indicator--13e1b762-febd-447d-8ea6-fa300d852b4e", "indicator--4cbf0760-1df8-493e-9cea-445f8ef9e38b", "indicator--13cfd687-6147-46f6-afed-fdf47e12e2a9", "indicator--9e219903-6771-43fb-aacb-3ed9472e436f", "indicator--9b141099-c74b-4b3b-adeb-c8fc62d16ac7", "indicator--445751a8-150e-43ac-9c01-be1fec349fc0", "indicator--bc8c00bc-1b25-4248-aa40-976d23da4df9", "indicator--780121af-86a5-454e-b1a9-18646af9a171", "indicator--c1629a97-178c-42d2-9457-e49a276feab9", "indicator--d14f1337-f7e3-4b1b-82fa-b66f2178914e", "indicator--02f39f56-166a-4ab9-9ec4-20815d5d334d", "indicator--9ff6ac71-cbad-41f9-9cab-7a3e6fd89839", "indicator--261a23cd-7a58-4fea-8e3d-88ad4867cf1f", "indicator--d4b09405-c763-494a-bbd4-29ff6da26dcc", "indicator--81cec46d-153b-41ec-8c5a-947cc426f81e", "indicator--aa085653-4fb0-4194-942d-124052c97613", "indicator--6735e357-bcca-44f5-855b-7b2310ac3935", "indicator--a478b698-e895-4571-912a-a8a315a11fb6", "indicator--064ccd8e-937c-42ef-b126-c2ae8a25f2ca", "indicator--38b890f9-79c8-4ad1-b332-0407e68f223b", "indicator--c0581a43-ab5f-4383-a9ed-8878b50bb682", "indicator--b382e4d1-0c47-44b0-9c91-6f4ad3d22aa2", "indicator--65f53f09-8967-4ff8-9bac-b374b6934c6f", "indicator--1d7c29e3-b3b4-40d9-ba05-4286dfe0b054", "indicator--2d60cbd5-9fbf-4e7e-a510-b568d71add61", "indicator--7d12fa03-05b9-4c81-8b8c-8258d2dd8ccc", "indicator--161b7c3d-0b42-4e83-8503-503e381e9877", "indicator--93ab80dc-3513-4be8-9528-bfab3a2086f5", "indicator--8f401f05-125e-43ab-8a68-014263a63205", "indicator--89846934-b517-49a8-b131-3cd79b9b6810", "indicator--4916238d-54f9-48e1-8cfa-c51689f865f2", "indicator--d389ed1a-e6e4-4b20-b4f3-446edb1afe10", "indicator--10e9a44b-2752-4d70-a46a-152f0bbe46c0", "indicator--a09257a7-ba3a-446e-be5e-8c01c9632776", "indicator--67d76690-86d2-48b3-bf81-46eec2c80d9d", "indicator--ecad5a7b-e9ff-46ab-8e05-6d480579c425", "indicator--42abde43-e63e-4326-818c-3552ceff8906", "indicator--b5a8d8df-ded6-4dde-b480-7a5e10b8349e", "indicator--4c4b9a41-09ff-4aee-890a-32d35e86f098", "indicator--9d970ea6-878f-4163-9a5f-2c0ef811ca54", "indicator--96595794-10bd-47ac-8d10-999780f83eb4", "indicator--d91e6eb3-887c-440a-9ddd-0ba8be5a8592", "indicator--e9bebe52-ac88-4461-9a3c-9e82c2bd7680", "indicator--c65934b8-813f-465d-8982-5ad6b4869d39", "indicator--09f60686-006f-4ab9-841f-a985cf0d12cf", "indicator--72f4cbb9-93c9-4b5b-be43-918a041fcc3c", "indicator--2253be62-6199-48ed-89de-46be4b8cebee", "indicator--73b989d9-c9b7-45d9-aea7-9fc4d5ab95d7", "indicator--23bdbaef-0766-40b6-abcc-97696d818b66", "indicator--ddbe10d7-3cba-416d-b357-7477b9523d8f", "indicator--21d6aa3b-842b-4e52-8018-3b4ed464c46a", "indicator--6f7d4319-782f-4fd6-87e6-e204e83486c6", "indicator--61dab96b-24c4-4110-b448-bb7d5f0040cc", "indicator--7af84686-842e-4fab-a547-d19f28f5de07", "indicator--e821d0ed-9700-4ef9-a036-fabaa14efe6b", "indicator--99e508ae-a7bc-40e0-bafa-e267708eab2f", "indicator--377ec533-fa88-485b-804a-e6d32ceb0542", "indicator--894227c7-05ba-4205-ab99-89c9ea618c2f", "indicator--1d9b8868-77e1-46e7-a236-9f1e502e2b7a", "indicator--cfb3ffd7-4e07-40d2-a864-ab24fdac7e99", "indicator--3ea4b1b8-aa40-43ac-bba0-0e86fd3209d0", "indicator--914dac73-23ea-4704-81b9-82b95296583f", "indicator--e53ddbc8-8ec6-41e2-bcbb-3d93c3a957c4", "indicator--945f338d-f296-4e65-961d-844ddbcb8911", "indicator--1dc85377-d873-46dd-8031-1ede057e94c1", "indicator--3dd5eaa1-121e-4c71-914d-9b1297a871d5", "indicator--4c0c4ff3-70b9-4d5c-8177-2a06c55199c8", "indicator--629c9d44-004e-4306-99fb-dd5bbb66b3ce", "indicator--c3cd16f8-e8e2-47fd-aed9-9f519ad697cb", "indicator--5f44bf7a-e67b-43fb-8848-c57486c77ee3", "indicator--3ada487d-2371-4d75-b11b-6386e2796ac6", "indicator--6342325f-a62c-44e7-849a-334e1ac72fec", "indicator--dc396568-701d-4ea9-b5ee-8c1586e23c9d", "indicator--b2afeff9-12f4-406f-ba78-6d5573ec54de", "indicator--b61d0457-148b-459a-8ff5-24eb1e5eb75c", "indicator--f79bbb45-c01d-4c00-80dc-d53f4f169d76", "indicator--4cb6b201-b9bc-4f13-834a-1fcfbbda7020", "indicator--b5e51b92-dc6f-4c32-ad3a-f0b8b4ce12b8", "indicator--da1d74a7-2031-405b-9ce9-1345e00ad14a", "indicator--adbe3880-a4fd-40cd-8376-9cb942c3fd1e", "indicator--4cb05db0-0c69-4aa2-acd1-76d2ee231610", "indicator--5035bcd2-52ea-4487-b46d-1bb2c76738bf", "indicator--19c661ef-f2fe-4945-b6cc-12024ffa93fa", "indicator--a387738d-d632-48a2-a5e1-13aaf1366b59", "indicator--c9e4ae74-800c-427a-83de-51abf7d29978", "indicator--d0a367b9-2a13-46c5-a806-919fb63bcdf6", "indicator--22267322-456e-4ed4-b020-9e0f3a72e949", "indicator--7494b102-c4b7-4081-88c4-7ce19b610bb7", "indicator--2629d64a-2e7f-41fc-a500-13e6f715e04e", "indicator--edcb1336-3d52-4623-adc4-c687caeb6393", "indicator--f74c6834-960a-4647-9d04-a61fedfd0775", "indicator--92fae51a-e8cd-4548-842f-fc9a2fbbee61", "indicator--570f81f2-499d-4582-8f73-5d90c85f92b0", "indicator--c4687202-2074-4901-9b1b-1154a4e1a824", "indicator--27af1249-89b7-4451-b1b2-40fd03843c73", "indicator--e2242ca5-9291-46c9-aebf-0c3f8134de64", "indicator--5b8bcce3-d1d8-402b-bee0-2e3b409ec6cb", "indicator--259f6c3a-a6cb-46b7-9d35-5b3a9cc4b8ad", "indicator--aa7e2d65-5758-422f-9e15-c732a2b2b2ad", "indicator--5b93d01d-a853-4dd3-9dcc-f1256df57b9f", "indicator--396d7919-1ca0-4d4f-9549-7501a0d06336", "indicator--77039283-7922-4b6d-a223-709122fb6290", "indicator--71004a53-1da9-4c20-8d96-05dd79433997", "indicator--06c67f5a-8d23-4643-806e-0295c630bfa6", "indicator--51a83d46-9ac7-4fad-ab6b-85f06512456d", "indicator--3931462a-2b3b-49c7-9e53-15cebf0060fb", "indicator--aff0050b-3310-49b0-a83a-33bb47c4c912", "indicator--e8371395-ed78-4d70-848d-38a9c563d24e", "indicator--2cfeee11-01c4-42e3-911b-36eab524ef61", "indicator--0120718d-069b-4ac5-b9dd-f859208d83c7", "indicator--e754e7c0-453f-42a2-975e-0f88827e126f", "indicator--dd76afda-eb07-47af-bc2e-a0e138223bb0", "indicator--162bd2fd-fa82-4b94-9bc2-0671b9b7eb58", "indicator--f1626fa4-8fc4-4df4-984e-aa9f5b6e945b", "indicator--683dce16-6dcf-4b96-b7b1-42e2cfba7162", "indicator--1e8ed946-2637-43f0-8968-e591db22a4f5", "indicator--dc0c2cae-e69a-4e3e-a65e-f2c8d9adbc62", "indicator--fd8b4436-14ef-4b9e-a339-69e3fafe7686", "indicator--a83ec4e2-572e-4517-ab48-fed4b9e1060c", "indicator--1caa806c-3568-4f99-b3da-65442b2e1485", "indicator--0c5a95ba-4815-4e79-924d-87309b48bec3", "indicator--b68e82e0-0105-4abd-8c40-d52c7b3eb852", "indicator--a067f036-dfde-49d6-9e75-e548258f0c62", "indicator--b831ec47-e66a-406d-a405-d3dd12b48577", "indicator--9cccd01d-3c64-45b2-b047-7b1cf2453a6e", "indicator--4f3acaa0-a2c3-4c19-992c-3de0e5f93559", "indicator--c2fcd2d8-f854-4487-b372-25ab907a31c0", "indicator--dc6a18a1-b88b-4379-ae9a-6d827d48edac", "indicator--7b7383ea-a1d1-440a-a306-4016a6e2fccd", "indicator--ee38ac51-c66f-4e94-aa0e-85a4830289c1", "indicator--625daeea-e7f0-4ac5-a874-c588ba20595a", "indicator--6fef1707-5fab-496b-b3dd-c72ecb368501", "indicator--61ac9b3e-2cb5-46f1-8172-925307ca7640", "indicator--b4fcbc5a-0a1a-437f-a05e-b7cfa2217162", "indicator--2f36facf-cbed-4612-9fc8-4173df69cdc5", "indicator--3e13ec5a-f586-462b-976a-3e3eb50b51e3", "indicator--bbdfcc5b-c58e-4dcc-85a9-6d9850035b72", "indicator--64ba077c-7ce9-428e-8eb3-bc4d01377188", "indicator--5fad5137-4c6f-424b-8f50-c2404cc22098", "indicator--9ef437f2-7b99-4738-aa3d-1ea58d196872", "indicator--d9c9a7e1-2dcf-42fe-b63e-581498afc88b", "indicator--2fa34c0f-4909-4ad7-bc39-2cd8947b3c9a", "indicator--1fa43e65-47cb-486e-aeee-c3878cdf5301", "indicator--0e805dd9-5b2a-4a94-8e25-b6be329f2b29", "indicator--c2e87372-ccbd-447b-bb43-7ca495ef9f20", "indicator--2bdf74f6-c398-4401-a0ec-688442e043b3", "indicator--3c1bcbbe-74cb-4372-a129-1a2b5a507a1e", "indicator--f571d0d5-f42e-4608-b7dc-dc56410dbb1d", "indicator--7f165b5d-af43-49a5-99f4-f38c0879b839", "indicator--aceab53f-ea89-4527-9f56-2392b88749c6", "indicator--beb0b13b-fb0f-4cdd-9789-4d7e31758aff", "indicator--e2bb634a-a6ab-421a-8138-88ba92d14f4e", "indicator--0c42d9ff-eb5f-4fab-8825-f07ade0a59f8", "indicator--761c7f44-cf7a-4fdf-9c0b-cec2c67fd6d9", "indicator--79eea8cc-8372-41bc-8689-a4d19f1ae433", "indicator--5988aca2-9ed7-4771-b59c-cf78305cc4bd", "indicator--d9464890-569e-4360-b955-92bfc4957e64", "indicator--7d72f108-9016-4280-b72e-77e5e0b21ffb", "indicator--8e03ff38-8b76-4238-92cd-01f437793c10", "indicator--1d98b7fe-1ff3-4ff0-a0d2-4f5fcf64c94d", "indicator--25e2f3f0-2248-4a12-84df-23854961caab", "indicator--43373a78-a948-4be3-a735-3c6b3f36b9fb", "indicator--290d0fc6-c2a9-4ba7-9c56-008aed421cf6", "indicator--294d1540-9376-496a-9ec7-4922a73a3861", "indicator--1ac5072c-e33b-43ee-9756-3f99b13d7a4c", "indicator--9aca9f5f-3cc2-44c2-9c77-8004ac48ec7e", "indicator--27c2f134-2f6a-476f-9f67-4fb9aeea6530", "indicator--c66d9a06-6683-4b2a-9b5e-a11477b61bca", "indicator--f052675b-983f-4f2b-9d44-4ab0da47f454", "indicator--4810a872-dea8-411b-a6c7-2ff8866fcdc7", "indicator--2ff748ee-f51f-4159-8e7a-9b601c4816a1", "indicator--58404ece-a80a-4aeb-b3fb-0521d0735e81", "indicator--d179e337-5645-4ac5-8364-77e1eb316372", "indicator--afea24ad-39d7-49cf-ae11-a782c872bed0", "indicator--f9600108-ad30-4e98-b540-455ef76738c2", "indicator--455f58a7-bf52-4fd4-be31-1f3f0da56f96", "indicator--c3da4ea4-1c09-4af4-aef5-958e55195507", "indicator--bd592891-9c6d-41d6-8d73-09902f28a7ba", "indicator--728c9eb9-7b76-4cd2-8ba7-4e54f047d806", "indicator--16b513ca-62e6-46dc-92af-8b589d2d37f7", "indicator--3422c051-d0e6-4876-b09c-ef85b9000c63", "indicator--8aee6052-b506-4f3e-95f5-263b17997c81", "indicator--5aafe2a3-c70d-4728-ace6-62e3b1a14d54", "indicator--37c2cc1d-0fb2-410e-9aeb-c2aef2e3d4e9", "indicator--fd9d1d5f-33c6-49fc-83ce-1d4ac29eeb48", "indicator--bae91310-9221-49ba-a9f6-e97605f7576f", "indicator--0c3eb28c-d75c-4097-b9ee-81d6d7b8e265", "indicator--e6cceb60-a2ac-4507-87b3-8008f9dba19e", "indicator--685b32a3-f8f0-4175-ae1a-66e44ff84bc0", "indicator--3e84f858-189f-443e-bcb5-f8e0944bba85", "indicator--83f56cc5-a974-423b-a6bd-e1ae7d72b840", "indicator--08028828-0b99-429f-9da1-a7aa6cf14c4b", "indicator--cb1a0fd8-cc30-4a97-9789-b0ce4bd4c798", "indicator--c94b10ce-cfda-403b-903f-ceca15fd6202", "indicator--98ee4e12-cf58-4a33-9742-0f4bf45bee37", "indicator--df123407-0eab-4b6d-be01-cccc4a338d04", "indicator--ae461493-0b46-47a3-a1aa-e2c336a6fa9f", "indicator--c3d95806-d7f3-4c43-a460-b9fd5a109a4f", "indicator--1234d61c-e588-49f9-8982-0184795b0736", "indicator--52ea6ba2-57f2-41b9-8669-59d3a6effa0b", "indicator--af1f2e8e-e4b5-4d88-8a29-94bc13631d2b", "indicator--30a244c6-46b8-4c8e-a5c6-9d8d0f28053b", "indicator--a6e98372-81a0-4619-bb80-d2d025abbbf3", "indicator--6ef7d9d3-46cb-4682-83a7-5bb9a19aab04", "indicator--8b72ccb6-a2b3-41d2-9139-f7216d1b55d4", "indicator--9cb8eb97-53fd-46c1-b2d4-24ba52a852a4", "indicator--5edfe826-f500-4208-bb21-b472aa888a42", "indicator--29fbf9c9-6b05-4802-ad88-ca07973bfa7a", "indicator--0f63bd0b-7898-41d3-b97f-acea94ed7739", "indicator--5281900a-94e6-430d-bb86-a7893f276e11", "indicator--a9fe32c0-9900-4578-9ecb-902088881e90", "indicator--a1735852-5c0f-4aef-8ae3-1dc2005923c4", "indicator--828739dd-ab8b-431a-8507-698a006fc926", "indicator--0648d46d-d78f-45a7-a869-eb4921c0dea1", "indicator--98dd71a7-bdd2-4215-8b1c-a75aa5bf6069", "indicator--f28d456e-3d43-4b38-af3d-f122c4c32267", "indicator--2430acb1-fda3-41a9-8edc-02b54bf2c08e", "indicator--6022cb11-9c2f-4d28-b6b5-553c1068a902", "indicator--2c36ae86-e5ac-4073-80b1-656d1e5ba43e", "indicator--c2b0ab33-9533-4c05-a0dd-50af07c858e6", "indicator--52e193e0-e42b-42cf-80d7-9cea64c016be", "indicator--4af93161-d4db-4a4c-903f-a76de2aa1d2a", "indicator--6e4a8035-741a-4512-8640-46370c2c217a", "indicator--27c15a3c-bbc2-4782-93eb-d03c9b26dce5", "indicator--45eeeed6-7b47-4c38-be3b-a2d58fd0707a", "indicator--2c088da5-db14-4db8-991c-32cb83272d10", "indicator--87571f8f-7ab6-4413-8c0e-8bbda4fc986e", "indicator--647c932f-0a20-46e0-9b0f-6b1949cb92d3", "indicator--6d0d00e5-8542-4781-92c5-66585ba4eeaf", "indicator--7d936952-4273-44c6-8b51-216212c252f5", "indicator--9d9e93e5-fbe1-4406-8e6a-a0203c68410c", "indicator--9ca7a483-7ea8-4d2d-a9eb-32658e936a5b", "indicator--87d9a6ba-1306-4590-8fd5-b6b9d7121344", "indicator--e27660ea-b6ae-4160-8df1-d84ad20d4287", "indicator--d7d0cadb-ad3e-41cf-ba73-3eea6924c59b", "indicator--022563de-b1af-4d6e-b649-98e4efbdc9dd", "indicator--6e1dd40c-0746-4746-90ad-e516f0cbc3da", "indicator--9980dc4d-de76-45a7-a925-041023dcdad6", "indicator--eeac3e24-4328-4e44-b9cb-9a63e5e504b9", "indicator--fa26e991-c176-4fa8-8ebf-8ee7a25fe3eb", "indicator--0ce9fde3-60cd-42ab-a763-8988c0fc8153", "indicator--0f80ef9a-3190-4be4-9b73-97e5e28df916", "indicator--7168eafd-cfc0-40a4-9b24-7d6e0fbe2f35", "indicator--36bedef9-061e-46a0-b263-c8de395c5e87", "indicator--24f5fae9-6351-4f67-b82e-e1f26caebc75", "indicator--2e76ff03-5d42-4e01-bbf6-76b7fc4c3004", "indicator--36450438-9f5c-4160-814a-6946077c54fe", "indicator--f5d66f5d-5507-4880-b5cf-f3808c3af77b", "indicator--eb1df8ba-2549-4140-a593-420feef6df17", "indicator--89103e6c-70a5-4392-9764-b0139cf1984a", "indicator--eb453fe2-83cb-44fa-96e8-c35e96c4f60c", "indicator--b9d75e87-dc82-4bbd-ad7a-ba56ea18033d", "indicator--97a64a2e-bcf7-4bbf-8158-bfc7296594ca", "indicator--84692b1f-4582-4ccb-80ef-3bb1d14375f4", "indicator--68d8dfa3-932f-425b-9f90-7168bb7bb88a", "indicator--74ce3666-b95c-4c07-b911-847509c6d595", "indicator--0fcb65a4-2cd6-46bc-974f-e2a0823fd2ce", "indicator--c5834fe9-17b7-417b-949b-661d75055bfb", "indicator--ebd8a383-eb5b-4786-a819-dccc36b00067", "indicator--242f3711-5526-490c-9350-53ac84749e2e", "indicator--81c095f1-8dd6-4aa6-8ccb-88df54c83b5e", "indicator--8fdfabca-81da-469d-8df8-d954315b7f39", "indicator--4ac05a02-d363-4440-b811-9cf26e437771", "indicator--5ede8524-cf34-436a-a4af-4b8f74b40b9e", "indicator--cf9967f5-f96b-4cfb-9995-551fe25ab1e1", "indicator--292510a6-6b2e-49b4-99f0-f1b38ef7f7f6", "indicator--9865a2b7-cf94-41e4-b7df-57557cd22f60", "indicator--6e45e38e-9c54-4d07-8039-cfa0036d0b98", "indicator--872fc244-ea26-4654-9a95-4aa13dbf0fce", "indicator--dea64cde-769f-4802-b0d0-67e1b6baad57", "indicator--14424318-7285-48af-8168-16211bc2c4f5", "indicator--62f13b27-2414-4f45-8d4d-b1f51684a02b", "indicator--fdc98f8d-20f0-43f7-a358-aaa9687302d6", "indicator--be304764-7f8d-44c6-abdd-6cc5c76d69ff", "indicator--29e71250-bc43-4ec4-aa51-7eea5183fb05", "indicator--b0a46d85-8979-47a2-83e6-8ac6d78e9ed4", "indicator--a043be28-a83c-4d9d-91d6-1b6df1f38bde", "indicator--5883643a-c074-4433-9380-0ed6a44be790", "indicator--720ddb93-9418-406d-b6bd-dbaf0d98ec13", "indicator--90f0f046-6bca-47ed-8ea3-0c02f15abbd7", "indicator--fe02adb5-bf15-432c-9acd-241bb7f1aed0", "indicator--57d9be3c-e9e3-4692-a645-285c178c8838", "indicator--0a11840c-e385-43f3-851f-bfb28a961acb", "indicator--76b908cd-5da4-4963-ba46-3d6927b04237", "indicator--78a6e4c0-8a59-4784-b363-916bb610ffa2", "indicator--e5a85d69-3a91-4fa8-9234-7e69195b8cd9", "indicator--485bce98-999e-48e7-8f1c-cae16e12ff6d", "indicator--f67d7784-5911-447a-b0e0-12fe9d1a5f2f", "indicator--1594b3c3-f57b-4679-80d6-b0f033d56c29", "indicator--e9a85039-a5d1-4f49-9282-b52896fa6e18", "indicator--461478f5-8c23-429b-bcdc-33e8f11ca2a8", "indicator--a784d382-2140-4f94-8f42-0a1f5b00395f", "indicator--81fbd9e6-d3ca-41d1-b7ff-dd1b5bc40685", "indicator--9f71d9c4-6be9-411c-b6f7-957c89019466", "indicator--faf8d648-9df1-4b5e-810e-e3a12aebe7d5", "indicator--62817c4c-c472-4642-acda-49ee456f4590", "indicator--a10031d1-81a2-4308-8c38-11b594af5f82", "indicator--c442fccf-f5cc-48ec-87f8-59d6d9b18a3c", "indicator--662fce81-e6de-4e20-973b-0d70c1de8c49", "indicator--42fbc33f-e542-45bd-baa0-4559a330fa2f", "indicator--b9b9b234-822e-43b9-a9f1-f1bbbce27418", "indicator--17d71872-8cb7-41d0-a1d5-f583762ad812", "indicator--3f116f92-979b-4a9a-8aac-1a1214d6b676", "indicator--336e5825-d207-429e-86b8-91c476e51637", "indicator--eb6d3098-3466-49a8-9ee8-0be8bbad232f", "indicator--6a759968-aa08-40c8-86b1-76f5411a0734", "indicator--ea086e6e-43be-43ce-8bd7-b1153fa3a98a", "indicator--164d160f-1cb7-4d7d-8ea5-1dcb181ef97b", "indicator--fe2a44ad-0455-4c46-949b-8c28f865c8af", "indicator--085bc997-63f9-4beb-ac7e-7986c389f95c", "indicator--9ad87076-2100-4277-863c-79a0996b5f86", "indicator--d762b70c-5cba-4326-9d8c-cf84ada61c39", "indicator--aa1eed11-e464-429e-9dc9-ef6b4d2d48db", "indicator--597e32cf-4ad5-4210-bc65-d7ae4291aca8", "indicator--b630d538-4d37-45d1-befa-6b185a411987", "indicator--b43b65ab-6307-4999-85e1-b10f7c63bdab", "indicator--fcff59a4-8ab9-465f-b2f8-98420dcad7e0", "indicator--ba9f0a30-f4d2-4c4b-a995-fe40ea709e1e", "indicator--678ce209-69b8-4c94-8854-1b69973f5e52", "indicator--42821b6f-9d6e-48c4-85d1-6eae95f4eeac", "indicator--ea535ea2-0db4-432e-9656-6b96d6fcb6bd", "indicator--ddd0334e-0284-42f1-ab6d-adc0d0b5dd2e", "indicator--b3dbb77d-cf97-4501-aaac-7a487ef919df", "indicator--7bed3fb7-04b3-4f37-afe7-43bb706693ff", "indicator--bb749e64-5c12-4263-8d56-62c8874c8c74", "indicator--26d56aff-4fca-4126-8aff-316484786193", "indicator--83410ce8-6807-4589-942e-49e0d4134fba", "indicator--157f7605-701d-486b-af51-d6ae0993156c", "indicator--4cf8e3da-658f-4dd7-8b3e-98c16250a374", "indicator--dab434a8-dddb-4879-9c7b-04d857d5d310", "indicator--8d424986-1b07-4aec-a2f2-e8c0da1ba845", "indicator--7c4ba395-b0cb-46d6-a3eb-e834d5df4735", "indicator--40e283e2-fa35-4da0-b501-df98602659cb", "indicator--3c68759d-6c48-493b-ade3-d8d02e4aa401", "indicator--ad98544e-19a3-4e38-8fb2-e92942a9336f", "indicator--12271403-fe6a-49e3-a25f-7e908c30b923", "indicator--181377a4-34f3-4c51-80d6-c0584cab6d95", "indicator--ac6e9d0a-d6a9-46da-aae8-11619523846b", "indicator--1a1909a5-09ff-42ec-bbc8-e9187a0a11c0", "indicator--10873e3e-3728-47e7-8818-4e7caf553462", "indicator--9374f23f-6e26-4f5a-9f75-5fb62275e36c", "indicator--24283bc0-d1ed-4632-8a26-cb9826ff9f93", "indicator--c7bf1198-b89e-4183-8d82-dee1e30439cd", "indicator--5a749384-05d0-43e0-b68b-a27d0225483a", "indicator--c1bd5aee-0931-4b1f-80cc-ffdfa4992a0f", "indicator--0e24d6ce-38e2-40b0-b58a-e604ca5a226d", "indicator--14092227-aa51-4ac8-a893-89115076879b", "indicator--3ae705e8-9c23-4910-8df8-312dba7e638b", "indicator--62b70f9e-3b30-4944-90fb-f066935a715e", "indicator--d791805e-9cfe-4e02-9019-e8cb750de8f3", "indicator--731a9997-62ae-4e03-9268-ba708d61a86f", "indicator--50aed1cc-86db-4946-8717-c97b39971921", "indicator--30c767ea-5434-4564-8643-15cfd43194d5", "indicator--f4d3c7ad-a193-432d-826d-0ac060c0bcb7", "indicator--f04f8872-29e8-45ec-9bb7-9fdd1e085e0b", "indicator--e0c4358f-5ccc-436c-9d9f-8953b5a2790d", "indicator--3293fda8-2085-4946-8846-49896c5e6edd", "indicator--99a30fd7-cf9a-4d4b-80b4-26cdf9c541a9", "indicator--2c2c9b9d-a1e2-4a6f-b160-b1ac915b3ba6", "indicator--3b29f0e1-aaec-436a-8425-4ef0dab64ec0", "indicator--89798ee0-5512-4316-9ccf-2aaae8a12dae", "indicator--cb45f74d-ed5f-4a0c-9cbc-ffa60691f716", "indicator--e5dd2bf0-cebc-4551-b63e-bc819a7fda89", "indicator--a9bf3cfd-237c-4df0-8188-c67074df0735", "indicator--7ae7bbee-1d15-467d-95eb-3e5dc4e40f6c", "indicator--69483b77-d85f-4ead-95d8-bc1b6196b2eb", "indicator--689da808-d490-4a90-8263-62810f52ac33", "indicator--021befe9-379a-433f-949a-10be12172282", "indicator--b5d236a0-a290-40a2-9ed3-7f51742d33a1", "indicator--58a09542-28dd-4ec3-a210-dc680b5c2790", "indicator--b6ffaab8-f1db-4785-8dfb-d87689d5d1e4", "indicator--ac3f9351-69f4-4a1c-a9e1-e4d9c5c20345", "indicator--4d526c9d-f8f1-41e3-b026-86fa44520286", "indicator--2b6d6f73-ce32-44af-a594-8b655e367373", "indicator--a9014538-8c58-4863-9886-143f138ad3d9", "indicator--78ff067d-54fa-41d9-9779-ef9c484ce5f1", "indicator--c5f98af1-0049-49c8-88f1-f549f92b0903", "indicator--630d1a78-3cb2-4d51-8681-07d61280781c", "indicator--17f12286-05f2-4b77-80a7-a2bb03b684ba", "indicator--68f81d12-73fc-4f83-9304-771a5474d03d", "indicator--4c790547-fa99-44b0-8ed3-af5a742be7f4", "indicator--446a677c-8b51-4eb5-8747-bcf1fbd5b48e", "indicator--98eb5ce8-9802-4a57-a2bb-542dc5910beb", "indicator--63b22d64-7818-4afb-8b8b-6045b9a2cc8b", "indicator--882e05ec-0cb4-4590-afe1-edf505698ac1", "indicator--f4f6ce5d-e070-4bc9-9b1e-0ecb444548b8", "indicator--d867f215-50f1-481e-9737-ce4932234615", "indicator--3069465a-9d30-45d9-8fb4-62309215fc2f", "indicator--910d8bec-aa81-4ed0-8b8e-c6f5eb954f77", "indicator--b6002441-b6c9-44a3-9bd3-b0c71c5a7cfa", "indicator--8e18cb35-10cc-43bb-be7c-49d151746c69", "indicator--d36b3d85-5711-4e2c-8385-68b7509915b9", "indicator--8b7acf46-abdd-41ef-b6a4-3792aac2f867", "indicator--fc53d215-8809-48e5-9a59-2e0b9fd79dbb", "indicator--ca85852a-e268-48e8-ba5b-0b19946c390b", "indicator--1537c816-c7e6-4e05-ae5d-24519285d99e", "indicator--43f02abb-721d-4b77-a205-b3a9a5ddf91a", "indicator--ef4b43e9-6be9-44cb-b75f-ae66c0b6d443", "indicator--c95fc73f-04fd-4094-8f85-95136993ae19", "indicator--2558a9e8-5ac9-4250-a37d-5d72605e5b1d", "indicator--d88642f5-fdd6-4bd6-a34a-52f69dca148d", "indicator--bfaa553c-6acc-42fa-aec2-1bc9fdfa5df1", "indicator--1f2455ba-071a-4120-8f40-c3b323e723f7", "indicator--300df458-46c0-49dd-ac3b-48853ca231f2", "indicator--15bed7f3-c1e4-409d-b44c-c61784e37217", "indicator--878c2806-fbf2-48e0-84d9-564e27efa0f0", "indicator--a8179415-a46d-40ee-b590-344de3cfbd21", "indicator--b94f6952-1803-4f19-90e9-b69b462430fd", "indicator--6f64d46e-91cc-47f7-8900-82e7c81ab31b", "indicator--d83746fb-2e2a-4b47-8749-a92e8b48c322", "indicator--4194f96d-e1b8-4f86-b2e1-5dca54a3806d", "indicator--6ed01a9b-cefb-46bc-a3df-b5f3ee22daa6", "indicator--f91971e9-aefe-41e5-a3dc-bc88adee7f38", "indicator--705fbd85-7774-4e17-9ff4-6596b5fa142c", "indicator--131fe4b4-7ae2-4239-af54-d87ef5b6ccac", "indicator--1a9bb556-cee2-4993-9368-ed0fc568f481", "indicator--10e94e89-c25b-4edd-b2b0-fa3159be97f9", "indicator--f1831e73-1395-4def-ad7a-1fc3337ca403", "indicator--7b549ce3-15a5-46d9-8839-3a0aeec97de1", "indicator--70f4c5eb-3938-412c-ab57-1c4222871f75", "indicator--93862fee-0929-4e4c-84bd-b773a8426869", "indicator--bdca04fa-a706-4308-a10e-05be3efdf6a4", "indicator--9088445f-5877-4e70-bfbf-f4b799aefe2b", "indicator--7c787084-9446-4555-9fd0-3688c550d00a", "indicator--bf0b7920-5ea7-4f84-a0f6-6c43acba66d4", "indicator--a7721f77-5cb2-4fe5-a9b8-c06d887c5629", "indicator--780e8224-9b8e-4422-b350-8e11947916cc", "indicator--4d889ebe-bcaa-4c57-86dd-51604933c224", "indicator--a32c67e2-397e-4645-995d-df53d75d9aef", "indicator--e47a8f33-07a2-4c3e-8ca8-bc39e138218a", "indicator--5133786e-5420-4312-b8e0-507519c809c3", "indicator--d93981f4-473c-4fad-b21e-ba8bf3ce7147", "indicator--c93e1a69-0d71-4745-aa49-b36a41a7eaeb", "indicator--9a1123d0-f2b2-4e1a-bb44-2cbf799c7b12", "indicator--2c056788-640c-4d28-ba55-fcf6e5a8d080", "indicator--65b67176-8fab-4c88-a36f-961684ac8712", "indicator--cb9254a2-004f-44cf-b3c3-3409cf5772ab", "indicator--0035319c-86cd-445d-9e9e-dba6dd4a89f0", "indicator--143073c0-6d2c-45c8-8795-6681c15a4ac9", "indicator--d84f32c4-0a60-4e03-810d-fec20c36fd78", "indicator--b56b33b5-18fe-4c25-9756-d5ad4bc1e48f", "indicator--5f8119ad-4dd1-4848-9dcc-4fb2c04c3195", "indicator--8b8f0585-dc3c-43ed-b2d7-f1e18ab06025", "indicator--1ea424d8-416a-4b21-8fa7-22c2fe133793", "indicator--b27324ef-084b-4ab3-83fd-4fd0f91316f6", "indicator--63464f18-6982-4666-bc33-ad35c889f867", "indicator--79cc39b7-f8a3-4bc1-ad4a-6e4ec450189a", "indicator--f14c53a9-8c5a-4fb1-98c3-2fe932f02c5e", "indicator--698a9b73-96ad-473d-b4ed-3ec835d53cfb", "indicator--20608cd7-3170-4466-ad93-d2869418039a", "indicator--f1d8b8b5-7838-4fc2-ac16-f77bee0bfa42", "indicator--fa1fe695-fa3a-4093-a418-27480dc0c742", "indicator--6dc6a36c-7cdc-4e39-8035-092f4be03357", "indicator--ee56e961-d89a-46cb-9b9d-fe2ddaa1599a", "indicator--4e12b6f8-7515-4d9d-bdb3-ca8c36b15314", "indicator--c8087e9e-7a0d-4afd-92c9-e616ad62e09a", "indicator--842ad297-34ae-4a08-848f-45acd1399565", "indicator--747ccde6-e32d-4040-9643-0700b4f3defd", "indicator--5f4e6910-875a-47b1-b130-af067cc63b82", "indicator--ca292d21-346e-49f4-a1a4-e261a319bf93", "indicator--abadc3d8-c5a0-421e-aaa0-b2903cbf8f40", "indicator--a61f55d3-7fa7-4ef8-bb88-6d566c90ac60", "indicator--e73cf6ea-e24d-47ee-80fb-7ee454e7f911", "indicator--f7fb533f-1512-4fd8-88a1-9132341ae2e4", "indicator--5fee1bea-5acd-4d5b-9c80-4945eae81044", "indicator--9684d942-6864-41cc-ad80-c361b9c16301", "indicator--974b6528-8f0b-4b73-ae3d-c0dc1fb7dbde", "indicator--5c19ae7f-68a5-46d9-8d7c-b8b644f80d0a", "indicator--2e77dd0a-df8c-4637-839d-74c55e6b67bc", "indicator--47e9235b-6a5d-42b6-a510-68867d29a14c", "indicator--9360eb79-50d5-4a9f-a2f4-0e84512d34e9", "indicator--d6a7d7a5-792e-4b46-b26f-d8fac38f75a5", "indicator--fc1e496e-a837-416a-89bd-027ace3b1524", "indicator--53a23054-36cc-45ae-83dd-d56fdb4a9139", "indicator--9a375e21-d37b-4bcd-a081-edeafd57f607", "indicator--4f8cf59f-dc95-4b43-a69d-da28c5913f01", "indicator--d594e940-6c73-4f40-b9d9-1c7f8924fbe3", "indicator--1bfb7700-3a76-4bae-82e1-f9ceeecc912a", "indicator--6f0fc39c-088a-4572-93ea-895fed9bd369", "indicator--d8c52fda-dfc5-401a-8c00-ef65f4b08bc1", "indicator--8acb79f9-3165-4028-9075-327a59de5ebf", "indicator--9d037a69-2be8-433b-ab4c-b14764697bd4", "indicator--745ec914-10bd-48c6-a5f1-3bd77a44cc3b", "indicator--e1ddb820-74cf-47b3-b777-022166b6d803", "indicator--0f94a342-1503-4ef3-a4cc-5e3c6eb32cb5", "indicator--2384898a-8a05-40a2-aeb5-8c304e6ad590", "indicator--4381e8c6-a96d-4016-a1aa-a90c395755c2", "indicator--d7162d32-4d97-4ab0-8bad-055f90dfadce", "indicator--b68dc044-c5a2-4c55-8e0f-27bbacfedd11", "indicator--c80bfb8f-8fc5-4ce4-9ced-40034ece8d73", "indicator--65a53a73-abde-4a0c-933e-6a02d4645f38", "indicator--e50d0e35-7926-49fa-803e-158b53734d54", "indicator--610566c9-08f5-403d-b86d-c7ce55deddfc", "indicator--1a189994-1b83-4da1-8a6e-2c96b01a2acf", "indicator--ab17df8b-4d6a-4ece-858d-168392cc149c", "indicator--9e1f93a4-f03c-40e8-bb5b-1f8f9f673d8e", "indicator--8f13e152-acac-460d-b11f-f9793fa90e83", "indicator--fdb24613-07f8-4d8d-bd9e-5afb32bea807", "indicator--75c4282a-7270-46cf-9bfb-d200486f5c15", "indicator--4ad7a5d6-5c1c-499e-a03b-20c0d8e09606", "indicator--1d2890bf-29fc-4ce7-b261-395c81be4d0a", "indicator--c85d7e83-ca83-4c85-9323-6229ad6f7a4a", "indicator--0d494a23-5c1b-44f6-ad36-68fbe7746855", "indicator--523dbf16-fe2d-4016-b6be-74ed12310586", "indicator--4569b50b-370a-4f04-b3a6-377e5f09aadc", "indicator--9780c5b8-71f0-4eda-a3a8-d16b7d0b0cea", "indicator--31aeabb5-0d3f-4dc4-bf5b-f2082f19c214", "indicator--a42b335b-011b-405c-96b7-cc43c4ed4bfc", "indicator--a9282d63-c6e7-4efc-8187-35af130e5c0e", "indicator--80ae8e6d-c04c-4611-8fb2-76d08ad3ed1c", "indicator--b4ef33eb-9d92-4580-97a7-98abe1d1bfbb", "indicator--45092bd0-eb16-4e8a-a62c-fdccc3e4b364", "indicator--6514a0a6-05d2-4bc6-9b7f-34924f153b16", "indicator--2f2a1341-4791-4f3b-b0d5-75a69d5b1be4", "indicator--62b5cbac-b925-4ef7-bc18-f4dd8d83b938", "indicator--5853dd9e-b15c-44a7-be83-d2a738ad3b0d", "indicator--d02c1988-cd65-43ac-b503-136c7021139f", "indicator--a16ebc34-3f94-44cf-a858-b43ac2aad793", "indicator--feb283d2-be5f-4990-806e-aeb199228996", "indicator--dad23014-6e1d-4fee-a2cb-9cf89bafaaa6", "indicator--78a41fd1-28ae-45be-9539-7eab00fed918", "indicator--0c7981bc-41c0-4a66-9051-e4f7a4c4a6f6", "indicator--4cd48e01-a44b-424d-a7a3-9b39c8ae29ec", "indicator--dd391249-62ce-4594-bbad-a8211d910270", "indicator--f7664b79-81bd-4551-9a65-21274532628d", "indicator--7cb639e6-aa5a-432a-8980-1d3c4be6bfcc", "indicator--77b2b456-df40-49b7-b61e-a0d9950796bf", "indicator--e4297159-0b79-4892-b1d8-72099518165c", "indicator--2ec767da-ce4b-459e-9a5d-e5e87619c936", "indicator--99725923-1d7c-4958-94e4-f2a6da9f2a1a", "indicator--01f94733-16a4-4fb3-889b-53d9daebed34", "indicator--1b8b048f-42cf-4416-985e-488e2af19038", "indicator--2fe47b66-1dad-44d1-97e7-a3147da08e1c", "indicator--781ae891-b588-4f12-84db-a4e2636e674e", "indicator--7b495cc0-af8b-4677-92e5-4eda08671e2e", "indicator--9b3424b5-64ac-4701-af9f-2cac8bfe4e22", "indicator--79c82cb7-0943-489e-8e11-ab9e8abbe088", "indicator--7a9d07e5-db33-4baa-a784-79548b72e0db", "indicator--a7ea23e2-4a4c-43b7-8cee-e5833ea8af41", "indicator--6596f746-520d-4822-9f48-73ee99848c1f", "indicator--0d5d3221-ea1f-402d-af14-ec5ae6c3f49b", "indicator--9e7561d9-a1a4-4f43-a3f9-6a6733a1ff27", "indicator--bb588b57-d309-45c8-9840-15c16f58dbb9", "indicator--860dfc23-c787-402e-b7ed-4c44d275edb1", "indicator--5a28d577-8373-4133-9ff4-80d00f1439e2", "indicator--5aaf83ee-8588-4c1d-9f08-7877ccedd145", "indicator--f4e7405f-eb8d-419e-ab35-fd7fbee85d64", "indicator--6f22d969-1256-4036-b6f2-160e988c2e90", "indicator--a2e80acd-8e62-4695-b6fe-c8e90a1a5992", "indicator--ff26ef66-5647-4308-abb9-614cceb7b961", "indicator--8018b9fb-6abd-49a2-a217-16c9ffd2590e", "indicator--b23d790f-d311-4a88-9651-5014a1b3a620", "indicator--ddfa50a5-d94a-4fce-ac58-8529017c237e", "indicator--3cb89299-31a0-40d6-a57d-ba3739fe28d2", "indicator--0465eee8-0b70-4339-b3c5-19c084a5a1a7", "indicator--22cb31c6-a651-426d-9dc4-41e8921b2944", "indicator--0ad97034-68bd-49de-806c-59ea85e43f44", "indicator--b481d728-86b1-4359-8e78-83da57e86f6a", "indicator--987a86db-09e7-411e-954d-e6d6d7744e2c", "indicator--6419f012-19fe-46f8-911f-6a01b620567b", "indicator--162f1b66-aed2-41f1-8e3f-db44f45655a4", "indicator--1e9d3bef-d0b4-4633-a2af-7ce58b9af664", "indicator--a64c5d96-9cc0-4268-be20-294410b07928", "indicator--161bf751-8749-49c8-9af2-47a66ca02a95", "indicator--1205c842-5d3c-44b3-a8e7-e81a76f503d7", "indicator--5bcf5169-2a45-4002-977c-28f063a121d9", "indicator--e8040afe-00cd-40a4-9d32-70fa3063861a", "indicator--f9a0b332-99ef-4501-a7e5-d55753f0ac4d", "indicator--0e86bf4e-b812-4d35-bd4f-51ac527bcf05", "indicator--b6d6c75d-4b01-4b1d-95ee-415171b48ffe", "indicator--0382f27d-32af-4257-b51f-75f04892cbfd", "indicator--37056875-1491-4dce-bce1-232960e6d5f2", "indicator--b75571a0-9070-4aaf-9139-246efd514ad6", "indicator--0de63126-a4e1-4c59-845c-3fce0c75e621", "indicator--da276ce5-339f-4d36-b843-d730319b7796", "indicator--36fd7b72-3bcd-416f-8509-46270d17a866", "indicator--90e670d4-1802-4a84-a8f0-d8e3f4e6a090", "indicator--aaca2824-e414-45c1-9752-d98c23bc72eb", "indicator--1fd0aac1-62e3-4114-875b-8cea8dab589d", "indicator--ca9f83f6-9bc9-47f4-b84d-62fca48716e8", "indicator--5af4030f-4b0d-47da-9ad5-fe92d1fe93c5", "indicator--68b93c2e-6323-43d4-8756-1d498878cca5", "indicator--fd32997a-ae5a-41f0-8dd4-057968e1a3f0", "indicator--8fbd3c94-d853-414f-beb1-dd126ec20800", "indicator--e6b152db-0c38-400d-88c0-fc98fa4a0957", "indicator--4e79c559-d374-4d40-b984-bd98406a41b5", "indicator--5da48261-3502-47d1-8658-206ce34570e9", "indicator--95418597-a4b4-4dbe-81b6-9ebe09642f28", "indicator--d05bef73-53f6-4712-bc48-a81e27d912da", "indicator--c805787a-f059-4ce1-9f18-0f95a30de5d6", "indicator--97bfcd17-3bfd-4cb0-8469-fc04fb642f27", "indicator--2531a7c5-9279-4b27-90c8-4748c1588543", "indicator--c462c56f-1250-4b66-a266-176706483b2d", "indicator--ce205c5c-44c3-4b3d-81fb-560a35b0a05a", "indicator--0b4b9131-0703-4a43-bc11-7c42ef968e46", "indicator--d36367c4-ad01-4777-ab24-ef3eee12610f", "indicator--8b6438fd-c768-4fb5-b7fe-831ea265b9c2", "indicator--e5dae34f-8b38-403f-977b-c73c752f8137", "indicator--09bd2fcb-a913-43ea-a1e2-6ee5d80257aa", "indicator--982d690d-628c-4d8b-9267-5e2bf96a3d6c", "indicator--06e7ee56-c132-4378-8fdc-efd64b5d139f", "indicator--5ead43a8-8056-4ba7-8a16-93ecdeb70f44", "indicator--245d4036-2bad-4712-a15e-bc8e4b6222ce", "indicator--74c680a6-40bb-4448-92e7-f2ff955dcb3b", "indicator--58e44739-f334-4551-bc73-f16158c1b3bc", "indicator--4923d04c-486b-4a8d-a49a-22978e847440", "indicator--e2dae323-d30a-4b94-8f59-1d677bf1b0b3", "indicator--f93df074-d11e-41b6-b31c-4c419b67cf0e", "indicator--47cd56f6-4983-4cbc-871f-b5f3480581ce", "indicator--802e296d-fd28-4411-92de-d672107ed0fc", "indicator--98c06f7b-2a78-48a5-8e25-6755c078cee5", "indicator--d5b15d26-2585-4db4-b510-ee6b4774cc56", "indicator--aee7eab2-365f-4f8a-8224-31b89f082645", "indicator--9124ca52-4292-4577-a5cd-241f6b0f6012", "indicator--054b95b6-b6fb-45b6-9e7f-adc0e5d4de39", "indicator--8b4a513b-5b5c-46dc-9e9d-368fdfa486fe", "indicator--a16a9ae7-6f5b-4623-9caa-05035fb99c53", "indicator--95e21d44-4c11-4779-a40d-c93ab8b0fd97", "indicator--71d1cfbe-edaf-40f5-bbab-89e422179048", "indicator--ef160e83-97c3-4675-9478-5bbea53fe4a1", "indicator--4bc5c529-e2c9-4178-913c-8fd3d8680b76", "indicator--bc1f8884-9928-4cd8-9e95-22a85bfe7075", "indicator--b3b002ca-9524-49ec-a8e8-ac0c4531fa11", "indicator--221afc62-ff72-453a-a5ab-828841470483", "indicator--037793fc-e76e-4cc7-95e5-e882b6460432", "indicator--2c1744ac-f6b4-4fd9-b1b2-3b0219bdb5d5", "indicator--48dfcd27-2e0a-49b8-99d1-cbf104c388fe", "indicator--0209762c-4bea-4484-83ac-507d04fb7288", "indicator--2ed5c8c5-1a3e-4c93-b3b8-9ef7a7f0ddb0", "indicator--6cf2939e-2752-4e20-9e03-611c73a45360", "indicator--622e1e62-97e6-4d65-b34b-23c7d729e661", "indicator--396c35f9-62ef-4ae7-8639-a0ccfaec0e57", "indicator--e4a5513f-f5e4-4859-9bf2-04fede07d629", "indicator--9fe37a1a-2028-45cc-81d4-ada7291983ba", "indicator--fd548c2f-279c-4676-8256-2a750da01914", "indicator--87204714-c452-4594-aad3-2cd68f27916c", "indicator--f07a4143-0bf7-494b-be23-24ee74a24aa3", "indicator--95af94d4-9c6b-4a34-84a5-640c6390753e", "indicator--d430b1de-0743-47bc-a087-56c51c038c8b", "indicator--9616032d-31e8-4009-ab7b-ed46cd4a016c", "indicator--1689c792-a6b7-4343-a97b-5744b56e66ca", "indicator--d3ebfd6d-7051-4329-81bd-8ba96531775f", "indicator--4584a1a3-d38b-49db-a3b8-2eb1867af143", "indicator--ba3de69c-a9f4-4385-8800-e4536111780a", "indicator--7f33a5ab-e88f-4ab6-9b6d-c778342ea80b", "indicator--1c9be62b-29b6-466a-a70b-ec65321b87f6", "indicator--765f9119-55ac-4c67-8adc-4fcecc05e676", "indicator--036e7499-07ab-4937-ae1d-e46365dfc601", "indicator--28e32ef6-dbe6-4a05-804a-b0435162bcdc", "indicator--c0f06147-6583-4b2a-b97a-9c72861c6b86", "indicator--b3a961de-8176-469f-a9b2-0b63ceb12485", "indicator--a84a7172-2815-479e-b5c2-09c875c1d95c", "indicator--18e04b09-1f58-4434-b865-30fe536c2df9", "indicator--cd465709-6913-4c76-b92e-86d2184118fd", "indicator--d132598c-0bd6-407c-a6c8-e0a32922693a", "indicator--17cda5a8-e5d9-4c5b-ab5e-e97c616042ba", "indicator--e76d6297-9f43-4bf0-a592-b4b244043678", "indicator--5dc2041c-9531-46fd-bc57-18bcc517a3ee", "indicator--3243a171-1868-457d-9424-a07532a11074", "indicator--490397ff-f210-47fc-912d-4615ede76e6b", "indicator--1cd6fed4-1a1c-4df2-801a-a55018e13b89", "indicator--09694901-e3a8-42fc-a91a-f4da3c22b19d", "indicator--00b17558-70eb-4a1c-ba0f-7ab400309013", "indicator--4e924bad-e9ca-47f8-b8d7-bfe32ff567e7", "indicator--72cec85c-27fd-4533-beae-9af2b19a21e5", "indicator--c04071ff-3a4a-4749-9125-6a137bb5ff67", "indicator--d7835382-b83a-42c6-bef1-8429a30fc556", "indicator--eef70b8e-4ce3-4e42-b74a-2f6a89a11263", "indicator--586bacd0-5b11-4235-bf63-68e7c0f79f63", "indicator--f29ce536-239b-4c83-b97b-66f6b14c4ab4", "indicator--dfe433c4-9567-4178-8a55-57e95523f97c", "indicator--8dee8f66-b831-4d99-9daf-ff46cbf3f657", "indicator--7405176f-6527-4e19-8dce-4a117442ea6b", "indicator--12b4eea5-4e82-4549-b0f7-bd6d122e9323", "indicator--e909490d-ee8f-4cfe-b59f-dc8af78dc777", "indicator--dd582a02-f9c1-44a3-9e37-4b359113a155", "indicator--7695da48-b8fa-4c0c-a773-4c8cc9ba0369", "indicator--87752c79-bc25-4a3e-8d27-8bdf13331a8e", "indicator--8fcdcd4a-c019-4506-ba05-bd3cfec9f4c7", "indicator--2ef0ef54-ef5f-4be7-bc8c-6107eaceeb05", "indicator--d02e47ee-62ff-40b7-9642-e88ae6b5583a", "indicator--9633669e-48a2-47e1-b812-5296dfe67175", "indicator--fe2d2d7f-b926-4d7a-bdc8-67fabf828b8d", "indicator--a8cd06ba-c6e5-47fe-8d0e-14dcae615fad", "indicator--330d0d3f-2e5d-4100-b11b-7069335202a4", "indicator--627a10e3-8ef0-469b-acaf-9252bfe4a3a1", "indicator--2af2797d-e0b5-4210-9818-f7bc89036447", "indicator--233b87a6-a4d4-43a5-b710-f174c90930b5", "indicator--91411351-723d-425b-a80a-08fad3320444", "indicator--e0037b28-9020-4f01-b33b-a3054760b15f", "indicator--5d87d1e7-c7d9-4edf-83d5-45b9bc9d295e", "indicator--eee70bf4-e420-47fe-8a6c-2f15755afd30", "indicator--a6f99fa8-969b-404e-94bf-cb492ca6a809", "indicator--d37b0e90-4eb0-4848-9e1f-0968362682df", "indicator--60d71f1e-87f3-44ff-ad88-f42ca526a884", "indicator--911541e0-3951-4754-9143-ee011ed5fc17", "indicator--65e8625f-5d05-49e5-a3f6-ce0e4b1a9fd6", "indicator--dd230c6b-b921-4897-abab-ca39144abb48", "indicator--5b548a9f-4b50-41b5-8878-7098a7b1556b", "indicator--011e018b-77cc-4e54-b2a3-09a3fe25655a", "indicator--0526e244-492a-4da0-9342-4d3ed5d98cdb", "indicator--b0bf6a3b-22bd-49ca-acb5-755ab3dca33c", "indicator--5e555cf0-1e2e-4f91-8afc-0027121cffa9", "indicator--0a672455-94ef-4c5a-82f5-da388567b575", "indicator--b9fc971a-73cd-48dc-a5d8-22e1565bf664", "indicator--9382760c-af0b-4adb-90e4-24ab36e499e5", "indicator--752aaba0-e579-4a48-bad8-e3c75a4cec4e", "indicator--1361e6d6-3d8a-44a8-bc03-ab6fce67d8fe", "indicator--7ff3388a-ce43-441d-8f25-093d7d87aa0e", "indicator--c0f79bf0-1269-49d7-9c37-9fa71d4f2ab6", "indicator--d3be1cc8-cd27-4b81-b219-80f94860321f", "indicator--6f32c482-70eb-4746-9b48-de99bfb1fe4b", "indicator--cb2b7dde-bb6e-4410-a819-ef69ffa51d9e", "indicator--b01d1b4d-9129-4e62-9d89-236413bb4c8f", "indicator--2410ec15-5cf2-493f-a846-1fb3035bd617", "indicator--e57573d9-c3be-4f2c-80f3-2a1131e60e64", "indicator--ecc8026a-50d2-4b82-be11-6bdebe84855b", "indicator--908bc05b-e139-4577-a397-5dd72f2c9180", "indicator--50202bdb-ce1d-4223-b8b1-17a6d2c36752", "indicator--8ad86730-096e-4894-84d6-622c1255d043", "indicator--1c6cd222-fefc-4c39-89c6-c9fcc58e5a54", "indicator--39e74f54-abaf-4ca3-8093-e9751dcf34fd", "indicator--79d1a599-4327-4dcc-9e7c-1d9b32af9c9a", "indicator--39c57a73-bee7-476a-9a88-d0960cb365c8", "indicator--9e2b0a3b-f162-4cec-9d09-8f7479b590c6", "indicator--83e93749-1e9f-4001-a004-1b7f8287c9f9", "indicator--340b96ec-c7a9-4ddd-a5fc-fe58239de9d0", "indicator--db6ab197-69e4-4ae3-bab6-a524ca8da1ea", "indicator--44da0947-ed82-494f-a6a1-78919a866c9b", "indicator--e98c4e25-92a4-4802-ae9f-cc15e9030165", "indicator--276e100d-3678-46c9-8003-1add438320d4", "indicator--5e215c51-61eb-46b9-a85d-c17c9f2c2a7e", "indicator--cce1c251-234c-4ce5-8621-228603039e51", "indicator--757ec58b-991d-4a77-9d33-5e34c18af361", "indicator--fde676b7-366b-4cce-81ab-24c9dfd3c14f", "indicator--faed7d3e-6808-4b84-8472-a7dae1bcdcc1", "indicator--53ad432c-b100-46e2-b34d-370f65d3a2cd", "indicator--0fb81706-8cb4-4a82-bcd0-d36595da49e5", "indicator--4872b4c0-0315-4431-81b5-fbfbaa163139", "indicator--51de206c-3ac4-4cbd-b98c-42feff6b951d", "indicator--a779315c-a51a-4796-b067-06c3707f9479", "indicator--702aada8-1abd-48e5-afc4-701017afe491", "indicator--72349aa9-481d-45e5-b150-4c924ea8f2a7", "indicator--fe1092fd-7dc9-4ad5-b89e-572c23f5094c", "indicator--867e6703-b1d3-46e2-a60f-798ed415a1aa", "indicator--8bec4399-2568-44de-b416-d07b46bca8b4", "indicator--0074a8e3-ad46-4c6f-99c8-11479d4be3a5", "indicator--bdcee71d-a911-4e82-92fb-f13d645090a6", "indicator--39ba67d6-efc2-4dc4-a98f-419bb3e7f57a", "indicator--50930e8e-ae9c-41f8-a2a6-8210ec7cf050", "indicator--b36cfd0e-1c1e-42ec-ab0b-b94d1ed0477e", "indicator--da519257-cd6c-4ca4-bd0b-5bc10ea36fff", "indicator--bc22a50b-8ad4-4dce-acbc-a6b00fdd6411", "indicator--b1fb4b7b-cdb2-45b2-b170-0897568dfe77", "indicator--ad22da25-2e79-4233-a66f-abf15381763e", "indicator--b351a4f6-72eb-4e07-ab29-26804b40a1fe", "indicator--5fdd1ece-f218-4602-b9f7-6fa2427e30fa", "indicator--052d3f64-64fa-4c59-9e50-8d8602f83489", "indicator--5372e859-38f5-43c5-8b08-c2f0f3624347", "indicator--42b68b1f-340d-4d8d-950a-f745953a9e42", "indicator--9bd8f5a7-979f-4a2c-a846-8c5da6a4f429", "indicator--b7367782-d1a3-4049-b6a9-5e7af18ea690", "indicator--0c63532d-2fe1-498e-9b25-53cca843dff8", "indicator--9be5fa47-bdf2-47b2-85d2-b6770f4ced9f", "indicator--16356919-bd3b-4299-a31d-ebb9e1a18315", "indicator--56c9d96e-4bf1-4466-a24f-cc0dee81e9b7", "indicator--6a502e5d-47bd-4560-9a35-5a126b159608", "indicator--60e6afb9-d0ed-41d4-813e-cd6a8f4e835e", "indicator--eef8ec2d-9711-432f-a963-f7a74556d642", "indicator--712e5b9c-efbf-473e-aea9-c7eb2591bd37", "indicator--8867f19b-b567-47a5-8c48-209447345d5c", "indicator--cef951f4-03b5-415c-8e55-8fb66f972321", "indicator--a0e24f26-fdb2-4337-a644-8bdbef351208", "indicator--9e942873-a160-4c12-83cc-9382adddc573", "indicator--584b7a7c-ffc8-4ca6-ba3f-d2b79c27c969", "indicator--0fe089ad-5cf6-4725-8be8-0eedfc9bfdb1", "indicator--2e2b85c6-ea29-471d-af4c-681de2c0cfb2", "indicator--fc9b05a9-41b4-4e0c-8620-eafc9a583e31", "indicator--dff31679-73f6-4733-aa46-ae3495dbeb0b", "indicator--612a2a85-fd5a-4b61-ba5a-a4478b5a92c0", "indicator--47f22e83-8cb6-465c-b2d6-0d7cf64a98c1", "indicator--a0b4207a-22e8-4e1a-ae9a-bee5e5bda1a2", "indicator--dd0ebce3-6d22-4607-ab7e-62299e97fbba", "indicator--df6fbc94-c661-4d94-a9a4-dbcdc9494bee", "indicator--f60da494-f6fd-4ff9-a498-8fc45d21b59c", "indicator--1ac75f1b-64a0-4aee-bd67-e10fe844a8b9", "indicator--23ed69a5-dbca-4778-b21e-7d1f99476bb3", "indicator--c8b53250-db16-4305-9116-abe2e33bd413", "indicator--e1754117-9f41-45ef-91a5-348e7f0a528a", "indicator--35037fe1-5fa1-4395-a93b-c38d9572de15", "indicator--ca8086de-d000-46df-8cea-bbc0c6cfad20", "indicator--f948eeff-a553-4ddb-8739-49aab386112d", "indicator--4cc9f2f7-df5a-4ab7-a557-7f3c323f045c", "indicator--d3614054-0f15-4e73-81c5-3b4f0700cb97", "indicator--97b2166e-ae9e-47ac-befc-2a68366484be", "indicator--ef5460c4-ff12-4579-8e57-0e652ae2b903", "indicator--9f2740cb-65e6-497a-8864-31beaa100f6c", "indicator--16945427-b0ee-4d65-be12-fe465f8b5d0b", "indicator--7929af07-50d1-400a-a22b-fbdc55758d0c", "indicator--11967679-aff1-4c49-b401-6a907a5e69ef", "indicator--a222b254-9498-49ad-9313-9f5bf84dac0c", "indicator--8affc208-e4d9-4a1f-b02d-b6c84dda21e0", "indicator--028b21ce-e14e-4d78-ad87-523862d1f49e", "indicator--94546b60-4fca-458b-ab21-3c2c699d86e7", "indicator--fca5b865-1c5b-4ecc-b4e7-aa04ecf541cb", "indicator--7a6b9257-b86b-4443-88ea-a946b19d2ec1", "indicator--51a9e8de-636e-4b4d-a3ee-b74d88280f38", "indicator--0f804120-64ee-4f6f-b468-928e908e5d06", "indicator--7e29cbdb-26ea-4c62-9c66-4a41b32c0a0a", "indicator--cb5c74c4-c747-4921-b514-21aaa5100e91", "indicator--66a013a1-a425-4f99-95ab-06cb621bb282", "indicator--85be2125-0030-4b6d-b011-27245007b24e", "indicator--c895bef0-c096-454b-881b-59e3e5cee99a", "indicator--37c33617-a64e-4779-8a21-d05a1fce0aff", "indicator--2684b90e-e7e2-4a26-8f29-093fa658f618", "indicator--fac5d5a4-7d50-4ee9-8721-b47b6392f3f3", "indicator--c8d2f9dc-21e8-4565-8cd2-3faff83084e6", "indicator--d9f9797c-1c55-463d-af22-785bb89af0f7", "indicator--cd5466b8-de97-4c47-9795-cda0c09d7bff", "indicator--b1aedd81-bcf7-4424-a0ae-f8d690378731", "indicator--7fd05c2e-eec3-4b02-806d-6c6aa838c447", "indicator--f23cedcf-a797-46ab-80f9-5669b231353e", "indicator--8c3fb0c9-a3d4-4613-899e-afe14d16d5f0", "indicator--fb4d77dd-baff-4e00-821c-de3543415ff9", "indicator--da567391-eaf0-420f-967a-61b5881aed3e", "indicator--b5228957-43c3-49e7-8701-9c468ede51ab", "indicator--eb7bce5f-708d-44ec-aa30-b154f58f19d4", "indicator--299d8810-1b5e-4888-87fd-a19d3d2a9a8e", "indicator--c95b7708-3e5f-4733-8e69-0c274989de8b", "indicator--816a9bbd-1e47-4c13-b13a-638dcc7c9403", "indicator--42b1721b-dfa2-41a7-a642-47221b3ddd5c", "indicator--0b9862f6-708f-42ec-90a8-fcb77d73de0f", "indicator--d3931c9e-6bca-4fab-a441-334cd7cb296e", "indicator--19302c27-ab22-4606-9ca3-84473d736210", "indicator--469114b4-e3bd-4cd4-afdf-979b1008f5a8", "indicator--bc3331cc-205d-4a9c-a185-00b3c0cf2128", "indicator--05b03ca4-074e-4991-9188-6aa8b00b5d9f", "indicator--44160a64-c711-4cc9-86cb-ebcd01b4e0a0", "indicator--457fdbeb-8702-4257-8206-d645ad08ed77", "indicator--78f7ded3-83ed-4748-914d-b5a96930cb4b", "indicator--053c283c-1c02-4df4-96ef-f06c12f27687", "indicator--d8ae8de8-7234-4708-b3c2-bcb1105e42fe", "indicator--6d24df7d-9a19-44a5-a7bc-3b915d3530a1", "indicator--45379e00-8340-496c-9645-f196caeb10e6", "indicator--d48e625a-ed24-4cd8-b86c-0e21c919567f", "indicator--ec5fa9b2-c5a0-43f0-a187-30ce957df2ab", "indicator--fa9e7f95-9869-4955-9bec-104bd0980dfd", "indicator--dfdac0ad-df6f-44b8-a0c1-d3ada164517e", "indicator--7e6d6bb8-2bf7-4f90-9357-abf7c291ee62", "indicator--7a11b5e6-7003-44a7-baa2-90d979f6738e", "indicator--52f6535f-1aa6-4e52-99a3-73142dd0de9e", "indicator--3e3c2855-6843-4a60-9d9d-6f00767557c1", "indicator--590f14a3-ceee-47e6-900e-c13dd4343e5e", "indicator--8cacccb4-0f0a-46d8-ad8e-838e268d402e", "indicator--b7bad0f9-604b-475a-88fd-9a195735ac19", "indicator--f6bf9a08-a52d-434c-846d-dff700893124", "indicator--3e264fa8-d73b-472b-bc2c-593f3a8918bf", "indicator--2a9d6768-0e76-42a7-abbb-36858ce97bed", "indicator--04948021-4207-4d6b-a440-07a1a7b67866", "indicator--472c07d9-3e54-4a96-86ea-6e1ecf87422b", "indicator--3dc45ce8-a7c9-4bad-9857-010aa1741572", "indicator--3973d7b8-eb33-4abb-9128-65adc0ae21d3", "indicator--7dbeec0b-a3b3-4a7b-96f2-597772bd2eeb", "indicator--657beaf6-8e8a-4987-ab85-28e61be35067", "indicator--144e63a5-7897-4e38-85ea-571d4c3eeafc", "indicator--4d352dc2-0ce1-44aa-832e-07bfc080c94a", "indicator--f3e401b8-f59f-4f8e-9784-c0713943185e", "indicator--646de930-b1a7-4ea1-818c-9c0b7ede27b5", "indicator--392b8e46-4495-4a99-85c2-023c1e3abff4", "indicator--2d9b4c25-aa76-4175-87e1-61720a6b02b5", "indicator--fee6a449-74a4-4dc7-b9eb-26e7d2232d3e", "indicator--96d5f202-0d57-4d77-82b0-a41c12f0c99a", "indicator--d633a419-5be9-421e-9e18-35086bf50f00", "indicator--1f24b5ff-e54b-459a-a060-7255645fca7a", "indicator--857eb6fe-6d13-4852-b85e-bf2c25bad9f8", "indicator--78374c6f-97a2-4ea8-b836-c6695e017e32", "indicator--20b4cd7f-8da3-4e35-9b10-e38d74340b52", "indicator--ca4aa424-a0d7-4446-904d-019c6e134698", "indicator--72d2d675-9f8d-4bd0-a342-ecb31d99423f", "indicator--8ea3774a-5f8a-4292-9680-54c526c86d4b", "indicator--d262a2dd-2788-4a77-a4fb-7a94b38d0a61", "indicator--1a889d79-ee9f-4f7c-9204-1aab5dfe3791", "indicator--f4816ff8-3b9c-4388-ae9a-7883cccbf968", "indicator--46c7fac1-c981-416f-82a8-38e2cd19ef55", "indicator--b5dac577-6796-43ca-a1fd-168cba168167", "indicator--89e371c6-22a8-4681-8f13-8a82ba3dd07b", "indicator--a92f407c-d93a-45b7-9225-05a1f9216d13", "indicator--832191c7-aaf6-4ddc-804c-7577e478e610", "indicator--979efc8f-d5a7-4fae-a596-b76a1422bd8b", "indicator--9f78eab7-9050-42d6-af46-b66d1664c760", "indicator--73bb41e1-9fab-4e0c-a216-b80b989229c4", "indicator--7b12b2b0-1373-4c0e-b8e3-6a6f337c3cf4", "indicator--8ce4e672-c520-4b10-b5e3-51039b47c6b9", "indicator--f3bfd549-79c5-4435-a51b-05fa1de0acff", "indicator--e588c8c7-2754-4bfd-a6ac-7cf89ff4773b", "indicator--83ec2f2d-c7c5-434e-808d-f6ffd04f747d", "indicator--57f0ced9-717c-4331-8eb5-bb1e32d16bb2", "indicator--487fdc9d-5774-40b4-b66f-d15d91722334", "indicator--a5a2d6ed-cb21-4f51-a863-7a35c0983563", "indicator--7f8fb458-ce50-4a8c-96b7-3c14221a7f5c", "indicator--0533e2f0-ff4a-49a4-baa3-dad2bf434ce5", "indicator--6911cf71-d451-49bc-8874-644b12ecf4c3", "indicator--2b974c7f-cd30-40e5-8a64-c64b72908305", "indicator--9446f9a0-3089-4fd8-9504-ff649d3e1b3b", "indicator--8057883c-40d2-41c9-a5c2-7f47ed4fd2a6", "indicator--1a5e6f56-b673-47c8-a032-b1b9632ff1b3", "indicator--751fb269-161a-497b-a574-efb18c22f60e", "indicator--23f965e5-516a-4188-ad41-df47c7db7cd7", "indicator--e6539db3-afa4-4d70-8d32-423ed11fc7c1", "indicator--d3b54979-2032-47c4-ac0c-049f3bd955d4", "indicator--2be3a499-d5b2-41f7-a888-e15e6949eee9", "indicator--7dc3c3ec-97a3-4566-80b7-c3fd5212de70", "indicator--aabbf4d7-4809-4201-8743-b70eba63b0ba", "indicator--4b62a888-02e8-4657-8720-3050eeb295d7", "indicator--b4d6b0bb-e9ad-4bf4-ac1a-5551f7b386d6", "indicator--4198b1a6-28e1-42f5-b503-9461bd9aa054", "indicator--da9bf6cc-8cc1-4fb3-a710-f38ae57c9864", "indicator--23c69b2a-9afd-417d-89a0-d609e127acb2", "indicator--fc2b7d50-c710-4b04-a98e-adc0ebf1c032", "indicator--d480a51c-f338-419e-afb2-580465dccfe1", "indicator--f61027e6-727e-4416-967a-38ed9b7b2bf6", "indicator--672e95a5-02b3-42b6-af95-e0e5f176d951", "indicator--ac9b328a-5229-4dd5-908a-1ebd25d37f26", "indicator--bfbc072c-bdd8-4e25-b2f6-3a211f93aaf0", "indicator--c5ce22e7-2c8f-4b3c-b2cc-669eeecde791", "indicator--d52e2e95-1056-4e1a-ad9a-528c813eb039", "indicator--c33d829a-f426-4d81-914b-942042297bd7", "indicator--d00367cb-4b8d-4dea-a8a2-5d7555f10878", "indicator--05e0956b-2470-437a-9e5b-ff45e4908730", "indicator--40cc541a-d166-4595-a328-201d387507c3", "indicator--24fbd39f-ddcc-4bfe-81b3-b708a44a4479", "indicator--000318de-6b0d-412a-a6c1-0e1a0396d968", "indicator--c729642e-fcf3-459c-972b-61350ccf0d0b", "indicator--187426ef-dd62-446d-ab16-78a3aa34faac", "indicator--26eb3fc8-97f6-4a59-9ff2-6dd33cc3f194", "indicator--413fc203-ec6d-4384-bd48-535f3b401d35", "indicator--746dabca-21b2-42f7-b718-45a3ff75e009", "indicator--e6588825-76a9-48c1-a117-4ac7cd16fbe8", "indicator--0249ca90-2cf3-4ce3-a1b0-db96427aac98", "indicator--c1a7a2b6-1ea6-488b-aedf-d949165dec74", "indicator--dc2541e7-069e-43d2-bd11-be41bc3b2acb", "indicator--4e6b43c7-0d76-42e4-b56f-d2195db63a0f", "indicator--7b5930b6-707d-4564-8742-b90ef0207795", "indicator--2552a270-3577-4ff5-aa6e-6b037be30a6f", "indicator--e7b13b31-c3f6-44ae-92e0-ccfde87a20d5", "indicator--0646d08d-387d-43d9-aa01-4004ea9ef148", "indicator--fc3dd1bc-093e-43d5-9acb-b18e5a976757", "indicator--2231df14-279b-4bcb-a6f9-62121969e9c0", "indicator--a74de58e-1e97-47c5-8791-11b45c2ab7d3", "indicator--7e557307-9383-4995-a2cf-1ebbdaf04274", "indicator--22b5875b-c2c0-4f67-b2f6-230bb93fd537", "indicator--6cb694b4-316a-4f23-9194-bbedf49580db", "indicator--bea7f3f9-12c3-4364-b0e9-a0a503e4b8bf", "indicator--926092d3-a40b-4b15-98a1-8a21ce225332", "indicator--5a0aabeb-ab15-4a83-9ef7-dab230f74c0f", "indicator--9ddb4e55-c8f4-4daa-b803-956285dbe29c", "indicator--e02e8813-2b42-481f-8c61-ea66fb863b91", "indicator--97410bfd-8694-442d-9bef-e299630e5234", "indicator--03c290f6-9e95-4c2f-925e-a8318ea9b011", "indicator--bb64aa26-60ec-4771-b365-ff2e4586396c", "indicator--0e644324-b326-43c5-b9f0-1e9bd74a1318", "indicator--967b8186-cc6b-44a7-a80e-a71eecdda99b", "indicator--21289b15-a740-464e-8139-262e400e5c7c", "indicator--3259d323-936b-4df8-8340-e3cae07c1d1a", "indicator--193f9f81-7e09-429d-8743-af6914e781b9", "indicator--01b550e1-585b-4b99-9426-e5ce4bb06ea0", "indicator--23690779-fabb-46de-8291-b2c0cde37b8a", "indicator--7929187d-8fc0-4101-9f7e-a8832d95eb84", "indicator--d49d0a2d-b582-4ef2-bebb-cd75ab605db0", "indicator--1bb682fd-abd8-48e3-aa06-cc361e3dbf13", "indicator--efca0127-9341-4a25-9110-3e1386a9b4e2", "indicator--eded95fb-4530-498f-a2f6-7c941b49710f", "indicator--a3dba6e5-117a-457f-bf4e-88d1782c3acf", "indicator--de071f8b-c89c-4639-9ae3-390984ae1156", "indicator--6ad540fd-8763-4397-acb6-8e0c33e9a912", "indicator--a5dd1484-b363-44a7-8b8c-f66e404bb48c", "indicator--a4f71f56-7faa-4db2-86a8-ba750359e128", "indicator--6d28a7c8-6e73-438f-8a2c-22bbccc88483", "indicator--1be5213d-4a00-48ce-a8b3-647558446d6f", "indicator--14bc2dc2-3448-456f-adab-a3f53757542f", "indicator--105ecf88-2264-4418-930a-a912f10b74db", "indicator--b79035c4-a126-48fb-8444-645650424049", "indicator--673053cb-e917-40c9-9956-c77c5e47a819", "indicator--cc09349f-bcc1-49f8-9535-c3d8bbfc8f32", "indicator--dd2cedfe-31b0-4e62-beb5-3e94afd7cbe4", "indicator--7bb42cea-a859-495a-b93f-13be242095b3", "indicator--92ce832c-aec7-4919-add0-a834b44eceb3", "indicator--7b633480-1d77-4d14-a2e6-13bb199c98bd", "indicator--b8c34a1a-2228-41af-ac70-fb5a9a0689a7", "indicator--ecdef998-7eac-49b2-852b-7c7fbde90c2a", "indicator--fa34c96e-44eb-4de2-968e-d9d016e04604", "indicator--83581101-8702-4757-bffa-c7613306b50d", "indicator--03ae6953-6a26-477f-a694-e8e4013746f3", "indicator--37ab8ff2-e9f0-4fb8-b72b-edee4cda94f0", "indicator--8817b9e8-b146-44f5-9fa8-73c174ff0f61", "indicator--df88e353-6c7a-4deb-a50d-8ac6c540d836", "indicator--61c4a3bd-995a-41fd-9f74-49d539307f08", "indicator--82090574-b0ea-4933-ac28-ebb4766bf93b", "indicator--e17d4ecc-5bc0-45ee-9f46-8c2c1876c889", "indicator--d1e56b29-f1f1-425f-a98e-e663037fa5c3", "indicator--05469133-a9f5-474d-b073-0cafd9021985", "indicator--78e72947-f8ee-4d0b-a4e2-b568f0e2da50", "indicator--0f3d67ff-e901-46cd-9008-4f00764653d8", "indicator--63fc86e5-f7fb-44d7-b382-0dc855750f7d", "indicator--f9c31c2f-9d77-448a-8085-d4e5801dd319", "indicator--03644f36-af23-48bb-9c1a-76d840c1ee34", "indicator--e171fd47-bd46-4f51-941d-705c422517ee", "indicator--d4b13a20-8ade-4f9f-9efb-2887a69960df", "indicator--e5f42a0e-5ae3-46d6-87db-522744595a27", "indicator--b753f6aa-0908-4297-9ca1-dec53a9bb461", "indicator--0f5c8978-671b-4d30-89b5-4c5c90f2ebbc", "indicator--ad134cdb-ef60-41c1-9717-622ca4f4e7a2", "indicator--464e0e64-ac6c-45b8-8e97-f53e16f0da2f", "indicator--376efba1-264d-4645-95ad-451b5a954f49", "indicator--13af3a4b-07d2-4a06-8372-b0dfb66ca3d7", "indicator--5e7c65b6-1ef3-4264-8840-2f81c933ea32", "indicator--3b021a1f-2aa2-4c6d-a104-d891d175fff3", "indicator--04b79b1b-93a4-4c2c-a5e9-6547c87ef02e", "indicator--2adafc7c-f4e4-46af-ac3b-5c1a45183d2e", "indicator--b13d0e50-0645-47c8-be7a-8ee340a61729", "indicator--01198879-1aeb-4e70-a9da-a77ba8f6884a", "indicator--f4035d26-1a26-457c-abb9-a2d2ec9f092d", "indicator--97233d06-d86b-4a40-9059-b5f0356bd548", "indicator--4781b826-fb75-4045-aa27-183fd594ab24", "indicator--d1b295d9-d367-4325-855e-c5498bf90d1f", "indicator--27b349b1-fa3c-4b5b-80c6-62caeb454fd9", "indicator--60d657b9-e858-49a3-a1a3-20119f9560a3", "indicator--66d8a538-8e12-4449-acc6-0fa3d72242e9", "indicator--b78dca3d-af89-4d37-883f-31905dc83048", "indicator--4460d675-b008-448e-b79b-c1f03225fade", "indicator--d2be77c9-0015-4490-b225-52029e702735", "indicator--051cda51-7d0d-4356-b88b-09a9fdfea474", "indicator--0955020d-cc6a-439a-a699-aa8200df2301", "indicator--bc35cf6b-99c3-4bfd-9b45-e6f3c86e6a03", "indicator--e013d375-8493-40e9-bae6-aad6f186bd66", "indicator--ae4e3288-0ae6-48f3-9b8f-0fa9c86b94ac", "indicator--22715bac-2393-4ac0-a54e-2f889a397fd1", "indicator--c9c4cfd2-5b54-461c-89d0-7fb42ec21597", "indicator--b780cc7c-0c5e-4ae8-95f2-74c747d864ed", "indicator--434cf7af-8c72-4ed1-a4c9-c88c44ca0633", "indicator--84d18ac4-979d-4ba6-b533-417ed7a2b5dc", "indicator--8874e266-edd8-4394-9e9f-bb49358d8f99", "indicator--509a8464-200a-4702-ba0a-83d9ba716da9", "indicator--41aea6a1-ebd6-480c-960a-50297fb48daa", "indicator--e861f3af-c9b3-459d-9e15-47fd5f27075e", "indicator--fd25ce62-4fb0-4309-b5b5-44e8d8d6ff5c", "indicator--9767fdae-73e6-446b-9dba-7ccb18d4216f", "indicator--ab6aa879-bbc0-4dfe-a0f4-896dd124d4d6", "indicator--41b5975f-3664-44d1-9f4b-fc79f093c559", "indicator--9552009a-18a7-49d5-8ae3-f593ab4bfe19", "indicator--1f49f5ec-e831-453c-b309-34ca2b9233f8", "indicator--72d66b12-92e5-438b-b2c6-43a9a6597d85", "indicator--4b2ac65f-9526-4b89-bfd4-c20510f6f244", "indicator--c675ade3-d2a6-4e00-a66a-027d84c29af0", "indicator--5c881ca4-9114-4b04-8ca7-af11e0dc2024", "indicator--68e09e9e-3ba0-4bc7-812f-d824f29a8c59", "indicator--7c29b988-31eb-4c84-b946-7b7c8303f8cb", "indicator--cbbfec28-eea4-47e7-9ecf-db6be05ed6fb", "indicator--8ff81d36-a881-4734-ba19-6c9cb0df91ce", "indicator--8140b0f4-c62a-4fe7-9577-3a7fc4d34f32", "indicator--0bc76fc4-70ec-41d3-b279-ef7f4c4716bd", "indicator--f399dcec-eb47-46a9-a892-8999a83525c2", "indicator--769e8735-05a9-4c81-ab35-bfcbc2171bbb", "indicator--d22e4694-0551-4594-b2ac-d8cdc5bcecb3", "indicator--49f636b5-9b85-440a-aa3a-761959f98df2", "indicator--b358585d-336d-4e10-bd5d-57608f5e97b4", "indicator--5179a92a-9206-4285-93f6-e1a091614b64", "indicator--38730611-a030-4f48-ac1f-e43faf0bdad4", "indicator--0f68178a-acbc-4215-a6ca-88aedf931302", "indicator--2ed5d9a1-7d3c-471c-8f49-6c218e56a5dc", "indicator--caa0369b-3b93-434b-86a4-be71526cbdac", "indicator--7a35ae9b-b172-4f06-9a2d-1a80f1831e1f", "indicator--ef345787-b8de-4931-80f1-be708af3ee26", "indicator--276fd433-913a-401e-834e-b6df69f8bd7d", "indicator--4e47523e-4b0c-43d2-91e7-97d1207c748a", "indicator--ee859649-736a-4117-8a0c-e065d7e7fcf2", "indicator--fa093e48-ce32-47ac-ab71-9100b8485137", "indicator--0343bbf1-dfe1-4007-900d-ae88a5a74020", "indicator--7fc78355-2431-4d28-909d-cd06490a76ff", "indicator--2c0e7d4d-e14a-47df-8d78-a07647475596", "indicator--1a47485b-d653-41ae-819b-4d24462e6ff0", "indicator--148aa97c-50da-461d-9de6-102e7b7f933a", "indicator--a89f224c-a5f5-4985-9393-be0990572476", "indicator--0b46c245-dde5-460b-9336-fd81e0e66a2b", "indicator--c0ba8f9f-53f1-4393-b83d-488d26ae6ff6", "indicator--e2b9c951-1f8f-405d-b1c5-7fb947407e08", "indicator--8a8f90c3-ffac-4781-bed1-6defb1a33fb5", "indicator--d1d2ab28-474d-4996-bb43-3d1ff6347c34", "indicator--3ba925cd-0646-46c5-9b14-542787a87ec7", "indicator--b3db5bcb-205f-41a0-a60a-533bc4ed9eb9", "indicator--8c4cfa89-4068-4f8c-bd1f-3c4d1666ed5c", "indicator--3de9c3d7-82c1-454f-a94d-cd7172553f0d", "indicator--867abe8a-1195-40a3-a3a8-5f6a23870371", "indicator--1b997f9a-01d4-4859-bfed-8c631dc5be6f", "indicator--fab89029-ac9c-4ae4-8004-baffc21dbf97", "indicator--96548fe4-c825-4585-86a8-7cfe946b5363", "indicator--0c3d5187-6a6f-4ca8-8412-cc620f09785a", "indicator--7a911b9b-53d9-4416-877c-be0aa68c68bd", "indicator--0b0079c7-34fb-4f5b-b870-06c0c0f8f81a", "indicator--af82b979-ca2c-4ebe-9f2a-7dc97dcdb55b", "indicator--d571fb82-a875-430c-9226-1c8b75d24867", "indicator--8ab98143-d933-455e-a504-c7e6e2c8f9bb", "indicator--142a20e8-c78a-4748-aff7-bf594f11fa40", "indicator--71d6b908-cd5b-447f-a793-0576b33d36b0", "indicator--2628459a-7540-4fe3-b3de-d07fec6c2f90", "indicator--53a5d9ce-4a3a-4c69-9da7-5f4f0e81007f", "indicator--f4c47f94-8012-4530-95eb-c997e4df4bc1", "indicator--aa522dc7-394d-46db-b893-6ff0fffffafb", "indicator--532ab084-2967-443e-a471-028bc8dc2060", "indicator--e67a54ef-64f1-4424-a11a-60e738d23100", "indicator--7ff4aea8-0de4-44b3-904a-409d346be1dd", "indicator--0272819a-75ea-4342-b575-c27122dc74c8", "indicator--aa24b6fa-807b-4221-9c83-f0bb25490961", "indicator--cb203031-a3f2-4d3b-8087-1f2dd13a6c65", "indicator--721b20f7-3c01-47fc-95ed-701c3a539f41", "indicator--e80a0422-f52a-41be-8870-8d46602f78d4", "indicator--7744e28c-6ab9-4238-924e-b8b606ee3ff0", "indicator--eb2bf66d-543e-4558-9036-a51c22722b17", "indicator--457982e1-9ea3-42cc-859d-c6d695e0d367", "indicator--e96c0950-c174-4191-917a-7d91974201a2", "indicator--be098e2d-6205-49f9-a763-0976dd276964", "indicator--f6bc73d0-af42-43c1-8315-2ec26166d185", "indicator--f2919b0e-74c2-40cf-b78d-45f67406748e", "indicator--ca843f4c-823b-4f3a-84e7-4e383536153b", "indicator--b15bb7b3-4235-46d5-bb17-2d0dc1b64f87", "indicator--51ef0f04-6939-4cb3-9072-df76fb023c75", "indicator--e1f80afe-fb01-4f89-beb5-c9978d9dd9b9", "indicator--f5b54afa-ddd3-4465-9825-d4e279a80d9a", "indicator--da2c94c3-cf97-4f3c-9bc1-7988d6795d56", "indicator--378a3ac7-4dc9-4663-ad27-c5c5cb323c9c", "indicator--a8554dd4-1aa5-48ed-8ec3-c1ebbeeaa5fc", "indicator--8b762410-357c-4a9a-aec9-9b14c1ce00eb", "indicator--e42c1e25-4389-4d6c-a6ed-c2a012574670", "indicator--b88e589c-b575-4896-b527-dff5fe2f6c52", "indicator--cd4df83b-8acd-4f9a-9404-7c5df7175f26", "indicator--143bc4e1-7654-49aa-bc40-66792077c883", "indicator--712b90da-20f7-4bab-98ab-c661a4fc28d1", "indicator--a106a26f-418d-4d52-8cc2-295ee857498b", "indicator--d8d3f157-e66f-437f-acb5-dd628714b0c9", "indicator--5dd88e23-e780-4e83-a77d-27d0652411c7", "indicator--dd8db50c-d919-485b-bbf2-4a051fd3cd91", "indicator--77897eee-52c9-4dc1-ab47-bcc301fd64a9", "indicator--272d184f-4f2f-42d1-98de-c27ca7fe2662", "indicator--3bc4a1be-a65a-4430-8aba-47dd56e74181", "indicator--7c7c0056-cfb2-4966-99fa-4fa5f930f255", "indicator--a11045e1-b234-4e1a-b536-10cd3ef4c384", "indicator--7b2ab754-69a8-4ad6-91d6-03b86c8057df", "indicator--f330e8dc-be16-4321-93e5-51b05b9758e5", "indicator--57e5e963-6bcb-4602-b05d-858d23a88cfe", "indicator--b3663b2b-baf2-40df-b305-b8a8553c473a", "indicator--4995df3d-9b00-4685-b554-810802aeb0b3", "indicator--7cc11ef3-1986-4abd-aa94-b060e9474ad5", "indicator--397695b3-7406-4e7c-a89c-4a9460649656", "indicator--a1d933a2-da69-4868-b15c-1a45c78f4969", "indicator--2c93ec15-fda2-4262-935a-1f178595ace3", "indicator--6df176c8-66fd-4d73-9a48-9a734d50073c", "indicator--03cc444a-0e9d-49df-a4e2-c99222db3a3b", "indicator--256b5f70-712c-49ae-b1c4-8df046c92612", "indicator--9c828afa-4f55-4140-be29-8fa37952a497", "indicator--3b82928c-f037-4b7f-8ab2-560f870e16e5", "indicator--9cca14bb-8730-4534-b08f-e30640fe5a33", "indicator--e3c2b343-9a97-46b7-b3d9-0aade928d88e", "indicator--ee749334-dcf8-4a3b-a48f-7e4fae15fe22", "indicator--48f4ff36-afba-4371-bcfd-fe37f4be3ced", "indicator--ec60cdd2-ec21-40e6-a321-1807652c4906", "indicator--a11bdb0f-5b11-4ffc-af97-9774c8ec0a91", "indicator--fff97443-25d3-4e9b-8c5e-3f8c9f69a040", "indicator--c52fe05c-78f7-4ac3-9ae8-38b5d1b66ffa", "indicator--9274a5a1-3037-4069-955a-f5343d141eb1", "indicator--18856ee2-2440-4bf8-b753-8b8223e36eed", "indicator--ac7efa43-f342-41da-9655-4a8b98615ce0", "indicator--4fb5d61b-7aa0-4a64-917a-4f86a43e05b3", "indicator--50b82445-0a33-4d6f-ba3b-10808cce0d98", "indicator--3677eb4b-fb1f-4c92-ba94-2dc17cecdccf", "indicator--ced12740-ec57-4742-b5bc-2eb82df3c863", "indicator--6c5224b5-f13c-4a57-8652-d5182ebeaedd", "indicator--53ff3227-5a7a-40fa-b851-42b0c5b2ef69", "indicator--172e5291-21f6-429d-a255-7675534d63b2", "indicator--84f3c89d-ef32-4f64-a395-e4922e77178c", "indicator--12044409-1cc1-4ef5-98d2-ee9419583eb1", "indicator--6f324a1f-1cec-4319-a8f8-419a562d3a20", "indicator--3779370a-9455-4687-87b2-cc100c9064b3", "indicator--88117d5b-b355-496f-a530-9a07d379016a", "indicator--48d548af-995b-4273-a583-7d1701173a8f", "indicator--5a4456ab-fffb-4cc8-adc2-a6d5499fcc08", "indicator--1e8b9312-f430-4131-9dcd-d6224c2c8303", "indicator--9f60afba-d3e9-441a-b58d-eafb4742ab02", "indicator--764c463a-a53f-4de5-ba09-1d9312926da6", "indicator--e5f02ca4-fb00-421c-91ee-b697dab98ff1", "indicator--e3dd820b-e03e-480f-b33c-ad5293985d4b", "indicator--ec2ef210-5eff-4463-8abd-b409df86541b", "indicator--fd6b0378-13c3-4dcb-8ac6-0446d1edfc8c", "indicator--6d4dc388-3233-40f4-88c4-43a053e392fa", "indicator--e5b82769-e84d-46e8-8f0f-6c5e7540131f", "indicator--c46b121f-7a23-4f34-ba3a-6d3f792fc87e", "indicator--a2380f39-fe76-42ed-96d4-b0404d4d6338", "indicator--4f6d778f-92ca-4327-8091-10ff3d04fe80", "indicator--383b6177-ad7d-4a96-bfd7-5a2e95d07b53", "indicator--ac267e8a-f4db-4a42-b215-4b056b5665cc", "indicator--ed560e69-f0d0-43c6-90a8-a32070e835dc", "indicator--bb580d0f-4227-4f1a-bf8e-fd9b9bbee8c3", "indicator--74838706-ad9a-47a0-9f86-897dd3ae395b", "indicator--aedd0b2d-5920-4e0d-9e77-a6282287dc89", "indicator--6387b177-19ed-4e0a-9a3e-7cd8599825eb", "indicator--c0a5bb22-6202-44fe-811a-140b5fb735bd", "indicator--c4316daa-f352-41f4-b1a6-dd20eae8ffb5", "indicator--4edfd36e-fd0e-49d9-ac90-92c7a0357c73", "indicator--f11190a0-5d88-4f19-9f0d-77899db4a327", "indicator--e57e04dd-f7ba-401c-8b02-eedf54ac3753", "indicator--a3ca9fc0-caf1-469e-89c7-5b635e28214f", "indicator--29815b71-d6f5-4b8f-ad6c-d64f016b2620", "indicator--30dcba22-8f24-4da5-bb42-62a358a27365", "indicator--80664704-bf47-4475-bf9e-d5ffe2bb8616", "indicator--41f1f172-6a04-4fdc-a19a-60984b2b97e0", "indicator--0a8477c3-ee86-4ce6-a8e7-91194a219ef3", "indicator--96a612da-3398-45b4-8ba2-e6939543224e", "indicator--eed2da79-7d87-4144-ba3d-ae1ab585054a", "indicator--5c6c285e-c9bf-4fa3-b686-27eab774d9f8", "indicator--ce980948-3647-4c62-96e9-935d478665b2", "indicator--099ba3c7-931a-49f8-a311-aa4a5cd81062", "indicator--0b9a4786-1204-46bd-8a9f-6da0c375002c", "indicator--29482cae-1ed4-4e17-b8a4-db173945c211", "indicator--58302834-21b2-46cb-a335-04349154a7d3", "indicator--c080baef-0bbf-48f9-9e0c-e7146d9f66ea", "indicator--0747d5dc-8af2-4494-9ee7-a285517c8621", "indicator--eb910375-4633-493d-affd-1bfe0e2e7dc9", "indicator--c756d441-490d-4e2c-ae4a-d1d4fa7b975d", "indicator--e08a3f8b-de62-4294-82e8-7ff391a08e6f", "indicator--bd9069d3-29b0-45f8-a3d9-1dfbd3489dcc", "indicator--af30c05f-8d4e-4851-bfd9-935b96f051a0", "indicator--4c67ac81-bbf8-42df-a0d3-4e2a478ebff0", "indicator--a4b45de5-8bf9-47b8-936e-0638619c9bea", "indicator--9abc59f8-5405-4910-b56c-0d149a466223", "indicator--daae7bd5-8915-4aad-9945-14119385d8f9", "indicator--c8f97bf0-c9b1-4cb4-8364-d88e9e15b678", "indicator--2565d666-791e-4460-b747-70ebe600656e", "indicator--dbe1787e-8a9d-4fe3-8971-6436de29991b", "indicator--65e1a3d8-3a5b-4bca-ab3e-f96626f958e2", "indicator--47339b17-08ab-43d9-bca9-71e324ab5c0a", "indicator--5dfa27e4-a650-4c9d-94c9-923eaaeec03e", "indicator--f3f5b4dc-58f2-46e9-99af-fcc27667ea85", "indicator--6413ab90-3569-4909-9a31-20111e36b9f1", "indicator--c4170980-c738-4735-a54b-ca0f01ee496c", "indicator--fcdf3723-fc95-47c3-a223-0fdadbf7eb7f", "indicator--99016927-22c1-430a-8fe9-f72315d7f500", "indicator--2b67de94-81bd-4484-83f9-755ea430730f", "indicator--d2b036f6-5c7b-4b0b-9905-abb9c598b673", "indicator--c2ec658a-552d-426a-a436-a94983ced435", "indicator--1aa48e76-65be-4fc7-933a-f4e64a0e845a", "indicator--7c6689b3-0870-4c25-8934-0300df54636a", "indicator--f001f8d8-cdcb-49aa-a39c-79a20571881f", "indicator--e5b7f0d0-4e9f-4b87-92f8-6abdefbf0eb5", "indicator--759f23a3-1bb7-4c8b-9bcb-d59bc3d39c82", "indicator--d2d151a4-46ff-4a3c-b2e7-dbd69fc3296f", "indicator--81ac663a-6dbf-43f8-a666-e7ba23b44107", "indicator--e067cd28-6227-41e5-84b4-b85301af8403", "indicator--83e4ec17-5c28-476b-899d-c46c09adfe4a", "indicator--49b413cd-6e1d-41f2-85e8-975cb1384ac3", "indicator--8b1f0bb9-2b15-44a3-a25f-43061a186264", "indicator--3c60e8b7-e293-4fdf-b73d-ae47456951de", "indicator--c7d07510-92f7-44f9-9553-5ba0ec924f98", "indicator--a912411e-7020-43b5-9215-2734a01959f6", "indicator--682bc3b0-1ee0-4ce2-a885-9e87bd41d2d0", "indicator--a2230866-5d3a-4d06-97ad-9a59c90e25e8", "indicator--f207048c-22d2-4375-b59b-35bc2a53f3d5", "indicator--ec72cc25-7472-4f1e-b92d-19ac6cb92a5e", "indicator--371f55e5-b1de-45c0-934f-edf9380e316d", "indicator--805f143e-93ac-4cd1-830f-1959b2c278bc", "indicator--536f37d3-e8ec-4308-a324-8bc67b663ee3", "indicator--51adcf03-0e97-4132-9581-1de67b9bc779", "indicator--ab3b2a63-acbd-4932-a121-c10e0733a059", "indicator--7025a2f6-22b1-47a3-ab09-bb2588c2fff5", "indicator--5d331d79-048e-4fe4-989e-591e267e823f", "indicator--19e43ddc-e6eb-4835-80c2-9729a41e632c", "indicator--ea91b95b-90b2-46fb-93dc-e54aad8bef54", "indicator--4377de04-ccbe-4463-9711-e56d22bffa60", "indicator--a3d738b7-3d97-4436-8361-8d8b5ae3b18d", "indicator--ce3573c6-2311-453f-b2b4-63978e67abb4", "indicator--fa9ce1e9-484c-495b-ad51-78031d3d9df7", "indicator--d623c6f3-c87a-4fa8-9a0b-1c4755bb9f6a", "indicator--d538e251-5775-43fa-80ed-c982d9a29b05", "indicator--4f0128e1-57f3-413b-b7a8-f21c4e7f8ca7", "indicator--1ef06ee2-3cc7-4b4a-a166-35d2e28831ee", "indicator--d66996d7-38e6-458e-ac9e-9841f3a89912", "indicator--9738bb6a-41d0-444c-bc42-379601638a0e", "indicator--3447f603-63c4-464a-9e01-ecc55584b196", "indicator--f9967c80-8e2a-4d78-ba78-2e4e0854ac4a", "indicator--9628e649-174d-4d28-b738-1da069581f93", "indicator--f2581145-c998-4939-87ed-8d02afebffc5", "indicator--5e5346dd-1142-4a43-95b4-17f65c228ea2", "indicator--8beeae81-3aa6-406b-a24c-077e4065b9a0", "indicator--84e8830d-5f6b-48bd-bcf4-e617de9bf05c", "indicator--f16598f1-1243-4920-b68a-52f40754cee4", "indicator--2c69f3f8-b291-4a9a-996d-76584d27166b", "indicator--e1511022-7fdf-47a1-95ad-1ed78ffdd7d6", "indicator--aa91a93b-7b65-4198-9226-84704dc320e2", "indicator--17500214-10cc-4d8f-8924-f27d6f61bb33", "indicator--0961b2dd-1948-4692-8a4c-133dd15662a5", "indicator--43b2869e-7798-4d96-bb39-993bc5443186", "indicator--a864a2ed-1abc-4dff-95d3-20b3639e50aa", "indicator--57f285dd-921f-4f8a-a352-4eedc4fcb78e", "indicator--68ee1eb8-236f-43d5-bdff-d3c6eca2c342", "indicator--40f1ad23-9536-4a5a-a6c4-15563b929f97", "indicator--f6931a7f-01a6-4465-af29-c69d91b2f340", "indicator--4d7dafd2-f4f0-4008-a32e-f601707a4ac9", "indicator--4c627483-1b85-43ea-8de8-5903c1ecd137", "indicator--246efb05-b88d-43e3-b4a2-709e480776d5", "indicator--9a7755db-6ec0-40df-9c14-989f5e53a8f7", "indicator--117a8f55-3e2b-457e-84ae-c6cdd66127b7", "indicator--a35b8d05-cb35-4acc-b53e-cbc1549f401b", "indicator--5ea01f3a-61b6-4e6a-a352-a09bcc8fac62", "indicator--35da44eb-600f-47f1-87ab-0344627d63f6", "indicator--bc2b862c-f0f9-4483-a344-fc57590d8dc3", "indicator--ea3442b1-9bf5-4f63-8071-45adbf1dcd4b", "indicator--59e5b47d-3325-4afa-af37-4b58c95c43b3", "indicator--f02c7dab-d395-4ade-9ff0-3dd0c4bf45a1", "indicator--3e505a8d-81b0-4b2f-ba46-12966138f408", "indicator--32865566-1057-4f8c-a692-ae273c8b8f88", "indicator--42ab9382-e4e3-4c99-a8d4-4203f21b4506", "indicator--b568ab58-d119-421a-8419-9b002d9e5d70", "indicator--77209b5b-d389-47e1-b3f8-f99f2a467b8b", "indicator--a907da26-07ce-4edb-92b4-8652a57712ba", "indicator--db91afcf-b451-4a66-8d32-eb1ecaab302e", "indicator--15f37636-afbc-4ff8-9363-c9850fe05ff2", "indicator--ee1ac8d7-89d9-4cd2-9208-1bb095eb1e2a", "indicator--b1b42e5d-bea5-4043-9bdb-ff092fb29446", "indicator--9052bf50-86be-4ab1-94bf-5df45bb8271a", "indicator--6cb5424d-6668-457c-a379-0c3b5937f463", "indicator--4f499d63-f963-4ae8-99f6-1c79555f05ee", "indicator--484f58a6-d6b9-43ff-b2be-6c692d43618a", "indicator--75fc6d58-b45d-4e58-a33e-e214e6935d5f", "indicator--fbf4b5c5-118b-4b6c-80dd-4b69ce740333", "indicator--5e5429c4-0a80-478d-a3a1-002e8bc155a5", "indicator--8c38fcb5-1010-4838-a55d-9aed4a9dfe7c", "indicator--612e0be0-5480-4203-adc0-9d5e6258f7b8", "indicator--bcc471cf-1208-470f-8581-b06073dd325e", "indicator--c89ad90a-34d9-4861-bbff-77ab4d8efe69", "indicator--f2073df6-cf97-4254-83fe-49232d79368a", "indicator--2dacc0d5-fe8d-4264-8af1-28809a8b91c3", "indicator--736d998a-dd0d-4b68-b319-f4c8e5ad110b", "indicator--5d5e5a4a-f331-4133-8ce0-725a2b0a915e", "indicator--341e9c57-b483-4408-8106-9b47a930cc17", "indicator--b72cb3bb-0e88-461c-9061-f07e90024dc9", "indicator--f87f58e8-43ad-4f48-801f-7610e1ef26d8", "indicator--284bb170-9c4f-4bc9-be2c-c291534d7a19", "indicator--4d2f2f65-b23b-48fa-b5c4-7be39aa97ff6", "indicator--6b695869-8818-4e27-8523-395059d9a736", "indicator--b2f0c045-a4d0-4fe0-af9c-d56905569083", "indicator--e1f36ea6-8d99-401d-95a5-2fe39edf1871", "indicator--b53d7819-56ff-4cb5-983b-feb4406ce8b3", "indicator--853927fe-2b9c-4e9f-989c-66cde1d50e9d", "indicator--150e01a0-7867-4055-80ed-3b5a24ab7642", "indicator--e2be924f-9a89-4b10-8ea7-d75c98d0dd56", "indicator--5417c04f-d390-41ad-b8ad-f59b13f435ea", "indicator--e225e565-8705-4e94-9180-e103385fe78d", "indicator--c7cde169-1d47-423a-a23a-f36200bbb8c3", "indicator--308c6e54-48bb-4a49-9f51-e671c3391c82", "indicator--ece64c6a-6288-4cb7-a0d7-f3d6477a9429", "indicator--82d5a9b2-d92d-46c6-9164-05b73a3e3c2a", "indicator--9831fb03-444e-48b8-860f-d351993a560a", "indicator--f115d684-eb53-434f-a4e8-1a664d7d6a40", "indicator--6266351e-53b9-410f-bc64-98a02e146c63", "indicator--5af6f4a9-cde0-4fa0-9735-c9c436ddf730", "indicator--4ad942c6-1825-4ec1-b5a8-3923b433768a", "indicator--a02a5026-7a1e-4297-a12f-ae7db98a9ff8", "indicator--08662eb5-ce62-407e-aff7-1be7920231b7", "indicator--ed7e1ce8-eadb-4262-8e58-500d87c24906", "indicator--b86153b6-3396-4d2b-8468-01c6ada3fa31", "indicator--e31226a0-2cb1-445e-a44c-18d65f6fef07", "indicator--362021da-71be-4497-b98c-8254696dcb60", "indicator--679596a3-d1c4-4fa9-af2b-aaf5854509a2", "indicator--529049ec-3c33-4ada-95a5-7cbcafd24653", "indicator--79e5ccd3-dac0-4782-90fd-edfa81b07b56", "indicator--d8176b77-6607-4580-9a66-98435b00b8f8", "indicator--01dda7aa-6003-4360-b0c5-ddecb542e51a", "indicator--bd73edb9-4523-4c54-b3ad-70076cfa60d5", "indicator--800d27d4-dfd2-44eb-ae75-14ec0396b20f", "indicator--814b25a6-dc44-4d8b-b064-7fd92e48784f", "indicator--e0642d29-5b50-4759-83df-9332a41da91a", "indicator--d7526c4c-50cf-4215-b6b2-6a1fff522b12", "indicator--ddbe6700-fbd3-4703-bf3e-ebb77c7d1a76", "indicator--237e0472-1d0a-4ea1-b431-35718629ceec", "indicator--9ce97a9f-7f76-44e4-ba1b-38f8f1286813", "indicator--0bbc057f-d047-4702-8f27-1ab5d1c52c0e", "indicator--ac9dff65-55c8-4fba-a30e-e5ebd61f8e77", "indicator--19763999-b523-4f5d-b5bb-7027f4186191", "indicator--e3e3bc06-2bc1-4544-82ff-d5b278646e63", "indicator--890cb734-c7d5-4161-9875-02b5b0d74ba0", "indicator--44c64480-13f8-4daa-9ac9-56c9e384957d", "indicator--04b10997-561f-44e5-8600-c7f483067739", "indicator--1c5563ac-6b00-474f-a9b9-c36a398ec19f", "indicator--c9ad3f02-689d-4cbf-adc7-abfed1b052fa", "indicator--2d6dc4fb-dd60-4e4a-80d5-c167c3806085", "indicator--4368b753-8a1e-44d4-bfbb-71498a8280b3", "indicator--2b879c5a-418c-4815-ac8e-75c05f46aed3", "indicator--521ab79d-b26a-48ed-a0fd-40bed515a158", "indicator--1e0dff85-1f0e-4bc4-8244-f51536266a4a", "indicator--0b7ce8e3-dac7-4f65-b420-fd068224f256", "indicator--76e0c0a1-0661-4629-9b4d-dfc132c02afb", "indicator--a4608051-5d44-47ae-863f-bb41698210f1", "indicator--12629305-5e3b-42a9-b080-8847ccb8f312", "indicator--27a42b89-1b20-4fd5-ab3b-1efa624f35e1", "indicator--d572f4d2-8225-4978-afba-9e0b4c966de9", "indicator--4fe2ebf0-6992-4213-a961-310f8ec0e953", "indicator--18fcb588-1424-4680-a075-dc93d6556427", "indicator--6e3d3e01-3f1c-4431-83b4-349bcda6d7c4", "indicator--128edd3d-3743-4869-8e7f-75bc36d2db21", "indicator--08b4da3d-679f-4254-b231-79f9aa01728b", "indicator--817485a4-de25-4e0b-bc7c-b020b1be317e", "indicator--2725bab3-5352-4a82-aa0d-2132c5afc7c1", "indicator--1a0ec12a-997b-48ce-8d79-9c9a5c6c94d2", "indicator--7e4f9333-ebe1-4f49-a0cb-c7e2c3c4341a", "indicator--7d775cdf-f1ef-4473-ab8e-17a9c8b35aaa", "indicator--e177d95c-37fa-47d5-a269-c88ee721fd8f", "indicator--938ad5d7-8cfa-454c-b9b9-bf7a20202fd7", "indicator--e5501aed-ec90-4fb8-a968-759a5c025f00", "indicator--4077c4b9-3e2a-4a80-a7f8-a2ed296f5ce2", "indicator--29cc48ba-0e18-4acc-a9a1-b32079d266bf", "indicator--ec18f5ef-c680-44f3-8229-337a27dcbb60", "indicator--cc7f09f9-5068-4d19-91dd-e97005529e6f", "indicator--71c1053e-9945-49a6-8dd5-05e6c89dee13", "indicator--cf432828-88da-48cf-8e40-726b56c6c7d2", "indicator--b6c3efe0-0b08-466a-9e93-e1d804761098", "indicator--0d5087b4-a850-410b-85c4-68fda5d1e4f3", "indicator--c431c1a5-8141-4edc-9b07-b3f255f1df8f", "indicator--9abfb79e-7e10-49d4-8dec-b283a38299aa", "indicator--dbcacdbb-722e-4c41-aff3-55ca16a0371d", "indicator--7dc1353c-23b1-409c-b53d-9063ef6ae9d0", "indicator--b96516f3-8950-4e5c-9317-7ba0a8a71ec2", "indicator--f2234961-e189-40ea-b6b7-ca1a4dbc6701", "indicator--938f3752-8e8d-4372-9bcb-2ae44f8ee954", "indicator--d4202465-b20f-4e34-b0e8-eb9529dc3af2", "indicator--562b8225-6248-4dac-be1c-c1bb2fabde20", "indicator--7529a33f-554a-4b15-8222-888115ce421a", "indicator--b84c7ad8-89fc-4d52-9678-48fc5527d03b", "indicator--6ef70862-4a81-4485-8073-be03f5d2abc1", "indicator--b4d5b305-6531-40fb-8e0a-24d971f3b1ac", "indicator--89837c8f-af77-4c78-8def-7a9b85d81e40", "indicator--811f0c3e-f47f-4259-997d-bffa2c6484e5", "indicator--9e825cef-5ccf-4ad4-adce-8fffb888ec7c", "indicator--ac929d6c-ce18-480a-bed5-8b3b72e5a747", "indicator--38e17382-d501-4c09-a907-76546d9df2ac", "indicator--642fe970-a601-449f-8fb1-b8162bf2d512", "indicator--c14887b6-4415-4d27-a8a6-375da8a9ac30", "indicator--85948a98-2ba9-4833-9d9a-ce869e8df69d", "indicator--c316e35f-064d-449a-975a-5278b5033bc9", "indicator--791e2920-98f9-401b-a8df-25c472cd6931", "indicator--9af0cf74-02a3-49cb-9382-a620e16e341a", "indicator--2b713b56-f95b-4559-a089-cc1b3d6147c4", "indicator--dfb1d680-b513-44b8-96e8-81ca1273c59f", "indicator--7ec208ed-8f51-4523-a85d-e14d20172282", "indicator--2dcd1bbc-1647-4fa6-809a-2a680ae6d1a3", "indicator--00520f6f-9a76-4274-9a68-4ef357a02567", "indicator--9ce552bb-f877-4681-8a38-d5b24002ed0e", "indicator--f131523b-cbd9-4cb6-8b3f-ca66f19dd675", "indicator--80177d81-cd3e-4f99-8e2d-bef1a6eca9ac", "indicator--64828d2a-b41b-487d-91f4-b81bb675ddbd", "indicator--10c75048-523a-4b32-a459-d64c2aaa9e84", "indicator--a5f77dfc-ba84-4c4f-bac8-b246af35d77d", "indicator--31f36c1b-de65-4d88-be4e-e0ee92e31922", "indicator--d9fd752b-8a74-49ea-8a59-5e12ab7b408e", "indicator--f2a1936e-a690-4455-b32f-75e2d8d5ccb0", "indicator--34c0895f-2f42-4c4c-bda5-e8eab6c8bc29", "indicator--f41a7eeb-f0a4-4355-94ab-95d4ee299768", "indicator--865b6755-1481-498a-a491-cf56d5a089e6", "indicator--2b47f890-630d-4b69-a2bf-c94b7d8ce538", "indicator--f9bc9ce5-b366-46fb-8bee-320a987ea0cf", "indicator--bb4956ce-d687-4de9-82f6-cae3afee6a0c", "indicator--6f28609a-228f-4623-a9a1-1f7bff71d799", "indicator--1fde058c-87df-4323-8ae9-caf2e7c035a2", "indicator--da9268bd-e8fe-4511-9633-c491b628ab68", "indicator--ecc0b300-0a17-401f-980f-4ea5af4e6f5c", "indicator--891cfe54-5264-4932-9f29-a6d43b2daf70", "indicator--994c58e2-7f55-440d-9545-34ddc5ae77be", "indicator--7c285744-91ca-4669-8cf7-f0d9863c91e9", "indicator--276dc0a0-d980-4b40-8206-33710920f0af", "indicator--517e8775-3e73-4fe6-9df5-be53dee124d9", "indicator--b14c6a27-1519-4566-984f-88cb54014028", "indicator--732089fd-4002-44f2-a0d4-060615ea75c9", "indicator--e6b22481-78dd-40f8-93dc-9c8d5775bf55", "indicator--eecfe3cb-7411-4081-ac32-15006a185697", "indicator--a58db821-af03-43fa-abf7-84b5277b5289", "indicator--fd1aca39-cf2a-4c25-a95e-62aed08748d4", "indicator--0bde2059-b8ac-42d5-9d29-48e1be02cabb", "indicator--d7ad375a-6595-429c-a1b3-7e7ae1e4e799", "indicator--bb8deade-cb9b-4650-a76e-d6c287458601", "indicator--829d38f5-08f0-4ed0-99d9-7e5915091245", "indicator--4d40f6ec-2129-4b71-9c97-b0b76c8d8117", "indicator--b82c7d79-0488-43ad-a502-3a650e8b65c2", "indicator--6bb8b3a9-5f2a-4591-8514-7083733560a7", "indicator--0268bc37-c0bf-4d64-a09e-ed7231c0c5a5", "indicator--c829905f-f635-4b5d-8d5a-d743b9b31fc4", "indicator--d57630cd-bd9a-41c7-89ce-1db678098726", "indicator--5e472c7f-68bb-4f82-bda6-771f2b8debd4", "indicator--e1963784-95fa-4a8f-89f6-7189c584b5d0", "indicator--830333f8-1bd2-48d7-9095-7e0475ee4251", "indicator--e5bda32b-3c3d-4c6f-b46d-3b391add958e", "indicator--4e3b1c45-e0ad-46bf-953d-db1b0dc47dbf", "indicator--8d38c553-ea64-4141-8234-d4ad2aa4f992", "indicator--309e7f53-890d-4765-977b-89bc5a95ef2d", "indicator--5e2ceca0-5b99-47aa-a192-521b24ae096f", "indicator--f6d6fd54-831a-465e-8446-0bd0733e3cbe", "indicator--745aabf8-ef91-43b9-ac20-df48abaf01aa", "indicator--a525a642-64ad-4364-b6aa-90e39db1e284", "indicator--a744d89e-20de-4d6e-925d-70b183ed4cfa", "indicator--ead2c337-364f-4d06-9ff5-34823a4ef778", "indicator--b9dcbc76-7f89-4076-ab8e-56ccafc290cc", "indicator--aa786f76-b246-4cb7-bda4-519669e0448d", "indicator--0ed868f4-db52-48a0-9c1b-a566f36a1502", "indicator--4b49dc94-41ad-4250-b6cc-b8980df146c0", "indicator--8463811d-50a6-4366-b948-c2d26903a6ab", "indicator--35837fbc-6885-4d5e-9a98-06907c2d9312", "indicator--01bc905f-737c-49e5-a050-173ace6b30bf", "indicator--04ece788-0e8b-47d6-9aa5-df4648b4a923", "indicator--61d6ccbe-19a2-4b8a-979b-ffae72ea7d06", "indicator--234b7686-b393-4204-a3e8-d121f90306d7", "indicator--52742520-7fdd-4dcc-a007-7cdc0d320d4b", "indicator--59b33525-0645-40c7-9340-8e28c8c6d44a", "indicator--9dfa6e97-a7f2-4755-99c3-f8d3e959b950", "indicator--46e13033-60b3-4056-8c7e-198cabfd7f42", "indicator--2d39889e-a8b5-442e-be21-872b62952eb7", "indicator--b9124f88-635b-42c1-a32c-c10ae8a6a9b1", "indicator--c35651ef-defd-44f3-96a0-801dadacaf9d", "indicator--114522f9-9805-4a05-96d9-569fb587693b", "indicator--0865b486-3f24-4fbf-a358-f8cebfc4cc0a", "indicator--78ccf5a1-f051-4be9-841a-e38bd6d0b334", "indicator--eaaf27b7-3f1a-4f0b-b01a-b3f48679c176", "indicator--d0ad480d-b34e-432a-9611-72c83cb9eba5", "indicator--c887ac80-a22a-4e55-bf26-96c53ab51746", "indicator--9b5529dc-e571-4a30-8ce9-0025727055ab", "indicator--932ba3fd-7e81-4957-8685-da86c7b06004", "indicator--9d4647a1-cd9a-40cc-a667-ded41c912d68", "indicator--57996cba-8e04-4648-a39d-977f02eaf143", "indicator--55f03720-ed35-4cce-a84a-e504cc9691a4", "indicator--8def097f-2c19-4819-9cab-8350075f4611", "indicator--07f16086-811f-43cf-877a-1946c7c99092", "indicator--398bc024-c1c9-45a6-be3c-54234bb14f69", "indicator--3522596a-11c9-49fb-ad00-8d651aa77ee7", "indicator--8e5afb9e-e18e-46b2-80ba-4348b0f4c6a6", "indicator--891aafad-a137-4d7f-9516-697ef727df55", "indicator--6a511cf7-0799-488c-a4f5-49db40797730", "indicator--74332664-5e86-47e3-9b0d-f1c421fd2aea", "indicator--5f3c99ae-8de9-4fed-8419-dee267239457", "indicator--0a7c29bd-3eca-4455-bf2f-aa4ec475b5cf", "indicator--914d3f58-8ef3-4a7a-b00c-af139dceccdc", "indicator--e021b2de-a454-4a3b-afbf-c42d09c9d959", "indicator--a0cc35ae-0821-4453-9e14-e73b0fd130f4", "indicator--31df1bce-ae2a-47be-aae6-82d324cb7b0d", "indicator--cd26ba0d-6b4e-4bdc-883c-a7b0a82440e1", "indicator--e2bac7d3-3a0b-4c1f-bdf1-e0ae8f74ebb9", "indicator--ea666f82-9c93-4d5f-bcb7-f9196ce57f10", "indicator--d384e16e-32f7-4332-98e7-fbaa442472b3", "indicator--233f06de-ebcf-42eb-9e9e-1b6e1f5daa1d", "indicator--cfdbacd3-db55-4ed2-8d54-b1e530d79213", "indicator--9439cfef-60cd-47eb-9b7d-6ffd563bb4ed", "indicator--31778701-c19b-4af6-a628-c641cba99ebb", "indicator--b124490e-0908-40b5-9879-dee46368258f", "indicator--7bac8290-0822-48ac-b1ea-b9415781cb0e", "indicator--c7c3af14-e576-43fe-86f7-0c47d7914edd", "indicator--8271d247-e670-4fa8-85ab-2426e6fb9398", "indicator--97410260-22f1-4725-a29a-c47e156bccf7", "indicator--0fd26e59-d0f4-4533-a87b-741134236246", "indicator--57c61180-f68b-4940-9f16-8baf54ae6d0e", "indicator--e872e36e-2d5d-4207-9a74-c1911f2e5485", "indicator--69bdf81b-9a01-443a-b24a-0a01f864d1d4", "indicator--019fa320-2bbc-48fe-8b54-4f3c177588bd", "indicator--49ee8b58-490c-4f32-9f2f-80668f4c2b1c", "indicator--f319cfd6-9896-4ef4-952f-3bd1ccde15b8", "indicator--da419e15-04b6-4404-a552-b18c1ac72d53", "indicator--ef98b6ce-bf13-405e-a483-3ca6e6e6c390", "indicator--b9f3a36d-42b6-46ac-8856-8aa58b4ce8c4", "indicator--ea8233f1-7435-43fa-a02b-6e4b22be867b", "indicator--e1155564-ae63-46cb-ab48-3a7b68019701", "indicator--c2f453e8-0a42-40f9-8a05-bcbf6bec1733", "indicator--69ab9e60-53e3-428a-8b4b-79be99c35c66", "indicator--6ce49908-7683-487a-9813-9760911dcf50", "indicator--e079679d-2082-436a-afe5-891877e6dfe5", "indicator--b8e5e830-9f55-4db3-8a69-1242599ef4ef", "indicator--a9fecbd7-eb49-408c-8532-c53ecebe9fa9", "indicator--eeee5e6a-dc62-4e10-9b97-8154d92c5d36", "indicator--2172ba4e-f04f-4401-8720-730fd45ec80b", "indicator--b672c899-e8de-498b-82a3-89298774fa9e", "indicator--9dc7d0d3-fe19-460a-8c95-ba3708912828", "indicator--605c98a9-b510-487e-8f62-88721ca663a0", "indicator--5ebd6315-30b7-4507-9aaa-9a25f6287729", "indicator--ad807d41-0d2b-4f1d-a475-b48fe2e270b9", "indicator--ad76e7e1-6477-4b78-9b98-3bd7d044d130", "indicator--78019860-d1a5-442e-870d-5ab514688ad0", "indicator--7ec5587b-6afd-4b19-aecf-182ddce95a74", "indicator--06f89fad-2f7f-4eb6-9240-28583075301a", "indicator--16eda203-316d-473e-bc36-4db6c420fd3a", "indicator--bd42c6b4-95da-4394-909e-e3ff316c0293", "indicator--67ec7ea1-03ca-4dc8-ba1d-df010d1536d5", "indicator--478ab90b-ce29-453d-b748-cb765ca13e26", "indicator--9012d8f8-41cd-4eb8-aa06-54b681262135", "indicator--8e750d3e-a3d2-4444-bb9f-510ba9e8572e", "indicator--a7e35fec-ecdc-4407-9916-a9c20ee1533d", "indicator--14acc622-4c5d-43f1-aae1-26c62873da9e", "indicator--0e37d1d3-e899-4812-9af6-fbec105a1026", "indicator--9ce0ada4-d1af-47a1-916d-398282a06785", "indicator--46a0ec59-cbf4-44bd-bbbf-9f8bb6445367", "indicator--902b40e1-d1ef-4cf7-8064-252fa8557e58", "indicator--d2ac1e83-9684-49eb-97d2-24009a165dc2", "indicator--97d555f3-7042-4787-8684-d8ca3ca10a6b", "indicator--6af10dc1-10da-4d03-85dd-f69b12ac837c", "indicator--5d7612f8-33f3-4bff-956a-00eea1c9687e", "indicator--6d1665a7-08e9-4db3-a398-d8f6de1f22e2", "indicator--0469b6b6-efd7-413d-b9c6-bce893cc3e7d", "indicator--3e5bb379-8736-4668-b3c7-51e6c34961f2", "indicator--d25e1f9d-1110-49f6-a93c-a2962e967467", "indicator--45bd4eb1-6fe8-4389-a16d-02178653b999", "indicator--ba03a30f-efa1-4e99-a86e-968d615d7c9d", "indicator--93cf922d-17ff-4db3-a9c1-4fe4640b08f7", "indicator--19ea3591-cb0f-46e1-92ad-cf6f683e716c", "indicator--91eba7f5-029e-4851-bd18-0ef4481de851", "indicator--d76e7eca-6fd3-413e-a3f7-fdc6ee6725ba", "indicator--bcbe522c-5be3-4018-87d5-acb83a72bec8", "indicator--7415d55f-bc66-4d54-a6b3-96bdb8fe1231", "indicator--11b3a658-7dcf-491a-9c94-34ab2d19ba64", "indicator--41273951-7800-416b-ba38-f1fb36819016", "indicator--25c37515-0b85-4061-811c-5d771ab467d2", "indicator--d19d4798-0a85-4f3a-856f-6f469029a558", "indicator--a6e409c7-25c8-4751-921b-139be1d097e3", "indicator--cd8671e3-4812-4b9b-975d-c6d02164725d", "indicator--e98660bb-e7e2-4cd6-b33e-1c140e3e572c", "indicator--19053440-e3fb-4f95-8413-36bd23adb86f", "indicator--4f7e2059-2065-412a-8d6d-7a9469916ae9", "indicator--45b68cc6-b547-4093-bfbb-b47832143167", "indicator--75686cbd-6b87-479a-9222-191fa89e7ed8", "indicator--a420aa0c-e79e-416d-aad0-30953f21d005", "indicator--a235eadc-281a-44c6-bb8f-fb4e9f42db19", "indicator--45274b10-1a82-4319-af46-5183381b5ff5", "indicator--bb8f2d79-bfb5-4db6-ac33-44f38fb4b253", "indicator--b7fb6729-0edd-409f-8b56-b0f62c5642af", "indicator--2a71bf9a-8a5f-4a79-85a9-2a4973fe070e", "indicator--c1973bb6-6cbe-4d14-bcde-9a7425f61446", "indicator--c646aaf2-8e1d-41c3-9667-51d862efadc0", "indicator--2bb6c0aa-765f-465f-9d44-8b70d1b08c21", "indicator--392c2976-c118-4997-b5cc-e35a589e8b04", "indicator--818f6d02-adc8-48c9-89ee-5a982c486025", "indicator--901a4aa8-ac53-47bd-bff3-e8915e335388", "indicator--9bc6bde0-a565-479b-b418-84e47dc5e465", "indicator--8d17127a-bdb3-4112-abc5-7d928efd2684", "indicator--809d17e2-fbcc-48fd-92b6-3f78e5390f13", "indicator--3659a175-fd23-4fb9-a47a-de09e18f97a7", "indicator--5310ddd9-39e4-488d-a2cb-c5649a6d559e", "indicator--2c28a29f-c24c-47d1-b738-cceb60592d32", "indicator--b58b44c6-4805-4a6b-84ae-12d205dcf98d", "indicator--913273b4-41bc-41a4-a2f5-4f150c7c127b", "indicator--1341c1b2-719b-420c-871f-5d98581dde86", "indicator--956da66f-4d43-44e5-8ec9-27cb98b31f9e", "indicator--df8c3021-ca05-4e43-9f7d-62a9194ae032", "indicator--3fd9657d-7a27-41ce-8e2b-612234522209", "indicator--dcaf68a4-127a-4882-ad3a-8d4f633e7cc1", "indicator--0203216a-f259-4d16-94b2-3401345469de", "indicator--b5754119-c384-4463-af75-1e38dffaadfc", "indicator--7478e5ea-3df6-418e-bb3d-dea783baa2f8", "indicator--6011d119-e4aa-4d10-9382-787da70bd093", "indicator--3c955aa6-504b-4bd6-bfc5-215bf5ca873d", "indicator--35eb34fc-4aee-4d2d-ab36-f6118ee1fcb7", "indicator--da7a9005-c595-47b1-8f07-0f88279a4012", "indicator--e5848ff6-ad09-444c-96d5-a11ab1a4cfd4", "indicator--640ddffe-78e6-4696-8a77-ef4f9dce81cb", "indicator--90f58997-6845-4684-93b4-2dd0174fd091", "indicator--9f2000bf-f2e3-4d0a-8762-531634fe3269", "indicator--5d8fbd6c-60ca-4764-8cbc-eadd5ad4141d", "indicator--218a4518-2be7-4a69-a33d-eeceda258b37", "indicator--35b87ca6-f731-4997-8eb8-e87f13f13d98", "indicator--cb3a8f91-1d7f-4f08-b119-86d13649b3a7", "indicator--4ec4e7bd-982e-46aa-a2ee-5fbe605cc3c6", "indicator--9cc81318-cc30-4dfc-8dc4-b5294d02c9a5", "indicator--d979cd8b-9c07-445f-8a84-9a3b7f083293", "indicator--d4addbff-dd1c-4fa2-acac-8baf59361770", "indicator--81a4999b-84b2-4ee2-a014-edb0992b9319", "indicator--a76dfeda-6c81-436f-a846-a4c76a131e4d", "indicator--158e3605-2dba-492c-a19e-c8d8d67eb135", "indicator--9b15c73c-a8ca-42e9-a64b-82800310e086", "indicator--35dd6928-ea6c-41a6-991e-507e33949397", "indicator--ce9da1d5-e1d1-4bdf-9661-94fb0f7cace3", "indicator--c19b1daf-3910-49be-94e6-41214fd95024", "indicator--adb9dc5e-2d93-49a9-b0b3-13f365297de0", "indicator--6135e1d7-842d-4f4e-9e49-5ae2fbbf01c8", "indicator--d5d7dadc-2a6d-4d5b-976a-822b67b76ed7", "indicator--d62cb96c-0f36-4c4b-aa9b-6053d5614b44", "indicator--71e3b7d4-56a9-4259-aff2-bfd54587785f", "indicator--a9c89ab1-4475-4fea-8be1-ce894157caae", "indicator--e1038d12-d456-4de6-a71a-1fbf2cd355bc", "indicator--3b159f32-5cbc-40d8-bd8d-ef872324d65c", "indicator--9b6f9f33-37b1-4bed-9dbf-384d7d6b553b", "indicator--69515658-18dd-4f2c-9ea7-a27a2fcf2f02", "indicator--1d7987b2-be7a-4634-9892-bc276aa320a9", "indicator--f50234d3-df53-4cbb-9490-e76c42086e2c", "indicator--222d8a7d-8fd1-496a-bfa5-a09f39c83daa", "indicator--8447dc73-44ce-426a-b6a0-7a7b5dded5f6", "indicator--58daa1e3-b018-4787-855a-fbb9e1e10966", "indicator--a01dd860-eddc-4d9f-9e42-584c7b6e0ec5", "indicator--18163398-33ad-4c0b-b529-dca6dafa00ef", "indicator--b9046d5e-344c-412f-b2eb-1e5508846c1f", "indicator--22a37c55-def5-42b0-8955-0ddc884a3e24", "indicator--ddf11e30-4683-4b11-9a56-9b73eff90b90", "indicator--6c01a588-b749-4c57-846d-a22a43542ae3", "indicator--ed5a8f08-478f-4366-965e-e59a58ba8d7a", "indicator--e5db327b-37c8-42f1-a88f-b25e428b851d", "indicator--bf44ec27-b134-4527-ad86-661d6c9be707", "indicator--268b3586-fd68-4983-9f44-b226f625eb2f", "indicator--72ef257c-6ebf-48d5-96e5-8fea920cc633", "indicator--f786a348-cba7-4c1e-9878-bb8a4b2ce67d", "indicator--fe0e08bf-84fe-4a96-823e-cfe9b7b38ee2", "indicator--df77a425-c792-4363-9a46-08a62e841e79", "indicator--3968f361-d4aa-463f-85da-a0546959e391", "indicator--990e8704-543f-454e-b521-2a3304a0ab39", "indicator--88852537-082a-4b89-bee6-c612079e0a24", "indicator--15e473c7-0d89-417b-b477-471070410075", "indicator--73f04d80-fbf4-4287-86ad-a3cd5763d581", "indicator--879764ea-c233-4782-b7c6-79e7d44274bc", "indicator--4731c83a-bd4e-4907-b760-778b8e542f53", "indicator--50a9b546-018d-4472-a7fb-c8d93e9c1e1b", "indicator--9dc37ad1-76f6-4286-80e7-0f4899168843", "indicator--b9c629ed-8579-48ca-98ce-a5aaf926cf4f", "indicator--6551938a-f449-419e-a5ff-4b59227fea7e", "indicator--b9e3a71c-cf77-434a-bcf7-79c243428682", "indicator--2d0fa9a9-ee40-455e-8afc-056e51d442f1", "indicator--f24720df-aaf0-4a24-b951-5547cb6769ec", "indicator--5ddd206f-f732-4ac9-869c-b7216cf32566", "indicator--72bd7115-5d0b-4fcf-ac8d-58382d4229e0", "indicator--ab86cd97-05a7-48fa-8dbc-04862f93310e", "indicator--61a7308f-44ad-4d97-b109-d6b5e3376f1d", "indicator--c50ec30d-b3a3-47d0-89e4-8b3892d577df", "indicator--aa9c2fb9-6c55-46a0-9889-b1becf166525", "indicator--97d181a3-6772-410b-80d1-30c52e45589e", "indicator--a9a97841-615c-4c9b-a0dc-10adfb4392eb", "indicator--2527aca5-e8d1-46f0-aa10-63cf7afb03ab", "indicator--5e987787-7f3c-45ff-8aef-dfdc652f4bbd", "indicator--a48484bb-49fa-498c-b498-5c23210a9437", "indicator--40c3caa5-917e-494e-86f8-cd31815e18ce", "indicator--3c767056-c295-4a1c-b329-cac2d17fe60c", "indicator--03168998-26e3-4b36-9024-47c1c25586f0", "indicator--e1a1a5dd-612a-4f17-98fa-a19db15a6f14", "indicator--c33c4af4-7d73-4885-8b57-6f547ed4dcf2", "indicator--9d80ebbe-5b2e-4fd5-a034-680c2dcd6321", "indicator--a6bb32cd-bacb-4e35-a36b-33c1cb6b142a", "indicator--4f1b874d-4446-4e53-a481-97b0d7cb1767", "indicator--b232a662-461e-45b4-a5f4-6cf10fdc04c8", "indicator--ce8431c3-d633-42fa-80c6-c2508da76aec", "indicator--3697e178-733a-4722-b80f-3b2ea90d6b2b", "indicator--ce74fa9f-9b07-4954-8ceb-a0f4bc7e1583", "indicator--a19b5c42-1735-425d-8951-08db1291ba68", "indicator--54e0db22-4ec3-4f85-ae06-1dc969016afb", "indicator--d3d1fc69-eafb-4975-bacc-1e10ea8059e7", "indicator--c0ae72f5-0114-4ceb-bc6e-89cb849da39e", "indicator--f8bab1e9-db8c-4683-9359-262fe86eb777", "indicator--4e7a23b9-2998-4d27-a2b4-94340ec30ec9", "indicator--f42283b9-a4d7-4037-b9e8-6ff7297c7208", "indicator--508b9e8d-fc60-42f1-8afd-f33779bd5c42", "indicator--4b941516-4a91-4b47-802f-fba8443838c9", "indicator--0ab33768-6f31-4fbe-8eae-30f1934f7d40", "indicator--131d8294-ecbd-4779-803c-23b59fb4798e", "indicator--e07a058c-e089-40e5-bede-8abddcf8f008", "indicator--dd970e25-4ab2-48d4-bf69-46b8ef169bc9", "indicator--5375be85-cf98-49a8-9563-e27c5c28c5b6", "indicator--56bd8d18-b776-4db4-b866-f1341d18271f", "indicator--6f91c3d0-2d6d-4394-ba10-adff74dd80e3", "indicator--3114e470-4afc-41e6-a329-1a5d44e0fc81", "indicator--9d2abafa-38f5-41a5-a13a-75f4a4ecb781", "indicator--16fdac4b-4277-4ff5-871c-a78fdc4ca092", "indicator--2d069c4f-7a6a-4cda-9acd-511881ec3a3b", "indicator--1509c02a-e819-443b-9aba-075b74e224b0", "indicator--5d0a5f15-be9b-43e1-8c60-ad037667b9d5", "indicator--db61da6c-b539-405a-9bb3-29edca9e339b", "indicator--15f50bd6-0453-4796-a039-a73ef7eb071c", "indicator--1deaf6c1-5efb-45ff-8ec2-b99129481051", "indicator--022b5e34-8136-4a05-a45b-640b02aab23f", "indicator--183c828f-c77d-4181-a84c-bb5b2543bbd1", "indicator--f63a6fc2-e43b-48cc-9240-5406fb08603e", "indicator--82935d15-0c96-4a6b-8272-ca5d0b3ba8ae", "indicator--7ecddaa7-6648-40d7-abcd-c9d25a0ecbd1", "indicator--6f391906-1be7-455c-8445-bbd1e1444206", "indicator--685a300c-6653-4996-97c0-7d8d8cfa5f2f", "indicator--65891eec-933e-4c03-809f-f0bc99b991dd", "indicator--97260ea4-085c-4f96-8116-b4a92f51fa58", "indicator--992f8815-8877-4824-8e9e-62c5b5a9b6e0", "indicator--51e7f0f4-612a-44f2-8b78-59c2179aa002", "indicator--ff7c081f-62ba-49df-a408-8c1b65e882cc", "indicator--5ed7b75f-3b19-4ae9-bd13-fb48f06c9f1b", "indicator--8472f745-42b3-4cae-bd81-6bdf58547143", "indicator--d50633ff-2f7c-4650-9601-3f54eb5b4b69", "indicator--9f5e131b-d8c9-44a0-90d2-df7fb8e15a7f", "indicator--bd79c6fa-8cf9-457c-8e40-27aa5b9524f6", "indicator--734ea6bb-45b9-4c09-bbd6-102add29ebff", "indicator--6e3c17be-599d-4413-ac48-2aa904206826", "indicator--3d96124d-4e33-45d3-a6a0-23c08114bd86", "indicator--a4fd03c2-90f3-4118-936c-ef5f776cb809", "indicator--88659d9a-d2e6-4319-a58e-3a24369a5d6a", "indicator--ff777463-7f8f-43a3-9605-9378c2b964dd", "indicator--b5de7bd6-776e-4c55-88c2-094ff554096f", "indicator--d9cf2182-98fa-4174-a841-c7ec929462ce", "indicator--2d0b4d97-1b05-4340-8565-8e51431f5b4c", "indicator--275fe84d-5157-4659-84e8-da77826df974", "indicator--b97341c9-5bd9-4218-a688-1ac631df7f3e", "indicator--221abb3e-d814-483d-a409-c20de76c9872", "indicator--155c9365-b93c-4c42-9aac-0715edf6aa3e", "indicator--013e89e6-4dde-4b50-bdcc-68e75512d54c", "indicator--08c93325-1b7a-4f8d-b090-8cd0556c54bf", "indicator--3a1e6e56-e871-4a62-aac0-1b05451e939b", "indicator--d25679f5-ffb9-4210-9e31-3bdabf02b5ef", "indicator--af3c8a87-dccd-4da0-988b-f2c02ef015ae", "indicator--9ab8f8eb-e4ef-49b2-99cf-6e13dd041c81", "indicator--8e50f652-1e7a-429b-9e29-b6b371fe288f", "indicator--639858c9-1b70-4a08-9343-27658a61ba77", "indicator--9d9ea82c-2663-4e25-8ea6-69abdf15d2c4", "indicator--32e9b6bd-3524-42e3-aa25-2bf7afeff30f", "indicator--46ed97fd-e57e-4fae-a280-c45b9c562b92", "indicator--a7b71352-f945-4643-a77b-b27df02cb9ee", "indicator--7a007834-0eb3-4e41-9e39-542d62b46d20", "indicator--23401040-74f8-4695-b0bd-b89066a676aa", "indicator--eebfd7b2-5f15-40d0-896f-d57a12cf7151", "indicator--066f031e-6208-48db-b0cc-0539f49a9cea", "indicator--7a28ce93-51b8-484d-b14a-1ce99d974a9f", "indicator--0dfd5bdb-0e00-4029-9039-3e442094191d", "indicator--0c2a58a2-61b2-48b7-976a-e991a174a854", "indicator--d86b1cea-5382-4e8a-ba7c-71dd18223eb1", "indicator--f683b1be-9596-4067-b5e9-72917d940620", "indicator--a5bae5f7-434e-48e1-b081-25236adcdb00", "indicator--b7cf9244-a134-4fc7-bd63-45c8bdcd82d4", "indicator--a5e3f025-7109-4451-934c-119551465af9", "indicator--0da1c665-9296-487f-9d57-61500c8d94be", "indicator--1652f932-c68e-4261-be85-fa05ad5eca8a", "indicator--ffc4593f-89c9-4874-b51b-89d85dcf4496", "indicator--63e860b7-46ce-44e0-afb2-0e56b02e1100", "indicator--9de67fc7-9351-41bd-85e3-d1b88b6370aa", "indicator--af155374-ae23-4b78-88f2-e5d00d278cf8", "indicator--2147440a-89cd-4059-98cb-6a56555ce0a8", "indicator--50ad98d0-35b0-4785-87ab-e033d155ab2a", "indicator--a5dfb7c9-daa7-45c1-9312-1a9bb4f79495", "indicator--e1a9144f-cd33-45d8-a786-fb74e5d8aab2", "indicator--1ea4eb2c-31d0-4687-aa5f-2ab4cca083bb", "indicator--36597a19-8dbb-4e7d-8f4e-f37c3f6eb62d", "indicator--cb632901-e618-4a80-8473-c40ed74aba31", "indicator--7fb9ec46-ef76-4d84-b52a-2896f3b7cdba", "indicator--bff2297d-bbd8-4019-ac4b-108866edde8b", "indicator--9b109629-6294-4c80-8cdd-cd54de3d892e", "indicator--01886092-c85d-4f16-87ee-779a544da2a6", "indicator--52798cc8-a3ca-43c9-951e-2a72388e06c6", "indicator--f273f662-ff93-4349-9e59-565eddaf0c38", "indicator--f6b466c2-ebce-4cb1-adce-e536a3d6e2bb", "indicator--6eb1d61a-bcaf-43f1-8b40-bb9f4e17073a", "indicator--51bd864c-41d2-46d6-8c92-29e015c59a1d", "indicator--ce45eec7-bb57-4191-9497-63e0f710c811", "indicator--d88fed94-b2c3-4ce6-a9a6-032e317b84fe", "indicator--7f3b0396-6483-4922-bf60-5ccfec354156", "indicator--d1cb59c5-d742-42c6-98b6-e3fa193e7833", "indicator--74656141-6c7e-421d-b179-e366b5d89b16", "indicator--d6b74340-f447-4986-9dae-433817c126a2", "indicator--047b5bc2-893d-479f-a7ad-91ca7979ee64", "indicator--2af61d63-dae8-481a-850b-e8c565a5069c", "indicator--a929a58c-024c-4d28-84a8-6c119c52cb4c", "indicator--f8483cbc-4699-4786-853d-1fffa9521ab4", "indicator--5afee6b8-85a2-47c9-bde1-0c156a023c0e", "indicator--1468b3f6-fe50-499f-8072-7f96876b48bb", "indicator--39fb92ae-8ab1-4659-a374-6626ebdc688c", "indicator--b018495c-fdaa-4774-b00b-378d8fafbaf1", "indicator--15e5d724-a36d-446f-8094-2a2a7c4043d2", "indicator--36540dfe-2476-4343-a6d6-9e177ca1bbd6", "indicator--6a62e26e-2fbe-4ed5-adcf-2896c469b62c", "indicator--1c49299f-4f02-4866-8b5a-eb8015b5a364", "indicator--b4d140e6-e166-4223-b5fb-e159250d7127", "indicator--c5ba06f5-1301-4d6e-b405-938236aa698a", "indicator--a418a8f6-b2b5-41ad-85f9-26dcdf7766c2", "indicator--b3cc6224-7ebf-4e14-b3d8-e059b71c5e82", "indicator--152b667c-0057-4c15-aee2-fc702d923e6a", "indicator--2a788fc4-1109-4f12-a3ba-1d48a58df8db", "indicator--0fde7ac2-99c4-4c34-b126-3678e58c5d7c", "indicator--a48e0101-c83e-43d9-b555-5646a8fc850c", "indicator--eac3f5a8-1963-4eca-9f4f-16dffb1d0f56", "indicator--13404c80-924b-4a00-82f2-53ffc8bbf0a4", "indicator--f1d3198f-9016-421b-bcc8-6c6dd6c53cba", "indicator--c748b5d0-6e44-4ca5-ab0d-dd6edc08e009", "indicator--17b46858-b9be-4ada-b927-6df271e711b9", "indicator--c0343040-e9d0-491a-b04d-1f5b32e6cc11", "indicator--e5669ade-7f3e-4d08-817f-42f490b27c50", "indicator--f92f839d-1dd6-4405-ad12-7b409a2dad98", "indicator--07e95a71-b9cf-4633-9778-c31813f3f365", "indicator--08a2931a-4d7f-4f4a-a1a7-653a5a354797", "indicator--92d35594-c006-467c-b3d9-b67c40bad5c4", "indicator--568c127a-328b-4109-adf4-7f76287bd466", "indicator--c480085a-0c08-4ce4-9351-04b7fc9625cf", "indicator--4b980575-b95d-4bf6-9cd2-bd2267b110c5", "indicator--464e8103-33fa-4489-87ab-8297b25e3755", "indicator--ae82d370-3796-4aba-9854-3aa671ee9e50", "indicator--182d0c43-f17e-404d-898f-837528961c56", "indicator--c420ab91-2ad8-4df1-89e8-8a44a67a2828", "indicator--9bf896c6-967b-4342-8f33-cab26f410106", "indicator--3741e92a-7daf-41b1-bc3e-02f57dca920f", "indicator--a9eee386-6eac-4ee1-beff-f217f3b9a734", "indicator--d10553ab-d031-4dbc-bf98-a45d881d9750", "indicator--c3f21d32-a248-4ae9-8326-7c72045fe487", "indicator--0e30f5d2-74d2-407b-822b-2e79f09df915", "indicator--35bc7703-2ad6-40f3-b68a-97b4bd4af78c", "indicator--b8251913-630d-49fe-ac20-b51007c03776", "indicator--d1fbdab2-dc05-462c-bc20-2cfbded54e0b", "indicator--934dd54e-e6bd-42f3-894e-cd55d712ab0e", "indicator--3a917772-0a56-446a-a585-ae7b82f94ee7", "indicator--a609998b-9186-4bc0-b1b2-e3f03a9e0e28", "indicator--4494c5fe-1472-4004-8ec9-68e0460ce3ca", "indicator--f0872b0d-cc38-4045-b5e1-1d4ea6ada617", "indicator--1679ed14-6348-4827-a9a7-66ff681a0087", "indicator--3fddfff8-b33a-40d5-8b55-2fbf8f440b90", "indicator--f1e34e0e-1b4d-4491-80d6-90655e42b62d", "indicator--a35db42b-5572-4a26-8843-6ed1199e5a6a", "indicator--d2353c21-cb96-4757-bc09-bb0f255280f5", "indicator--5eaac8ed-84bc-437f-bdbe-3d2736cab136", "indicator--3cc81519-8e46-4fe3-b719-b6efb3602b3a", "indicator--3c46bc70-3590-467e-ba6c-cf050d85af8a", "indicator--2d19ee23-41a5-4528-9496-2c3dd1d3ecdc", "indicator--f5f02dee-7b3b-4e6b-b20f-3761d0995e06", "indicator--d6b56192-08de-43ca-bf9c-545c4bb2ad2b", "indicator--1b8d026c-7a1f-40cd-93f6-aede0c95b443", "indicator--613ffa7b-69a3-4fe7-88e8-451951d288b7", "indicator--98775895-04e4-4dbc-8e90-4e09f6c09512", "indicator--fdcb8242-65e4-4deb-bccc-602b6e9eec9c", "indicator--c621b8c9-6a17-4b50-99fc-b71ba4938794", "indicator--9d527532-57d4-4e92-ae7e-7c931ccb6845", "indicator--a912278b-07d7-40a6-94d1-7db6992724a6", "indicator--b383099c-4900-4d08-bec9-a9dcc05663c0", "indicator--68bad3da-5fb3-4dc5-91c9-f7392af06a24", "indicator--8767ce04-f862-44da-8abb-98ef4c15e61a", "indicator--44b54145-9923-4b1e-878b-41d5b830ee20", "indicator--655dcf0a-c959-4bec-9c1d-57dc50dcde5d", "indicator--a4ed07a7-ee44-4968-b7ed-636e803546e7", "indicator--3090711c-2c17-4c54-bf1b-e6bca86597b4", "indicator--732f2ec4-3a35-4c0d-b323-28504000a71f", "indicator--b8fe438e-baad-4cb0-8d67-752643b47604", "indicator--f02d7490-dba2-48a6-833c-dd98eac9909f", "indicator--e2a2e949-4dfa-4435-8e6c-76eff6f814b6", "indicator--13d41f98-246b-4567-be97-82b8534d1452", "indicator--e47fc1f0-6103-4de2-93d8-3c7a7eee69e9", "indicator--1796babe-5dfb-486b-bda6-332e46af3e2d", "indicator--93f02a9b-8834-45bb-8cfa-1e40d23f2f2b", "indicator--5a4b8a07-e67e-48f2-82d8-e544038f183c", "indicator--1ebd6f4c-04ae-44d5-bedc-7e0128818b67", "indicator--ef8abe5f-f1b1-40a3-80c6-1c9717abbf58", "indicator--c63cc69e-f2cc-4494-b294-700f6f31f8c6", "indicator--55347a29-1ad4-4d86-8675-572d9125d6f7", "indicator--b7acb751-7548-40c6-8f6b-fdb5ba7e49aa", "indicator--8428ca82-bc50-42f1-9da2-4a1803f9a5fd", "indicator--d8a138bc-f3e9-4cad-80f1-c8636899c0bd", "indicator--059ff533-429d-43d5-9e80-54284f17cb98", "indicator--89b539cd-08a5-4fcb-81a6-74ac3c75a236", "indicator--abc6fa62-63f0-488d-b1ef-66f29a8575a9", "indicator--37d35761-f834-4a20-9d6c-b8f38c536c3a", "indicator--25b03319-d513-4d7f-a101-1b1ea98b3d62", "indicator--2c87663b-100e-405b-8e6f-8890020e1dea", "indicator--04137bc0-5cbe-42d5-93cd-c8108997b797", "indicator--9790ebc9-e9de-4f07-93ab-f421c4acd952", "indicator--c544bf2b-b8fa-4abd-ac64-371b08076ae1", "indicator--f9a460d1-4f9c-4263-9873-45036be897be", "indicator--6985c445-3297-424b-9ee3-b0a92455af78", "indicator--c481cf93-beb1-41ad-8384-beeda1e76d5c", "indicator--86c459b7-722b-4fa9-8e5d-d89375c67020", "indicator--75256369-83c8-468b-9ece-105a6f7f11a4", "indicator--b3e208b2-a661-4c67-bc47-9c1f245febb9", "indicator--ef8244b8-59c5-48d5-8086-a9aad6d4e330", "indicator--45ead787-ddce-4b6c-bafc-b34fc3a26ff4", "indicator--876bf266-2762-48a3-a81a-212ca862c45e", "indicator--b7ae5bcf-3c83-441a-8125-d99b8a7c7857", "indicator--3344eba6-5a8d-4260-a3fc-60faaa97e515", "indicator--eface312-d20a-452f-a3cf-d13f8cb406ef", "indicator--40a5079c-c581-4a8f-b3aa-32b6d6ded487", "indicator--d305bb5a-64c1-4122-b7f0-b4a1e0515db8", "indicator--d5dd19ae-2d3c-4692-a9bc-1eb9effd408d", "indicator--fcedb215-454b-450d-90bc-ce256783f6d0", "indicator--5d10105c-9791-4d3e-bb52-ec30be1a3046", "indicator--44f0e8d5-2496-4bfb-a58d-b603ea021ce2", "indicator--64550a64-9c18-49dc-8b73-ee87f16df388", "indicator--7f97448b-a2cb-4b37-b606-4842ef5a4819", "indicator--249de80e-42c8-4711-9f77-19cf587ce49f", "indicator--26aa07df-ac0c-4dd9-a962-f738193d92f8", "indicator--a523fbb3-1e20-4942-92f4-d0bc9977bcdc", "indicator--2718d1f3-b20d-4658-92cc-0129bc599f3b", "indicator--737407e5-09b7-4ba4-b950-65cf2391fe30", "indicator--a71207eb-d9bb-43a8-9da9-0e14562a2286", "indicator--0d0f9698-fd34-499a-8779-1cf96edac12c", "indicator--bd163e73-0eee-4ad1-b835-481345a9fb5c", "indicator--0d4e4225-b7cf-4cf4-a132-3837e7a44c05", "indicator--88ee31aa-c6a9-4b39-9ba0-1ce803b0ad78", "indicator--dbea4efd-0d69-4e20-8ad2-afad99bdb05b", "indicator--aa8b35d6-0c00-48e8-b6e9-ba36f2e5ab84", "indicator--39bc4e36-3484-4e20-992a-be8456b44fa5", "indicator--cbd57dba-169b-4fb3-a205-f95a03a9c5ae", "indicator--cfc130bd-06d3-4a48-8fc4-61412accba87", "indicator--910b3a79-cd30-4f17-b26b-cc602aa1a33e", "indicator--82316f7c-3f06-47ff-9495-1331c682f59a", "indicator--7d12cfec-86ac-4afe-b154-dafb736b3129", "indicator--e093d7cf-64a1-4ae3-87f4-4860959c4543", "indicator--0ef372e4-5557-41ec-a16c-b902a98244ed", "indicator--d7462794-c8b7-46a1-be4b-75b392c01c81", "indicator--4a82a04d-b016-433a-81f4-0c3983de8841", "indicator--cfa82435-ed3b-4297-a7e3-e84fa50cafc9", "indicator--f405901e-155f-460c-9187-9f1003e22aed", "indicator--4729bbd5-5dee-4474-975b-ff705455efa9", "indicator--a452f499-848b-44bc-9ba9-c38ba4b69275", "indicator--6084620f-9235-48cc-9e78-68e5bca1c79e", "indicator--fc4ede8e-f583-48e7-b806-8102deb0b013", "indicator--2dabd02c-e4ec-4e2a-9df6-ccc0fa5927f8", "indicator--0775d762-19a0-4f75-bb9a-fde0bbaaefa6", "indicator--c2c00c4c-7655-403c-a92a-3218a93a2a9a", "indicator--6cc43f7d-7bea-4ad5-9448-8302850cdc97", "indicator--784517c4-1a97-4bc2-a4e7-6a7931293f1c", "indicator--ebe2d4b1-fd42-4af6-abb7-c7bbeee7019b", "indicator--95e2ed11-d76d-4554-9537-61eae8d3dca1", "indicator--f9ffb95a-73cb-45b3-96bb-29e80a4d56c6", "indicator--aad34b9e-5139-430a-80c5-616cb4106b8e", "indicator--4b37c882-4606-4d85-87b2-90f496ca13c6", "indicator--16a43829-666e-4195-afad-f4fb5374d01e", "indicator--f4357def-7a7c-478c-8d4f-7c6be2ccd7c8", "indicator--50fa89f3-94d8-4711-a6de-4e4e99718902", "indicator--80512cd2-0c48-488e-be62-823ea129bfb4", "indicator--5ba51171-e02c-40f4-ae1d-cd1ada818f01", "indicator--2c231ee3-70ee-42a0-9351-221e93157644", "indicator--cc426d82-2840-4399-a613-25f0225943cf", "indicator--fbe45e09-4eb9-4cc2-906c-1c1357118fc5", "indicator--857ae3c2-4908-4770-a174-512de123b32e", "indicator--f29a448a-9ef1-458c-9e3e-0ed590b83159", "indicator--5ba792dd-7365-4490-afb4-a3be4ae97590", "indicator--db36da43-2e68-4fea-867c-6dbe77049da7", "indicator--e9fd659c-f685-4476-bc39-726f5fa0b9a8", "indicator--f2e159f3-1f55-4eb9-96c5-c68c72ad19b0", "indicator--b02e8282-43cc-42a2-875d-3cd6f92e5ce4", "indicator--c1ea01a0-a8d5-468c-a039-fe3a7797b7c9", "indicator--ca2fd392-a5be-42b6-a26e-1e38c550924b", "indicator--b140e8ed-9d43-48de-9595-86cc21d44fbf", "indicator--12110398-a4fa-4f62-8c45-119978f37a15", "indicator--c05cec2c-05d1-466d-927e-7dde98219b22", "indicator--2176f5df-61d8-40aa-8aa0-e579726b8eed", "indicator--3d9f651f-6fa1-45b4-a31f-bfd35d244c7d", "indicator--d628d783-0d72-415c-97b4-039515a76c9e", "indicator--163f3865-5df5-4869-aa40-f43397c087ac", "indicator--b121c151-7ff0-42e5-a767-9cce7cb51f2c", "indicator--9bea03bc-8d17-4591-a61e-4825a727150e", "indicator--b8b7678f-2e13-49a6-841a-b801f90f513b", "indicator--a261d614-fe7d-497e-bd9a-080afdf7ff61", "indicator--2748812d-8e4f-4a7a-aed3-8aabae94825f", "indicator--59f4ee47-ee1d-4465-9b53-b404324cc577", "indicator--16e592d4-622f-4d54-9f3e-749f5c9d3ffd", "indicator--31817867-c235-46e3-98da-1101fbfbe078", "indicator--6e1b279b-9f98-463d-9a2a-b297d261d609", "indicator--a7eefdf6-6912-4c6b-a9e2-92fe13bcaca9", "indicator--b85cbc84-4e53-4ad3-b3b9-2c381b983bb1", "indicator--f4c665f7-ea72-46a2-83e4-e9dbe27b6c73", "indicator--c553ca98-dd0b-4137-a979-2088aa320e08", "indicator--b1e7b25b-32b3-4d4c-b04c-7e0cc4e6b01a", "indicator--1edca3da-433f-4c19-8e12-9845cb202511", "indicator--7f27128c-37df-4fe8-8dc7-3f028172c68f", "indicator--5534e48c-3222-4322-9f50-78887983d629", "indicator--0ee524ef-7293-4598-8b35-1bce3bde0693", "indicator--3aaa8ef2-ce7e-422f-8e8b-28979b1b7e9b", "indicator--5319ab67-f448-48b7-a4f7-20431b1a269a", "indicator--e675cc53-ea3a-40ef-bd8f-d0d8152f7f4f", "indicator--9905bf2f-8bdf-47ae-acc7-ae66f7b59b17", "indicator--09279b33-f37b-49e5-a7d5-3c9b6956a1f5", "indicator--a55e5f98-b128-43a5-9b0f-d8ca5e500257", "indicator--9aea1073-5c44-4972-944d-e9ccc114ca88", "indicator--80ef0e67-322f-423d-8026-73f91aa0bf4a", "indicator--1de54e28-38ac-48cd-8a45-c5b91e600f99", "indicator--a2c391d9-19c3-4864-8b68-36fc99d5d0b0", "indicator--0eba82e0-9711-4887-83bf-19b85f9b7626", "indicator--1c3c99b8-0940-4fd7-b270-dc1cbf24c343", "indicator--1e4b6b92-1627-4d93-8f7c-b86512d32e56", "indicator--e78d2d6d-8005-4fd1-a4ae-fc3d8023a38d", "indicator--cf84d1b7-46b5-4fc8-b8aa-e2744a19e0f4", "indicator--3485fa11-5804-4ba3-8073-52768bb7deb5", "indicator--e762479e-96e6-40c2-b5a2-0a47d4f64280", "indicator--32bc9477-16d0-4267-9233-d41373d214c0", "indicator--bad22894-3bea-4fd0-a39a-43db4be4b5ca", "indicator--7b15b4ac-2bcd-4649-81bf-81eb008c7811", "indicator--3b72969a-fb74-4950-be36-dcb1291e3b5c", "indicator--cbc5a481-88be-4ef3-bad1-fc5444e40079", "indicator--bcf0d490-f460-4584-9f42-26296810f3ab", "indicator--16e16caa-9fe6-48d7-9ce8-a29ea4ee33e8", "indicator--fa5efcdb-7e21-4c02-9757-d8134bcfc180", "indicator--a0c5501c-6efa-4d4a-aba0-2991ec62722a", "indicator--ef372114-deda-45cb-9dba-fdf681028fce", "indicator--a8c0346c-ddee-40ad-9449-e2dc31ca0574", "indicator--7a322b8c-338a-4f9d-84a6-aa41eca7aa01", "indicator--9ab4f01d-b3e5-4c17-a8de-2e871c15bfc6", "indicator--446f09dd-868a-4960-87a8-19c49a0bdf48", "indicator--18107b5d-9a23-484a-a6c6-4eca5dc04531", "indicator--51111cd5-43d6-428c-baa9-d92e402d03fe", "indicator--a4852125-a2d9-475a-a479-107035e61562", "indicator--7aaa1bb6-85ee-4ee1-91bd-9c0fb05c0248", "indicator--256ef313-0bf8-42cd-a225-55814ff8f75f", "indicator--7975c3d6-d0f6-41aa-a6c6-9238bc483f2c", "indicator--91addf64-a775-4815-b5e7-26240e275067", "indicator--4054832f-4672-4301-b125-801d079d2ba6", "indicator--5b7fad35-8517-479b-978a-25100f857d84", "indicator--fee9e0b0-040c-4ec1-9b3c-b74a4b2084e8", "indicator--65e027f5-7bc6-44a6-98e8-4e28a7ebf709", "indicator--19279ebd-570a-4ed3-9e67-61b63cb49d32", "indicator--54bc5fa5-6d2b-49bb-a37a-aa7c0aeff9f6", "indicator--30a45bb0-955e-4215-8b06-9f05f41de34d", "indicator--27fa401e-d55c-424e-8150-8cf30597c8df", "indicator--77e183e2-6546-4545-8967-14e30d1e6094", "indicator--e9b1ccb2-2a9c-435b-a5eb-ef981d24662c", "indicator--64c00ac3-c11c-4438-8cb9-a5fa6d426df3", "indicator--9efa92b4-0db0-4bf5-a8a9-cd70f0c2e1c3", "indicator--34de73ed-00ff-430c-ace7-decb92f5a09c", "indicator--dbe120ec-0711-4bec-a83c-152342996de2", "indicator--91a17735-48d2-4f47-9e05-ede7f46689ac", "indicator--4d3f8ac6-fab1-423f-bf5d-59ccf4be3ca6", "indicator--2cd99501-085a-4de7-8d78-8ca4995db13e", "indicator--d5843087-a072-4112-8be1-a360071b6c71", "indicator--51503c15-2c44-4652-b1d8-f0af0e0c4233", "indicator--63e800f1-ca7f-4d61-bc3f-898fbed7ca41", "indicator--a04b0c6a-60e1-424d-b8b4-ef5d91c6299a", "indicator--f041aea5-a7d5-44ff-b8cc-30b4249ebc37", "indicator--807dbb05-de0d-4ff4-81f2-a1325f39854a", "indicator--56052816-3bf4-4526-b104-37cf30a89f2d", "indicator--dd67c7fd-ca35-40e1-a650-e9794444bf3f", "indicator--d00a7a62-fbc1-4823-82e6-85efa572f586", "indicator--668d3c71-4b12-439c-a3b5-ec7585e3c4c1", "indicator--50427401-3776-4305-bd40-20d021f1dbe5", "indicator--24f80efe-b81c-4f15-b1cf-8ef5c92518c2", "indicator--92fcbe70-2b77-434f-8326-ca77d36f49b4", "indicator--66b7f67f-3e54-486f-8183-2a357b9ef4b0", "indicator--922139d4-1483-4c5b-8ddc-c6d81cbb151b", "indicator--8d408be0-4171-4d0b-ae91-18b4bf99b131", "indicator--5a76f4b0-8f13-4c39-a2fb-c348660c780c", "indicator--30cf5595-bccc-4754-a50b-7891f0499721", "indicator--2efb05ed-ffb5-4e07-b626-df255897c65e", "indicator--053aa65a-90cf-40f1-a681-d5f794487c00", "indicator--575709a3-8e52-4025-8d35-441181c90f4f", "indicator--dd8aad8b-4091-4c6a-9393-45ef42e55300", "indicator--51c7e24b-2f7e-4006-aa5c-6b9de50e7342", "indicator--7f206563-25da-4f8f-b4c5-86048e84dab5", "indicator--b5309c6f-f480-42bc-a5f8-4f38eec76a32", "indicator--06aa0fa0-5458-4190-bee6-7db402ea6e0f", "indicator--c3565124-bddc-4baf-bb00-9473d667dc8d", "indicator--280620f6-f86f-4ba8-9312-fa34e49adde5", "indicator--d6170fb9-e6b8-434c-8819-49d3da5e1822", "indicator--92ffa7e0-ad02-4817-85af-ff52927992f5", "indicator--99646e6c-998c-42b8-ba41-793434d600b2", "indicator--b0a77808-a3b2-4cc4-89f0-e55d655aa9ed", "indicator--69f738b1-2d89-492b-8611-3d1d60361c7b", "indicator--46725a5d-199a-481f-b505-b2fd215e2ff5", "indicator--5a3def1b-9a28-40bb-b468-5269a0822727", "indicator--0d0be8b0-97aa-4e13-9ad2-3b0ddcf8233b", "indicator--34e96b43-8fdb-4c82-9226-424a47dce439", "indicator--dd806c8a-d5c1-432d-8114-7b3e307ca79b", "indicator--3c3311e1-9a69-4690-a5ff-f5931ec0c778", "indicator--258ec623-dae9-448e-b1fe-01e0b895308c", "indicator--a1cd49e3-b7c4-455c-899e-ae88e5db1add", "indicator--70d895e2-b702-4258-b820-be4c2154c408", "indicator--2ac46074-39d9-4802-b3b1-158e39f3050d", "indicator--4ba7cf25-f1cb-4b87-b121-e2be9561e547", "indicator--0334b479-20a7-46e3-80ef-07cc3ba65e59", "indicator--b72639ac-7ee6-419f-9aae-dc479af74049", "indicator--eef4d858-cdc2-495b-9851-6a03e692f02f", "indicator--7b500ff3-7de5-43c2-80b6-2e2664a44f55", "indicator--dbb7961a-32b6-4ad3-9d27-588fa03520b6", "indicator--493fd9c8-9841-4e43-9820-af5fdc5c96a9", "indicator--7d3b4f69-a769-4ef8-a67a-1623e9977d51", "indicator--c2a16f0b-0765-47ec-b87d-7427f100d6fc", "indicator--f4111d0c-e0b3-44b8-9bee-4291bce99736", "indicator--fe32d066-cfa4-491f-aba4-20bc218fc2cf", "indicator--5a11fca5-1dad-4e9d-b631-72d677aa6a33", "indicator--645af4ad-603a-4707-a210-7afcb9cd3830", "indicator--34a53812-cb5c-4595-9646-8d8721de40eb", "indicator--c958083e-d8f8-43bd-9bd1-888e79b3eb5f", "indicator--90491846-9e8d-4c79-af91-90bd68077104", "indicator--1539ba39-a973-4128-8b40-56e66eeff04f", "indicator--76700be6-e154-446a-96f5-d41dc3ff1c47", "indicator--496f25e3-0c7b-4adf-9d32-9916895ef197", "indicator--8cfd3ac2-4c02-4e38-be20-2866746ea266", "indicator--85b4244f-ace6-42aa-bf2a-405f75d54014", "indicator--22e656f5-b92c-43d8-8f8e-ff2306176024", "indicator--0262f929-99e7-4e14-b119-2390d7e03f61", "indicator--30acc7bd-ab67-4d13-84b2-164436b8ec67", "indicator--fd71407b-a712-4962-a8b5-ca5aa700a12c", "indicator--52103136-5a01-4bcf-b709-fe4772048e87", "indicator--4e29091b-7ba3-42d7-adbc-0ed1c7f68fab", "indicator--0d773c0f-51f6-4dd6-9cea-5a71ff57ce76", "indicator--e09389c3-d54a-42ab-b33c-9166d3a77f88", "indicator--c6feb2b6-eb41-4b22-9f20-40af66ad6281", "indicator--953468ac-1bec-43ed-bc97-76c3d8f3ba5c", "indicator--20aa0f89-a51b-43d9-bdfa-810b9db232c5", "indicator--a6b85679-03ee-4083-8f95-560c0b53e8e9", "indicator--debaf878-4dd5-47bf-aea6-4c90557f201c", "indicator--efa012ff-2629-4ac9-b8a4-6ba3af3f877c", "indicator--011fb3a3-52ef-45c5-8283-254eaa9274f5", "indicator--69b80167-0325-4767-b530-efe71a02683b", "indicator--8c44c732-18b9-4195-8efb-4a68c100d3b5", "indicator--5a14ea1c-5fb6-44a3-b042-09a87fa00132", "indicator--205e1904-14f0-444d-8276-3119b1a91edb", "indicator--64f3edba-6ca0-4441-8d6c-aaa0d9f45a74", "indicator--1aa55739-7554-462c-9767-f0ab23be284a", "indicator--ba1dad0d-a79f-428a-b557-56ea77d994db", "indicator--e1e4d355-7cb6-4256-a1dc-9331174e3acf", "indicator--5aa9320c-5973-467c-8726-768a0dbcf2ae", "indicator--1e09ea01-4dfd-4dd0-8384-cb24933e654c", "indicator--2353b8ce-b71f-49ed-8a90-de506dd520e6", "indicator--1aa373aa-6493-495e-a1b7-505bf4183254", "indicator--9fa83246-15d7-4591-af89-e8c371309bd0", "indicator--ac05a899-af0e-4358-ac5a-a191f4bf7ce1", "indicator--b167aeb4-efbe-40de-bc66-13efaf640db4", "indicator--b1a28d29-fe26-42cb-81c5-07b77d56a7f0", "indicator--91ac400f-aa06-497b-8d0c-57126f72414c", "indicator--e59bea61-5c05-4302-8a36-b48d5fee4724", "indicator--42ecb9af-f08d-4835-99d8-ca66d30890d7", "indicator--548f0bf1-5222-4fd0-b9bb-26b8bacea1c7", "indicator--a70304c5-9e6c-4a4f-a2d9-45b3a2ea5304", "indicator--320b9175-88aa-4592-9137-9e55e3a679ea", "indicator--b36ea5bb-0152-4041-a8fc-3e2fbb4f9fb7", "indicator--bc912f72-f4d4-43ff-a442-2dd110d07913", "indicator--b8b0b418-5642-4df4-bbe5-6a4b29c5664a", "indicator--d0886d96-6d24-4e5f-9918-9c8abc16dc73", "indicator--eca6c3a3-dd4b-4de9-84ee-ca7b59d6ae8f", "indicator--4d3086f6-4fad-4f9c-ac86-af6c8a54485a", "indicator--881a47c7-4f61-4123-99e0-1ffd7b621627", "indicator--48215618-838b-4a6c-a3d0-309d04e16eec", "indicator--c3304bb8-fb3b-4b98-9f1a-6ac31812f38a", "indicator--0ccd2aaf-ccdd-49f9-9df9-fb1e2cfc4e9d", "indicator--5497d7ea-e727-4e12-a905-7145ec909d6c", "indicator--d4fceef3-c015-491b-b5f7-2743e9895460", "indicator--1e9053d9-a566-41d7-9f2a-2136db39c2ed", "indicator--4435d74e-95cf-495b-a461-5d30072d4d6c", "indicator--22c30413-99ee-41d2-a19d-eed02936d336", "indicator--70205420-095d-424a-9887-56e2c38a6e38", "indicator--4f1666e9-04e7-4d37-ad48-cfac521afc94", "indicator--0d52460a-a232-4910-a1c1-d944b75da160", "indicator--500422d7-29d7-475f-bd32-b0e1bcc747c6", "indicator--e112daed-333f-4df1-9f02-042c84bcf031", "indicator--db779e8d-474d-47cf-9f26-22d8716b3a2c", "indicator--6cd5e390-ba14-487d-b4bc-8e3fd2a6c1c3", "indicator--a53fb263-0662-4405-94f1-971cd94247c0", "indicator--1d9929c4-1469-4c30-851e-05902f6e27bd", "indicator--fd23063c-6cf3-426b-89cd-a9885348b52d", "indicator--f6db0951-7d2f-4a84-91c1-9f7ef81daa4e", "indicator--eef15486-2433-46ea-9175-3bed793b9e79", "indicator--eb4c8c77-eca3-4d7c-985c-ecc1be7ebdf5", "indicator--464b0ba8-0332-4b53-86fc-abd93041f2b6", "indicator--d9fe8980-4816-40d9-bc61-ee71171d0dd5", "indicator--6af428df-59ce-4984-818c-dbcd617c6bef", "indicator--73fa8270-24fd-47c8-83ac-324ccd2ebd47", "indicator--4d4ef3e7-7a2a-465e-8c5d-4c73dddd1bc2", "indicator--7db9692f-5a7d-4816-94ef-7be95f3c3683", "indicator--35923011-91c1-4b97-8f93-8a3202b232a5", "indicator--14dfb66a-4f36-43e7-ad09-bfbed670f307", "indicator--f6893d08-437a-4185-bf66-3b6422d67d88", "indicator--49e4abb4-f94d-4b8c-af34-2ef913d410e9", "indicator--96e50a2c-6479-4437-8d18-53e398e416b3", "indicator--ad76c6bc-2d9f-4bcc-be65-533215d72310", "indicator--a8192ac8-8b04-4e2e-bd67-027386ce225e", "indicator--1ca6d7d8-8dcf-4179-8af2-2782c4da7932", "indicator--b799ce22-4de0-46e4-a576-6f679099626f", "indicator--3b7df735-70a7-4554-81d1-dd74e801c9fc", "indicator--b611333f-ecc6-4f93-a78d-33c2da820b6a", "indicator--f284976f-fbd9-4a99-8b0c-ce85d4c4ee05", "indicator--84aff2dd-b146-4dbb-9576-42ba3ac1124e", "indicator--3ce03ffa-7c18-4d9e-ab8b-392bc8c55fed", "indicator--9f28c790-b359-46bf-818b-a472367aa048", "indicator--14d8ee46-7c3c-4dfd-8b9f-fb81ca374590", "indicator--0aec2ab3-85ec-4b0e-9ce1-020587e43dec", "indicator--9db3f59f-61b7-474e-9664-d04b321e7f0f", "indicator--3c1734e3-9121-4a46-8c25-f8c14571df1f", "indicator--f41ec1e9-ded0-42ed-988d-2a2969aea854", "indicator--fa933438-6be9-461d-8850-c5ad4cd26338", "indicator--a2ab4ed2-944b-47b2-a85e-d915940fd82a", "indicator--65ff81d8-49ef-436e-8796-fda839f0fa54", "indicator--c3db06c0-27c7-4e02-ad8a-2bc8bf89cbaa", "indicator--48de1dc6-807c-4f6b-aa24-862e7bcbb8b8", "indicator--f35625f9-0efd-46d1-94eb-2f65d74a60b5", "indicator--4e7628e2-3776-498e-acb0-87329910f5ed", "indicator--6a64d89b-0be5-4610-963e-6bb940595efb", "indicator--16c9934f-b325-4e72-98f9-7ba19ae7a575", "indicator--3b6c7d3f-ccc3-4e0b-a4c1-f620e9ad1e82", "indicator--274756cb-a00c-4632-9f16-44bbe263b2f4", "indicator--c2c4237b-7d0f-4156-a9c5-c490a5ca38ab", "indicator--7bb683d4-6dc4-4e52-8572-baaeb87fd10b", "indicator--25e49190-45a0-46a9-8090-f2c832c44a0e", "indicator--4480015d-0887-4e16-963a-de2a932d5756", "indicator--7b0e57c3-8a98-47dd-b895-675a05832f39", "indicator--6a900190-aeec-413d-9e5e-53522a333d79", "indicator--7b0a9c4d-88c7-48a0-9036-0d961e626915", "indicator--c380393d-ee3c-4ac0-b611-ba2eeec64db7", "indicator--a7ca1644-380c-41f9-8c6e-2c6cdbb99cf8", "indicator--4706d746-61c5-499b-8de0-ae96686f2426", "indicator--d978ce4b-c9cc-4394-9ac2-b5327ba39e34", "indicator--3a73ce3e-ede5-4838-86cd-c05e9693f039", "indicator--5f1a8ecf-3fc7-41ed-a60b-651c572484dc", "indicator--0d0b7be9-d6f7-4c6f-9aeb-9694c08ebef5", "indicator--385ff994-8162-4918-a02a-0c6297021b9e", "indicator--01291172-2452-4450-bed4-c94fa8ab8e5e", "indicator--0f75b9f7-eb24-481d-8cb8-a0b2e13dfa19", "indicator--f9365938-781f-4969-9c31-e01ca661ba9a", "indicator--8649c5e6-f38e-4b85-a642-0dbb1379f139", "indicator--a01fab40-3ebc-43ed-af86-b7a5e663de62", "indicator--cabf09d8-1df5-41a7-b39d-d46644a9d75c", "indicator--f673b815-b26f-4076-b930-8d5854000afb", "indicator--59b15910-25f8-4726-9a72-c00d63804956", "indicator--ac35d18d-dda0-4c09-a8ad-5287592c7c02", "indicator--dd8e05ce-d36b-4b9e-8ec2-71ee169ee5b3", "indicator--9eaefa7f-ad37-42ac-bd37-2beb4498bd71", "indicator--35c56d40-daa0-478e-bb64-9a9156e3a298", "indicator--91745011-9b5b-4b66-95cd-eb272a5da23e", "indicator--b7a6a883-83f8-4eef-a7ce-03c338689c57", "indicator--a12b99cd-c63c-4713-ad21-cdffa67d7645", "indicator--3aabe12a-c61a-4f02-8fdf-e4f95154d074", "indicator--fc67816a-719c-4950-83b4-c26a6ab037fd", "indicator--23d7a024-7d8c-4997-b5da-0e84be669fb4", "indicator--5de54f87-bb7d-4c34-ab33-5c81ecde59c3", "indicator--79e6c09e-17b9-430c-bec8-6477c08d2e9a", "indicator--72199147-222d-4c15-a6df-f0fbcc3b8be2", "indicator--f387eb7a-cf68-4b7e-9b4f-5a3ccab7ac8d", "indicator--b3680114-d2f9-4299-9540-a10f22051280", "indicator--f4f31360-313b-48c2-942f-7bfe0815cd4f", "indicator--e23f6dac-0042-420e-a40f-f0696bb9ec54", "indicator--5a5311f4-7a22-4fa4-9203-8fb0055a4615", "indicator--f66a13be-8ed7-4e2a-a49f-608b366e9c93", "indicator--f9f9b2e9-175f-4857-b936-76e17b3db064", "indicator--70f6efe9-11c0-487b-8421-c0fe50c959da", "indicator--1187c7e2-8e8f-4f70-ad5d-0e21cc7e9b9c", "indicator--3dfcb7e2-ec24-4cbf-b69d-b1b50c418c7d", "indicator--26ccadc7-794a-4c0d-98ed-6ace41a95ee7", "indicator--48669ff0-0298-4377-8403-03c4908c2401", "indicator--b15a372d-255d-4fa4-9bf5-45b20340e42b", "indicator--c9e20248-2ea9-46d0-82aa-24519e6fbeb8", "indicator--00ab654d-8ae2-43dd-8414-2e6cbd72236f", "indicator--4f2fb3f4-d4e0-466d-b539-5de08f310658", "indicator--0cf11452-4541-4bae-b5c4-d603977ae509", "indicator--e12f8d9b-d18a-485a-8b4b-68fc45083529", "indicator--b6035a0d-e234-4260-91ef-eae38ec3394f", "indicator--a2bf9966-2535-4513-9fb8-491cd0eaad7c", "indicator--cff8228a-546c-49c1-8ecf-ff3fa866062f", "indicator--f1e7d85e-f23d-483b-a7de-bbc85262a059", "indicator--b14bb71b-2969-4663-a0fa-0d5cce892711", "indicator--c344b75e-0c62-49ff-93c5-e935b2d18f26", "indicator--2cce8dcf-8877-4cfb-84e9-e0e2dba7d0cd", "indicator--cc3ab72c-2fe7-4e49-a055-ac335d241c5a", "indicator--7b0d3893-6921-4a73-8e14-b2ad78623a99", "indicator--1f8b5115-128a-4180-9775-b3802b431965", "indicator--14369cac-c8b9-44af-aeec-a40d808299da", "indicator--ca8d6a6a-e4d3-4925-b7b4-bb0c501f6a96", "indicator--13156165-a894-4b82-85dc-298c11657363", "indicator--66bf0f7c-3093-491a-876a-5af0672edca2", "indicator--7c69fe58-7e3e-446f-aa40-eedbf56e5927", "indicator--a324aaa1-8964-4cf2-b9ef-df01d05197cf", "indicator--d9544c4f-837c-4fb2-a788-61af4fbc71bb", "indicator--cddd47b6-8e20-4361-86f7-230e2ef2d65a", "indicator--c443d78c-d209-4a7c-84ac-c62ed84bab0a", "indicator--8b20b164-ee9f-4f66-a436-02ac2f23a5ae", "indicator--c6735332-310d-4b26-8e04-11208762b237", "indicator--7c342f7e-e8f9-44be-a529-f276e213144c", "indicator--4373c9ea-7166-427c-ab78-8efed62a4d13", "indicator--00c2786c-3c89-43a5-b19a-c445c67014f0", "indicator--a9d79432-3303-434b-897b-45e93ed5ed13", "indicator--9e1e0641-990b-4d3f-9bc8-9966f76f149b", "indicator--8840c2e1-2f31-4b54-875b-818bb25103f6", "indicator--13a60b89-d28d-4aad-8965-4e8324646c3f", "indicator--f9248189-54e8-4093-ac30-7ea2ec764259", "indicator--2d277191-ad4c-4108-aa7c-77f40a575cde", "indicator--86e101f1-6dcb-4453-b016-6e9a02fac77e", "indicator--7e7bef8f-bd8f-4406-9ea9-771c6e57c566", "indicator--4d091be1-2bff-4e63-8e74-5b22afeab8aa", "indicator--7339e3dc-73ab-49bc-8c2d-fbcdc0cf21f3", "indicator--1845d43f-123b-4fff-bedb-26d7f85de6f1", "indicator--0acfae2e-a03f-46fd-94e7-fd21deaf811c", "indicator--d2d7d819-7e04-4a1e-8eb5-7b9dc9c0a52e", "indicator--0d0484ba-598d-4e7c-8879-07d6be338435", "indicator--539f3ee3-4c4c-4cee-8ad3-89c24d5d12ac", "indicator--b5e0418f-4dd1-47be-8b40-bdf274f9b6fb", "indicator--40238347-d52e-444f-a618-1e7de02b5cd1", "indicator--f83ca953-2df6-410d-9730-8309c5881f4f", "indicator--7533381b-751f-4f71-8983-21c57fe5674e", "indicator--aec29170-b3dd-4464-9dbb-2346adf2cfbc", "indicator--7d2bacaa-0cbe-47e5-8f9f-052b76401bc4", "indicator--faec0f87-20d0-46fc-9038-196c3e05b1a6", "indicator--6ae10388-8560-494b-96b5-9630f1367c52", "indicator--74683029-634d-4584-a569-59a021ddc6b3", "indicator--912332c5-e4c5-4870-8085-7552ef1abd39", "indicator--0cfab0ae-755f-4aa6-9dbb-07072194efd6", "indicator--f9e2ed7f-ba7d-473a-a899-7eff3288dcf9", "indicator--35d79023-b180-4a99-a588-5168ba6f8a06", "indicator--6dbb4256-0227-422d-b3ae-6bcdb909ecc5", "indicator--8d809fa9-800a-4ade-b270-c12de63f497a", "indicator--18d68629-9668-4f05-b847-730d8c1997b1", "indicator--c02ac537-1119-4c73-a95f-341bcc148628", "indicator--2f20987f-7223-4058-8cb7-45566ad222d1", "indicator--d5f9de25-1912-4eec-82bc-b5805ab91cf4", "indicator--c9baf8d2-c382-48b0-b190-92e9e1190f7d", "indicator--e740b8f7-8087-4aa0-840b-6ab5c2870190", "indicator--44ceac03-7442-40dc-b842-4709017d215f", "indicator--e85ae944-2080-4ede-b394-f4e6d48d38b7", "indicator--5765f117-8631-467b-98ab-893c35e778ca", "indicator--a67470ad-430d-4524-8242-84c82162b05d", "indicator--09d88c43-5702-441a-bd4b-c1b80298afa3", "indicator--c3a709a6-43f1-46ee-8aa6-60232b0080b6", "indicator--057a47bf-3ee0-489b-a362-9ac28ee93df2", "indicator--df8a915c-c418-46d9-ad06-61274d65486c", "indicator--f90aaf96-8441-4de2-b024-629744fdf10a", "indicator--bd0a8506-94ad-43a9-93ab-8029f070baa0", "indicator--52379d0a-f6a6-4bf3-b6ff-f572bd172079", "indicator--b52b378e-a591-42d7-9206-427385478619", "indicator--e419b6fb-c5a3-4f97-bce1-4cb6273c64c7", "indicator--a5a85dce-3b87-4533-b848-f05ce851bd8d", "indicator--9158fe1f-b04b-437c-871d-b0a95396456f", "indicator--83fa79e2-e2d2-4e55-82f4-6263899efe52", "indicator--255f6413-b2dc-4087-9132-a25afeaa8285", "indicator--ba705242-a802-43b9-b13b-c295c66e0ac7", "indicator--f14b1106-3615-4b40-bad5-519cc251b9ff", "indicator--19037d12-35db-4bc9-9d78-a31e2dfd7c76", "indicator--a5435ed1-d8fb-43c1-a06a-5707009ad522", "indicator--c770d96b-4f5e-44db-a14f-f6d414b68a1f", "indicator--effcea37-1e29-4759-bf15-0e9bb18b846d", "indicator--88caf1cd-24d4-4c91-8c8a-4da7598bd254", "indicator--99979d67-c38f-4edb-8a0e-88a4a71f0637", "indicator--e4cdb538-21d4-44c1-97ee-0c0a78d2eff6", "indicator--983bc2fe-0f2c-4c86-844f-513b586670b6", "indicator--7f675d65-04fe-4de5-a7f6-de41dc1d51d9", "indicator--d053ad29-506f-4a44-a8ac-9410f61956a6", "indicator--3f243f3b-ea9b-498f-bd2e-0afd259153c5", "indicator--90364fb8-3808-4e24-bbab-6660d311486b", "indicator--0f07f365-9555-49e2-b409-81dc1efb37eb", "indicator--eabe00c1-4ab3-4120-8594-861ca728b3a4", "indicator--056ea459-488f-4877-a4f9-84b01468ca61", "indicator--d409b795-530b-4539-a7f9-8875f787863f", "indicator--e61a56b0-9ab8-4266-8539-3efba1a924ae", "indicator--bb295154-21fd-4383-a189-64dc9ff31206", "indicator--6ae3a4ba-7b6d-4598-aa43-a437180fdc4c", "indicator--d6df72b4-4761-48d0-916b-e8ae91e83d78", "indicator--32e421e7-849a-4976-9bdf-a39f88441557", "indicator--0b48d885-1978-4a0e-98c1-c1c57a01bd59", "indicator--a8003527-5999-493a-b4f9-574e0c843e41", "indicator--1d5cd1da-7dd9-4096-812a-ab8d77c8da13", "indicator--19366ba1-43fb-42ca-905e-428fe1cfa50b", "indicator--10ba897a-b78f-4d82-aab4-826d32e49be0", "indicator--0766a0fa-e51c-4a52-b8b6-1280b6bc9b6a", "indicator--ed1627a7-082c-43dd-a334-35c0ab753aa6", "indicator--7d65c1af-80a2-420c-ae55-0f554005b90a", "indicator--2b10f69b-f067-4533-9e82-e54ac187260c", "indicator--ddceee4c-25be-4776-b4c0-14bb821a236c", "indicator--51af834a-b5fb-4d96-8192-5d06ee6f7a1f", "indicator--b9d4a463-5800-4828-a6b4-7d5a4d674669", "indicator--330fa39a-955a-409c-ab9e-ca403b6ccd49", "indicator--da7c85b6-b38e-4379-8a28-d87207c4ec20", "indicator--49eaf9d5-efca-4d71-a9ef-a6e514acc652", "indicator--05e3af1b-56a0-4a19-9218-fde6c82b54d1", "indicator--e7797e25-76ad-4469-95bc-2f1c815afba7", "indicator--cccc4dca-dfef-4d80-82db-1e9c74944137", "indicator--01d87d89-68d7-4203-9cd7-ef7102ab1acc", "indicator--354663bf-763c-475c-8b7b-fbb37d4f04ed", "indicator--e6864114-6d07-45cc-85aa-6ff70fd3f393", "indicator--98f9f6dc-fe96-4622-bf19-8be6c8a9eb95", "indicator--a62a27fa-9564-4d6f-abd5-e1de2d8822b9", "indicator--5f5e326a-7f9b-424e-b464-32091107d632", "indicator--8a61e132-b3f1-40a0-a33c-c5ef8df353c7", "indicator--f245e57a-51e5-4d82-b71e-178b56859347", "indicator--45342bd5-4e9d-4085-8c7b-028133aadc04", "indicator--3449912d-4522-4a5c-848f-bb754a98255e", "indicator--49bd0cfc-53c2-4151-b8f0-ed06c0eb332b", "indicator--48b2a7c7-2b0a-4d72-872a-21427007d127", "indicator--f06b7049-1eae-4617-aa49-5d60fe86edd5", "indicator--af51ff49-e3b5-4b3f-94f8-cd59e405e2f4", "indicator--117ed914-ed67-46ae-ad77-962dc3ec833d", "indicator--c19b9505-a971-4014-987e-1c41f1a8c144", "indicator--050dce9a-3d01-40d4-82f1-de0446c23eda", "indicator--9e11c8fc-8f1b-4dc1-a6e0-6c596e2035af", "indicator--e95b5c74-615a-4146-9aa8-ddd0ad7bb408", "indicator--eeb35393-e95a-43a3-9dcc-d5456b20a75b", "indicator--e060c768-bec7-49d0-8b2e-d1ce145955ac", "indicator--8368fcef-05c9-4dc3-a48e-44661890a196", "indicator--71a4ffde-8534-4927-935f-052cfc247d1c", "indicator--74047100-bfde-4791-ba1d-4b44b05f9300", "indicator--3e4fa881-b1cc-48ed-ab1e-b8617ff8e73d", "indicator--1d62bfff-83c3-4d08-bf04-753c3916b764", "indicator--1b2d6151-dfc5-4d03-a08b-552765ac76e0", "indicator--e617246c-4381-47bc-afd0-f4a20dcdde70", "indicator--a00f7531-d2d5-474b-bf85-7ed22b8e1d16", "indicator--052c8c27-0ff0-4a24-8fda-24851d8f49c5", "indicator--5c262794-43db-4b1e-86be-da82063b8832", "indicator--ba4ea51c-fd94-498d-affe-3d80fec08fc4", "indicator--d74b1559-1def-44f4-960f-bba09297108c", "indicator--e8b4df9e-8273-40c6-b019-08b029f61e06", "indicator--81959491-e772-401b-9553-125609b8969a", "indicator--8f8f6368-f801-43a2-b5cd-0275f112b1ed", "indicator--f8c12341-91a2-4a8a-b453-0b97ed8f8175", "indicator--3c82d687-50ca-4a13-aa3d-812f9b57748d", "indicator--3b1e313c-8c72-4cd8-9018-bbbfe934f38a", "indicator--fd33ddad-daaf-4530-ba8a-631fc23e0477", "indicator--d70ada49-add0-41d0-8fdc-add255422dd2", "indicator--940b0d35-d564-4393-b59e-872900879322", "indicator--43f78280-3ea8-42ab-9307-7a13a331ce06", "indicator--c118d4a3-850d-4e94-a1c8-9df04991f1e0", "indicator--e8a70c45-d126-4680-a67b-83abd2b525ee", "indicator--a434fac7-cdc9-423c-bd09-2d753e30f3f9", "indicator--3f8a2b24-77b0-45cf-82cf-fda61861dabe", "indicator--722b0fac-6edb-48fb-93cd-c3ac43979bbd", "indicator--9d4d57d9-dc81-4012-9e6b-1bab3f3ae73b", "indicator--a11ee5a8-81f0-4353-ae7e-e70785009b3a", "indicator--221597a1-8ecc-4147-98c3-a1d10dd71384", "indicator--db4c824b-010e-422e-8e60-cd8d778c057f", "indicator--60c3dfe1-e621-405b-ab67-2f442279803a", "indicator--ad9291d7-a46e-46bc-a623-d50aaed4956c", "indicator--5fa7dbba-a701-481c-b4cd-e52d2abd57e3", "indicator--283287f8-d73b-45aa-baa5-ac86dc3398a9", "indicator--099c5d33-151a-4b5f-b14e-6f2fa8f0656a", "indicator--45474957-d97a-412f-b397-d945e5633851", "indicator--f7b19ba6-a242-4f40-8b96-cd1779fac191", "indicator--9e345310-5e8b-4a4f-be1a-af4cce399133", "indicator--62e1729d-c9f8-4bf5-859f-87819c96138a", "indicator--1af6dff6-63dc-4e15-bbe0-06e475919908", "indicator--83d064cd-46a0-4d2e-a595-af7803b00407", "indicator--c19e6988-c21d-4d8d-96ab-15907a507cce", "indicator--19b5a6ce-0f4a-4edc-bb13-16d88ac49059", "indicator--e26ee3e0-4d8e-40b3-8e36-49fc563a6ed7", "indicator--dd7791f2-9073-4d83-9f02-2e70851986cd", "indicator--d9658cec-6b07-46b8-8ac5-6800e25e6e8c", "indicator--a5826663-e8de-4b6f-8d69-dc02cf378735", "indicator--c5f1e604-055c-4314-ae46-6bdcfe72ee2e", "indicator--feb6f89a-349b-473c-a2a7-e19e28c68f77", "indicator--c8a7975f-3917-4ff5-bbf7-438a1abd76fc", "indicator--afcd590e-4db8-4dc1-b767-015cc0680dfb", "indicator--289fd41f-330b-43af-939e-42fb83710374", "indicator--558ecf36-2bed-406b-9140-efdeea40e8e0", "indicator--145949a9-efbd-4327-a6b8-b5c30cc2a31a", "indicator--3fd6ea2d-825a-4ce6-9318-d7f812a8c552", "indicator--a34770ab-fd3b-4cc3-817d-70c8f1752357", "indicator--f4cb42ab-056d-417a-995e-f9fc734209e7", "indicator--da8326e1-0962-4a08-bd30-f688d210d009", "indicator--c56c3d38-46d7-49dc-894c-469936e95560", "indicator--12a7abb0-9743-4d57-a691-dadb46c5eabe", "indicator--240294ab-a68e-49de-927e-9c3923730469", "indicator--fa54ba3f-c673-45f7-927b-e5656b97792e", "indicator--9ed57ccf-21b3-48e7-a319-c049a054abe9", "indicator--a4e57fc1-e05d-480d-9a62-8cfe20cccc27", "indicator--ab890ddd-dc79-4d7a-b397-238e0fa84930", "indicator--eee55ab6-512b-4f15-9eb3-277f045b4628", "indicator--e1374726-dcdf-4929-b14b-4a19c645c36b", "indicator--28924071-0b41-4502-ab16-b01f571dec38", "indicator--4535666d-df78-4486-8305-63bb5d395d2d", "indicator--40c40da1-d438-437e-a604-6acdebe7574c", "indicator--012b5e0c-a504-4caa-8b32-258e9b1e3f0f", "indicator--a3b6d7a1-d36f-4060-9e80-6bbdb77b7fd0", "indicator--2db5611e-de03-4e09-a1c8-12339a141a73", "indicator--1539ac27-cdeb-41ce-9883-223957cf94f2", "indicator--fa9a6276-0b8b-4a90-8109-89a2cb8ff4ea", "indicator--1849bede-8050-4388-ba72-da5f2c839976", "indicator--10bdc7bc-e3e3-4ccd-aed8-a2e8c2844c8b", "indicator--7da0009f-aab2-48ad-8bea-d5c7bc3498fa", "indicator--0f75a723-d80e-4ac3-827f-8bdac6c41715", "indicator--008fe29a-3e11-4cd0-8f6f-c23fef4f3630", "indicator--0c478f76-5b6e-47a7-b886-6d6fd0d81227", "indicator--b6964e5d-6a28-4f33-848d-0b5c7eb1f9d1", "indicator--67a98847-47a9-4ce3-8420-2d91f9e72d76", "indicator--5c309965-9d80-48e2-ba0e-701e638b6777", "indicator--b866bc4c-fe94-4410-8dce-dbc591f79ad9", "indicator--8afd6a94-5b40-44b0-9a81-73a870fb7678", "indicator--6fc3f1e8-e509-4c36-b812-c26bb9d30278", "indicator--b9335393-5f99-4180-922f-ff6f3188f00e", "indicator--63a4cbe1-e898-4470-8326-b350994fc192", "indicator--83253190-c2f6-4da8-8837-adcfaea53d0e", "indicator--e9555a99-280c-44fb-af02-df612dcf5c25", "indicator--b1ac489d-526d-452b-84ea-46edd91d92b4", "indicator--2826a6e2-84cf-467e-bc0b-b1628b9d0714", "indicator--6a78e5df-6718-466e-9ae6-a39d4c1ed50b", "indicator--8fcb0c22-90a0-4a51-8b55-3ae30648e8cb", "indicator--e567c281-bd6d-4b47-bfdb-e054fb8460c2", "indicator--3acc7039-3843-4f66-95c2-0bcfe2e9d081", "indicator--16f6e94f-1983-4568-8b54-d904f24a9e28", "indicator--553f874f-f15c-47fa-a133-324d431357e5", "indicator--da26293a-f747-4edb-bfe1-9bb221b4743b", "indicator--23c91473-d7a0-4223-be5e-7b7e3a9ac4a7", "indicator--5682e100-9258-41d0-9d38-60eea607bac4", "indicator--4d8039fc-05de-415f-996b-afa65991e6b1", "indicator--cc86b58b-7029-4f92-bde3-9245beb7a74f", "indicator--1de439f9-5713-4058-8492-b98d90ec706d", "indicator--47da3ad1-a160-42ca-884f-5eaf7a2bd1e8", "indicator--0eca8714-d08b-4590-b99d-c9ce0fb7332a", "indicator--4d0b9c64-15b5-414e-8a53-5080d55eebc8", "indicator--61873952-1f63-4f7e-85f3-652df1e90238", "indicator--41f547af-c92e-48d5-9b66-9028705d749a", "indicator--fe01af6b-58a9-48d4-9470-23d36aad0858", "indicator--69e45888-4a4f-4639-ad79-fe3fef9c0e1c", "indicator--f92e5f60-a724-4f61-b818-84b87ca5bf91", "indicator--50a8d30f-cb94-4dad-b2c1-f02a0bd99927", "indicator--7c7631b2-1157-4e89-9ac8-1f7913c497c3", "indicator--570e01e8-34b6-4d2b-8b47-5a4a974f8f5a", "indicator--fc4c4a0f-a7c0-41ab-8a86-183996a75d08", "indicator--dc49442c-df4c-4074-873e-7d716332503d", "indicator--195c6e3f-7f96-4b0d-8468-73abfd433537", "indicator--069c8e2a-3ce2-4b1c-9c46-9451431a6453", "indicator--c5f56a07-c6eb-4bfc-b1e7-fdad4693b70f", "indicator--c228d521-a9f1-4a43-b005-19dae6ba68c1", "indicator--b3740afe-9725-4736-a596-ac2c497e3fd7", "indicator--8f591264-a259-4c7d-aeec-87fa80bcb848", "indicator--9d85467c-1b34-4119-b723-adaa1f9e35a0", "indicator--74cad69b-a2bd-481e-91c7-9a6fe46492a0", "indicator--1ccbfb4f-e4a9-4bf9-90db-71e2af2eb610", "indicator--76acb22f-1e8f-4f9f-bac8-c7d1b14edab7", "indicator--e509d785-55ae-45db-8efd-ed6242408d14", "indicator--5d8684ba-8d25-4ae2-96e4-526ae4d3399f", "indicator--8f63fbf6-6805-4b4e-bc54-239dc4689ecd", "indicator--b6a61e23-61d0-4e72-a1c0-5397b221bdbd", "indicator--77e10134-6a64-4e05-bf98-ec14ce4802d2", "indicator--e583ed54-9576-4ac3-a866-47052b85ffa7", "indicator--0b5597ce-3231-4b0c-a391-149a43ffd49d", "indicator--4af0ec6b-9639-4b13-8e30-e1a7c101bef2", "indicator--28f5cf32-0319-4f66-8fe9-4ddf9940fa61", "indicator--9f4f509a-d844-4ae4-ab2b-1d18af0f66a2", "indicator--5734386e-c1a5-487d-a24d-d00b7d27f40c", "indicator--963da76c-789b-48b0-b955-15bde7907c05", "indicator--6ad9cf0a-2103-4836-a84e-fc5a3de60106", "indicator--c73f48c6-7061-40b5-ac14-6e5788057899", "indicator--cff8fdf4-b966-41b5-8d3e-2df260458dbb", "indicator--f66b4039-5366-4786-83af-d9a86d8db628", "indicator--0ae9c455-c771-4a74-8373-24309a447887", "indicator--a166847b-98cb-4b23-9522-847000f72f0b", "indicator--4c901432-6632-48c7-9252-194fde6db08c", "indicator--ed2aaa1e-0e1d-4582-8677-86ecdacf7592", "indicator--c8a3c51b-d2bd-4ebc-a5f5-0dcfd94d1e53", "indicator--89df3bfc-f520-41dc-9eb0-35d4b6b36b7d", "indicator--80f601f9-37f4-4d6f-8fea-4cb8df59d881", "indicator--0c17e989-7c5f-4303-9f2f-eb24d9e8b60a", "indicator--0eb8af8c-f8a1-46ab-8925-6d50981a3a7b", "indicator--e69b8bf8-712f-43bf-b518-2036537e06a2", "indicator--7cc99af9-78de-4110-8db3-7f4f47600966", "indicator--ebcb007f-f2cc-40fc-89c3-497408ab3297", "indicator--9b78eb0c-f561-414b-9a7d-90616bb33995", "indicator--e112c05f-e48a-47a4-a011-c0481dbcf8c2", "indicator--030b3de6-d7e3-4419-9a8a-95809b0f76bf", "indicator--02e7072f-61f0-4353-8a87-8caa656aea8b", "indicator--42f79143-2048-4fb7-8fb6-0245a3098d8f", "indicator--3557e3c9-5c95-4093-9a0a-671a9ba358d6", "indicator--df3869f6-67ce-4874-8c15-b162d8bb9fe6", "indicator--d2dbf22b-5c38-4393-b5f9-2b4eec7e284c", "indicator--0552af8b-8a36-426d-ab1d-5e4b8ed9c1d9", "indicator--31d0b6e4-9e07-4b47-9313-78016a1572b7", "indicator--3c10756e-ad8c-42af-b006-92c7d9cf496b", "indicator--b9dc2fd1-ec1b-43c8-81d0-95b9d341d875", "indicator--c8449629-a855-4593-9f8e-93b3cf8b73ba", "indicator--c23fa75b-b216-4c69-9317-fbe04fb5f998", "indicator--c153e0bf-ed4f-405e-8391-7eef4c9c98bb", "indicator--7a2edd3b-ae13-4a38-9af6-5d29f29acca8", "indicator--05a30955-128f-410b-bd14-5e7a0d4322d1", "indicator--f3ec984a-2bb5-403a-a403-041f51004302", "indicator--49db11ab-1405-46a1-ab5b-06e50df61d23", "indicator--81038c0d-09d5-4ee3-b377-13d0616d1894", "indicator--e20b4931-5144-44ca-ae41-a2b70c6ff053", "indicator--5caca89b-4808-4fc4-ad8e-45590b449311", "indicator--6783e6c0-75db-490c-93ce-3a03953d2e5b", "indicator--19d5c60f-e0c4-45b2-aaf9-51691eef8d4f", "indicator--85913f35-cb65-4659-8ed5-c52841a876c2", "indicator--6b25826c-3ea2-451f-a2c3-b11187c054b3", "indicator--9b9c0774-e2d2-4967-825b-2051073d5aad", "indicator--4d270c6a-215d-4d58-8119-e65f19ba9185", "indicator--b3168f4b-a952-4a91-9f53-d01664da6477", "indicator--fb9b952c-c77f-4af0-acc3-48bf879895da", "indicator--2229bcf0-d920-42ce-afe9-15323c155830", "indicator--b5c1e098-9bf9-4566-9b55-9e507d3ed802", "indicator--91f9e0a7-54b0-413d-ac6f-a792b051fd6d", "indicator--119bd66f-56ef-48c5-8854-90e1ceef5141", "indicator--6ab7a0c7-00d9-49e1-b0a9-f8173ef5f1d2", "indicator--a93b030e-a95b-4c12-a635-cd9a54b47936", "indicator--c45ad312-5ba4-4266-9d28-3bc52f494342", "indicator--220fd688-6d6c-456e-9b4e-3d385506263d", "indicator--31f6d67f-a585-406c-97fc-73bd9b6f2960", "indicator--e8721b3c-68c5-4fa5-83aa-f12a846b7391", "indicator--b30ba9f1-bbb3-4dac-8b4f-0bf0f5240e0a", "indicator--47d2434b-c1a7-44f4-8883-8d49dce521ac", "indicator--a1ab2fec-05bc-4367-ba15-5a377699e712", "indicator--723e52e8-0a56-4681-99b8-ccbe12a00ea6", "indicator--9948b3f2-6b8c-4f18-a452-fd0df1d62b42", "indicator--2541da97-da25-44e5-a571-74925bbc11ce", "indicator--2f85d86c-6f78-4c46-985b-5286320c5207", "indicator--9a357365-3698-41cd-944a-5a8e81d7bdf2", "indicator--0ec7375f-d806-4675-8c5c-66bf368a0475", "indicator--3c438ddd-a201-4885-9934-80aded5a70c9", "indicator--79106f8d-1fbb-4237-b392-9d755d4c0f92", "indicator--3edb5c23-2336-436a-99ab-742880b2018f", "indicator--2c57e809-a4ee-47aa-b1be-e4895a2434ec", "indicator--378c7ba8-493d-4dc4-816c-28c9ef26a987", "indicator--9f8eeafc-56f2-4f93-b991-77c8c6e05343", "indicator--2fa6fca0-1823-4d76-aa7c-df27ae51b55c", "indicator--dcce1318-7f76-4fce-99e2-77861fa14d0c", "indicator--b926803a-e75a-46cb-8d0b-fa8bde9c5e9c", "indicator--3a293a0e-0bc3-4002-ae9e-ef26661123de", "indicator--44c01636-d6ca-4401-be6a-7049aa4747f1", "indicator--67f5f387-9444-4f3c-b827-34b39d15148f", "indicator--b926f028-ade2-484f-be11-b1e99ee03c66", "indicator--f1ead7cf-e10a-4762-abae-f52dcd880bad", "indicator--47114ecd-d963-43a9-8537-f6a87d17ab22", "indicator--0b82dd1b-c270-4330-8d5c-e76ae83840b3", "indicator--3a278d53-3c86-46f5-8069-ecb88fb3bae4", "indicator--bdcfa2a8-5b59-4b8e-ba0a-e1522dc33666", "indicator--b91630c4-f517-47c8-b6be-6785e827632d", "indicator--cccc0af2-7624-43f5-b41c-0aa1df572568", "indicator--01a1858a-2b5f-4821-a9a3-56455159db1f", "indicator--a3da5068-9e35-46b9-9c1c-2649a0f4ddbb", "indicator--0a939b0f-17c7-4396-abf0-466bbdda59ee", "indicator--a2d1c95e-a423-4050-b452-65cd1a388403", "indicator--41dfb4db-9ef1-4d41-af12-4a0acae879dd", "indicator--36325850-a405-4401-afba-28d11eaf931d", "indicator--10ba4638-8f86-4a5e-9fdd-22bd2e1320e5", "indicator--f803a174-ca45-457c-b25f-b590f200b413", "indicator--e2ea2d87-3eca-4a37-b187-80e8f2c76d18", "indicator--831e0841-35c3-4c1e-9378-5d926a32a097", "indicator--5daaabf0-7de0-4d25-91a8-fc9f3dd57bc1", "indicator--620d4ef0-7a9b-46b1-b6ee-a8e889be3525", "indicator--b1f06fc8-70bb-4070-8808-a782402363dd", "indicator--4a736d14-827c-4c93-b8e5-41fb37df2e75", "indicator--65094759-43b9-49a8-b0c4-c13191d4f92d", "indicator--1e51b7f9-dd13-4fc2-a270-24c68b44f8ff", "indicator--39a35e8b-cb59-4730-9dbc-76a1b87a895d", "indicator--81ad5cd8-da5a-4066-9f6a-1db186ddacac", "indicator--4106d047-ca66-453e-bdb9-3dbab9b2e981", "indicator--db37a609-e430-41f5-95a8-bb1b4f96fff6", "indicator--a8dd3603-17d2-4635-9c2d-ac1ad8af581e", "indicator--c3972732-bebe-478a-89a0-af49582538fb", "indicator--5fb27241-7f4c-4982-87e5-6034e51c1cd6", "indicator--c2cc58b6-3f5b-428f-8fbb-3f2dff46eb41", "indicator--c4e63d0d-a807-4514-bf3d-fb0b60119b3f", "indicator--85546e19-7c17-4d03-84ba-3be723060698", "indicator--1cac040c-b970-45a1-9b4c-f7a5b43be0a9", "indicator--bb24cb6d-694c-446a-a4c4-715b2af158b5", "indicator--5a72b2a8-6ce0-4e05-ac10-5b285d9eb8ee", "indicator--8c911a12-f549-4ae7-b831-d82f2fda9b9f", "indicator--3221ff62-9b1a-4e48-9c6e-5cd69e68eba6", "indicator--6f3bd4a6-d9f8-4e9e-bbdf-7135d1201250", "indicator--a21cc8c1-57b8-49ce-bfc0-3d9b113517bd", "indicator--bb653359-971d-4b6c-8c80-c4a482ce789d", "indicator--838111f8-1fd5-4bb5-a08d-7a2617003ef7", "indicator--989641cb-e5e2-43b2-b284-edbea74270d4", "indicator--a2165b7f-a686-45d2-a892-578affb3c853", "indicator--07c5bd43-6788-4e64-bbf8-ef8bffcc81c7", "indicator--e2e2f953-1545-4bab-b8c5-e0ba2982dbf1", "indicator--6b37fd00-0557-4b32-b739-524b83db8d73", "indicator--f5b9330d-0f14-4f77-a573-bd2b402dd650", "indicator--858ba388-2f17-4d46-a0f6-9e858527fd9d", "indicator--2abfb75c-340d-4830-ba65-10e4ae62de22", "indicator--15df1efb-d893-4ac3-9580-a36316eb644f", "indicator--120d056f-3611-4ea6-959c-2296c28babc6", "indicator--c156576d-3655-4695-ab61-0409a060777c", "indicator--a54958cb-a07a-4411-93d1-006964c7aa3b", "indicator--0464f4fb-004e-46ef-8a30-a93d359db38e", "indicator--2fbbac4d-3aeb-47dd-97dc-3de4c8efc676", "indicator--51a157f2-79c0-47a1-84ed-ec999bd5c970", "indicator--e2d8c7d8-0691-4a13-8f4d-e7c1e14eaf09", "indicator--42e7d196-e3a9-49e2-8da5-0a84b8cd8a31", "indicator--ad025a45-c2f5-469e-a71e-64eeef432bc2", "indicator--ad786708-a85d-411f-a4dd-a78b149eda59", "indicator--74c22599-4756-4aca-b2ac-6c348f7aacfe", "indicator--b215e027-3d30-4519-ae56-09e932d4fbe9", "indicator--b1501939-8995-4029-a9f4-37a138785e44", "indicator--11a304df-bdca-464a-b8d8-78af92caed31", "indicator--e846b7de-e61a-49fe-a3ba-84efeb071ef1", "indicator--d9203a3a-38e1-4fe7-9f91-5451d0b6c232", "indicator--7d106a6d-bb2c-442a-ada7-37ff2799b3f7", "indicator--f2a38d23-ebaa-4a6b-b8a9-47412637b73c", "indicator--7abcff41-c553-4d2a-ba86-baa3a855cce2", "indicator--5ab5100e-2fb0-43b7-b0c1-f47df64708b4", "indicator--c88bb69f-74f9-456a-8b78-d0bbe12da515", "indicator--c03a8359-5524-403a-9c98-908b553945f3", "indicator--a43c642c-034a-4b4f-b5e7-8b6800d7478e", "indicator--af6b399e-6e03-4f4b-ad6c-d5911c32097a", "indicator--4d41474b-e24c-46a6-a456-6ae34b1b7a9b", "indicator--11b86923-9c51-4d3e-a19e-a2177533babb", "indicator--54f6905e-1ff9-49b3-93d3-d826b34c0a92", "indicator--d215f06a-d0d2-4ef0-a24d-0e2931816851", "indicator--93fae272-6cf4-4a62-aa15-56d8104f876e", "indicator--26e41da9-db5d-4570-8db9-e8fa3a3bbe60", "indicator--e13f4bd8-6eb5-4c26-8db0-19c064a2903f", "indicator--2b900bfd-1ab6-4c07-ae7f-5ff688020dfc", "indicator--d6063b2e-0135-47f5-adb2-70039835a65c", "indicator--090828eb-678e-4ca5-98bd-72f56e17ec6f", "indicator--d2809a9d-87cc-4ccf-9ac9-9bd690f3b8fc", "indicator--aa207ca5-8644-45d8-a117-d11144eae41e", "indicator--c6f12b84-15d6-4399-8027-77fc05320376", "indicator--202b2129-9932-4b6f-84b8-2d6ced641273", "indicator--270a216c-e0e5-40b4-aaec-7e34e7b18e20", "indicator--b2530277-26af-4334-8886-881e3d2b8c34", "indicator--c3e99fa3-536d-4149-a58d-01eb09096e22", "indicator--0ed15fca-cfdb-4293-80f8-7b2294dd5274", "indicator--9c70731a-8860-45ef-a907-4e275bc4a282", "indicator--875bf889-f859-43d3-8454-6b169b24fafc", "indicator--477ca6d9-74b9-4aa2-acb1-fd74a48897e6", "indicator--37498331-8054-4cc8-8766-bb7fb47fcaa4", "indicator--8f85e2e3-e002-4278-a1d7-503035b1aa12", "indicator--37577189-33ce-47b2-9da0-b789f65cfaa5", "indicator--6d2352ae-1dfd-4ecc-9524-44f268e73b6b", "indicator--33fe2ee1-fae5-4eab-b672-4958f4f349e2", "indicator--124d46ac-9e8e-4c09-8434-0af473c8077b", "indicator--1e220bb3-e554-442e-bccc-b3997e755605", "indicator--20fa2229-22d8-4c73-8a66-69f23346f7d2", "indicator--b302602f-d3d1-481b-8633-7ba0514ed084", "indicator--3a468b6c-00d7-484b-afac-9b31319090ec", "indicator--1d4488a0-d215-474b-8bc8-6c117ac5483a", "indicator--5e930e3f-30be-4be6-ab97-d5d40e64a6e0", "indicator--0ce11a46-e056-46b8-8789-31e0fa3c8557", "indicator--11a6acda-2101-4845-b478-204323fc58e5", "indicator--8f869f13-e77d-4bb6-89a1-334c93df68a9", "indicator--4a84a1d2-a804-49a0-b58e-3d286db49806", "indicator--9facf5e3-7b5a-4514-9a3a-8b82bee4c00d", "indicator--cdcf1d77-0c28-4f54-ad08-1bb2c8bf1cec", "indicator--6ec89f2e-15ba-4747-9958-181d3527f6e2", "indicator--addce4f0-c9c2-491a-b130-04cb7e7ddabd", "indicator--c975e557-c47b-4136-aaf8-ccd9dbe085b7", "indicator--8524c82b-7c0e-4fe9-bb62-5ab9dac3dd47", "indicator--116448f5-df07-4bbb-a7d6-1e72a04b148e", "indicator--2b921a7c-44d8-40b2-a400-e83f48ef580a", "indicator--36b39fac-7302-4393-a2d8-17bb931b39cb", "indicator--d33f7527-7b7f-474d-902b-3cb3ca69d146", "indicator--0f56db36-a3ce-44e0-a839-df816c01ac13", "indicator--0c8ec4f3-5b89-4dd1-8d6d-1bb985a79223", "indicator--f16aaa50-99e5-4d62-a5e5-aa44985c0f52", "indicator--65869f89-fb8e-4b03-a5b3-47424c78302d", "indicator--85e5b4a4-2661-43a0-bad7-721a9063293b", "indicator--1ce8e85e-2e2e-4d23-85c9-914cfa5268ce", "indicator--b0b7c384-85df-48e4-9839-7c327908c19c", "indicator--3f273bd5-2489-4264-8323-5a8d6188a342", "indicator--14909e01-609b-415f-9355-0213e27deb58", "indicator--00db304d-d670-4681-b7d1-5c7fc098848a", "indicator--a5e8101f-ba42-46ca-914d-ae6e078614bc", "indicator--8c5d59c8-fbb7-4b54-b307-b4394ca46890", "indicator--0bf5950c-9e6a-478c-b3ea-3d301440fa12", "indicator--715df614-65be-4cd3-826e-9ee8064a845a", "indicator--4a34561e-d239-4c84-992e-849dc1618510", "indicator--70ba9fb1-f035-42e7-984b-4ba908bdb198", "indicator--70e130b7-7fde-44cb-979c-53c6e2028cfd", "indicator--7a12d366-bb8d-4678-bff3-68dc3910c125", "indicator--a379153b-2cbb-41de-9848-4a3b94b7169c", "indicator--0cb58b38-35b5-4940-a4d4-892ffac43518", "indicator--6289df08-d9d3-45ec-aaf3-0cc671ba8464", "indicator--4d4e8a5b-c177-4c1a-b7c0-5454ca46b261", "indicator--b94b779d-0393-425f-9205-4f901c6f87a4", "indicator--b8ec48ce-a813-4d7a-9759-9fc505f7116b", "indicator--40e4bead-b1b6-4301-9830-cdf935b966b7", "indicator--146f4d0e-d97f-40cc-be0c-c9da1ed1be64", "indicator--83f80960-dec6-4d3b-a7a2-8797e597f143", "indicator--29e2bb8f-76b5-4b48-8184-10cdfca9e592", "indicator--b83b5fef-e94f-4719-973c-7138992e5fe3", "indicator--9c43b681-ceba-46b6-ae4d-1d7ad8171eb4", "indicator--0ad4915c-fa60-4210-92b8-f023b2fdc60a", "indicator--7eb3561a-5a42-4844-a1a8-07d6a496f664", "indicator--1e964f74-b9b1-4089-850a-f0d73f6d62c1", "indicator--1a93f7a5-9c12-43bb-81b8-af35a1c23d93", "indicator--1ada0cef-f905-43ed-adc3-47227b56982b", "indicator--4322e20a-a3f7-48fc-b5b4-ffe3c9cb62d7", "indicator--d27ac8a4-4b12-4aee-bf3f-eb92d539e69e", "indicator--3d28b8ce-42f4-4532-9c76-ce9baecb9ecf", "indicator--8ed08bdf-f36f-4920-b52d-c6e70fe8cf01", "indicator--4f6e9248-e4c2-4ede-ba1c-062073dc109f", "indicator--1178a345-282b-4461-84b6-f7160679c657", "indicator--34d09120-f90c-438e-b5fc-e49ca62e7212", "indicator--27fcc966-ebc5-44b5-b328-28b5be9a15a7", "indicator--526a717d-1fba-4d1f-8bce-def642bed4b9", "indicator--25123fa8-27be-4e42-b0cd-6e38f9dabf9a", "indicator--3139c4d6-0f7d-41ea-a19b-594ff951332f", "indicator--5f66adc9-cbbd-47c2-a237-26325645e586", "indicator--248ce932-4037-4449-8c33-f17001bf7689", "indicator--02176fd5-693b-417d-b0e0-8ed2745d48d8", "indicator--6c7315c8-62bd-4e5e-944c-786c30f0f997", "indicator--a469ae41-791a-485a-9eb2-6c764cf455c8", "indicator--3af93976-f14e-48c3-bdfd-500314693e51", "indicator--0f6f9e86-dbf3-40ee-84c4-ecfa8feded05", "indicator--e59a2851-431d-4c4a-9a2a-744bc28626ea", "indicator--22ece154-a293-4825-9704-b92faa862df8", "indicator--180b2d26-b184-450e-832f-170c1e5c401a", "indicator--6502041e-e1ea-4a76-9d44-986b53b54b37", "indicator--9409b451-35c1-429a-ad46-aada4f49bfe9", "indicator--1eabd5b7-8146-4bea-956c-6efc00ffae88", "indicator--c6cffdb1-1706-4fb4-bb1d-4233f54c3337", "indicator--d757b9fa-0560-42c9-a5a0-ae6e07fb9aaa", "indicator--e087d227-c2f7-476f-8fd1-a01bd21c72e1", "indicator--50e76352-0ea7-4241-ae7a-a35c0a8712a6", "indicator--18ed33f5-6000-4981-bd66-90e9e222e310", "indicator--8295f44e-425f-4dee-a944-2e6bade99dd6", "indicator--f1938365-0dcd-4d8e-ade5-3b6554c57d30", "indicator--faec401d-d483-4de3-a413-1b5626968701", "indicator--fd980cd4-6389-4c06-a3f1-30b4cfd7cabf", "indicator--deb4cb98-2bc5-4194-ad76-fb3bf16429f1", "indicator--091e9388-111b-4e14-9d78-c0dd9463d89f", "indicator--28934923-e1c0-432f-af6e-279c74ade3e1", "indicator--3c2a219c-3bf7-4e1e-bcea-17a771fb2be8", "indicator--5c5f0dff-b989-4320-befd-0c95516c671e", "indicator--cb18d41e-01d4-44d1-811a-ec2a388e1d57", "indicator--8cc9717b-c4e7-4e2d-a27c-f2a4211672c3", "indicator--282f70a3-27a1-498b-b315-b68b5102febc", "indicator--8467ccb7-d9da-4b29-9468-94f6e4c05a55", "indicator--96e81490-11a9-4455-a09b-f84f0755e320", "indicator--492875b5-fa89-43b3-9464-e96d07e82a79", "indicator--185e9662-235e-4df1-9753-ac5a6308350c", "indicator--0c561c61-1181-46fb-b6b6-f30cdce91544", "indicator--ae248b49-669f-4eb5-b5d8-c8ef9656511a", "indicator--bcf3e0af-d9ed-49b4-b86a-32994d249037", "indicator--c7a642f7-fb59-4dd2-be34-2b69863b920f", "indicator--c1f3a7e1-14db-40dc-a260-d67e2303fadd", "indicator--d69c8aec-332e-420f-8ee5-8f0adf63cc8f", "indicator--24a27ffc-2edc-41fd-adcd-316c806b0808", "indicator--1807abd8-ecc0-4bc2-a0ac-ede28101898f", "indicator--9b1c0a4b-e48c-4d3a-b076-f8f2bdbb9308", "indicator--b02ed7bd-b3b7-4e52-be85-bd6fa2209d9b", "indicator--35bb0964-29ce-4889-9877-d3c929121a22", "indicator--549965e7-0771-4324-ac1c-45894efabb15", "indicator--9e2c8408-adde-4dde-93f8-e80660cf397c", "indicator--a7dda439-3691-44b5-915d-29b33cf800d8", "indicator--2f4e33dc-5971-4cf0-abfe-143391db05a5", "indicator--16822451-0ec6-49c0-9584-e5fb7cfb49e2", "indicator--72b5901d-d62d-4d74-96fb-2f5db16646c8", "indicator--baa3a0a1-8857-4f1f-a212-388dbf471daa", "indicator--8177bc4b-6958-42ca-af07-574b09065a71", "indicator--18ee9a2a-1e2b-4b57-bc2e-21aa9195c30d", "indicator--76065572-7478-456f-919e-a842647cadb5", "indicator--402fbabe-67c6-439f-9525-69d0bbefc07a", "indicator--255c3c4d-45ac-4ad4-868c-41f0eafc1fa7", "indicator--ccc3a77d-c247-49df-876a-cf139dc4c201", "indicator--bad52cbd-37b8-490c-823d-ea511f3a4f50", "indicator--7407eb53-594e-40ed-a83a-ac17eebdcba7", "indicator--b8f54a05-2b5c-4fae-b357-a81a091ce4b4", "indicator--ccb9723a-2ebd-4d5f-ac45-b12fa2aaf775", "indicator--5ffe2e7e-35e7-4237-b738-a76316383958", "indicator--7a09b3eb-ffa0-4048-99a7-dc6e200ebc92", "indicator--16ab923e-eb31-463e-af0f-8f1cf8e6a966", "indicator--458dd8ea-982a-4338-9d5d-ad234c2dab5e", "indicator--275f0596-836d-41cd-b038-ddf6183cbaae", "indicator--2a739547-18d1-4835-a76f-ddef96f0120c", "indicator--2244bfaf-a34b-415d-a8dd-4ed401fbf460", "indicator--4091e933-44fa-4783-ade9-9b85dce297b6", "indicator--7b59144c-fca1-4343-a4c5-c52377789868", "indicator--411f436d-9069-4ca4-8543-21c97da40718", "indicator--3d84681d-81ff-4c89-a957-a60773f1ed7b", "indicator--d641aacb-6e30-496d-8923-693701d10092", "indicator--924ba6b2-f2bf-4a82-add3-9f8795e49ef8", "indicator--d6022d81-6f29-4a7a-9053-b81c5a1e0f47", "indicator--d27573ce-5be7-42a5-b57b-fcb5ea80e94d", "indicator--9eca9a99-6a27-4022-ad15-c706b0701588", "indicator--e1419974-37b0-47a7-9169-4c7d46a75a75", "indicator--e7d62c35-0410-41df-ba74-f848f988eb90", "indicator--da21d7c7-a304-432a-a760-4a889da14484", "indicator--93aa01a1-8064-4328-b090-56e36243afe8", "indicator--c80be80e-787d-40f0-b9c4-8b96249d6772", "indicator--cfe8fb6a-82c4-46e6-a5db-78a0e0e5f123", "indicator--4b2d0aa0-fe39-4413-8bb0-d48a634d2dad", "indicator--a0f963ee-091a-4112-a5ca-701a63a7e960", "indicator--2963783f-0cf2-44dc-b9e2-0008fb0d2780", "indicator--c3bfb7e1-48bc-4d45-8feb-b38b48a501fc", "indicator--4aa18619-f029-4eca-9d3f-bbdd07485fcf", "indicator--38b8871a-c1ac-415c-b890-2a349cdc024d", "indicator--39f7da19-2b5f-408c-b90a-d6317ce3ef94", "indicator--b3bfa43e-5e3a-4996-9f8e-dd7ddc474658", "indicator--1c34e622-62ad-4ab1-87e3-31c7abc7a999", "indicator--39e23391-510a-4e97-9d92-32739f5d757d", "indicator--47c4575a-7ae5-42fb-836b-6abcd13d65bb", "indicator--eadb596e-c48c-4b1e-b0a3-754ff3e2c691", "indicator--74225ae8-52bd-4644-aa45-165e7ea693ce", "indicator--9443b630-27e4-488e-aeb2-dcc3b3cd4ff7", "indicator--ed1b18d0-b08a-4310-89af-a95b83b0d1c6", "indicator--493171cf-5918-4c80-a083-29ec3bb24be6", "indicator--4d1e4e0b-f81c-4b44-bbb7-913341035f6b", "indicator--5c2d3fda-ca1b-4eb2-b89b-0ba449d84879", "indicator--fa746d75-6134-4f4c-bfae-83dc6e469f9e", "indicator--bb13720a-69f8-462c-8279-f7d51a1e32db", "indicator--b4d48927-b107-494d-a56a-0cc9ac443413", "indicator--2878ccd4-65d4-4269-9b22-90069c0aacfc", "indicator--ce356947-de53-48d9-8709-c68423954c14", "indicator--7fd48a61-d09b-43cb-8ffd-4464cb4b3d92", "indicator--03999ae6-10e2-495d-bc12-e10aab818052", "indicator--1c505803-8c06-4785-81e8-b3044a27883a", "indicator--6aab19ce-c987-4679-b764-f5f23f15d7d7", "indicator--51f902f6-7b74-4a5e-a281-591aada82636", "indicator--d553e709-305b-46c2-8259-3e9cafb74544", "indicator--54ad8f89-9a4c-4e64-8538-b8a1691a80b1", "indicator--d971e833-4460-4a7d-ab8f-99d27e0700f5", "indicator--27d19567-1083-4ccf-a8dd-4f88dac12efb", "indicator--657d4586-fbb9-423a-835d-c7c18b258021", "indicator--b6eab376-b413-481b-9007-010fa3b6dc19", "indicator--4cbbee34-7596-478a-bc90-9ced53128fb0", "indicator--1aa772aa-19fa-4937-ad74-63f8600ecf74", "indicator--339ef55f-03b9-46f8-8820-22e211ac028a", "indicator--60740556-e331-4101-b0b4-0805d9c42fba", "indicator--812226e7-0d7b-48b9-82e1-85531ce67495", "indicator--6ad069ff-725a-4b5a-a65c-3ed446abab8d", "indicator--1b4483ec-441c-4307-84ee-2692ec9a6b51", "indicator--48fbff56-c3ad-4354-b836-6ad44866e3cd", "indicator--a5901fa5-08df-4441-8cd6-c1d8a1f1f9d0", "indicator--973fdbeb-db2d-4bb2-b30d-4bcff268fafa", "indicator--2beb7ae0-f825-4bca-88f9-ce28d8e11dbb", "indicator--ea0afea4-2401-4609-8291-0dd49560723f", "indicator--7c00544e-608a-4e85-9790-ea205f1d167f", "indicator--e41b7a8a-e390-4ea7-b05f-21e622d7c6c9", "indicator--b52dc829-f295-41ad-a742-99383caf1d49", "indicator--6ed9079b-2728-477f-ae88-502a54a4ebc6", "indicator--b3a56281-964a-4670-ab0b-8b9940d492f0", "indicator--bf902892-e330-47ca-b1d3-a45231e57c84", "indicator--66b6a89f-6f1c-47e6-aa2a-bbb3bca948ab", "indicator--4107e2a5-0764-43d0-9680-20cffdaf4d25", "indicator--8e377685-0db7-4578-a108-e1aa32dd92f7", "indicator--338234e2-5cff-4255-8b07-a25de7707961", "indicator--8b425a48-902c-45a9-90e3-6ba09d46bddf", "indicator--0be43c14-3e9d-4fcc-b9ff-76f11c463823", "indicator--8b46c9b2-e6ae-4261-a8a9-7479e5b36d1b", "indicator--dd25e1a8-d9d4-4f7f-ad86-3a96cf499971", "indicator--f3b97420-a70b-44fc-8171-7b81ec06b0f4", "indicator--e0a66d4f-0207-40a0-ba17-6d2eaef6ba3b", "indicator--28db8cf1-a6dc-4fb3-bf03-2fc1ba6a65f5", "indicator--f4ca86b7-4c9e-4713-8ffa-c7903fdc5d7e", "indicator--934f5bce-508b-439e-9085-7372b7ee08de", "indicator--109d6cd8-1614-488f-896f-37970e657d4e", "indicator--f2544ad8-5abb-48df-8b29-9bc6ba860607", "indicator--f0dfddd1-7c6f-429b-b8df-39b29cbf0c5e", "indicator--70dc6c2d-5100-4c7c-88fe-134e045babf1", "indicator--1680ae78-cd4e-474a-b84a-507244fbeb71", "indicator--80065a52-5852-4f66-8051-8a3735cdde23", "indicator--a7b79ade-ae00-4734-b159-0dac6793a5b8", "indicator--52125d6e-558e-4124-82d1-99c0bf07bdb4", "indicator--9ec1a565-4416-461e-b341-7a69f6f4b541", "indicator--b572d250-b1cc-440f-b4d5-d5dc8b020b33", "indicator--8d8dd796-8df9-4448-907c-b4f13ab34680", "indicator--749c0f1c-737c-4f78-a743-2bed056507e2", "indicator--3b3987ad-c552-459a-b564-6b06947b48ad", "indicator--8a2ac9c4-ad75-41cf-96b7-e6a889232c9d", "indicator--838144b0-2771-478e-8ea9-ad00d01f2dfa", "indicator--dc429988-75cd-449a-be23-bd23c63d09cf", "indicator--4a369fdd-3885-44f1-9d0e-398a234ac591", "indicator--58425282-eb3a-40a8-b3fe-caf56df5d47e", "indicator--57ab66b8-37a3-4889-94d6-4cd5448e59c7", "indicator--3d33bd73-949c-4d5f-914e-dcde7cafaea4", "indicator--3feb6354-d611-4051-b319-3ed9d27a3a61", "indicator--92985771-1081-4baf-b40a-f46549f6745e", "indicator--dd1b486e-3dd6-44ed-84ad-79f3430cebb2", "indicator--c9082bc3-2e62-4890-bdbf-edbbe79799c4", "indicator--256df950-73b0-4d2b-839b-1534fe0f9c2c", "indicator--eddcc365-edc0-4f5a-a2a5-0bd26e9e8e46", "indicator--51cf87b7-0143-42d9-a1b1-b6cdcb513ca7", "indicator--8199b63f-5f19-4f7f-b87d-ceb96d4374f0", "indicator--948b91f0-da8a-4cf4-8f40-d33dbe75d71a", "indicator--5b7f04d5-1650-43fa-a123-f3ce494c905c", "indicator--889395d5-7eba-4f49-b485-8625e04d52cb", "indicator--294e5213-a910-4483-99b6-d8c7169f2c8d", "indicator--b7e596c9-4b4e-45e9-9aed-eb975778326e", "indicator--dbac2120-5032-44ec-b35c-9073ccf703e7", "indicator--4f9ebfb0-8d87-4a1f-9cb8-0b707ac43f9f", "indicator--aed2634a-688c-47ce-a12b-8ba66e95f74a", "indicator--65cfafd1-6956-48ce-9fa9-8e6d4459e551", "indicator--ff9d2aa3-51f5-4561-b9d0-ef9a21a2e8de", "indicator--971bc82c-1ee7-481e-a8c3-0e4fd2edd6a4", "indicator--c034a457-6879-4836-bb4e-f2321e6eb372", "indicator--1a8ca732-411f-4341-91be-6113e14e6933", "indicator--072024b5-5802-4b11-81f9-e2c08a121827", "indicator--583903f0-7f19-4da6-add0-b27b1ee0abfa", "indicator--81c9f52e-f1af-499c-bcbe-ad9ff720b3b0", "indicator--51595dd4-6d99-455c-b022-7726a6fb803e", "indicator--ac1463e7-8c15-4950-baa0-c0d6afaf657e", "indicator--428eeeed-15c2-4a9a-ae3a-4ed25c53cff7", "indicator--9b51372f-7691-4962-bd56-962d60a972ca", "indicator--8d00444e-1abe-44f4-88e9-c5a1cb9fffe4", "indicator--c26a9ddc-da43-4d53-a96a-036f66fdfdf6", "indicator--19d988de-21a5-4624-a68c-d7e1b5539950", "indicator--f15c5fac-89c2-4b94-bc43-caff3d2628d2", "indicator--84322922-d49b-403e-be14-d87860a96f17", "indicator--d0cb7b6e-7edc-4d1c-9ab1-1bc5f3cfc606", "indicator--0c95a624-3acc-47e3-b271-db6f87f9ef04", "indicator--78f9fdd4-96cb-4614-b45a-6303a411bdb3", "indicator--421a1658-7a87-4cb1-a3ca-6e48d1f57f66", "indicator--da07b06f-d749-459c-b2a9-0ffee4aab4f7", "indicator--a0a9040d-6ae0-4d9a-9b78-65a6d372119e", "indicator--29a0bda4-b337-4ba7-bf0e-297928726305", "indicator--78c2c19d-d640-4297-b2fe-0f1c02db0d58", "indicator--53ec8628-7d28-424c-91d2-7f8d1ecc9ac6", "indicator--bf0853b4-d0b9-4d2e-8460-362e446ebb1d", "indicator--80eaab5e-ca96-4221-94ed-ba0408e9cfa9", "indicator--6e988b93-9415-4b8f-be3b-fb20ce320cb6", "indicator--640e49bc-ebc5-4267-93df-357cb5592f9a", "indicator--5304d4e5-c086-4c7c-a6e3-07552e1fb8a1", "indicator--0d943663-7b9e-4f51-9169-f3e26469d55a", "indicator--bacddbe7-b7ed-4e3e-84aa-e0be20ee98a6", "indicator--1f9a053e-be98-475c-93ab-11429472fa64", "indicator--a8ac3650-09b7-4473-97af-c220323c3702", "indicator--8361e9b8-78b8-4f57-9530-e62e14828228", "indicator--6615e8b6-fdb4-4cf7-a014-901289283e4d", "indicator--40e83b07-ac7a-4a24-a299-6aecad20bef6", "indicator--d7b4cd7a-43fc-4ccc-a0d6-9a370cfa6798", "indicator--803f8d79-a130-4ea6-b39d-86e3c349fe96", "indicator--c865ee8d-a32d-4558-a2d7-255187960df8", "indicator--88883e7a-a7ab-4c0c-82b0-fe97ea5c9ae3", "indicator--7391c9af-c790-4ee9-8d73-40eade066914", "indicator--60adeb9b-ab2d-4f8d-9d85-ed382fa944f7", "indicator--66984087-6c42-4192-8fc9-288631dc6466", "indicator--033e7e48-dcf7-4545-ab20-08140b69dc54", "indicator--43543f74-62f3-4114-85ff-ac8553bac868", "indicator--487be152-4822-40dd-95eb-263a3a2cee44", "indicator--2b349f2e-da3e-4ca0-8277-d05239c0492e", "indicator--2f0612bc-8257-4115-a849-f478f8bed13c", "indicator--60bce068-e126-4516-84b1-1ca96de4de67", "indicator--15be2e8d-3c76-437f-abe2-f7155bdaa4e0", "indicator--6a7ee3ce-e520-47ae-826b-19588ddf0828", "indicator--07c41bd7-293e-4634-a13a-9862d0ebc9ad", "indicator--1888c54b-9f08-4a1d-bbeb-29118357b1ef", "indicator--e0a9a5ff-4817-4a53-8f3c-ee046dff8766", "indicator--b1d5b61c-5499-4330-a270-506c69853368", "indicator--14cfe2c8-b428-4d63-a8e6-250c63661c87", "indicator--4f254ddf-dee8-429e-bccd-3704712df503", "indicator--763722c1-870a-4e8b-8b35-2663721677be", "indicator--169de5c2-6965-4857-a34d-5d7c675e9987", "indicator--8a9164d2-54a6-4411-aadc-cfc273f5248a", "indicator--3d20de08-28c3-4b02-aaf0-152635ae0511", "indicator--4e03cb29-3a2d-47c1-bffe-259cfbbe13b7", "indicator--5f9bc4ee-e1ee-4756-828f-b90a3b12b9fb", "indicator--eb512481-3266-4297-8fa6-dbf29f2d1dc5", "indicator--b89f8e8c-7796-49eb-b901-42cc2833544f", "indicator--1290ff28-e0e6-42ae-b826-248dfafe5af8", "indicator--c5b01eaf-a1f8-4d02-b47b-513f9ce0180d", "indicator--50613c1b-b039-46d9-a48c-363cfbd0e8b8", "indicator--a53895b2-2383-4621-a80d-0e757d82a88b", "indicator--1a1896e0-4a5b-4aaa-82d1-c2e4e0edb0e2", "indicator--62a7250a-c9f9-49af-828f-ebe579124626", "indicator--dadcab43-3a22-4726-a426-36063a464eaf", "indicator--f774eb5d-0809-4603-8487-0f48aecceca8", "indicator--61da7051-35c6-431f-bc17-c8ce4811fdaf", "indicator--0b824b01-f67b-4ed7-8e85-965827d5667e", "indicator--1fa766c0-c085-4fac-9e9a-c84b9cc681bf", "indicator--400db1d3-63c8-42ac-b384-293ff0af6f3b", "indicator--83dcf562-c8f4-4b90-bc50-5481c1c9121b", "indicator--84ab850f-5ce6-495e-897c-8a314efbbd4b", "indicator--f333c32e-2986-479a-af58-811e72b6b7aa", "indicator--4b54c066-5b37-4f03-91fd-6345f97f8da3", "indicator--d3e300ca-1546-476f-a93b-f7c71a29cfc1", "indicator--b12280be-a4da-4042-bf14-7c10dc2ad737", "indicator--87fe0240-2ba6-4483-a98b-8d8c78b5ea97", "indicator--4541c297-e256-4477-a9f9-3088a494d6d0", "indicator--3bda60f5-2d22-4c99-b23a-ce1c1caf76ef", "indicator--d8fb11ea-54d0-455e-86ba-04adefa1882d", "indicator--155c29e6-514b-4799-9d87-c1027e5c10d8", "indicator--2f002e14-fc88-4690-a18f-9b816192f2e2", "indicator--3fb1d36b-099a-4fff-8a04-f082d6cb922c", "indicator--cddce2d3-ca79-48bd-96d5-2a4337287507", "indicator--e2218e34-ccaf-469a-8762-a7cf3734407e", "indicator--a5a361b7-ed23-4168-8e8a-c7e6bf2f51eb", "indicator--1771138e-0cf1-473b-a6a0-259307a99702", "indicator--8c57ccbd-7b97-4c04-968a-d3f18ffc0f2a", "indicator--499c3683-b2f9-4688-a752-913b383fb26f", "indicator--1181905e-1b55-460b-b277-257192cb9f26", "indicator--4f2fb845-0749-454f-a335-ebd0da1c084d", "indicator--c7f523f8-727a-48b2-98ea-b11893c1b8cc", "indicator--24ffbd65-a954-4705-8189-902dc0ced6f5", "indicator--0859e390-bd97-498e-9319-93d5d8f1fab7", "indicator--73d9d433-64c1-45c4-95a6-1ac07e1c1f7f", "indicator--aee6c153-21ff-4094-bb42-63fa1e1f4ae9", "indicator--14475b76-aead-421a-a033-115466686085", "indicator--d3404363-f923-4f72-b4a5-625e2aea2dd5", "indicator--c58d5244-296b-4940-a11a-64560b6a6b10", "indicator--4a3af49b-1244-4db8-9acc-cecce2920acc", "indicator--537ec9e5-d93b-429e-b641-4f4003e15fc3", "indicator--3671064d-12e9-47f3-9636-6f57faaedb53", "indicator--3911268b-df02-4757-a44e-635a02681124", "indicator--77aea6dc-a5be-4739-a981-b721a2e14894", "indicator--ede1f3bd-1e1e-437b-bb02-60e267beccd3", "indicator--dd05346b-a8be-4858-b4ce-f5d170f94e0b", "indicator--bf76ee65-6111-4e4b-91c2-d94c64f07e9f", "indicator--f21f2fa5-8f4b-4c11-8e9e-498c6813b860", "indicator--2c9ca78b-f227-4a92-9006-e6cbcb8e1a3e", "indicator--8c8f52b1-e472-411c-b250-29a4dcf8abcf", "indicator--9fbed677-bf39-4d44-8dda-5e52c15aa648", "indicator--2517ef9c-31a4-4a16-a2c0-568b93df26ca", "indicator--bb1bd288-8028-4a13-8625-52c627a3ebf3", "indicator--ec4495a7-4454-4abc-b945-99004e2e2050", "indicator--c62c0842-3b9a-4ae9-98a8-9e8e74b98fab", "indicator--81ce5c44-0ea9-4539-9658-c35143ed92af", "indicator--316c52f1-e55a-4b9e-8075-256afecae983", "indicator--23d30768-992b-46b0-baa7-824a8aa1ffe8", "indicator--3b14a129-cf54-4b8b-a956-118418d9b7bc", "indicator--8d42cdb9-8e0c-48f0-9159-a8575eacead8", "indicator--7acb05f4-f753-4ffe-bde8-25692281bc4f", "indicator--d153f9d7-7e91-4790-8104-0934de77ff4a", "indicator--033db4f1-075a-467c-9fc7-a124900030c9", "indicator--87de4909-c7d0-40af-b2eb-75a29d5a8b86", "indicator--2073579e-8f5a-4fa6-8455-57a77f6efee4", "indicator--7d1e4325-5d59-4aa6-8134-da0f20e83ff2", "indicator--8d7e918a-ae5c-48cd-8b13-95cf7b0f74f2", "indicator--8c9cc4f7-086b-48dc-85a9-e2d74e8b2da2", "indicator--20910ae1-85ec-4002-a901-c28b9ce020f2", "indicator--4c072ce0-2efc-416a-a01a-28849c03af12", "indicator--7c39af48-3b8b-4ee0-b4b9-e38e5f653776", "indicator--22610239-7876-4f18-b597-afd797edc7b7", "indicator--e8fc58a6-902f-47b0-9809-edd600d850a5", "indicator--1f4ff0ea-0c77-494a-b92f-f428dab8fbde", "indicator--0ca2fec8-dd05-4c83-8335-5dbd59ccf785", "indicator--c0e895cc-0876-4e95-9a4c-b25d91a060e4", "indicator--252ecff6-76d5-4d25-918f-4e32b14e074b", "indicator--d61e23d0-18c6-4717-950b-ae3b60d04636", "indicator--950b9679-e74d-47d3-b584-a58a51ad8bf3", "indicator--cef9e929-d74f-47ef-b334-9b580f73a1f5", "indicator--fa5fa589-feb0-4798-98e0-e5ea4104d10b", "indicator--f3cfecbe-2b95-47f1-8d5c-6b3d58eaca93", "indicator--5e042b62-f0a7-487c-8a60-9b928e0683bc", "indicator--3b96fb3f-18cb-4bad-9138-5009c5631a11", "indicator--a6e30f00-0434-4b33-9a36-90f5df27c514", "indicator--dca46a08-122d-41e7-858a-d867b38fb76d", "indicator--9ef9be10-98b9-4032-81be-6ee61a7bf1b5", "indicator--21d1a489-84d4-481e-a620-4c6828a4a7d5", "indicator--f159dfa0-afc3-4e6d-afb5-2528c3ab1d12", "indicator--0b367474-d052-40f5-8a7b-0cac7f3484b3", "indicator--351168b8-535b-474e-aae7-87c251beccb4", "indicator--aec46dca-abf9-4584-b2fc-c86ed885c4cb", "indicator--e4174982-2c3c-45d4-b432-e5a2a0af9abc", "indicator--3927d981-b504-4628-9357-08cce8d88b58", "indicator--4cc0cafe-882f-4a2a-a82e-3ea05c918f70", "indicator--0a8df342-9b59-4a47-82cb-c2c88fa8a35b", "indicator--7ad26dcb-06cb-4ac1-b08f-7acc80a7d7ad", "indicator--f47def63-4844-4c86-80c4-60aefc19c6cb", "indicator--f7f31fd2-fb35-4e2f-a3eb-6ead4150e77f", "indicator--55379a37-e68d-4b6c-a34e-07c377a177d6", "indicator--988fdff1-07fe-47aa-b528-b460aa89db8c", "indicator--b3e665a7-5320-496e-9258-3dbafbcd6366", "indicator--2c3a7f08-375a-49cf-a4b8-f8294b1d630a", "indicator--b5e4f9ce-8c81-46ad-89b2-8cb87425b72c", "indicator--20769725-b054-45a6-93f2-a6ffafde7191", "indicator--fbad9b55-8369-4062-9b6c-489221d7d1c2", "indicator--e775ef6f-9ab9-4bb2-bb6d-5a838cff4db3", "indicator--66a68bf9-2003-4910-9c64-76fc8b3f584d", "indicator--fe2ae0a5-b3fb-40f6-9639-bc29aab732d8", "indicator--15587427-b56f-4491-a324-d6699bfffb6a", "indicator--4303ecb0-07d7-4240-948f-f76e4192a505", "indicator--ab6dd49f-f076-4115-bce7-98c3e3c635e1", "indicator--005a162e-d7f4-4467-ada4-9637511aa49a", "indicator--f2be7109-f730-410b-b5b0-61a5abd067ca", "indicator--7d9eb6e4-999f-4df2-ac55-95b2d27b705f", "indicator--1f99e075-f640-427d-a412-f419c191065f", "indicator--dd779da5-cf7e-4e9e-a855-c88856f817ba", "indicator--975a18b8-0b72-4567-bfc5-591d029b3800", "indicator--c10c7b0e-da36-4f93-b15e-7383bc7599c3", "indicator--6dae3fdd-fa39-4a17-b18a-cf83b7bee01f", "indicator--32d30ec9-0cf6-4e92-b167-9d30fbdf64f0", "indicator--62e7ad31-7aa6-4b57-957e-e0443676c798", "indicator--2cd3ddf0-8dfd-4785-ae18-bde247999836", "indicator--6d4ba01f-3395-46ef-891e-cca054e0801d", "indicator--682551d5-c88d-43e0-b09f-43bffff131cc", "indicator--2b43e39c-c47e-4798-b18f-ad1e918d8e34", "indicator--97747140-4ee5-4b2a-a674-e9e6ef3920d9", "indicator--5335148f-5f02-46e9-a698-ef2936eba042", "indicator--17d707bc-ee2e-476b-87e8-d542a65f0108", "indicator--29e24f45-464d-4af4-a165-256e39a81aef", "indicator--7e7fc058-7433-4293-b66b-edbd6ab4e1bf", "indicator--5bf2ad15-ec7f-44da-b962-1fb8d7058bba", "indicator--5a95edbf-e64c-434e-9ec6-15c9dfe61332", "indicator--5df921db-4028-46b6-a900-445622f01ef3", "indicator--820e1dc7-3e80-42bb-a82f-adfaffe458c2", "indicator--a2c20d5c-5ce8-473b-9732-54045271fa01", "indicator--5a5c8293-9ff7-4a9b-8b40-7bb39529bc06", "indicator--4d7aef23-6c33-40e2-994c-32fd709f6922", "indicator--503917c0-b1be-430b-855c-e9ae80ebb36b", "indicator--493b3690-c063-4468-b359-abe14410160f", "indicator--04080d45-518c-4962-98b4-28f96e90073a", "indicator--759c3884-1798-4f1c-a1d6-a43f02e05f4f", "indicator--c6e09fca-2f17-4700-b5f6-f23d519562b8", "indicator--672acb10-24cd-4382-ac9a-832be5005522", "indicator--ec666a21-ee19-4fe7-a303-a0745cd9e1b3", "indicator--23bfd8b0-d882-47d6-bc62-c4184c7b5a98", "indicator--3349c703-1e2a-4c2a-a0df-95d71e7553b2", "indicator--0e8b6837-8276-4218-9a5b-058528c3e897", "indicator--4ce5d598-f30e-4aca-97dc-2afc5a573b06", "indicator--17b2bfc5-e918-43f5-bbe8-7252da3473ac", "indicator--0ade4014-09cf-4a65-99ca-627c29163b1e", "indicator--90ad1500-d607-476a-a9e1-57f453b93848", "indicator--8d2a3769-4048-4444-9b46-da82f91f50b3", "indicator--a2886fe1-4907-431a-90da-1d6495a6be40", "indicator--228ef724-7ab5-43e4-a68a-dd47be678b38", "indicator--025345e8-4f85-4075-965d-b8eb85d45ec4", "indicator--3a705522-b26c-4c9a-852c-daf035ac3bef", "indicator--b24c0814-eb51-47d9-961b-4ea909d1f77e", "indicator--0b1b9fdb-7ca5-4529-9324-c324f51f4036", "indicator--bf76312f-41ea-4f36-8e58-566af3f67a2c", "indicator--fd94c806-a9e9-4543-8673-4b68802564d2", "indicator--4bb5ff22-7200-4779-a4bb-1816046aef6f", "indicator--84137847-b74f-4bd6-be7a-b1f51c00b1a1", "indicator--e7b6aef6-e6a6-40b7-a734-81674bc1db79", "indicator--f19b4438-f855-48ab-8dc6-5a773c757e28", "indicator--908b4767-e22f-4138-b908-6488833bd76c", "indicator--8754f038-58e4-46f1-98d1-8112abe5b21e", "indicator--f2a00a05-b9aa-4e65-9b40-0468ea6463ad", "indicator--fbecfa16-b20b-4223-8908-5009ddc900e1", "indicator--a99950b6-8557-4bfa-ac87-5d57b37ab989", "indicator--3b2d32a5-6c9f-4c25-8659-bebe4bafc425", "indicator--8e34fa67-f494-4967-963b-d3e162fe2eff", "indicator--67a8c78d-304d-4c32-a43a-662b34bdce3f", "indicator--0a80e77e-1d79-4ff8-ade7-df297a162dae", "indicator--eaf61675-a3fa-42a0-b45c-216af52501bb", "indicator--d0e313a3-e436-4d51-86d3-227bf4c8bfc0", "indicator--a9787154-f9e3-4d77-8e63-ce3b8b35a1cb", "indicator--14a0e4db-c0cd-4f72-83e4-bdd98f1a6f0c", "indicator--73b1338c-1b67-43a2-8c60-513dd2f140bd", "indicator--c7e7bdf9-e58b-45aa-a3ea-e17d5e7958f0", "indicator--3b61d278-d09a-4095-856b-27b6a7c16783", "indicator--263b07bc-dcdf-4c1c-a86b-d4f4aaf84ce2", "indicator--aeecb358-e023-458e-b85b-5f2d5a49973d", "indicator--451b1b5e-1f95-48c6-a87c-b01b762a5a89", "indicator--97824a40-4966-45f7-b8e4-51d2b9acdeb6", "indicator--8ed81acb-265e-464c-911e-5446d4220ea0", "indicator--0e61e403-88e5-4cfc-9a08-e3888d0717d8", "indicator--5fbb32f8-e62e-4c05-b495-3fbde1510131", "indicator--5d903f00-faa2-4710-9f1b-04e30b878ea6", "indicator--e96b0238-2304-4d00-8e8a-9e8d60492cf0", "indicator--1ab3c781-87db-4c0d-acec-45a44a578004", "indicator--8a8518e0-0e64-4e56-866d-477ca294d1fc", "indicator--0618144c-09a9-49ee-a5fb-374b06292e34", "indicator--238bf92e-4a09-4f13-adec-17acbd7c5157", "indicator--14ae2d6d-d61d-4de7-9f2e-81cc89491e17", "indicator--c42f7589-2821-48b2-9970-a6d114b8ced2", "indicator--265c88a9-3008-4175-9a82-6dd5869604be", "indicator--490b97ec-b58f-458e-877b-faa318ce812f", "indicator--b57cf177-f6e5-425d-8eab-526219af2a86", "indicator--c3a1704e-01eb-443b-bcba-15cd1e65231f", "indicator--e0123f50-6274-4fab-9d95-f2b4f22fb9df", "indicator--f2adb22d-f596-4ee2-b3d6-f451a6bbfb81", "indicator--a1f12758-45fa-47bf-8592-c2af85bc6c60", "indicator--0ecdf566-af02-4b5f-90b5-91e6906ee68d", "indicator--7b50c834-e383-4d0b-825f-ab1eb1efd4ad", "indicator--3cc915a5-2706-47fb-b3e9-6746fce90623", "indicator--5bb32270-0460-4f46-9d42-26f005234028", "indicator--9e154d45-1540-439b-8c60-cef153bb9b7e", "indicator--ea774ce9-1644-4a47-b166-c5d6ed846c03", "indicator--c348db47-c3ab-44c3-83c3-f754a0e3deae", "indicator--ef25dfeb-e0fc-45b4-b9a0-cfce1d27ce0c", "indicator--2cfd7729-53de-44c8-ad04-73cbb714767e", "indicator--6f4ec57d-7da0-4364-acc0-614e570c8355", "indicator--9def9cad-6fec-4d27-83e1-6165e5a9455e", "indicator--8db7a3c2-ebe6-4721-90c5-18ccf1a41bd4", "indicator--0f84437e-9cb8-49fa-b0fe-9b348f1cbca6", "indicator--c6f29e1b-1930-43d5-9c21-ee8a53205821", "indicator--9c47152c-0f39-4287-9c56-e8b8486e47c2", "indicator--7a35536d-bef4-4f4c-8726-706f3b6d550e", "indicator--dc1c8d9d-5a38-453e-b04d-f0c9dcc8361c", "indicator--920ba4a2-da8e-47f6-acae-098fd5cddcbd", "indicator--b7137f8d-31db-4e0c-a9f2-e742098f14d5", "indicator--6a023885-ae14-4b99-8758-aae92b56448d", "indicator--8477b3f9-8b62-44a1-8f67-b566f7a8083f", "indicator--d70cc857-a83c-4e4e-bc49-667c78a4cfe9", "indicator--29fb7cbb-e1d3-415b-a3f0-62224d2c8ee4", "indicator--5c3c2a6b-082a-414e-9bd5-8f2ca11ca73f", "indicator--b8d9cfb9-8c12-4b32-9e11-5052769b6b47", "indicator--9faf139c-0dcd-4964-a390-83bb177a42f3", "indicator--d11e70f6-89dd-4a1c-aeea-0b8537e7e696", "indicator--9b063cbd-9377-4c3d-8109-3687ae293acf", "indicator--66d3d2c7-5217-4527-99f4-0e5562e24b55", "indicator--3a086ac1-6973-41dd-b759-624e376ff4a8", "indicator--60967976-e0b6-4015-84c3-1550a9513110", "indicator--1a61ab75-2d38-41d8-9ece-ba1d5ccd0b39", "indicator--9cc43233-d526-48f4-be92-c552c80c15bf", "indicator--3d13dd1c-d1b2-43b6-8644-99e7e21aedf3", "indicator--b30a2b56-ae47-42a5-bd1f-855d68712f9c", "indicator--f28fbc88-497a-4617-b7e8-46c072ddc296", "indicator--94878d37-5a84-4214-b961-de1ac4749750", "indicator--dd8463b5-c8f1-4e28-8261-252d91e9fee6", "indicator--7c5c7141-f101-4445-b55d-f8e17574f98e", "indicator--ce335a9f-d146-4bc1-bb4b-d4096c49fe81", "indicator--e46e8f14-17b8-4beb-9c27-7d27ff9b5e33", "indicator--588b18d7-7839-4d8c-b1cf-8152afefaf35", "indicator--21a51fdd-9163-4624-bd7e-716f96de34f0", "indicator--8fb5d8d7-412d-4ca8-8b13-1e9a609381a6", "indicator--26f62873-9148-4de9-8019-9b14127440d4", "indicator--99c3c475-6087-4505-9d21-862354524c34", "indicator--fa0645f1-cc96-4d45-8d02-f9ba29be8ad8", "indicator--58f50881-284c-4c5f-b973-884819e70790", "indicator--8f34cc84-e171-4695-97e4-baeb04908303", "indicator--0fdd28c9-e446-4dca-a30a-53136a3ca87b", "indicator--0676c7ee-43f9-4ba5-9747-4775deadaf96", "indicator--66bb8614-d197-4623-969b-1db99791016d", "indicator--7c9d69b9-0ff4-4033-9f9e-d884c36b6565", "indicator--7b0ef1a1-afb9-48df-8290-cd6486792a28", "indicator--5834d973-0169-4898-a9ae-209a11633249", "indicator--713f56b5-76a9-4c20-a5f0-a8257d6760ef", "indicator--e601c34f-84f9-4c39-8175-b9bdd44e10bf", "indicator--72b595c5-c2b6-4498-8d15-efa3a8d4baf2", "indicator--80be6fdf-ab25-461e-bba6-92b43dd1e2a4", "indicator--6cce4568-95e3-4468-8b5b-cd55aebfff71", "indicator--09a452be-0d5c-4321-b0d7-b3c103c41065", "indicator--0ecb7a86-c28c-4259-8200-c8e8d5e108bf", "indicator--7ab23aad-0d03-449e-81da-f40ae9ecdbc5", "indicator--ff67018c-80c4-4e85-bb81-ad9fa912fb31", "indicator--9d1bf133-bf43-4e4c-8947-06f225c81c53", "indicator--b68cb30c-9e48-4b3e-b961-01d9a7493616", "indicator--de061ca0-9c0a-4958-99aa-d2db60e61785", "indicator--bc83b454-9485-43b5-94b5-dbdac42b6aeb", "indicator--51966c10-78ae-466f-9f4c-9f8dfabac559", "indicator--10ce3d7e-b4de-4f6c-ac77-86fe913cf135", "indicator--64c6f77c-8a6b-4663-b44b-95141c86fd9e", "indicator--244cc7c6-1e3d-42fb-bfb6-d6ef6b8a2a1f", "indicator--4f28005d-3cc7-4bb6-99a4-c662d2421c6b", "indicator--db6b3565-e9d7-485c-ad4d-85a20e895481", "indicator--2b1b6e86-f2ef-43d2-bf8f-f8089c781028", "indicator--70852d04-fad5-4672-82f2-1d6e87359fe6", "indicator--08ac8062-c8d8-4644-9dd6-d4366b90cbb4", "indicator--a6729a69-fdac-4e35-a0f9-715a6dc5f9d6", "indicator--bceff54b-ed1a-45ed-8ddd-4202352b16f1", "indicator--cede85d0-01a2-4e67-8544-b30b4d8018d6", "indicator--ed62f27e-d94e-4d9f-9b96-9ae6e717f376", "indicator--35712173-bcef-4c3b-add8-9c8028265ebb", "indicator--a297d745-a189-40e3-b7cd-90903fd5239f", "indicator--5c592a3d-144d-45bc-aa1c-b1bb8124cf8c", "indicator--fcdac82a-bc4a-4485-a653-cd4ae1426c27", "indicator--690f239e-4d88-4775-b568-d9cff2751c96", "indicator--708ad22e-b074-4bf8-9795-23b087b744dd", "indicator--ca76918e-7b4a-4cd8-91a7-0daf0c849bad", "indicator--6f566627-a510-401c-be13-c341a1734298", "indicator--1dd2d245-0ce0-4c44-b404-3af3dfa04882", "indicator--995ce1df-6142-4c5a-829c-679a0c0b20de", "indicator--113a9111-891e-4716-9abc-99ffc9592cee", "indicator--46f93e8b-0e85-4e6d-9c47-c66e5b90fd3f", "indicator--33abdcde-cf32-42a4-9efe-5f8c058b8444", "indicator--2aa62333-c00e-457d-8928-d026cb39a854", "indicator--3cf97b69-b5a4-4a73-83e4-20b24089212b", "indicator--cf620031-4796-447b-ab09-7ec5bd95f8ee", "indicator--9e837188-159d-492b-89f7-b9ff37c515f1", "indicator--71449ba7-adf0-4e94-8f90-31920fe5a108", "indicator--f181803f-de1f-4645-833e-8606579af5a3", "indicator--23b2265b-4116-4344-a2ee-7b99b74dbaa1", "indicator--3b7cd8e6-2c25-4121-bd75-d4b7d1894f21", "indicator--c5642959-113b-4475-a69d-243fac1d8570", "indicator--85bfc55d-2cbc-4bd0-9f52-6e08cee55bf9", "indicator--d82d41a2-1c30-4f70-82dc-9981468629cd", "indicator--23d44f2e-5923-4c90-b436-0ef44b1369b4", "indicator--712be909-1dc4-4380-b606-bf1eb7e672a4", "indicator--8934fa7c-58a6-41f2-9948-915c22ae4474", "indicator--d7ec2c4a-6dba-4ecb-8100-143ad7f58d7e", "indicator--10be5422-500a-40f4-8376-4ab60554441b", "indicator--e4355996-82a7-4089-97da-98cd7b62a36c", "indicator--916b5442-9ad8-4494-8802-6253cb7dc649", "indicator--baa3c3fa-157e-4a9d-8769-8b4369b9a0a9", "indicator--556b0467-38e3-446a-9049-eb9d9e09ac74", "indicator--b64812e3-6b6a-4f74-b5ec-33becb6d83c1", "indicator--9b07c814-ce95-4807-b3a3-dbbc9c617b77", "indicator--7d9c7ed9-7787-4b6c-afc1-289316184854", "indicator--51c1a970-52e2-45e5-8b67-f2368baaa138", "indicator--758a9a4f-1c2d-412e-830f-fa1c907cceff", "indicator--58903f34-72c6-4e68-899a-ef3e5d2ff31d", "indicator--76f96001-15b8-4003-b4b8-2c223e6358ec", "indicator--52e231fe-22ef-493e-9f64-175060bcb3f4", "indicator--7686bf0b-7b24-49c3-83ff-d3e1e5cdcab7", "indicator--79d2a77d-5832-46e8-843b-470af4f1c5fd", "indicator--9bd4db4b-c1ca-41ae-82bc-8b965b09551f", "indicator--9f55bdd6-b1e2-41ef-afc3-47402b70e816", "indicator--5948bf51-dbc0-4e5e-98c3-7d5bb6897317", "indicator--64a0795d-33d1-4a46-aba3-f65c6e668bb9", "indicator--5b554762-0537-4d2e-8ed5-d2a4c2d23354", "indicator--6531ab15-0e48-4310-8b5d-794af238d079", "indicator--b2e77458-55a8-4506-8d21-999101ca67f2", "indicator--531fd3be-69d2-430f-9a36-6c6e1554ac7c", "indicator--d0b7666d-0903-4ead-b13a-189266dc8045", "indicator--60de02cf-eaf7-4ef4-bc50-847c8c163ddf", "indicator--e9e53ce0-d6ca-4d69-aaa4-1e5c4aa220eb", "indicator--f38c08d5-cd05-45ad-ad79-9819c40e2130", "indicator--b45b3f34-7a66-4011-8202-3df16a2592ea", "indicator--45c20bc9-6188-47a1-82d9-f34b2c1400c9", "indicator--44fe1aa9-1d1c-47da-b5b3-a14d6aeec8c1", "indicator--b27e5bdb-ef7e-4516-a445-437a50ab329a", "indicator--4dd1abe7-d6b6-470f-a72d-67deb1eb639c", "indicator--4c96d3d3-0641-4bd6-9f3a-74b890620516", "indicator--e200e43b-33a6-4ff9-bbf3-e79f83ab8c7b", "indicator--c8be6865-55eb-4760-948c-ca7fd0b70de7", "indicator--6fb8c111-c08c-4cc4-97d2-97520b426483", "indicator--d9fe4f9b-b6a4-4f52-9d4e-414610a00884", "indicator--772c6861-0c6a-4cfe-99bf-74557a47366e", "indicator--bd576be8-b08e-4f46-b719-b9e531c34916", "indicator--0bf0a39c-89e8-4b99-ae7b-a455652a5710", "indicator--6e5748f2-d7c1-449a-92ac-ce4768605c03", "indicator--a46edb73-18b0-41e1-ab3c-8eabde09378a", "indicator--be761e23-893e-4658-bdd8-86f3edd1b531", "indicator--c1d4902a-3947-4122-b30b-693f43b77a8f", "indicator--0a0ea08d-64a2-4fed-a664-72fa6cf5a274", "indicator--b0aa8a68-a377-4c0a-ab22-1e69a4b3ba74", "indicator--42f4630a-6b76-4283-af62-e7119d0ab0c4", "indicator--d2417570-a5f9-4f13-ba20-9561af0d75ea", "indicator--6292c189-a137-4d02-a7dd-9234190e6e3f", "indicator--a1ded202-47bc-4c98-8be3-1979d85a0c1d", "indicator--8791a07a-ae69-4f6f-9363-f58d2da2ba9d", "indicator--67170ae8-24d0-47b6-9a61-e8d293bbe0b5", "indicator--563860f8-fdea-4576-af93-389e419556c8", "indicator--b063f1f5-6bd9-4a44-b9bf-0287994383a6", "indicator--ad01283d-f44b-4622-9078-236d22e01e43", "indicator--8be9377f-722b-459f-a297-06ff534ea33e", "indicator--13520518-3cc5-4913-8779-1f90cf2f1925", "indicator--2f2ad851-99df-40d3-af81-a294bf368a9f", "indicator--80108951-d399-43eb-a63d-ff65037bc0ac", "indicator--79561ad6-3e45-4dbd-b874-ec5ffd6bbf93", "indicator--4161b5ef-fe30-4267-9c67-a91b866f5c64", "indicator--d743e1f3-acb3-4ff3-bfeb-775ef898551d", "indicator--e4a965f2-6c4b-40b7-afd0-19006c0ec6af", "indicator--260e4b8e-2304-4d10-96a8-fcb402b8d8cc", "indicator--7e8f74cf-e0b8-4bd8-8abe-4deeeb60183f", "indicator--408d9364-71ea-4e0f-90d7-9c8d70633a40", "indicator--3ac0604a-b985-4c2d-85b4-226aba50d18a", "indicator--6bb7d787-a98d-44c2-95dd-554257ec2af3", "indicator--60961034-116e-4919-a412-8ad5bb59e58c", "indicator--2397c30b-2420-4a0a-b2c7-d37be9e33480", "indicator--f4532ddd-1c10-4d26-80cc-a127353be676", "indicator--6f9b73ac-0099-44db-bbf5-49337054e213", "indicator--c19c3ffa-1f09-4a86-9a40-55e354e682ca", "indicator--ccbc8a7d-9794-469e-ba65-531205ca0e48", "indicator--64feb66f-0c7e-43bc-b178-5bf093fc0087", "indicator--333d9b6c-430e-440c-bfa7-0ed88c6a571f", "indicator--a87c5304-1d40-4b5d-bb94-55c204b4f78a", "indicator--5dcff7d3-62e7-48fc-bacc-3ea0107b1610", "indicator--7ed5bdbc-d723-4aa1-8aa7-089a6792047b", "indicator--850cff8e-3c2e-48f4-895c-ed3a7c30fb98", "indicator--fdf69c9c-56f9-47f5-9f72-573e88c48d5e", "indicator--bb29a372-179b-49b0-8bd0-4df2f5ede65e", "indicator--471c77ac-9f34-40d5-87ba-5c28774e0b95", "indicator--820faa96-cc46-4ce7-bc68-1570b447e77e", "indicator--85157643-c351-4c0f-86a7-d6adf158cdd5", "indicator--463afc57-32aa-4a61-a01e-86e7d523feed", "indicator--9fd90b2a-1aff-4c22-994c-7955e58845b5", "indicator--ec3a5ea5-2559-40c0-b9a7-d190b2b78234", "indicator--a5b74118-1a2a-40a1-9ea8-443c158c193e", "indicator--d499ded3-382d-4678-9213-86f44ff0247f", "indicator--45b96daf-f479-46e6-892b-ed186feeb15a", "indicator--8bf8234c-b3c8-4a74-b757-e4f866bf105f", "indicator--0cdec20c-38f5-4518-8edb-95e0a658ad88", "indicator--0c90c959-7221-4a60-aa2b-fe5835af6fb1", "indicator--d974b7c2-3c3b-43a3-98f5-02fcd5fc60c8", "indicator--64dd62ad-402d-4299-a917-84fb904fbe66", "indicator--67fe459d-f877-4207-b6d7-6a9b375c9dc9", "indicator--22e9982e-dde0-4c8e-87d6-ecfdb1205b84", "indicator--f702d8e8-c019-4e59-b818-7690789ced63", "indicator--e7a52728-1bc5-4558-a08c-44232992ae48", "indicator--f732164d-5a16-43a5-829e-7f2eb1379cc2", "indicator--867a1b87-4b8a-440d-a3f2-87c361bb3a18", "indicator--8aa42c18-c402-4728-8d81-8ee44be31612", "indicator--75338d15-ac70-4756-b494-20dafd264c36", "indicator--1fb0a6d1-cbe8-45f5-b9b4-9b5a67a7a3c4", "indicator--502a2010-02e9-4744-8b48-a3d956826b74", "indicator--b27f7130-99c8-458e-915c-c035e2ac7069", "indicator--eedc324b-b417-48f4-953f-efc3f926c3bd", "indicator--bca6bff6-6b4e-4b6f-91d3-03b1f5c7906b", "indicator--ff0a8555-a86a-4497-a8f4-8894c35c2cf9", "indicator--4b8097de-fd66-4a29-9184-825e55066a04", "indicator--5fbf9e22-bd62-45da-9009-2dc65891ca75", "indicator--986bdd64-4bca-4f83-b50a-b851829856f1", "indicator--7c7edf76-3c54-4af9-97bc-786a416f9143", "indicator--fa2aee81-aef0-4789-9709-21209cd3ecc1", "indicator--4bafffec-f079-46ea-bd29-7d1990f8d9e8", "indicator--6f48e0c4-64a5-4b36-9078-000c952b527b", "indicator--f36f0163-4e70-4e15-b1e2-99789c7a476c", "indicator--4564449c-ec77-409a-a341-f356fffca23b", "indicator--ff5c2434-1764-49fb-9b7a-5a349d18ce85", "indicator--b841f9a6-eb28-4c4a-bc5a-905987083e7e", "indicator--34a8876d-cd37-4aaa-8ecf-9da1ebb2b14c", "indicator--60af2f5f-f6d8-4ef1-91dc-f0d5c3ddf87b", "indicator--79c0f1a8-b427-48f5-858c-3c589ce6fa3f", "indicator--60cb8da4-ef1c-4628-b81a-bff8da030e5a", "indicator--d20300b6-267c-4b27-b2f5-5513363c9333", "indicator--e8f04305-c05e-4431-ac5f-3765b203911b", "indicator--fb6f5b56-fb7d-4f7b-9fb5-25f1f1d19a3c", "indicator--2fda4234-98d5-421f-90d6-6b40ac4d360c", "indicator--c11d654a-6165-44e1-af30-a3d3e6f9aa3c", "indicator--5c2e4dee-ce49-41b0-a9b6-c06bf4fca75b", "indicator--d57256ec-7664-4b65-980f-ef210f876a57", "indicator--a751353d-118d-47b5-bcf8-1a61db3802c5", "indicator--bf525fa3-f0c0-46ed-92ee-07c9d107756b", "indicator--762f2e95-6a40-4e09-8332-626102546029", "indicator--9df6812b-27ee-4ad2-96c4-ad11a79d08c3", "indicator--7e49cdfa-04be-40bd-9c0e-27c29a5b16c5", "indicator--947ab35b-a9c5-46a3-91d7-07b71b4c40dc", "indicator--24a0c768-194d-465e-a6d3-0073a71d482f", "indicator--4e967d23-5baf-408b-8001-86fe1ae41371", "indicator--adf40af5-afdf-4f23-ac2e-da545fc9592c", "indicator--3037dd93-b3ed-4fd0-92da-904af8e02113", "indicator--48762c17-53f6-460c-8193-7c9e9cc17aad", "indicator--c98c1e0b-68ad-42f5-b8bc-8e2a5ea7e452", "indicator--3d79956c-6b73-47e1-8432-3ee5091bfac9", "indicator--bd619422-eb65-42c5-8923-9613c4b3ee1b", "indicator--a02e4510-7b8c-462d-88f2-d29298d24b8d", "indicator--eadbc235-0e42-4323-9c1c-dff6584ee48d", "indicator--71ffa1bc-0460-4e0d-bc1b-68eb6a482d20", "indicator--af696cdc-db04-4af4-bcc7-5bfeb4c5df9c", "indicator--9428c1dd-a507-4783-ab2f-a15a200fd076", "indicator--9a984029-b255-4e86-b98b-61434484b6fe", "indicator--e4313bc6-c75a-4a06-89b2-7c3f57ac123d", "indicator--8bfe0083-ed54-498b-8e64-c184872e6ca0", "indicator--4d3d4bea-14e2-4e1d-b038-69674a487b3e", "indicator--9ee93bd4-2e27-44cc-9577-9c6823fd75d2", "indicator--2c880615-55ca-455b-83da-b725308e97d7", "indicator--8e9d391d-ad8d-406a-8cf1-14b9808af51f", "indicator--95b6e03e-e243-4a35-90bf-0c9c8657b342", "indicator--7ce6503e-8243-48eb-8ca1-3da67679e652", "indicator--e6cb85e5-cdc2-4ea5-9389-676b4a957ab6", "indicator--a2d81e1e-40ef-4bd3-862c-2086ecd52cab", "indicator--c9190863-bf60-4bc7-9d40-cc6a16d6bbe0", "indicator--af3c1aa3-864e-4700-98a9-31d5e0450b11", "indicator--7f86df05-2bb9-472d-b006-0d22178960fd", "indicator--3bd6bd77-ae44-4844-aa44-b8f8ba2d1d75", "indicator--4a6ddc2b-d4a0-4d02-aaec-f07e8b90e7fd", "indicator--795a71ea-5a19-4c84-aec9-64bf2b06f625", "indicator--5e6e2b6b-a369-4b66-b56f-56f066acdab7", "indicator--62bcb07a-b712-4d23-b216-4a8498b3e22c", "indicator--b99eeba7-77d7-49a0-bc1f-b49813564ae9", "indicator--be159408-2a81-4394-81d2-bcc2f363bbe0", "indicator--efb83e31-0fb0-4962-b874-1669f63e7b2a", "indicator--ead633a1-dd33-4b63-b092-c1432b89bedc", "indicator--2677274f-9305-440a-abe5-8114bdf1fa80", "indicator--c9fed5bc-f62d-453c-9af3-7a907149b489", "indicator--2a5fbfdc-105b-4f45-9886-c9d62a4483a8", "indicator--d4722c01-983f-4460-a311-98542ba64f75", "indicator--e9dd9b8e-7b57-4a92-a6bb-7949dbf159bc", "indicator--789cbde1-4ffb-46a7-b310-0b71fcc8203f", "indicator--59b71820-833a-4f88-b931-3abaac19b943", "indicator--d182bec5-2f29-4651-aa66-75a1b7de84fa", "indicator--582bf543-8245-454a-ab82-a3f44b272427", "indicator--e6122cd2-3cee-49da-a732-ce5056525742", "indicator--6745cd7f-4624-4292-9807-f965c315403d", "indicator--6a00d8ab-8c7c-4ecc-a6fe-a5853a77b5c9", "indicator--cbce90f1-7b8b-4808-9de5-ab3cc1e66146", "indicator--923be000-7c56-4a00-842b-297300a00f2f", "indicator--f336648b-d635-42b6-9dd7-69556bb96172", "indicator--4c50d728-43d2-4bbc-bbb5-32dfe7bafd8b", "indicator--aca82548-fc56-40dc-b8b7-9b587c32c50e", "indicator--97fa9cf9-efe4-493a-9311-e9d8e129dbca", "indicator--704a57d0-9125-471f-bbfb-6f63d4de3cc1", "indicator--66b437ab-3c34-4aa8-a73a-6a5e56cd3520", "indicator--befe3e35-bffe-4e34-970b-f99d99e35094", "indicator--b132aa94-c687-4a74-be66-f60b1aab9833", "indicator--c9d892df-e7fb-4f2b-9916-af88338c4ac3", "indicator--631a7ead-39cf-4440-be7e-0a7e9c449e96", "indicator--77c38c94-da87-4a36-95bc-9833f9bcff5f", "indicator--05116750-247c-48f8-9b32-912fe826094b", "indicator--3b352dc7-7a53-4970-8798-0d52a41bbf93", "indicator--d518c38f-0fdf-48ae-ac63-47fe9ace5649", "indicator--e983ff22-8c21-4a88-9b65-052a60e9fef0", "indicator--60d8522c-62f6-4b90-ac75-9b68755b92db", "indicator--73d4e726-24a3-4759-b964-aded39b7df84", "indicator--b025ea93-6811-44d9-8241-f73191b3d6ce", "indicator--f2409cdb-8b73-4781-8224-07f991c57d36", "indicator--b0364edd-1a64-43ec-b595-7e23679e547e", "indicator--18751653-f3bc-4654-8067-dd4cc74bd725", "indicator--b271e8de-70f6-470c-bc11-e94c67b6183b", "indicator--1ae3bee8-e260-4993-aea0-91e571716102", "indicator--ae2ab124-4813-4cb0-913d-1fdbb6e91164", "indicator--5128de55-0192-41ed-bae4-b7166de1b95d", "indicator--e9cbdf9f-092b-453d-a017-b9bf6934ffab", "indicator--54530a5c-0779-42f0-be94-e1e1d5dfa6e5", "indicator--9d435ceb-cd05-4eca-a536-31ba025edb2f", "indicator--dc32ea44-717c-4282-8984-5be52a9cb8af", "indicator--f21b5177-ae4c-43e0-9f65-5d9cb02824db", "indicator--120dbeb5-629c-4631-8c2c-427b54970475", "indicator--5baed2ab-cd41-4af4-a0d8-0efcb3654fda", "indicator--6b9a3fd3-43ed-4e6d-9e81-e86949959923", "indicator--816dc659-9517-4d85-b991-4998ec67001c", "indicator--c6b2d550-c946-47e9-9233-43a9312c82cd", "indicator--5cf53617-606b-4232-b822-19f744674521", "indicator--c16b36a6-6953-4198-ab77-ee1e442d097c", "indicator--70a35e13-6b8d-4e85-a2f9-bde6c54ccbb8", "indicator--9111116d-66e5-49c8-a590-4c40f7c959f2", "indicator--57947c68-b7e8-47a9-ac6e-e718895c5acf", "indicator--94494c15-3f6f-4640-923a-e597967af438", "indicator--b3487573-7c91-42c2-9e33-884e388f7520", "indicator--54c732d7-033f-4a35-ab9b-2df950686454", "indicator--a371c75f-1b4a-4e64-9f2d-af72afc08be5", "indicator--1d76c9e0-5b4b-4ad0-b4c5-c764a53c8c33", "indicator--0ae8f329-8129-4d28-87c6-4abeced419a7", "indicator--1e0e4982-85a8-43e2-a8d0-23ed0c89369e", "indicator--e4831c89-a289-48ae-aa1f-e8b4f7f60d37", "indicator--dde2d4d1-aa59-4196-921b-1589908ca466", "indicator--4d71ce9f-ce06-48c6-b745-cd8bece5754a", "indicator--0e2ddd13-8c2e-424c-941b-e558d62b0afd", "indicator--95c5e616-5ebc-4c5d-af94-933abdf5204c", "indicator--95c2f6d0-18fd-4f48-9113-43263e16af70", "indicator--f3aa7860-d075-4ed3-a2fb-dc8b660d2ad7", "indicator--eb9272f1-9ce0-4e74-9967-af2a3ebea8fa", "indicator--b5ad68dc-c168-4b77-be20-833844fdd6d2", "indicator--c3be6239-4818-47c6-8ac2-f4d3455d140f", "indicator--793a3545-02b0-4a23-a159-428e636323bc", "indicator--b0b57235-71de-4c7d-a1e3-4f8998dc3286", "indicator--0fa5b59b-7a63-4d3f-a2a5-fd605f63ede3", "indicator--90433ffa-2f4b-46a0-84d7-371707e96357", "indicator--eed58a3d-ffa2-475a-a2e6-bc016504af09", "indicator--876e6f91-9514-4fa6-81e2-feec0d07b7a7", "indicator--80811dff-251f-436f-85fd-12e41d22bf5a", "indicator--67fda8a1-dede-4413-b468-43862151377d", "indicator--0b08ee85-30fd-4371-ae2b-eedb17ebbb3d", "indicator--a808b8f3-c360-4c26-8110-361b74db8aff", "indicator--b12548c7-7582-402a-9221-ef833e6bc718", "indicator--98fb4e83-607c-4a1c-b312-f6bacb9d765f", "indicator--3e863a81-4031-465c-851a-e8e1cfd14e5c", "indicator--986af649-cf77-47ef-b035-9a65adc9456d", "indicator--738b919b-3d25-4765-bb36-feff8e88beab", "indicator--d276f8ba-6766-42eb-b6e1-a3df20b60a19", "indicator--84d8a521-8a1c-40cc-9bfb-d1e32184ca48", "indicator--a813bc2c-a51f-4dcd-a8dc-e41546daaf67", "indicator--7564d4d2-58fb-4d6f-b0d9-69bad8e312ea", "indicator--664397c1-3469-4b39-af46-2dbe160b2c0e", "indicator--67c87be1-4b11-422e-a676-d54ca5e4b6a3", "indicator--9afaf662-ea84-4a30-af48-16e763984a7a", "indicator--f1428daa-2382-4dd0-80ef-598556cdea8e", "indicator--8f0c93ea-b235-4428-972b-153abee44509", "indicator--1abec83c-3e49-495b-934c-65afab6688aa", "indicator--954994c5-90fd-4542-b701-88d165be1b72", "indicator--b6011d49-40ea-449d-aa02-2d92a35417d2", "indicator--15a6140e-dd99-4a28-b09d-42ca9d0e001a", "indicator--e69601f6-8cd4-43ac-b738-71402ffef47a", "indicator--108ebba5-2c1a-4a71-8fab-fb8b12402e2d", "indicator--6be19efa-b0ca-4715-a64d-94907681f224", "indicator--7c3437c6-3a47-4bdb-af43-59d5c9572214", "indicator--25ff80d2-14b0-4e44-8614-5c15e1f6d8d5", "indicator--3ddbd210-d180-4ac6-a106-eb93ba2848de", "indicator--c82430ec-d205-4744-819a-c201f408bb11", "indicator--87ba2e13-c2e4-434a-87b4-5523c0cdfc7c", "indicator--42b45e8f-0e96-4bab-ac70-947d0baea0bb", "indicator--07d208d1-e40e-4865-8369-0b88a3a6d45d", "indicator--3f094b2d-62ce-4d2d-a087-59356b848368", "indicator--ca9b4087-061f-4ccf-b2bf-9b8e0c06f4d8", "indicator--889cc3e2-058e-4b49-9959-0cca92b99b0f", "indicator--84f71691-b5e7-4925-8fa5-961e6f33b9bf", "indicator--0ba92f2c-3e34-46c1-b1dd-0717bb461173", "indicator--e7035974-4b3b-4211-8049-31b3b5ffe990", "indicator--a6f80975-5d1c-4a2d-a172-6c10110c04fa", "indicator--6b6390f6-45e7-4257-9a44-9b92f26db842", "indicator--f2350bf9-da70-4fac-98fa-fc535271ef53", "indicator--7e7c965e-45e8-4578-901f-dcd5ca2b546b", "indicator--a6f0a4e9-062f-4589-9336-4e53805b317b", "indicator--8d81d522-af82-4f6d-82c3-0ff4dc8204d3", "indicator--f06e13bf-c148-4a7b-bf42-22f1277c923d", "indicator--7f2f98e1-edad-4637-8315-bbefbf8b2440", "indicator--e2c7fab2-7139-4a49-bed1-4aa38743597f", "indicator--364e6ead-7884-4ae7-bde1-e84b14771b81", "indicator--6fef41bf-6e81-4b40-965f-be9e657ad1d9", "indicator--cb52aba9-7839-458e-af93-6811f7e9ea9c", "indicator--5d620fec-22a5-433e-a634-7646feeaadf6", "indicator--4c9a8c50-f799-4538-bd94-8f9cbad89d4e", "indicator--0baf0b50-c799-46ea-bb9d-cafc3721d052", "relationship--c07d729c-50fe-49e4-a920-7a7fc393d1d4", "indicator--ec312d6b-cb13-4a1a-8f2e-63cb3e7e3f99", "indicator--71435360-70c3-4764-a6c7-90c29968c74a", "indicator--3b218f61-6b69-4c71-89c1-f08e9a7ad1d7", "indicator--538287cc-7a90-4267-9b9f-8f046944c059", "indicator--96513cd2-2b64-4073-9e9b-014f7896d724", "indicator--647d7969-8715-4a7e-a033-062c644bfd39", "indicator--00cd3d22-82d7-4faa-aba4-86229f60d17f", "indicator--bc9609a4-5b1e-40ff-b542-9e8432b812f9", "indicator--dcb986a2-2159-4cad-b435-16e77ac3b4b5", "indicator--01c69411-ed83-4918-8139-beeafb32ba18", "indicator--83f0be19-9133-455d-aed2-54e1332f18fb", "indicator--063e10be-097a-48a7-b2d0-622c8625d0f4", "indicator--cacc0cf5-b130-4766-b919-ffe1368ff5ea", "indicator--1d7c49c2-ed05-49bb-afc7-989e3228eb3a", "indicator--e78f96c1-7de4-487f-935c-e4e981ea154c", "indicator--9a5839a9-92a7-4493-8b94-9cfa8f7253f7", "indicator--2b42158f-65bc-43b1-bd89-14b1c2fcb442", "indicator--20b59687-c46f-4e86-a648-6c876e5b7c59", "indicator--f0f02ff1-dbee-4001-bc82-5f36278272b4", "indicator--4c3e2ed2-41c2-4e98-9761-fe7167a9f8d4", "indicator--674e1cfb-9535-4ff8-bb80-43d559eb5fe5", "indicator--6af52834-0ad9-480f-8e4e-3585c83331f2", "indicator--4033d6ea-153d-4421-b96b-1c6e00f213f7", "indicator--be623236-8a23-43ff-8182-dfe34298cf93", "indicator--93ccdc0b-2155-402b-9639-8a03aae1af39", "indicator--9ce028a8-af47-4ac6-a8d8-32675e32621e", "indicator--0daf1c83-1c1c-437f-9eb1-58ccfc5f915d", "indicator--1f89e4f3-91e2-4b68-abaa-9ba6b4813bc4", "indicator--4b9a58a4-73d0-4b69-9d81-deeb03e047a1", "indicator--1d7e3c26-87ae-4753-a820-220be731543c", "indicator--8d05d44b-7629-4d4e-8c55-0efff74e5009", "indicator--76408934-2a2e-41fe-8246-dcf1bf2f69cc", "indicator--81607a25-5dce-4938-86a0-c58240637c43", "indicator--17e99506-4632-480b-878e-0be4c88d390e", "indicator--c8a7be0d-adf8-47df-b454-93303075c944", "indicator--8c40d8bc-ea50-4163-b893-6f8e7a41f33c", "indicator--b94abf3d-911b-4c87-b578-52c0c4bfa3a9", "indicator--4737fade-7650-4703-ab10-1c910b83270c", "indicator--ce95e250-b657-4b15-adad-98659443c6fd", "indicator--042acc56-637c-45c8-9d4b-4cbe1e966eff", "indicator--886c1701-8346-4c5d-8af7-9126c0d9fe75", "indicator--f070ce04-db17-4481-b3a3-12ba1633d38c", "indicator--e3dc3824-7173-4f1c-b853-36f1a0b910d3", "indicator--790e189f-9b82-450e-a3da-4b93f6c5da28", "indicator--d57d2296-993b-4c73-9fb6-69545b3b2ae1", "indicator--426c6635-263c-4db3-b636-84630f234f67", "indicator--0fc72fd9-0f25-4c70-bb74-9ed1d46aa2b4", "indicator--77c170ab-6812-4a99-a762-420671e9af66", "indicator--8994ad53-cb40-40b4-9c82-cc4ae918bc65", "indicator--495d4f2b-d6a5-4b55-a3e5-6078ee82725e", "indicator--f5cbd23a-f851-4e3f-a5b6-bb649ad16805", "indicator--4ba43a0d-5fca-4200-89e5-0a06582ffbd8", "indicator--15177d10-1e4d-4718-b4ee-8b090775f066", "indicator--25ed309e-f70c-49af-86c6-a7165b7827e3", "indicator--7efcbdab-fa0e-49ca-af64-b5e4ec1dd91c", "indicator--8fb55875-fea6-4474-a129-100c6dcca7c4", "indicator--a40b8cf8-da0f-4761-ac98-c3563d7ca0cf", "indicator--d9657a9c-fd5d-4129-a3f4-c8f8fa6e229e", "indicator--2b649dc2-6a34-48b6-a33e-2766cd8bd481", "indicator--d02f92d8-14ef-40e0-ab92-048c0daf40cf", "indicator--d7eb9bd3-371f-40ce-b2f6-6cab2562e0eb", "indicator--33cc57cc-0306-40cb-968d-c0565542ad0c", "indicator--c28046f3-375a-44cb-9ef1-e0383c41f007", "indicator--c28be41e-ee07-4b93-affd-37b2f0f17e2d", "indicator--08055f4b-909d-4cb6-9b6a-0d170cf5fc62", "indicator--63e91d1f-3acd-4528-b34b-c8b8ff01d5de", "indicator--038237d4-041e-44a1-9e57-5703fb09dd7a", "indicator--025bfd6b-ff76-4a8c-85b4-9bcf8414ad34", "indicator--b8200317-af66-4030-b4e5-d8c72a878b8d", "indicator--a30b5a0c-e7ef-468b-9a1b-4fe4c48644e4", "indicator--270e9197-0f12-4895-8ba4-ad9dbe8e2dd8", "indicator--4608f9e4-03e1-4553-83f8-e2689f942287", "indicator--58c15ee1-d0a4-4f51-aab4-6bae202232b6", "indicator--8c6dc193-f676-476a-90b1-fb1a0847586c", "indicator--632e63be-2baf-4c59-b91e-7de8d7d327fb", "indicator--f9a01acc-a385-4af8-b2b9-777cabdb1820", "indicator--28034e98-739c-4e43-a17a-7f5aa30b2f05", "indicator--5085a440-d58b-4464-8dff-f261151ec01a", "indicator--cc885c89-ff4b-49fe-8c56-ab63f7c87b97", "indicator--d8c4dd38-5679-460a-bc9b-17c2aaa64bbf", "indicator--ac740ad8-ce63-42fa-b1dd-b453d7acf334", "indicator--745a3500-ddab-4712-b600-e8238c73e69e", "indicator--14b95b8e-03f1-49d6-a930-bfe86bb3a69d", "indicator--ef9ea3c6-8356-42d0-af1e-31e96541fa5e", "indicator--a942b591-5f9a-47ee-97ad-72e0f69b0ba0", "indicator--175fbbfa-b7fb-48fa-9e5b-dce9eadb3361", "indicator--02df8556-1308-4f87-beb7-5c9f4f705a55", "indicator--ef323cbc-2999-4ccf-a582-124a565aeeff", "indicator--07495090-eb51-48c1-a772-7cb304a83b6a", "indicator--3f8ccf49-d144-41dc-886b-8c2b910ae8cd", "indicator--3e005df7-dd58-40db-8767-40f7a685301d", "indicator--214941b7-f382-4071-b22f-936230762f3a", "indicator--b4c55fb3-e5de-4840-9f16-38fa4774fbc7", "indicator--04283f1c-85a0-40ee-b1b5-78f7abb69eac", "indicator--138ee504-da49-49ff-b960-c699cbec5497", "indicator--1049e631-ca45-4d75-9aaa-b9b925dabc7f", "indicator--412e7658-0081-42fa-9888-5dc224dac1ea", "indicator--0baf2395-13ef-4921-b043-16f8b3eabdf4", "indicator--b3157b26-2329-4ad7-bdf6-3c79dc220aea", "indicator--3fc03ec3-cc77-4469-986b-20d5ca7ccce5", "indicator--2a8cfaa7-01cc-4522-b3b3-89d3d2cc076e", "indicator--b38fa5fa-36e0-41b6-8839-c18e10763a00", "indicator--92d80bc2-312d-42c5-be8b-cbd11c6e41ce", "indicator--aee97f30-e3ca-41b2-b885-191b31cc8042", "indicator--f00ce50d-b89e-443e-a4cc-654689621aa0", "indicator--19322588-1cc0-414f-a0d9-c70758560622", "indicator--e33f1cf4-99e5-4d4c-aa25-974c0c4c0f27", "indicator--ef597fb9-909e-4465-af38-768061a63a27", "indicator--a2ea4d46-a38c-4306-b8f6-123959c01b7a", "indicator--ec9210c6-472a-45f7-8012-434f2619c1ff", "indicator--9aa0d3b4-f5bc-4082-a24d-ff6d94365638", "indicator--d586dbe1-63d7-4faa-b549-3e0ab8798c80", "indicator--f7b58507-c509-4165-824c-9671ce23ab80", "indicator--e075d70f-2555-4785-a4c4-e3de6f7933cb", "indicator--dfdb2cd7-460f-4c9d-844e-cdc1ea50d21b", "indicator--ca90af72-8e4d-49ee-acc6-9800198ed5ec", "indicator--90da00cd-ef49-4665-acaa-98bca1366f4f", "indicator--4457b93a-0742-478e-bde0-01e9a1598e3b", "indicator--6925cd79-263b-488d-bf52-b8f216dc5904", "indicator--37dbc516-a4c1-48d1-afe4-c0b3c4e328dc", "indicator--5e8b8abf-468f-479c-a8f8-4627fbd926d5", "indicator--2df764ce-cb75-4cc7-83f3-399beb53c7a7", "indicator--59fb7a64-6127-4fcc-a0dc-c521891aaf76", "indicator--ec0cf063-c2de-4510-bcb3-aa58df7a27cb", "indicator--28b0ff61-3b38-4b30-b49a-c2c8a49c12e8", "indicator--46a18b77-881c-489c-81b4-c2d58bce4d0f", "indicator--c1fa0ff4-579b-4a99-9d1f-6721987dae1d", "indicator--6e9e5cf3-4db7-4554-aaf4-440cadb33c0e", "indicator--b7eb9276-8c06-4e68-b45c-0e2cb3a6416c", "indicator--9865b602-61b7-4f76-b868-cb10fa938ed1", "indicator--b45b9a39-643b-4b8d-a8f2-d4acf5af716f", "indicator--e91b0c4a-6583-42ac-9c69-5176b0581e7c", "indicator--f5db27f6-7560-471e-891a-897af7431346", "indicator--2bf8ace1-fddc-4ea7-8b4c-049237fdcf20", "indicator--48e88eb8-b5fd-4831-8fe7-4c03dc792358", "indicator--b5629ba3-6702-4291-8bfb-e28d15cfe6eb", "indicator--b22fb0a3-49d7-446e-858f-b3f5e22989ae", "indicator--17dee434-98a8-4b59-9209-f6cf6d3f1961", "indicator--c863d8ce-725f-4963-b002-b4550b864632", "indicator--90a014e8-8bfc-4acf-848b-d206839da3e0", "indicator--64d999d6-1667-4855-8e44-f86509f27288", "indicator--38c6742b-ca8e-4b4f-91d8-3a0443d9f413", "indicator--67536448-08e9-4b2b-a587-51d1cf0ec273", "indicator--1941c3b4-a8a3-4ca6-96b7-2e4078520722", "indicator--1d0c5b59-81e0-4189-aa0a-1194d8647cb8", "indicator--f863b9fd-724d-4aa7-847c-8a3cbf48fef5", "indicator--7fcce25b-27b4-4af6-8016-342f50656d6f", "indicator--8faa8824-89d7-46b7-b132-bfccc0fcd937", "indicator--b81dd4df-3650-4c11-b9ac-737129680eb0", "indicator--2836dd0b-979d-4dee-abb5-2b8ae382011a", "indicator--d27de3bd-3594-45e4-b52b-5905a9e4c130", "indicator--a9917244-87b2-4207-8c12-d9246d841360", "indicator--d362489a-e6e9-4b80-bb36-33434bf95dcd", "indicator--ea238278-3085-4fc5-8933-b56f6a99008b", "indicator--717b7202-d396-4f69-a06f-8185952398e0", "indicator--122b230d-7c0a-473b-8b64-3db46b0bd112", "indicator--0c4c2884-2d40-479a-b678-e3ae77a1b444", "indicator--e86f3850-4dde-4b72-a7a6-53e4262e9551", "indicator--a30314b4-b488-4743-a091-ae442b685796", "indicator--8d9806cc-77f5-4878-8df6-ba474626c400", "indicator--70127b7f-5c4b-4719-bc1f-9f85c8e7947e", "indicator--b443a44d-4f6f-43b0-bd7f-a3450d9b6228", "indicator--13458061-f543-41c7-b4e0-8c6abf240208", "indicator--25b26ca0-78bc-44de-abfa-e0732503be2e", "indicator--65d8396a-799f-435c-8112-b7fcbd343a51", "indicator--aa795df4-332c-4706-a3e5-aa22e538db0e", "indicator--d701c0a6-2c2e-45ff-aac6-b6832fe1001c", "indicator--133cca3a-8592-4cc7-b43b-9b7be2debd14", "indicator--aeff7150-1120-4931-b718-b98e69652781", "indicator--50bbc0e8-410a-496b-a37c-e0235faa9102", "indicator--958a16be-b7c1-4145-96dc-dd8954fe19ae", "indicator--c66bc3dc-935d-44d7-a0e3-aee6beb33f35", "indicator--5cdd02bd-76ad-4edc-9ece-5d01f2bac8a7", "indicator--99ffdb22-e950-4ce2-a4ee-610b5a459bd5", "indicator--6e6f0b9a-4f60-4e1e-ae88-18cfa0689166", "indicator--5b0dc3bd-2d22-4a42-96a8-e9da1fdcefb6", "indicator--68452009-f114-4478-ba28-f22f1e762688", "indicator--e6d1fbe1-9d9b-4699-ab65-eb4bf1ec5ad3", "indicator--cf2082e1-8d13-4530-8478-3148a84ffebe", "indicator--5d2210c5-9055-4705-af2e-25cb2a3989c5", "indicator--99bd8e7b-0d85-49b8-9ee0-2a0e7800c27a", "indicator--fb39a627-b36c-46b4-8ff3-6b27e5c93af7", "indicator--f74c5196-4489-47bb-b237-1ac62bad2f3d", "indicator--2a715aa4-45cb-4229-a740-6fd989c46dac", "indicator--63a7db85-4c3b-4c1c-9881-9735a68c612d", "indicator--f70d7623-2c25-476a-9e3d-388e0c88054d", "indicator--9249c8cf-4d52-498e-87f8-2b12547b11ed", "indicator--d66b797d-71ac-4550-8ff7-876c4aa0366d", "indicator--fefb4716-2faa-4946-beb2-999de3a7bc1e", "indicator--b54e66b6-ac98-41a0-9bed-d5f4aec507e1", "indicator--1cb30b53-b879-42bd-b7b4-922aa282432b", "indicator--ccf3a20f-ae70-4e5f-8aaa-d7085bbd6437", "indicator--28e641fd-78dc-4c0e-89a6-891234376c38", "indicator--313ba506-c9f1-4c23-82b7-b14a7fb60f1a", "indicator--994d2e8c-b521-42de-a670-03ae2e0a1b38", "indicator--4ce1b773-731c-459f-9a29-182e53a5c4dd", "indicator--5874937a-65b0-4179-a5bd-2b1f64f7a945", "indicator--5fa0e1cf-0689-4674-b37f-9647c1f41658", "indicator--d11648d5-ad70-4a7f-8aad-160de716979b", "indicator--45475658-1f39-49db-a7f4-7abdf3d8015b", "indicator--953ba70f-6744-4b3e-839c-0ba366ecaad7", "indicator--e38398e9-aa5d-4c03-9319-3bd891d985b3", "indicator--7263d5f1-048c-4df3-a01a-e72544d35385", "indicator--fe706bd6-a0b3-48f4-8c0b-5ef0cf972248", "indicator--c2cc7540-e0ed-4e21-916e-66c1445becbe", "indicator--9faf668b-1c6b-481e-96b0-040f22a0b62a", "indicator--fec83c69-ca13-460f-a211-fef8bb6ac4f5", "indicator--cdfbc877-3f44-4275-8f84-3fcacdb1a7a0", "indicator--e7e11fe1-1e5a-4d37-a163-69ab63bc9532", "indicator--f31a8d02-5145-4da7-befc-3ac463e0aeb4", "indicator--fc4be460-e78e-4b17-9d1a-2820f0d9f226", "indicator--1c0da9c1-ae83-43bf-9ff7-7129bb0cdb50", "indicator--0479446c-44d6-43fc-a7cf-5a6e77110aaf", "indicator--e4d46ed3-b93e-422b-84bf-178f8d70b7ac", "indicator--08c8446b-a6fb-42e7-9f26-d659be536b2a", "indicator--d2dbf6aa-b78d-4c2b-b1f6-804493ed940a", "indicator--44a8f825-526f-41d2-b2c4-bc1b16816173", "indicator--939fe54d-f9f3-4a7a-a771-08e7407cec44", "indicator--1fc79fed-4a34-4348-b098-508fdb5c8704", "indicator--04afc878-b37a-42d7-8270-40a4413ee0c1", "indicator--d4bbb6ba-5168-4ae8-8845-4deb122e4074", "indicator--495c49d7-ae90-4e83-9358-6170ccd7903f", "indicator--86b793ae-c948-4142-8ea7-e8770134a975", "indicator--1ed23f01-72cf-4094-ad9a-9c8f0d0633c2", "indicator--b5a9d0ca-6516-42fc-a073-8971b52edbcb", "indicator--d7ac79db-87e8-4c25-a556-331f6539f75e", "indicator--2f75dec3-1f79-425c-ac74-a22c06b366b1", "indicator--df5fc59a-a63b-4f1c-a940-404f4c0c240b", "indicator--493e9f01-381b-405e-a475-85ecc40f1a1e", "indicator--3ae179fa-d0ac-4ab0-bff8-7bf590a347c8", "indicator--b0ecf187-68c6-4618-83ce-7e99e13c8243", "indicator--0a829723-a962-457f-a2fc-af58f18b7712", "indicator--ed169b9b-4da7-413a-94dd-301f59b7ae32", "indicator--2eb7130a-8a9d-4609-ac2f-fead082b46a1", "indicator--c1de7bd9-c97d-4b27-9c73-b3cc974d850d", "indicator--776d288e-d17b-4c82-9e19-7cbce2235974", "indicator--b36bc4a4-d05d-4ba7-8cbe-e5a4466f86d8", "indicator--dbb68527-ca89-4172-94f7-d3b1101ee50f", "indicator--f3b8bc36-33bb-4d05-8adb-6fbf06f10850", "indicator--41c8fafe-50ef-4d96-a21b-a4a6caa71ca1", "indicator--cf18f3be-83cc-4ab0-a77a-4be699f2e229", "indicator--d6355c0e-6e7a-451d-8a31-eeebc3f37599", "indicator--0781cba2-1139-48be-b0aa-9b8d3d45db8e", "indicator--8911415e-6f1e-47f0-9eba-ebf25ede2be4", "indicator--8811084a-a02c-46f2-a657-b9812b8c7d2c", "indicator--8236e3b1-6791-4194-aed4-c483eb90042c", "indicator--e10277c6-35c7-4829-a6da-aee9e269f39d", "indicator--9a14ebd0-3d9c-4a1c-891b-2619c3408131", "indicator--8cd50c32-7d81-4d94-b5a5-c66b4f948f34", "indicator--0411e0f0-b1f0-4118-87ca-8bb0f0a953cb", "indicator--2e636ecd-226c-4df4-8c40-f075c2efe392", "indicator--9d61b375-2a8c-4241-8a82-e68f057b139a", "indicator--68653480-a2c3-47f5-a413-7fcffef3ca68", "indicator--1d7de009-cae0-42b7-a354-31349851ed3a", "indicator--f5f0532f-b386-4a3c-8464-fd36de4a4b6b", "indicator--7697f4aa-d22a-4e42-b277-3affeae9b646", "indicator--17143f5e-a6a6-4d69-baab-86c8cfade02c", "indicator--3272db24-630f-4303-a2b2-e032b6681554", "indicator--7a4cd5f9-9190-406a-9f0a-163d5dbebe71", "indicator--075ccf25-75f2-49c5-90d2-3093d9e23223", "indicator--0f2069ab-d218-4d5b-ba06-47600959119f", "indicator--6b464b4c-d3bb-41a7-9e11-3bda248d0674", "indicator--b33ff897-577d-4d66-ab62-64948cbeb740", "indicator--6bfe016c-bf71-479e-ad90-a39d3a10ffe9", "indicator--4fbb72cf-cc76-43b8-b59c-efeef30be0e9", "indicator--2c78401b-15d3-4681-9605-c25aca3b0839", "indicator--1cff151f-b522-4e95-956c-1b6b1cd50794", "indicator--9646898a-ae3b-4af5-97f7-82a9f66a9183", "indicator--6c4af722-2458-4323-b116-217a5176d8a9", "indicator--9d9b4427-d664-4014-bec6-0db36e39e61e", "indicator--2f1e5d10-2e83-42f5-b872-645d55295927", "indicator--9d7c0cd1-df77-46fc-a9b7-b30eb3be7cdc", "indicator--c6d22955-e0ce-4d37-9188-720988c1e729", "indicator--9d77f016-72ca-4063-8d1b-d2701a950f3f", "indicator--9f8823f0-a881-42a0-9c80-acd5622a7872", "indicator--51258e2d-e556-45dc-948d-032f4a94a645", "indicator--f9905bea-3826-4eb0-97f8-c12a21f1fa19", "indicator--9e86e7d4-5fd1-4676-a67c-858d6343cf35", "indicator--249f5cc8-2932-48b2-a78b-90d285a4b349", "indicator--77fcb9a0-9761-4d47-8710-a6640d321406", "indicator--6da7a3b0-682f-4a27-8f30-5bd0f2d18f8c", "indicator--1dab208f-b376-4959-81df-37b25f1d27d5", "indicator--34adb5e4-a798-4a8d-ad2f-d8e27c369adb", "indicator--088b5b49-331e-4b63-8e0e-78c91753b7e6", "indicator--bbb6e7ce-75ce-464b-afb8-c1ca48b49662", "indicator--2382047f-155b-44ed-af98-0a5e8c3d13d0", "indicator--be6f6748-71c0-4909-9b6d-d97737cf152a", "indicator--dcb63a1a-9969-4efb-9b3b-16335eb15ecd", "indicator--4cc7214f-9e51-42d0-a8cf-c3dbd93df3a6", "indicator--3cdba857-eeaa-4474-b0c6-a1456cb04308", "indicator--a886f754-625b-47c9-9f27-d35ce0545392", "indicator--c5d7ab5b-5cdf-4025-aecd-c36e7853532c", "indicator--7b00fffc-2213-4bdd-81b1-5985b0f3ba60", "indicator--0e0c9fe3-57c3-4c51-8cfb-55cc5a841931", "indicator--3823064b-5c1c-4a00-8172-7db37c9f10f8", "indicator--c520bed0-523a-490f-8e07-a7edb62089ec", "indicator--0057c652-31eb-4fac-933a-28089ec5235c", "indicator--8c145596-9302-437a-8ac8-e8db061908f3", "indicator--7e0193ce-8cb9-47b2-81b6-01b5021abcfa", "indicator--885e9724-ca5d-4abc-b686-c8d341b81d1f", "indicator--c51307d4-9afe-473d-b529-004a683184f4", "indicator--e2f19c22-c409-4007-86ad-80bc4275cf0f", "indicator--fbf651b7-1f49-450f-a142-08b24302c69a", "indicator--f2f463cb-53ab-49d5-8ea0-a7d020704fde", "indicator--abb61cf8-8a3b-41f3-9aa8-3845af1b9b5f", "indicator--cfec3d6e-00d3-4777-878a-0f17b230794b", "indicator--b5a7350e-f0e2-4cc7-8e30-568011663735", "indicator--be6f4453-3031-4768-ab03-f73958b9adc1", "indicator--58033815-6e07-434e-815b-0def8b76ca37", "indicator--0bbb8702-8422-4c76-bb8c-be05c6a26fa6", "indicator--0e30caa4-12d4-497b-a1c1-e8fe28bc3b60", "indicator--71cc68ca-19d2-4063-9330-e0b621f5dd2a", "indicator--79f85e0a-8651-4078-b210-b28af8408f5b", "indicator--85df63b7-3b75-4f66-9c2e-250acb6be836", "relationship--70548a5b-0029-49a7-9a74-6297266d7c11", "indicator--dd122e7e-60e9-4890-b7ed-153bcff0a48e", "indicator--256d42e7-150e-4b2c-b0ef-970b025b6737", "indicator--45041dbc-7168-4f16-ac35-5b5462e4dd4b", "indicator--06ea5ffd-7924-4406-9925-c3602d939ce5", "indicator--ff70654e-92e4-4c2e-b0e1-29319a2af2bb", "indicator--0d5711f0-e7fc-4f83-84c4-0c2c41c8d3b2", "indicator--8de370c2-75ce-47e9-8ea4-f74042f5adef", "indicator--8f6a9428-abc9-4d15-bdc1-2efa6b674dab", "indicator--3a78b09c-b1aa-4f3f-9742-b9e581fe948b", "indicator--4fd00e96-72cb-4317-8942-28485d1b0d35", "indicator--11afd81f-d64b-4ed6-8cbf-7a595dfad3ce", "indicator--ca851ecd-409d-4576-ab89-0f79536339f5", "indicator--4fbf154f-dcbb-425a-ab92-b291c0b11450", "indicator--fee5002a-03d7-4a54-a27d-bc5159a13885", "indicator--22482af0-6f3c-4b86-acd5-d22d6eb9fa1e", "indicator--a2f9dec5-84af-4297-95a3-71fb25f6596d", "indicator--a91b04a1-4016-4cb8-af90-3473c6d93f36", "indicator--61c5ffa6-09e3-40cc-97e1-8b44b6bb7790", "indicator--081d34e7-52c2-4b27-9bde-1ce77bb57b87", "indicator--6b30dcf5-8cf6-4240-9925-d5161a309729", "indicator--0fcafd52-c4ea-4f6b-b65c-e96e6c9c78e4", "indicator--0e895c6f-3848-47ae-8045-9e834564cdcf", "indicator--8314d7e9-682b-4e7e-99a6-868b956e68fa", "indicator--5eaa96cf-7fef-4925-9ed4-19637c284602", "indicator--a54c8f06-09c0-43b3-a96f-647843984a98", "indicator--ffcc86e4-7d71-4aef-8825-484ef345acdb", "indicator--1f76576f-c5cd-49ca-bc47-68502113a3a8", "indicator--07fb2a69-3e3b-43a3-8edc-34422fccfad5", "indicator--6db3127e-d48b-4122-8cda-85a3c260b74f", "indicator--1f96d67b-2582-4b82-a05c-8109fcb61f45", "indicator--2d97342a-3a83-4809-9a96-d5c1ff79a3dc", "indicator--6f352bf3-bdae-456c-b00c-2180f30b202a", "indicator--2d6567bf-8b9c-427f-ba88-ecb27ce98991", "indicator--63d06528-1b95-4c7b-95e7-710547fc86c5", "indicator--6c9a4395-bdba-4ef0-b469-3a12cde40723", "indicator--20f1e8a4-a59d-425e-854a-0343b43f01d6", "indicator--bb2828de-30d5-42a1-9f20-136a60e52591", "indicator--9d94e465-b032-4729-b435-924f35a72c1f", "indicator--e3e0df0e-cf56-47b7-928f-d0056875f899", "indicator--f4ea350d-7e24-4342-8319-4a30a6705dc6", "indicator--04eacd11-54fd-4948-940f-e795bf33efd2", "indicator--db8090e1-bba5-4d9a-bdb5-2d5f4d3b7c87", "indicator--8ff91865-c2a5-4ca4-bbb8-f81238539cd9", "indicator--b0397986-2fd2-40a9-83a1-9fc0c005736d", "indicator--bc2fe9ae-4175-4c4c-afc0-dce89f3c2355", "indicator--7ac7af66-4a9b-4ab2-ac1f-00a754d1ada1", "indicator--6dc88e5c-aaee-4fe1-8ecf-1372921cfb55", "indicator--169717e9-0eba-404e-ac92-2c000e4cc24b", "indicator--3fede5ba-b1c4-4623-a0d3-7ab84a5f8e31", "indicator--177a6622-9860-4c5c-9db7-b44c1037b013", "indicator--170e3b54-7f8f-4d95-8d8a-5343d93ecc07", "indicator--3ee4319b-9a7d-4ac7-975a-cf17e3ba816c", "indicator--36db4c90-0a67-4f19-8403-704cc2c79f22", "indicator--2f4b9a5a-d845-4fdf-a279-93d3a6a7544c", "indicator--95dde740-5584-4ca1-995e-4f22484946cb", "indicator--332ebdff-85ec-473a-826e-a9a86d97d16a", "indicator--db9aa5ab-4b10-493c-a3b2-b1eac763909b", "indicator--d7e7a87f-785e-4e46-9224-e6fd064dd361", "indicator--74bdd5e8-dc92-44c4-a4ed-3673110994e4", "indicator--eecf214a-9fac-425e-a863-3cb4e56419e4", "indicator--c89181ac-10af-4aa3-a136-33dff3abda28", "indicator--fbe774bb-b999-4663-be88-22cd0f452d09", "indicator--d50c3b94-0702-4652-a270-cd5ca099ea1f", "indicator--0b723205-7128-42fc-a3d8-021601c02e2f", "indicator--9fc267e0-35c9-4e95-bedd-436cc8e55754", "indicator--ef0c943a-3081-44fb-bb34-47d80d6f612f", "indicator--c157be47-cb1d-4dc6-a592-fd5396cf8f35", "indicator--d8fbb7cb-1b85-4bdd-8a28-7c0de5fbad69", "indicator--696cffa4-6472-49ce-80f3-1051247ee1e7", "indicator--698c4127-3e5a-44d6-a9b2-bf1c9530c745", "indicator--4debb4e5-0334-465a-88c8-02b7d9a8e850", "indicator--08b48add-1a9c-40d8-b729-bb510859179d", "indicator--83f79f43-8bfd-4568-9d41-16ddacc1e952", "indicator--ccd437e8-7f7e-4efc-ac56-815e6e7e99be", "indicator--bf228c74-14ed-4e3f-a74a-29bc71b0dccc", "indicator--2e76f3c0-46ca-4900-87c7-1125246349b3", "indicator--27ca0958-6410-4b14-af6e-1c7bde6f6704", "indicator--77891302-f023-45b8-b93e-c01aabb5c167", "indicator--9adaf6ed-f220-40a7-aad6-aa30195f5838", "indicator--17d5be54-72f0-47ac-af80-7763d477f9f4", "indicator--102a04e7-2276-4324-ae88-08ab92215a79", "indicator--c878d3b4-0fd9-491e-9486-e40c764cc0f9", "indicator--5eff1ccf-d477-49a9-826f-dcfd59af9bdc", "indicator--6f866dfc-05dd-4819-a6c1-cf107f112efb", "indicator--878cc8fd-e22d-480b-a871-a75caa750ca6", "indicator--f54c2853-6a19-455a-9ee3-8cde34a36343", "indicator--e5b99303-40dd-4bec-9c13-eab6f5635bdc", "indicator--69653409-d0a5-4a44-936e-8a6d08ac24e3", "indicator--f79cf1f5-1c85-49db-b4aa-33ca085f671f", "indicator--541b2760-4533-4c80-ac62-ae0550ff2b13", "indicator--b6e81908-7d53-47cb-a0a6-ddd6e56990fb", "indicator--f9979aa5-1b4e-43cb-b65c-30e6d6a0613c", "indicator--22cee29b-2ec0-43aa-9ebd-4386af873147", "indicator--ceb68d63-6d14-4aa0-95bf-e0e616745f15", "indicator--bdb6041c-22c0-43e5-9f80-376e26f1771a", "indicator--e7d84bbd-0127-41d7-93dc-3549ede215e8", "indicator--8e85d7ac-f830-453c-9560-db6883a228a9", "indicator--6213d67f-2f9c-478c-b8c2-58838fd9dd51", "indicator--83714cc1-824c-4cd0-9282-6c6a11baea1d", "indicator--f886b195-1976-475f-acb3-f4c01c18b969", "indicator--33e276fe-cc06-4d1c-b0a4-a3b119523552", "indicator--5aeedc8d-31d9-4527-ab82-63fe2b4eb279", "indicator--88bed020-3b4d-43e7-b2ce-06ba9e3d1585", "indicator--d6477fcc-d2ae-4046-b60d-b28e282392ee", "indicator--ba5a86ee-dd3b-47fc-9883-45b1349e5ea8", "indicator--9c887956-1f16-48b5-9d09-ac731ae5b7c8", "indicator--85bdbb7b-590d-43e4-b65f-7c72b324eb3c", "indicator--c90c47f6-87f8-4d5d-81fa-1dd3eb8852ef", "indicator--67020bf7-0095-4b50-b402-bff3631ffaeb", "indicator--d126ee4f-aaa5-45e6-9bef-0ea48e8fe0c6", "indicator--b1a1b993-3890-4adb-9ca6-1c76038a799a", "indicator--7df361ee-bb62-4293-9d70-6730282fc369", "indicator--6f7daaf9-9489-4286-a589-c49e7d5c1bac", "indicator--900d5158-d919-4789-b4a3-895a9a4b1ce1", "indicator--672215ae-84be-4206-9f04-29d8d92d0249", "indicator--37ab9e0f-066b-427c-ab6a-ff0168afdf86", "indicator--74f75bc1-0ffe-4f31-a904-18e1980d9f54", "indicator--60eea323-5a6b-43a6-8c5b-735bc9bb1f57", "indicator--fc0ad1d2-00f8-498b-97c6-89efbeb9ca69", "indicator--898ebdcd-7827-4d91-aa17-d1abc764a072", "indicator--2b8ed998-1617-4d43-a176-fc9c2fa494f0", "indicator--fe8da107-3f0b-4110-a6f1-ac552a4919cf", "indicator--f537eddd-4a16-4771-8b72-4b7e059f078f", "indicator--171971ea-a62a-45a3-852d-b3aee30afd3c", "indicator--d088cea5-2ad4-4350-bd4f-8172759f3126", "indicator--6c58683e-80a4-4c62-9e05-8f5159a71ed4", "indicator--e2454f05-e19d-4cf7-8e84-04e327c389c8", "indicator--58e57265-5a86-42d8-8c41-c733636a45ab", "indicator--a6cd3dcd-7bea-47e9-879b-c714a4ae5560", "indicator--085649f7-caae-40db-8418-3778472c4a6d", "indicator--62a3709b-df01-4f90-a6a1-34c2ba02a442", "indicator--75f66ecd-bab1-4559-92c4-3c8572ad9c61", "indicator--3af4b180-ed09-4310-b4f9-a5eedbadaa62", "indicator--3177d903-8e78-4e8c-b57a-4cac4b8cac8e", "indicator--2b7cba83-2bab-4909-bf6f-0df5120cd854", "indicator--0b87eeef-356c-42a8-9fdd-34e7c316ec0e", "indicator--cb6a9116-20ff-4fa5-bef5-df9a17fe35fe", "indicator--e3b31968-b2d9-4d7f-8bcd-7bb9c9964427", "indicator--95c76edc-e411-4517-b825-d0cbbc712755", "indicator--2e19b669-f05d-4196-808a-713e004e21d9", "indicator--120ff9bc-4ebb-46b7-978d-d265347d4b63", "indicator--aaf53012-77ba-4b01-9de2-6db483ecbdd7", "indicator--a44b6831-59de-4605-85ae-1ba8c333347d", "indicator--51ee753b-0bdf-4541-800f-e1dca98dab3a", "indicator--567bf46a-50c1-4cc5-b096-9f24f6be1dca", "indicator--66651f51-b530-4358-90bb-8c7594f91d54", "indicator--d4890e02-c890-4f41-be1f-bf80603c216a", "indicator--c561db37-7fb4-415f-9aab-bccf60162081", "indicator--f08ab04d-b95d-490b-a3ce-e2314e0acdb9", "indicator--e205e6a6-7f1e-4e6f-aa17-84bc1402aad8", "indicator--098f9f85-2887-4000-9525-d6107a580a49", "indicator--744bc1c5-e0c0-4ba5-b53c-9a64d8be5993", "indicator--b642cdce-a0d1-4d63-a3fa-b30775bd39f4", "indicator--f9764843-079b-4e3f-b83e-596e35db74e5", "indicator--dc92fe1e-89a8-42db-a4cf-57e2fb8da384", "indicator--0e53df99-6c25-4b37-aaa8-8c494d4751b2", "indicator--95236a74-639d-44cf-8f70-c7ba482d6fe2", "indicator--64ce444a-8718-488e-ae55-4b24b0c67790", "indicator--386adf44-5b33-40d7-926d-ef47c75af4dd", "indicator--5c9ade1c-ae06-4e2d-bee8-755f2a868ed1", "indicator--1ef277d4-d366-4054-ba61-3782ff2b9571", "indicator--13bb8724-528c-499e-8351-ee8a9b789bc2", "indicator--ed666402-424e-439a-83b5-5a1d49dace63", "indicator--ccf584c0-a20b-44e7-b4f2-3a75f55287a2", "indicator--62177a37-fbe1-4b76-bf75-f24ac6247bca", "indicator--fa6bce7c-ea28-47e5-b263-d49c58608a42", "indicator--7b7179d4-963b-4521-adf3-3cec4ccefa28", "indicator--90925e10-ccb2-4ae4-9409-ca12575c7b03", "indicator--ab0eb237-ca02-46eb-8dba-2754f52e7cae", "indicator--46fdb33d-a135-4cf8-b52c-03258e4ab935", "indicator--76e95db5-4fe5-4efb-8127-d602102c77a2", "indicator--8fc57b45-221e-4730-953f-c07564af1605", "indicator--61631528-bcd7-45c3-9ac1-a7d1de435cab", "indicator--a9b19cbf-7ac7-4ec7-8703-d589208a19b0", "indicator--a6a00ba8-2f0e-4efb-b15b-5f866ccfeabf", "indicator--9b28afcf-49df-4bdb-9f08-b5431ba4f5c6", "indicator--814eb194-392a-4ccd-9692-574715534685", "indicator--607ea6f9-761c-44a1-9b6b-61c9be6412cd", "indicator--2323a429-a432-4498-bb7c-63387ba3b240", "indicator--29f18622-3723-4e0c-a9d2-a9cf58996ec9", "indicator--35fe0e8a-0de8-4e2c-8866-08523b8b3568", "indicator--3f840480-8792-4709-a87b-2f97b9a617e3", "indicator--be7b082f-5809-4d90-93f0-22ca77a349d5", "indicator--b5a954d6-c339-4f0d-a963-195a78f9c9ac", "indicator--f390fdae-0cf6-4e94-a3ec-727a4a278d3e", "indicator--1ecfc132-0292-4418-befa-42a864dbd97d", "indicator--fe313cd3-8708-4c8f-a730-2d05dffdac01", "indicator--a0bb5ca7-df1f-4d5d-942a-bdb1884bfdfe", "indicator--eee891ba-b70f-47ab-8917-7979adcc4b3d", "indicator--e767942f-69b9-4c14-861a-d25abcda7f6f", "indicator--a43213ab-e900-43ae-b168-832d6cf19d0d", "indicator--df8fa655-6302-4f31-9e83-c8568cec8138", "indicator--2d9b79c4-6931-41e9-8cbe-25f90b310ee3", "indicator--4f49e004-e64b-4fa6-bab3-227320edd6f4", "indicator--602b5fd7-fe9e-495e-824c-012bcb73d170", "indicator--3885f597-37fa-4637-94bb-c187b98b63a0", "indicator--a7694b7a-e7b2-4289-9f30-bd067ee3fb51", "indicator--5ebbf78f-1fd9-4b03-b0dd-e8b9487509da", "indicator--7af1fbc3-9b1e-4a50-a6c0-6a1d581815ab", "indicator--bafc2fb7-e936-44b3-8852-5983f752d56c", "indicator--676445df-b317-4147-b35f-b361f3bc8807", "indicator--b6faba76-088a-4d0a-8b68-b02398b96e53", "indicator--4bad80ad-dc25-42f1-8247-c6bddb3fe060", "indicator--ce099471-2efb-40b1-9b41-2bb0814fba12", "indicator--b289af98-c7f5-4ab2-8c64-5b212f6b0f70", "indicator--c9f74278-2d4d-41b9-84c6-32c3d7e5add1", "indicator--794d1e66-7c65-4b36-b7f5-50a816f007bf", "indicator--265255a5-20d1-4838-b8c0-80b439f2281f", "indicator--5ac09599-2697-4a32-9205-8e3c258e0fde", "indicator--12c1ecc5-9b4a-4ee5-97f0-f0578e8f2a81", "indicator--41b3fc16-e459-4856-adb2-338e0fe4cf18", "indicator--1804adee-565c-4b4d-b21d-6c1399b85203", "indicator--f7b7296f-e4ab-4a6d-b52a-7e897e9b76ab", "indicator--62bb09ce-3632-4bf8-898b-f0d91bdd58dc", "indicator--689b974f-465d-4ad4-ac41-6fdbccf21abb", "indicator--099ec780-8ca8-4cb3-a24b-44bb592e0f0a", "indicator--9d953393-87bb-4db2-84a5-5a22e9578d59", "indicator--b2069b95-50c2-4cb7-b1a0-56f0156410d4", "indicator--f3f5d6fb-6820-4483-9af6-1e5cdf6d2b70", "indicator--b97411cd-9361-4999-a95c-b2c3e3575830", "indicator--a839dbf0-6374-4996-b3b3-a3f4d54706eb", "indicator--0530d84a-acda-46ca-b270-c6c567439fba", "indicator--33780da5-e593-42ed-b901-b9a10ba84d33", "indicator--de4ddf49-9bf5-410a-9ed0-b805c876cc23", "indicator--74c06d36-efd5-4eaf-a3c8-0ea85d086dfe", "indicator--92a74234-f1bc-4649-9409-36ae56d33caf", "indicator--063c4cd6-d056-4523-9d3c-ae34dd4e6e58", "indicator--cbde8fb5-8573-4107-b2d1-4707dd917d92", "indicator--644d2ee4-da73-4b73-934c-74cd1577e30e", "indicator--21c92422-36cd-4562-8c88-e7a300217e87", "indicator--e23f5f84-0963-49ad-96f6-56378f0c6b11", "indicator--473407d4-c0fb-43dc-a998-d1135dd86fb6", "indicator--a899be95-8fac-49e4-8f16-b9632e95fa46", "indicator--c44221e9-3579-4b28-9f0c-1d0cf326e8cb", "indicator--518b36aa-0d3d-41a2-b66b-ebcd35e1d061", "indicator--d4de0252-8390-44ae-aac4-88c05f4e4239", "indicator--5f3fddab-c6a2-49e3-8ea5-d3ab6f5d6c37", "indicator--7c547c4d-d54b-4227-ab15-afc25258bf4c", "indicator--24ef8d85-2022-4c7c-8fff-a189914c1077", "indicator--2ddc2aed-6c89-45fe-9584-3f1048577dd7", "indicator--07dbf21b-012a-4290-84e7-a1cc27dfbf44", "indicator--acfbb3b2-ba56-4b60-a87c-244c160a2a64", "indicator--02da0e9b-862c-45bd-915f-825d1ed9f65a", "indicator--e82da9b1-1d0b-44ef-9923-7dea50a60b11", "indicator--22f051fa-1cd6-4449-8da8-6c0fc1678110", "indicator--af61d022-38c1-4098-93f6-9a1fdf16aed0", "indicator--371dbdf8-69ab-4eba-9eb1-5450de4d0ec3", "indicator--8722a071-857b-49c2-9e11-9ab61aa97ce8", "indicator--aa3f2fc3-a174-4e29-9f59-ba3f96a0a6c3", "indicator--46e11512-e68d-42a4-b1e5-18d90fa510ff", "indicator--4db346b6-64eb-48d3-a829-41bce7c77c1b", "indicator--9eb98eeb-7b0b-4681-a6c4-63e4857cdfd1", "indicator--47633cae-7cef-47ef-938f-49e66dfb158f", "indicator--50a519e4-6707-41fa-b4c6-c6108379c9c2", "indicator--9074a975-76a4-4c5b-9ddf-27e29711c0ad", "indicator--cab82aa7-1a0c-4ce9-a0bc-9ea28931760d", "indicator--855e0c52-a6e8-42fe-b738-22d4eb2412ac", "indicator--9e118ca1-f084-4bfd-9378-bc5db237d467", "indicator--8428b8d0-2949-4285-9bfd-553fd08f1c72", "indicator--170d609d-8afd-4244-97ee-e002c3c63768", "indicator--45904c97-a769-4abd-bddc-5e4233bd0ac8", "indicator--092a2c25-5240-4bfe-9e39-a16ef0b8b0eb", "indicator--299bcac2-5c42-461b-9388-55fb8f0c5d33", "indicator--fcef69d7-40c9-449f-8444-c8ed77bb133a", "indicator--e7dcbca3-3136-4540-bc58-130e7bbc6e2d", "indicator--deb030ae-1680-4111-81b4-a216c5084e13", "indicator--ea65feb6-d435-4b18-a151-89583465842d", "indicator--355fe0db-4878-4788-829b-23832a8baad1", "indicator--dad7c9a5-f476-4638-8692-34438f1ecbd6", "indicator--59e88fad-2ed4-493d-b8d9-eb477aad21c2", "indicator--eead6b3c-780f-449b-b73c-a96431afc77d", "indicator--5e605b49-1095-4bf0-9a93-fa307b1a36b0", "indicator--b638392e-9127-4e06-8f1b-55b77edc7f08", "indicator--a3d21349-a679-409f-9b7e-c41f999e342e", "indicator--0db906d8-4c43-447d-a94f-cff36109c436", "indicator--821391b1-6829-4500-988a-531b7630e5d2", "indicator--a5152a77-bfec-4aab-81fd-489aaac30fb7", "indicator--2f17b234-7622-460c-b810-bcbca9a1f8f6", "indicator--39a1b3e4-002b-452b-ad5e-4ab9bad27bec", "indicator--11b72524-79dd-4d54-8838-2f08c47c3082", "indicator--fcdec514-89a1-4ed0-b4a6-d8a7a9030cd1", "indicator--beccece3-b6fd-4a7f-933b-950b0950eaed", "indicator--629460e3-8e53-4d92-9f97-5f6d841942f7", "indicator--c435e588-22b7-496b-93eb-45b88e8d13f3", "indicator--454b8e30-933e-48b9-bc6d-1e50813ad17f", "indicator--a2ae63f4-e7e1-44a5-9663-e0bf61f82d92", "indicator--da0e2a92-2149-43da-b9e5-0e1d78553dc2", "indicator--4cc1aee5-49f8-480b-8262-17db1761734a", "indicator--16e7befa-3410-41ed-b5cd-c7b7e1da030b", "indicator--ec991cfd-67e2-4b7e-a5ec-2f4762eb1d17", "indicator--7695251a-d646-4c02-9470-e93fe1302dee", "indicator--bae3964a-5f39-4b6e-9e1e-ce54f1c2f662", "indicator--25ae3119-cff9-4c40-91e9-db8919a10969", "indicator--2c4feec0-1db1-460b-86ce-dbb597a0bd67", "indicator--a25d6741-55cd-42c4-80b4-c2a45e424e38", "indicator--8d41565a-f388-4616-b6dd-d4f6c4156060", "indicator--c24e57b9-b58e-4f5a-9ffe-dc2fdc5ff9af", "indicator--53406da7-b08c-495c-865f-7d31797789da", "indicator--8d5dbcaa-5c1d-4bad-9abc-92652197b8cb", "indicator--245f45b1-c5fa-46c0-9cf4-ec35fb0d4464", "indicator--9de86aab-34b5-4db9-894e-fb69845fdee6", "indicator--5bfb1c63-d389-4b94-95a6-6013edd3341a", "indicator--7e2fe0f6-37f5-45f1-aaf9-f38b6ebde75e", "indicator--8eb0a0bc-1ff4-4977-b832-1a071d1140f0", "indicator--1daecbb9-e854-4851-86cf-867a84526460", "indicator--7e12fb14-154f-4453-a468-df14fa1ede2c", "indicator--bfb7a9fd-4ad3-41af-9f42-0713b8829ad4", "indicator--9083364c-c670-4223-851c-cb40ad884dc8", "indicator--de357c78-4481-4068-b03d-65b72a870165", "indicator--7baa202a-3fd9-4a4b-98ed-c8dc933b8c37", "indicator--649b45fc-34ba-43ed-bcfb-d1b558bb0db6", "indicator--987d6cc2-33e4-4675-a46e-ea61b8ca2add", "indicator--cbfdffc6-5385-4943-9a53-845e9887eb67", "indicator--b06ec1ba-32c5-4ebc-865a-b53aa2154151", "indicator--1c6dd7ac-66d9-4dd9-b652-252cf12b4e17", "indicator--2b40f082-3dbf-4caa-8893-32f555ca809d", "indicator--1aabe356-30ac-4a52-885d-5f5a1405e243", "indicator--a313ceab-b741-445c-ae10-6795be34abbd", "indicator--e06333d1-6579-469b-be10-c503c17d207a", "indicator--dacfe7c0-b5ed-4344-8e12-425fc9a7e1ff", "indicator--a71b9dd2-7b20-4c9d-8f5d-48372afd4544", "indicator--1141795e-b2e1-483a-a50f-a54a3c40b6ec", "indicator--47d20545-8d0b-406d-bb8a-d90b901a6e00", "indicator--42c8e202-28f5-40da-b36b-e361624dd81e", "indicator--dddc0130-a6e1-4406-839f-04e975574f77", "indicator--0392d1b7-1d77-4773-b1ca-ff3b82f3e2d0", "indicator--83a4d563-b982-4cdd-81f1-217857a80cf0", "indicator--a2a83e52-40e4-4079-a0bc-02332d54d78d", "indicator--72d31016-65c0-4ac1-b435-b78f78616cad", "indicator--a36d7281-e67e-40b3-89c6-eebb5456986a", "indicator--f1c2c4bd-0fa8-498b-99a0-c431149cb38b", "indicator--de49dcc2-f52d-440b-b751-41ccf0f30898", "indicator--07c9026c-c80c-49d0-b12a-de6fe6ff5787", "indicator--7ad23e84-a5c1-4522-ac51-fa023abeeaef", "indicator--5458d345-5cf0-4a64-adc4-4d7bea0dcc1c", "indicator--d10e216b-28aa-491a-8344-99526a98a779", "indicator--ca952c37-0ab5-429c-94c0-c4f16fef1383", "indicator--2d938ec3-1117-4656-b9ce-058c8ead48ef", "indicator--ad599921-f6e9-4038-a729-1013cfbc33d2", "indicator--fa03f613-937e-43fd-93c1-5bd0a9e928d7", "indicator--b8e43952-47ea-4b06-a5cf-e08e66d82f7f", "indicator--6d19354f-9b9e-4fa3-98b8-c11f75a4a83c", "indicator--0add07ca-c911-4a75-85c9-83429d0a3ac6", "indicator--b1fdad48-c710-4d30-9852-99712143a3dc", "indicator--474779b9-0220-4ac2-8cd4-df2ae5229ada", "indicator--5740fc39-e340-41b2-bda9-a9828617d929", "indicator--d07ab495-5370-48af-bd6a-255bacdeefb8", "indicator--5d1116cc-b9fd-4e59-98ea-f580f6a1f57d", "indicator--afe20142-b88b-45ab-b395-f1236b821025", "indicator--b4c44994-879b-464f-bd48-df5153fda8ed", "indicator--433f04c4-980f-44c0-8c57-1daa2390d2e7", "indicator--8ac4aa6f-b2b2-4529-b29d-1f5169814f26", "indicator--52514ec8-4bd1-4f77-8e7c-1b0c06e07a7c", "indicator--511fd99b-bcb0-473a-b929-1c2dfb7151b4", "indicator--0ac4fa91-744a-43f5-9d5b-f42bc6348758", "indicator--38091164-f844-47a9-9cf6-130879b19072", "indicator--efff1952-1678-4db5-90b0-c2d1ca4a26ac", "indicator--878c925c-5b81-414b-913b-efdb1065e1de", "indicator--80bef7eb-8ade-43c1-9b71-f2c33684b84d", "indicator--ac7c98e6-ce4e-4437-a02f-3fa3a4349f4e", "indicator--e44cd63a-37c3-435e-8644-20d191bb267c", "indicator--d5ceedee-ffac-41e3-9b14-08cca3d2762f", "indicator--a8de0c2a-65c1-45e8-b1f9-867d4032cc99", "indicator--4c6e9c2b-af79-432b-9c01-563fa9dfe2cc", "indicator--3d4dadff-18da-489e-84e2-330b2f5e7e4c", "indicator--9a5538d4-3211-45d2-8532-617e92f5ec77", "indicator--9b489003-4fbc-4aaf-a6d9-7d80633cf74f", "indicator--ac98a031-81c0-4a87-b585-7e48c6c15710", "indicator--95d5cf1d-a31f-4f7c-8088-c72b286eb982", "indicator--e2a96914-86bd-4fbd-b151-79f142570ef4", "indicator--6fc71358-8149-4d96-a709-9b25348b7c0f", "indicator--45583645-8fdf-4a49-b6e8-dba1e7a54067", "indicator--b72d5d0a-bec9-4242-8cf2-92a7a477dc2c", "indicator--d042ee97-8d22-4ee5-9303-120a9db4539b", "indicator--5b04f53c-850e-4395-bde1-75868cf26bbf", "indicator--2cd079cf-c59f-43fc-9745-54df692d492e", "indicator--c7b0c82f-b487-4417-861a-7d08e0438ff8", "indicator--d537e723-637f-4a75-bd53-bd9659c1d3d7", "indicator--db79cb6c-d309-4592-8ff8-0a86070ffd12", "indicator--444c4f12-4027-484b-91ef-dc4812570562", "indicator--4014b57e-5d1a-4e7c-b044-2448d532353c", "indicator--8482e8da-a88b-44e4-ac7f-cc8f768b307e", "indicator--5e17dfe4-0523-4aa8-baee-0d4d55bfc5ac", "indicator--629a60b3-58f0-409b-b068-0691672d904a", "indicator--4cd01248-c5d4-4314-81be-21817fbb5d86", "indicator--6998a605-54b6-4667-a72e-fcb61ddbfa69", "indicator--d957085c-ddf0-40cc-abe5-64d7939c9129", "indicator--42ade394-8ccd-4434-8564-37dc08d1b1ec", "indicator--928f66a7-d437-416d-9655-b62e5575cd3f", "indicator--a2df9d45-3d43-4826-b682-46e607fc80c6", "indicator--00ea7234-d237-400b-a0bb-9ecaa2b7b5b1", "indicator--365a5541-4448-4ede-8054-47990bf470e4", "indicator--495fb6fa-efed-4f62-9e8b-f5a1a7df4299", "indicator--d4bc7285-507a-45d7-a02b-7956506cc6f6", "indicator--4424ed67-8739-41ca-81b6-51d89a2fd776", "indicator--edd061d5-9b66-4158-932d-ed84bc6d886a", "indicator--963123a5-9b39-460b-9a7c-fc0adbe4d31d", "indicator--3ea6a293-9ae9-4f52-9a7f-bd539dca17d1", "indicator--6160e1ae-a7d6-4b9b-a6d5-bae25f9ec0a6", "indicator--1cdc09ef-81dd-4493-acca-428c5d41d864", "indicator--d7e0b611-470a-4bc5-a494-d6f22cd4c514", "indicator--785d56e8-e1a5-42ea-8a8e-61dfb1d50173", "indicator--a1ab6988-958f-44be-8e57-60bddf07352f", "indicator--610b3b26-9da1-48a9-a6b9-736c3492433f", "indicator--f1855710-0612-4f88-9f35-30ce946a5629", "indicator--48272ebf-f278-437c-a224-2673b8bf5a64", "indicator--7521b3ce-d96c-4238-9453-4ea06be938a5", "indicator--bafacbe9-9c4a-4843-a938-bb5dbb1b2c71", "indicator--3325aba4-11cd-4f76-907b-65dd12ee8f44", "indicator--76177c5b-0a41-4c9e-a01e-4536b571f80a", "indicator--25f8d752-f3a9-4ab3-9628-43be22e3d7dd", "indicator--781947d7-a1af-421a-a1d1-c047175d65e8", "indicator--e093c475-d8c6-4819-a996-7527c62a30ac", "indicator--748b0b5d-43ac-4a1b-bbd7-14151bcd12ee", "indicator--281d2daf-661d-4d79-b4ba-dd2857ed3c70", "indicator--d0f2221e-da25-4874-9ace-71711247f6d2", "indicator--466a0206-3078-4072-93bb-ce494a3f04b4", "indicator--e781f592-1002-4c25-9fbf-9d85a017169c", "indicator--705d3d35-65a9-44c8-8e08-113294df0238", "indicator--f2515042-ba34-45d0-a5b4-951c8bcf541e", "indicator--66123c30-8797-4f59-a354-7c8e3c4a40d7", "indicator--0cb9ed3e-fa36-4d6f-9bec-0373a3610143", "indicator--a324fc22-f717-4d5d-893f-4f06af50a257", "indicator--131bd3d2-3c47-4d3d-b94c-4e237ff65bca", "indicator--e6cc10a5-b12d-4b45-8a66-05ffd9f96465", "indicator--9c62e3e8-c8b4-4f3a-8ee7-3a60fd626883", "indicator--0c590bc3-52da-437b-9eba-970e9eae353a", "indicator--a5537b07-8700-45fa-92a3-3b1a2c5611d4", "indicator--ba9d927d-721e-43cb-bf04-10ecc5943fa7", "indicator--92fa0066-128a-43d4-9bf6-f9b00600a50a", "indicator--10e6c834-b9a2-4064-9f47-7a04b4d29ace", "indicator--e3531186-fe1d-4ab7-a5d5-6b9da5e46f4b", "indicator--4c309946-11e0-4c92-b4d1-6e23865f2d2a", "indicator--abd9b710-9d9a-4687-a097-078ab30e5ec5", "indicator--22e138a9-3cbf-48de-b570-668cff826fa0", "indicator--ddad5c41-50c6-4bbe-a653-4230e9c27d20", "indicator--b7070341-9ba4-499c-9ced-b6fe1fcbc9d8", "indicator--1f827d45-6364-4ac1-9ba6-6e84382b3427", "indicator--8e04cb14-aa00-4935-a773-4aca02c29f66", "indicator--16cffba6-0f3b-451d-8063-aa5de9e71f7f", "indicator--f978bd27-a2a6-48db-be07-015d7babb26b", "indicator--8ee4d972-3267-4865-ae05-3656f46a7400", "indicator--ddb45da4-3bd7-41a4-a3e1-7500c4bc9b03", "indicator--209b4bbb-ad87-453b-801f-4cefa2a7c49b", "indicator--70ba8df8-d81a-43b5-8a5d-77f21ad97440", "indicator--e5bd8a34-d25e-4cb7-a720-ecb815567ad5", "indicator--cc3c8346-f91e-4c96-8696-712844a6c7d8", "indicator--c0b103c7-ee7b-41c6-b765-f2e20988ac38", "sighting--bb7bdc96-e6a3-4b00-85cf-57fb18ea31ad", "sighting--3a2eebb6-d68a-4dee-bb8a-1007ccee6e25", "sighting--38f4f672-b26a-487a-91c4-a0d8dc7a4cfb", "sighting--0eaf4f3a-7821-4b47-bfbf-8db703cd1596", "sighting--74669ffc-9da2-4a57-aa05-59c5133c9439", "sighting--5dee6a9f-698d-4d21-9ff2-76edc77496c9", "sighting--faf7c3fd-93e9-4422-a5bf-fefd1da53196", "sighting--461f8f64-396a-41c4-8de3-a6e7a2fd2c9d", "sighting--895c39db-7dda-4b2c-8e10-cfb20882dede", "sighting--c3773568-f742-48d9-bbef-4ed7895176d0", "sighting--8a768f4e-b29e-4536-b5a6-3c423f88f298", "sighting--b1ec67a3-85f7-4693-aeb7-118321d9a601", "sighting--08e3763d-c201-4aca-b8c2-1345215ec118", "sighting--94c089cf-6978-4f03-86fe-59c508497cc2", "sighting--162d7b8e-ad7f-4265-be41-00a5d50b6c1a", "sighting--e90833ba-911b-4a9f-bd34-8a86de18504a", "sighting--6874ac5c-f9af-458e-97b5-1f1c8e2a61f5", "sighting--5f1ba549-8a2a-4f70-95c8-f01a4e065e94", "sighting--d4f4e766-fa70-44dd-b72c-5d328c2c98bb", "sighting--844d07d2-6c4e-4225-91c2-b63a8b74de70", "sighting--30ccfd46-ac04-4eba-ab52-d1375401ae70", "sighting--65707943-6bc5-49f0-a69d-2883a9892d12", "sighting--e74a6279-94db-434e-aa6e-57c7426b058a", "sighting--11f3c047-9c7c-423b-a131-800844f8bf55", "sighting--28996562-0796-45e5-828c-4eb67c982db7", "sighting--5057b635-0407-4e22-b8e4-d1259cf30a05", "sighting--c47c0a07-7bd3-43e2-851e-524f22da00f0", "sighting--698bba26-f6ab-4c1f-aec1-3e1d560bbbfa", "sighting--9ddb1eef-c895-4542-939d-94df1168b743", "sighting--96f7f679-990c-434d-8779-ac5a02041ae7", "sighting--a63367ea-aaee-49c6-ab96-19ad33ee2e18", "sighting--478c3127-5d42-40a2-a1f2-c8b939cd5ffe", "sighting--b0e6759d-1f4a-4edb-be89-ec037a19fb49", "sighting--dd5b0aaf-9f64-4579-a165-e1f65ab3c2b4", "sighting--bbcb26ce-64bb-4d25-a0db-d0870943c08f", "sighting--b9ed8d69-6445-4be3-bed9-153587e78419", "sighting--d253f9c6-2f10-4487-90ae-387e7d14dbb6", "sighting--4b1b4986-1229-4b56-9261-57b5bb6cb287", "sighting--53424718-b567-4003-859c-4f563568f048", "sighting--8bfe1b1c-27c4-42bb-9b88-e941d549403b", "sighting--a9647425-147f-4693-b58a-1d84b0ac7e06", "sighting--40edac70-f8bc-474a-aec9-bbc2a52827ba", "sighting--0ccf97f9-be0a-4012-bfda-6c8b6a0a4ea6", "sighting--82c5f51c-e9c1-40f9-90c9-68bd449bc3ec", "sighting--de7a09ed-7282-4122-bda2-6836a2771951", "sighting--52eaa371-0de1-4a66-bcf4-b85861f8b95e", "sighting--1c39e3bf-ad19-4b89-a3eb-32d353119f49", "sighting--7e3c7fbf-4d9e-497c-ad37-456c44c77010", "sighting--e36f84e6-4671-4beb-8156-44fbe52e93bf", "sighting--828dbf36-9fba-4f68-afc7-87e7d82d300a", "sighting--5e79f220-193c-4c44-9c69-2e3540a75697", "sighting--f45fed1d-1f2d-495d-be6d-9f25284fd217", "sighting--00e7bf0a-b74b-4098-a69e-cd41a3d1381b", "sighting--569ab8f7-023c-4eae-a570-3fc19b78df53", "sighting--91a5a4ab-9677-41e9-a89d-b6ad6e085585", "sighting--ef069466-1676-455b-a489-4826ea3310be", "sighting--8500fc24-693e-4942-ad81-cd248603b66f", "sighting--95c16533-6e9c-4abd-bd7a-ccff444ef93f", "sighting--e2987371-c55c-408c-b0ba-3d7b8fe187d5", "sighting--f039267b-bb6d-4918-aba1-6481afc85691", "sighting--020c5dbf-1b89-4b4a-9327-6c3c1d094523", "sighting--8a247837-f7fd-4d94-bdc1-cd4561bf4dc4", "sighting--9156c3c7-6e61-4932-a75a-b76eb31d72fd", "sighting--1b21051e-6fcf-4a6c-bbdd-b4a5bfdcf3ab", "sighting--2c39fba8-fb87-4279-bc32-35dcc3952980", "sighting--608a166b-80fb-4699-aef6-249f2b78e7b7", "sighting--df663884-f9fe-457f-b14a-cec728d25e1c", "sighting--8184d4f8-a2d0-41c5-9415-e3ecc2c8f485", "sighting--523ce9b3-5260-499d-9e66-3771e4293732", "sighting--ae4453ab-f483-4f20-aee9-de17c4caf590", "sighting--a8e66f1d-815a-42d5-827b-e2efd75c32e5", "sighting--a24f573e-da75-4832-a874-326c1efa7d42", "sighting--c7c92f70-e334-4c9a-8c25-309e28e61485", "sighting--d5c468d3-8ca5-4c82-a1f4-79bbbbdcab4d", "sighting--0e821141-6cb4-4c12-8336-6c0862654380", "sighting--677142a7-ec4f-46b1-a3ec-a8edcf187b49", "sighting--68576b3c-8ace-4446-9005-8429335092b7", "sighting--675c365f-3f88-4756-9cca-c7bba28923b6", "sighting--de9d57a6-68f5-4e40-a739-4f65cf8524af", "sighting--c12c4d0b-6d9d-4287-bac7-d630481e6bc7", "sighting--f106f34b-a44c-4fb2-b800-2dcb866d5144", "sighting--b7a66ec1-48af-4449-a3fb-be91d7d258fa", "sighting--840c883f-6e53-4fdf-a7fb-52a123d302ee", "sighting--d2033ce7-da06-464e-9bc1-45bf220ce05d", "sighting--4e282606-eaca-480e-a32b-79e47906c253", "sighting--e2e565c0-7b1a-477a-b58b-9ee7b40513f3", "sighting--2e2a5c7a-c3ee-4824-888c-66bc469f344e", "sighting--6d1b3280-0df7-468f-8511-ce1fe42726d8", "sighting--fdab0558-cc28-4fcf-8f0e-5492da4605aa", "sighting--ce7f626c-362f-433e-b418-5172686dad13", "sighting--11fe1df1-1dcb-4139-8823-4eade4575edd", "sighting--e53ba175-d8f2-4d94-9a8e-6212343bd06f", "sighting--b662093d-0e75-4e46-946a-b97934303bdb", "sighting--6ec93a91-ef46-4183-8500-ace7e5a7b140", "sighting--869ec5d6-99a0-4dba-8103-d9f4a48f67e2", "sighting--98a80d91-7b37-4282-bdf3-328808962dbd", "sighting--d0f4da5c-3439-4cab-8465-061c39a03b63", "sighting--b27c9392-c7d0-4cca-89ac-c93d6e51d988", "sighting--1b4e8c1c-0bcc-43fa-bc91-7de17b8bfb46", "sighting--72be4080-128b-446e-9ff7-c397d54cbc26", "sighting--a34a9358-1bb0-4bdc-9d28-962c301ae486", "sighting--a46495e3-1063-4f43-bfdc-3c0f6554ecb8", "sighting--7f93813d-fdf1-4751-a6dc-505c030d6f5f", "sighting--e48eaa63-af24-4f9f-a098-6c3627072a6f", "sighting--bebfbd5d-dd03-4c75-9a20-16db68e63777", "sighting--68faed87-516c-4504-9931-e19bed4fb4d2", "sighting--5701d9e1-bb26-426f-90d4-1628a1e55518", "sighting--0bfaeb6a-6e7f-4225-8cd6-39af7a9ebc9c", "sighting--aae10511-2ffb-4907-9ee0-0d8bc4bdecd8", "sighting--d5543db3-bb13-4964-a34d-6b5b097f6b0f", "sighting--87547298-5a95-4d7b-81c9-bbb07e37e821", "sighting--4c1e16d5-e3d4-41b5-8251-46db8b60b227", "sighting--cc55437d-c058-4f75-a9d0-9b7a39e3dbb0", "sighting--74b2ab43-64e2-4144-a09f-713904415e38", "sighting--68263cbf-7609-43d8-82f0-3126f9145a10", "sighting--094c5a49-989d-4d27-99fa-21bd3e68f56f", "sighting--ed8c7f41-c9e5-439d-afca-8fe2a4b52393", "sighting--26397e48-89b6-4f2a-9dab-fd8b1fd03a2f", "sighting--a567091e-70a2-480b-9eeb-b29424d34f1a", "sighting--dc8c778f-c187-4975-8fad-307b57034231", "sighting--2bbf0e7b-d2df-488e-85a2-9b58493d0576", "sighting--8f473ecd-d752-49e4-b449-93a32b712ea1", "sighting--6fa4fac7-ffb8-40d4-8e47-88d6de796b81", "sighting--366d3920-dadd-483c-90e8-6862f0badcca", "sighting--52b84f70-8f18-4278-b3eb-af91928aef87", "sighting--22968d64-83cd-498c-b23a-eb4a6e3d189f", "sighting--02bc858f-ec7c-478b-8dc1-73883fd0befb", "sighting--deebec3d-0f0f-4ce5-93d1-f5fd01c6c228", "sighting--9965a4ee-4b47-48b8-a246-e855621d0919", "sighting--55b9f2c6-d4bd-4ec8-be75-d1596ca13565", "sighting--4592bc9f-be1f-474d-8469-a2cfb304500b", "sighting--cd711fac-a820-4203-9e1c-28b66e139952", "sighting--5194b333-b727-423a-83cb-6f834cdcf32e", "sighting--e1053639-51df-4f7d-9bce-ca14294e1b72", "sighting--beffd2fe-3d07-404b-83c1-10574c21c3ff", "sighting--a943aaaf-04a2-49bc-acd2-31a3730ecf2b", "sighting--77c7c3c0-64c6-4cbe-b9df-10c23290e0c5", "sighting--a560c64a-e702-416c-924f-30cea5f10bda", "sighting--08df73d9-ebc3-49fd-a4ce-7685564dc707", "sighting--c00b5cfd-8990-41d0-9920-a089026f46e0", "sighting--48045c12-e503-4c86-918e-fe4efd3fa798", "sighting--778ed147-84b8-441b-ad6d-0787a030ff51", "sighting--25fee477-89a4-4b88-9b51-3d12b8ab2136", "sighting--e46e761e-98d4-4b52-9ef6-74add112f469", "sighting--03630a5a-0ab4-4d61-8f51-f7e41c3518e0", "sighting--2ddf391c-5605-4034-9b5f-59269b32532f", "sighting--bf5ccfaa-6470-47b9-8256-7bc7721f7ade", "sighting--4042d9fe-2aa2-408a-b7ce-d4ac45bc2e7a", "sighting--3618d9d3-af92-4add-bd22-a3af1e84f573", "sighting--fa07aa32-2a2e-4d77-bd2d-99563ccdd8d7", "sighting--dd2b8f20-f701-407b-b133-4f233bfa5072", "sighting--b36cd054-e8ed-41b1-a24b-816be83eb236", "sighting--bc923459-d477-41e7-85af-cfb26ffa60f8", "sighting--2b660dea-27bc-40e2-b5e8-d16efc44cec6", "sighting--1daa0f3f-e27f-4598-8203-bfeecd049e4f", "sighting--b1cb5393-e049-4fe7-86f5-e7527ec69a0d", "sighting--f4b74cee-f215-4c53-934f-e694588f0491", "sighting--d393a88a-825f-4393-8a4b-e7fcfc05eea8", "sighting--f813bc9e-6116-42d9-a94e-c921e8c65666", "sighting--450d7af0-b8de-41cc-87fd-f723b51290f7", "sighting--c4420814-035c-4350-84e6-0d023fb20984", "sighting--c0c2c069-86cd-419c-8375-4b7304c48c90", "sighting--168c7250-c95f-46eb-97aa-8238612322f9", "sighting--e4f3568d-01fa-4e8b-88ff-1d383bc1c950", "sighting--067aab48-5221-4794-8340-6a5c4685b7dc", "sighting--2b0cb870-afa6-453e-a772-08c5360363ea", "sighting--edd3d345-aaa4-4d9c-894b-8455db53f647", "sighting--c4de2146-ba83-4a72-8247-53730243d0de", "sighting--3e2f444b-dc98-42d3-8e7c-5726599bf6a3", "sighting--f05c933d-f147-4860-b15b-73fb63a4d18d", "sighting--b66be27c-ec6f-4ad8-b2c5-ab005fa8d8ae", "sighting--b1651e6b-9e6d-464a-b6d7-6b2f1ea9aca2", "sighting--736996ef-91a4-4c29-b7b3-d51f18b85396", "sighting--e9472d8a-7b13-484a-b5e1-415c79eb3bed", "sighting--ffb4c0be-d4c9-4a97-a8e5-f52d18cf3947", "sighting--6a0dae9c-2097-4704-9cab-0b1b7259280e", "sighting--9d6716fa-a473-4307-8589-bf9ef3f67f89", "sighting--23e323d9-c029-4c4c-88a3-e993bbd8935b", "sighting--69f1586c-a41e-4f9c-ba07-f07474d9db87", "sighting--944ec13e-c2d2-47be-873c-ca2616a5628b", "sighting--99252682-59cb-483b-9d8c-2d44844961e0", "sighting--48aaf043-d336-4a11-8565-02278facad06", "sighting--9003a3ff-06b4-4465-a636-9114a31de398", "sighting--b8038410-7dec-4953-a175-823dbf19c9c9", "sighting--0cb45de2-5588-44f3-859b-c74327204c8a", "sighting--fc3bf70c-b568-4a7d-9e74-331b578dbac7", "sighting--843f9f5e-5791-4ab1-884c-1c27c3b4f553", "sighting--9369d71f-0a62-4cef-b187-ff0722d4ae33", "sighting--ffd86167-53c9-45ab-9ff3-aac1c9a7f99e", "sighting--da5394c0-d1b8-45db-8ce1-30c81bc29ccf", "sighting--75421b9e-d830-42fb-b2ea-46a1063ae045", "sighting--b974eef7-6fe9-40d0-b569-c494f7f99e72", "sighting--f7f797ef-c702-4fc8-aaab-411962b98091", "sighting--8433677f-dbbe-4ee9-86b9-11c5590a2f6e", "sighting--98e68e66-ca80-4d2a-bf9a-dadb4daaa122", "sighting--f56f71a0-32df-4971-a6dc-b7e672191c9d", "sighting--7de65ec2-c77a-47ba-b41b-ef1ef866c87b", "sighting--ec9dd7e4-1fae-4611-adfb-0d23dda33bc2", "sighting--26064a83-5337-464e-b7b2-a0308fc9e860", "sighting--e8f17667-3579-4334-8d95-cd77ff533b1a", "sighting--f3934685-dcd0-42db-8a7d-302619dfa4ed", "sighting--976c0c60-5cc9-413b-b16b-3d46f2e4836e", "sighting--5687abac-ad90-4fab-bec0-45e3883d0cb7", "sighting--fefd34a7-960c-4f50-a5d6-a320e8ba0a84", "sighting--0833d3b6-e32c-4c17-a118-84b368b9d8d4", "sighting--3b01767e-d89d-4847-8ace-9ca21e256e01", "sighting--39d987c4-b781-4f8b-8feb-a6574b5c5188", "sighting--7334865c-4940-490b-b4e2-97b1f7ed1189", "sighting--94916693-958a-483d-82c2-3d04dda7a56b", "sighting--3b5464a2-10c0-41b7-acef-16e94744575b", "sighting--8976b7de-8e37-4ce2-b805-158c616b5bed", "sighting--5b4e69c9-95ce-43b8-890b-c18cdc52c702", "sighting--a6f73dfb-c638-4947-8d5b-40f911a09816", "sighting--31dc13f9-c24b-4752-87cb-ffa2b761ffa6", "sighting--5b4c1e5a-44be-45a4-82db-ae33eaffccca", "sighting--0da95e8e-d00f-4fed-bcc8-6dac84cf65ad", "sighting--5f181a4f-630b-4588-8ed8-b08decd4b8a8", "sighting--196c6642-1f78-4229-af60-618c4ef31a12", "sighting--d633d474-5569-4fd1-89e7-e4d7a3471f72", "sighting--51d7a240-0a2a-470d-b7e4-b789a650527b", "sighting--8e067de8-95f2-439c-8a31-76e8038ac190", "sighting--2f0de19e-2b2d-4472-92a9-9a229fee2b81", "sighting--cfa1c93c-bdff-4f0a-b2ce-1f097d6aef0a", "sighting--44e1f7d9-eb98-45e6-93e7-66b0dbba14f1", "sighting--4428fcd5-42df-4ac4-9e5f-5ddd1a27b380", "sighting--07701f2f-2c85-4910-9330-2a77240d6325", "sighting--e25b81c0-b028-40e3-86cd-07667768d51f", "sighting--5d153677-6d31-41b3-94d7-1f769a1916d7", "sighting--eba85597-793c-412b-b0a5-80a0c9b12d38", "sighting--bf14aab0-8d14-4546-a397-2ee2a03697cb", "sighting--4e2ecf8b-57d0-4f9f-a21b-a6a9bf55c2c9", "sighting--b0a89129-7ef5-4992-a909-0501d227ca4f", "sighting--d56ce8de-30e1-4e2e-ace1-725bdd76f3ff", "sighting--7e57a0b7-104e-479b-98ff-85dddecf8479", "sighting--8b6532db-9628-4f98-924a-96ae931591e6", "sighting--93c499b2-d35f-4446-ad2f-3d90819e3b27", "sighting--4a11c8cb-b42f-465b-b12f-10d4b8f9171d", "sighting--557755fc-6f70-41f6-b5fb-8b9c24096cc5", "sighting--85add899-ad5a-4d06-9324-ab5112fce51c", "sighting--ff7b7a68-3622-439f-a01a-7b6bd9444b63", "sighting--c55c7777-ce2c-453e-91b9-678b979a3aab", "sighting--aa9ff85b-bc3a-481c-b351-a3275e779e90", "sighting--a4832949-dbd5-4fa3-86b2-71ce957c1022", "sighting--731946df-e70a-48c6-964d-038500ae5a4f", "sighting--db3a6159-b991-4823-87aa-3ac84cf6db7f", "sighting--e1216521-0b47-40f7-9e92-049517e8f734", "sighting--681313dc-f1c8-4fea-a924-1bae2821b8c0", "sighting--3276437e-8cdd-478e-a3a0-9fd1064d2cb8", "sighting--dd67cb36-6680-4505-9ecf-00a59447c7fa", "sighting--d9818550-34b7-4157-8326-0ee3af517aca", "sighting--437c3087-11cd-4eba-b783-273e15fad275", "sighting--3e005abd-970c-49bd-a700-f329e538f27f", "sighting--4fbe98e8-635c-4e4f-97f9-1f89c0f1f496", "sighting--8350f7d6-cb0a-4da6-95f4-71d50645a94a", "sighting--e2111f4a-23dc-42fc-bc87-bb693ae77d07", "sighting--a575b7c7-42fa-4b7b-82f9-26cc45fd6350", "sighting--7e6f5850-81be-4214-9796-8a5949a6ed52", "sighting--55493874-1222-4548-8f70-9ab464e9cca2", "sighting--dbe5f780-8afb-4238-b8fb-96a560c4f927", "sighting--161ac7c3-ada9-4a0d-98ee-74af119b4ef5", "sighting--b8d8fafd-3ea8-452a-a783-cfc9df7b90ef", "sighting--151674c5-0f2b-4c0d-9c22-bc9cd2da6da4", "sighting--2b49a5ad-b0c3-4e6d-84cc-6147e110082c", "sighting--42427a1b-5787-43d9-8f5d-d759ba695c6e", "sighting--450a79ef-4f28-479c-84a1-4e842a697628", "sighting--ded7b0d0-4ffb-4f71-b619-8aa535ef4a3d", "sighting--28c5cd18-6533-4ac6-9798-c5c512b80c08", "sighting--df100baa-e2e7-4f04-aafc-f855b60c64ca", "sighting--718cf63a-422d-44d1-afa1-df3fd99927d6", "sighting--7656047f-1373-4382-a6c4-55c3931e6ada", "sighting--1e6a5de4-da9c-4661-9e50-7e056b49aefe", "sighting--6778bdcc-24f9-4d47-9ee9-e8b57ab5aa97", "sighting--b456155f-bb80-4aee-8f22-ee1c80e62bdf", "sighting--25c7e889-3344-4bf4-b98b-2aeaff1e7e7e", "sighting--d819320e-d364-4628-a9a5-1f32aded0606", "sighting--17e8f1dc-b3b1-4df1-b890-44d68b8743a8", "sighting--961b9ce5-3b86-48b0-8006-3549a7ea18df", "sighting--838e5530-27e5-41f0-a28e-714c650bd1af", "sighting--c7639959-a5f0-4bfb-b75a-f64ffb977dd1", "sighting--115a5b51-8d45-4ecb-9922-a8354ed1590a", "sighting--6318d3de-2008-46c0-9957-c615deee5160", "sighting--97ce101b-7dc1-407f-b287-ba64bb3ccc61", "sighting--824ebfee-e205-426d-ac31-cabff6e92ff5", "sighting--07eee18d-3538-4da9-9402-157bd1a4cda1", "sighting--54a5913b-334c-49c6-9f21-2bc41c0e05e0", "sighting--7e1ba28b-53b7-4615-a0dd-04ca8eb94fd2", "sighting--c90a8217-7016-4d7f-8d03-76a32d29c1d2", "sighting--6d752729-dea5-4c2e-92a4-e81be8bbc208", "sighting--08ee1269-5b12-4321-8a06-5b2bec573acd", "sighting--01a905e8-a36f-4635-af07-2b92d9887a02", "sighting--03013eb9-0ace-4b9b-90d3-1b2a1c4a4ff7", "sighting--5b1e2509-844a-4ac1-addd-f24712ed8992", "sighting--eefb4fcc-aea6-4bd3-80d0-f79860171e33", "sighting--14efa589-e2e6-4eb1-b3f5-8806c1d11588", "sighting--6da59638-224a-4c2c-8fe3-f3090739942a", "sighting--e4c02f21-e995-49bf-8748-6a33fa68b3de", "sighting--4fab1874-0893-4f32-83e9-b982a616ef62", "sighting--d28109f7-b393-48b5-9203-9cee8610f518", "sighting--4fa043eb-ab7a-4825-9e52-8b4a1a34cc07", "sighting--e65b9ec2-9fec-4bcb-aedf-5f027c056581", "sighting--60f65141-60fd-47f4-9e8a-54d9417b658c", "sighting--258a71cc-506a-4ae5-9429-b94071b8863d", "sighting--49f68a7d-69fe-405c-9a1b-a2ec91af72f2", "sighting--d77f38a9-8956-4632-8dee-84185d0971d0", "sighting--57db2d39-0966-427d-970d-689b22648206", "sighting--a7e01bd8-2a51-4291-b18b-b1ac92e72470", "sighting--8eeea688-c792-4c02-9f8b-472bbd4c36a0", "sighting--1e9f2dad-71a4-4707-89c6-25456cee31ca", "sighting--9948abcb-9ebc-4a9b-bfa5-00d9ddae060f", "sighting--b788b1e3-6f39-470a-b422-43e0c8a66d10", "sighting--5db7e058-7079-4148-8147-80284a119273", "sighting--c9dadce4-4c6f-49b4-84ed-d0d4d85a7394", "sighting--012f4703-80b2-4f03-96e2-142001f63469", "sighting--ac75f89c-dff7-4025-9aac-48f6cb4376fd", "sighting--21e1f49a-a532-410f-a8f5-7a2f82adcac3", "sighting--ba964e34-2ebd-4d6f-877d-e310ebb72368", "sighting--cfb7554e-cd8f-4ebb-ab2c-ae9f48f0d97f", "sighting--72160750-e4da-44cb-932e-792cb0980367", "sighting--d786737c-d96e-4b88-93c8-1b9e97e7c8b9", "sighting--04106c18-85e1-4f4e-9eb8-5cc48d240c6a", "sighting--37cdfd94-c5f2-4d45-b52d-76e6709eb744", "sighting--d25f92e5-5a08-42f2-b53f-dcac0ebffb2d", "sighting--42b1a76a-b343-4e3e-801f-42fabbb2c92f", "sighting--76d2d27a-21fb-4915-b60b-302bd9d991b6", "sighting--b9bb9106-12b2-4e41-af97-b48b0489b082", "sighting--f48b4588-5cf0-4e10-b84e-878bb373c718", "sighting--30790a3d-5a99-47ea-bbe6-a4700ce258a7", "sighting--04029a74-6709-4e22-af99-ac4d189e7c59", "sighting--6488a17d-c886-4f9f-bade-495bfa0fd3e4", "sighting--eda91965-f7d7-45f0-97c3-a4d768e87a88", "sighting--6545cfa3-559b-4b20-bca7-4270b6a95a83", "sighting--30833d64-7fb9-4faa-9e1f-b90f6e2495c5", "sighting--909ed008-4f12-41df-b21a-23c2e1a2b7c3", "sighting--12abcd60-3f23-4527-a997-71379dfe1cd0", "sighting--0ac2ff16-93bd-4c9a-9673-2f017eaac963", "sighting--28605600-4f93-445a-817b-225f626061e1", "sighting--fc9c5420-519b-4e6c-85e4-74ef06844d85", "sighting--f4441ec1-d081-44f1-88db-2bdf77c508bc", "sighting--21af0697-313c-436e-b14a-46a3e73338c1", "sighting--5fdfb6d5-c74e-461d-bd0a-c76eb2dc6b0f", "sighting--5f120f91-4a2b-4de9-9052-1d494e3bbffe", "sighting--4c41f1cf-c1bb-458d-8786-9bcf5460fa7c", "sighting--8ed03478-887c-4773-8685-e41a0a927347", "sighting--a2aa584c-a201-4d4f-aab0-be12c7a94c91", "sighting--6aa4ebeb-0963-4094-a75b-e4efabe61658", "sighting--3b4e576b-c042-49bd-b80b-8f15dd7c8f7e", "sighting--b673dbe1-b638-4a82-98b7-834c15d16f83", "sighting--e1f22c74-2a3d-47c8-b264-b2300d2c1b1f", "sighting--6774775f-24a3-4282-9ab9-40923337e64b", "sighting--79a2a68d-263c-4dc3-8f9b-20a9f73152f9", "sighting--57cef39e-0546-4434-8faf-8afdb214df3b", "sighting--c356387b-c302-458a-ba5e-1f9baf613f70", "sighting--8431f6da-c56f-4d6f-94de-0c903ba3e945", "sighting--8b87c11c-5338-4cd8-835d-9ad1a759aa0f", "sighting--e3e4807f-1d88-4364-bd00-5bddc4aeaea6", "sighting--6c0a37db-0ed7-4031-b547-50c150c4b662", "sighting--64a6f216-816d-410e-b08e-90bbedf6aadd", "sighting--3a59adc3-2bc7-4bbb-8755-b23529288baf", "sighting--b320a4f3-e0f0-4065-bcf5-f07d9d8e7d01", "sighting--3922d71c-5925-4fab-ab64-1e0b808f2efe", "sighting--2f640172-0453-4812-b418-91aa573313c7", "sighting--7dc9d2ff-28b3-480d-b2fd-5c60e9fc6f7b", "sighting--cef5afd2-1de2-4c53-b559-699462062a52", "sighting--5d36483b-a850-4921-8877-06b5e4a860cf", "sighting--e4818272-13db-49b4-9382-d7345dd27c5f", "sighting--57f709d7-7320-4b7e-9586-dc86d9ea2e5a", "sighting--cbfd1fd1-4110-4203-940e-518b8bf8d806", "sighting--0f373621-80a0-4ff5-bc54-3813a7193b17", "sighting--5d80bf5f-ed1e-42f8-a5a8-c82cbdcafbc6", "sighting--8837be6c-749f-458f-a427-19d632057ebe", "sighting--a91fc60b-f52f-41e2-ac15-b3b6bd5b6029", "sighting--de8caa7f-455b-46e4-a925-8ee087a95211", "sighting--5ba085ac-7d06-4189-a37d-2efbb6ae393d", "sighting--eb15fa18-b167-4c1b-9390-da01b3a4a157", "sighting--4bed477c-8b54-4fdd-8ed8-7a028b26d844", "sighting--ee15e259-f088-4709-963a-9e3a95f7645b", "sighting--fadec518-3252-4732-9d45-d87ed6143fff", "sighting--5cf98775-1a29-45dc-96b6-e98efab712b1", "sighting--f7f38d1b-f5a2-43c6-9f8d-5cccca69f2f4", "sighting--7b863b67-466f-4ba5-b6ab-9be32f511a11", "sighting--b22012f1-275e-48e1-b25b-5838c0061d24", "sighting--668fda3a-c4ce-4050-8046-1eb21e31f3e9", "sighting--8bfdee88-b147-4b18-b825-fd6ebbe81c3a", "sighting--c857a73c-fc1c-406f-af6d-163d2ff2c518", "sighting--5ee89ad7-5c57-4885-af69-8e769938eacb", "sighting--d87a6629-6544-44c6-8ba0-7ec319fc85a4", "sighting--7ff947f1-a25d-4845-9869-fdc963503239", "sighting--0da021fc-3443-4cbb-ab20-1cbd16626c4c", "sighting--dbf43e52-2c14-485b-b9a1-21090c8b51ea", "sighting--0c119f7b-e78e-4a81-afb5-590510e9c043", "sighting--bcf90caf-a8f4-4320-9be7-4b990007a575", "sighting--65d53f8b-4d70-44e3-8b29-0997f9991304", "sighting--90390071-2c54-4a3e-ab24-be97af543299", "sighting--b84e4469-dfe8-4440-8be4-9461497b5cd9", "sighting--b132f4d2-ee80-442a-8e92-230b3f947a8d", "sighting--ebc859bf-57b0-4d65-947c-7c6a1ed1284b", "sighting--be1afcc0-41ec-4c84-b142-db0d3069fbbf", "sighting--93b1a654-4dc7-4334-831a-43d6175c3ba3", "sighting--4fced8cd-6414-4ecb-ae63-4f5495ab0d69", "sighting--31a7fdd5-218d-48c8-8d83-39c9155fdc6e", "sighting--e73ee30a-0590-4695-a7cc-9c88a2a14805", "sighting--f3b3b7e9-375a-4735-80bc-e289b37a728c", "sighting--e40274c2-716d-4a86-90db-6a366fb7f4d2", "sighting--9eb98799-fc7b-4b92-bdb1-fc12be258cdf", "sighting--4e4afaa9-a351-4a58-944a-52abec55ffeb", "sighting--dc97ad95-a6d9-49ea-932c-2b10957733d9", "sighting--6f3d4121-3fb5-4d41-9749-ac8014a6add8", "sighting--73a46ce9-6381-47c7-9c17-606f2183a919", "sighting--a9ea6aa8-29ad-45de-a925-05cb69fc3100", "sighting--53a067f8-a915-4e6d-a043-b58b0bae5568", "sighting--6d80d08e-1e03-4342-abe8-ab2a667b62ec", "sighting--fec278ba-02e9-4606-9ea9-b04594c73824", "sighting--c0dc6ab0-09fd-4b32-bf78-20fd3010b40d", "sighting--d7cb2677-8f25-44dd-bfd6-0fa278909609", "sighting--916a4d6e-8024-4c03-9cfd-0d8769f90a75", "sighting--87e0a3bb-b87a-4f4f-8a81-2fece650ccd2", "sighting--0853be8f-1715-47e2-9b89-bfd6cd7a942e", "sighting--8cebf288-01c4-4627-83d4-2cdbddf204ef", "sighting--ce55b104-a518-4bd9-a531-9423e0a0dc8a", "sighting--b8038fe8-d95b-4d6a-8864-66c547cad265", "sighting--0cde6a30-86ec-4cff-ba4a-8651d8d758d6", "sighting--d0c95a9a-0468-4621-a97f-85d278bb0611", "sighting--ba023498-392c-4b28-8ae9-d6f7dbeafd6a", "sighting--adc1450d-e84b-4492-af59-7331fbcc710c", "sighting--ba3b48a4-8651-45b9-a664-79a233839ba2", "sighting--816531da-5665-4538-ae79-efc653ba6b00", "sighting--f280ac0f-9892-4bba-ad42-1ddc4e179716", "sighting--f41bc187-8107-450c-961e-6fb640e465af", "sighting--91dc2cb6-93ed-430b-8748-beadab2a2014", "sighting--9526c2bf-e3b9-430d-b81b-fd507f94cfe8", "sighting--2701df03-1689-4082-a1af-dd73a75f92c2", "sighting--86d3944a-51b8-49a3-9dff-e36dbe3dc830", "sighting--2b7b5db1-ae74-47e6-af28-364a0524558c", "sighting--648c4de5-9d10-4964-aee1-8efc5a7e04b4", "sighting--16f1ca41-b34a-4c54-8eec-f0e7f43ca8f4", "sighting--c92da9ba-8499-410e-9e39-342eefe16b53", "sighting--796f04ac-3232-44f0-9066-a36495dd6566", "sighting--c64337e7-0b7a-4556-a1c2-45e47df9cd5f", "sighting--99f2655c-a35a-4ea5-ae21-630c70b5d8d1", "sighting--c4de37ed-0790-4938-be5d-a938cadc21e2", "sighting--7079ad5d-6abe-4998-b7b0-ae4e5e15eac0", "sighting--71db6bab-f2bd-492c-bc2c-04f5be911543", "sighting--ff04dc3d-f739-4c02-b8a4-57fdb1408981", "sighting--40a81c81-a47e-4b37-9ef1-471732fa91a2", "sighting--b335e1e4-8ed4-4fbc-abc1-7aa7430f2c3c", "sighting--3a1ad6f2-e7ce-4d4e-b6a9-749c4dd99589", "sighting--b5af73a9-89f0-452e-9e48-f9594933cd47", "sighting--14e12a7d-4df6-4a8e-91f7-85522a2f9115", "sighting--d3a187ca-64d8-44bb-8f60-de1352ad6a05", "sighting--f39f65ab-b8ea-4e0d-aa9c-ea36bc3068e1", "sighting--04e8e1b8-e4d1-479a-bbdb-31da89302199", "sighting--122d0249-40d2-49cc-be2f-d0cdcb08e739", "sighting--4dd20415-5800-4ae9-b992-ed2d635d1354", "sighting--c94caccf-8d4e-40ca-adc6-f90eddbd9e77", "sighting--4667fea0-01e0-4059-84d0-f94845406752", "sighting--f0010754-e79c-40ef-8d93-2b9af341a78e", "sighting--08babf74-8624-4c74-9767-ca9970fa96aa", "sighting--db2b472b-29c3-4a8c-a832-d39cff1563b9", "sighting--e0012dc7-5206-425f-bce6-5d02f7c801cb", "sighting--bbdc7ab6-302f-49f0-8437-acc484ae65ec", "sighting--2896264f-2a67-4cd4-8b4e-ef0a70890465", "sighting--e9b99681-9adc-4377-b7ba-37a44023f263", "sighting--3d3a6cb2-8af6-4d71-91a3-1199696da384", "sighting--95b4d7bb-e220-4b09-9d12-06ddae506562", "sighting--7ce86ecd-52f3-406b-a441-a53e4f19de26", "sighting--a9ad40d6-98dc-4b63-b1a1-efa0280123f6", "sighting--20b5f39a-039d-4ceb-9c1e-c837d6a30abf", "sighting--fc65cbee-6dce-4634-a239-6212e07b06c6", "sighting--f4c9ee16-8f25-4f11-b269-30f5f73dfd8a", "sighting--e6e324e8-556c-4153-9f0a-a698845965e8", "sighting--b3ace498-3b15-417b-8f41-3eeb5515438d", "sighting--df2bfcf9-adcb-4560-b8cd-a281d8cd55ca", "sighting--05ea6a0b-ad40-471f-8e43-0454898d116f", "sighting--0022130d-1811-4ba0-ba5a-6244ab4bfd93", "sighting--ad217ec3-cc11-4dfc-982c-3eb95a9b0366", "sighting--c1509568-b418-4e57-959d-51a1aa982574", "sighting--36ba966c-5613-48b6-99eb-5360caeaa2ee", "sighting--5e2092aa-b941-4be0-b62d-ce9bd884c83e", "sighting--6a919a89-2d5e-4174-bee0-d8b90fd3d97d", "sighting--397f139d-9e46-4bee-9a4d-71736295b64e", "sighting--7694e419-9a92-4306-9790-291e65c20f58", "sighting--fb34f8d2-2c72-4bc7-b8e2-e604fb593c6c", "sighting--be8a2ab3-2113-4299-9c78-3e13d7a5eac8", "sighting--6b0be6ab-6e01-47d6-b16f-c0e09ca904ed", "sighting--00828c3c-bbcd-499d-b8b5-552fcb58864b", "sighting--914e21e5-fb3a-4c58-9c34-b77e20351f98", "sighting--cb52c450-8cf4-435b-bef3-2d1d2d615053", "sighting--1564c39e-e75c-406b-8660-44d2e0690131", "sighting--9fb008a9-a7aa-4bd2-bdd3-a77d6eecc269", "sighting--9929bc1f-095a-4c90-892a-cf1f4ce04274", "sighting--26b76538-272b-4024-9066-5c37c95ec0b1", "sighting--f63c13f3-50b7-42a1-a003-cd2dc1e7721b", "sighting--0879ec2f-24f6-4fd4-b418-ba4253b33d26", "sighting--a1d1199b-c928-4b4c-8ce7-35e3e0ff4543", "sighting--d9b5aa68-5b0a-4f52-9e63-a65761973055", "sighting--2c5d1403-bdd1-428f-83ac-88eb89344457", "sighting--9b0a4e06-e3dc-4609-a89c-b2fb0fd03560", "sighting--ed65efba-350e-4ad7-ac0c-2f3f14470a59", "sighting--1dea1b91-64c2-4a26-a9ad-22178e9e29a3", "sighting--7ba93af9-d1af-49c9-8a27-2d9fbf44611a", "sighting--227b8e7b-fb74-45ed-b1bd-49a6221b2d2e", "sighting--d8fc827b-a230-4b61-be68-774a8911e837", "sighting--21d25002-0c1c-4986-8460-b0612aad1737", "sighting--28a7e6f9-180e-465d-9b61-31f429c1a246", "sighting--36d0dd22-8b1f-4d9d-a713-6c6510c4ef3e", "sighting--5536ccc2-f53e-4f4b-b391-ae2bc2198e81", "sighting--d0994cf7-6df4-4752-8f39-836017ea51ee", "sighting--6dcfaf4f-9ed7-4ed0-9bd9-340b132b39c4", "sighting--c4202c5f-a083-4f4d-acb6-4b6091de0352", "sighting--8b14e798-79a9-47a1-a9f0-990c3bbfae48", "sighting--144e6449-ec7d-4517-afe9-67368bc64f08", "sighting--9f1144b5-a86d-4da9-a805-dee94a0d9a00", "sighting--9474b5ab-0baf-4908-9aef-d0d9ed869843", "sighting--d58eab82-b046-470f-8344-fd5301a46702", "sighting--030234db-16b4-489c-8513-2c1a3d72a147", "sighting--a9b475c5-6645-4361-a599-9a352bd41a85", "sighting--2ed43ab4-5925-49cd-8b38-7c2ae7ffc1b2", "sighting--992bc586-d98e-431c-87a4-3c4b6dca7672", "sighting--ee85813f-8fe0-46e0-a0ee-fb60fdefda05", "sighting--0ad668eb-9d03-4686-8d2f-b9e07f8a447f", "sighting--3e084452-df44-4397-afc3-0ad706a21b32", "sighting--56e5d764-6e7a-4e3b-bf47-07d6379533fe", "sighting--f3bbb174-c1e1-451d-a5ec-6b59d993e224", "sighting--36d75dc1-f77e-457c-b10f-ee1b8dab72e2", "sighting--d002f5e3-dffd-4c83-8b8a-06e0f1e54857", "sighting--0bbb2385-0f93-441f-979f-ed0952424556", "sighting--129b31ec-97ea-4d05-84a2-f99abc46326a", "sighting--9d9c6e90-580e-45a9-b40d-8d431bf0f11b", "sighting--2d57085b-93e8-49ee-acd6-5ca1ebaaf340", "sighting--9d6bb7c5-40c1-4b76-a5d8-49e36961522d", "sighting--3df9f486-000b-466d-90ad-ffd1cf7a4aad", "sighting--f6b288de-9970-4e90-8af1-0eafc770cdac", "sighting--b1d1edc6-5728-4a93-9c7e-d3caa6504a8e", "sighting--7a4c8a41-cf00-4d28-b88d-8710ca85ec75", "sighting--bef7d418-5f21-4064-88f7-3769ba32e498", "sighting--1ab4f9fd-cc27-4f7c-a839-65a474283f34", "sighting--78101a49-c895-422f-8b7d-bcccce696ed3", "sighting--3750bc8c-6fba-48ea-be3a-6cce4da7b3ff", "sighting--5eaa1504-f461-4bfe-880a-4f115ba2ca3a", "sighting--5d7eaf55-f991-4e90-9d49-344b56d9fb9d", "sighting--0bbad8b0-3ffa-4bdb-baeb-6cae1d8d7eb3", "sighting--b8c8a872-bc48-49ff-88b7-8106624fc941", "sighting--599f4a31-4dd4-4e12-99e4-51d1c052bb71", "sighting--9e21887b-00e5-4522-8b9d-f117eb3d5500", "sighting--3a1d8e6a-1328-4fc2-9ecb-21e02e1669ce", "sighting--9014cc87-a0b9-44f2-913b-ce2a649df291", "sighting--be094ad6-3d7c-4f35-99a0-9f5b24e8c118", "sighting--f78cec8b-b07f-4c2d-b03f-3718fcea1d05", "sighting--f4f24e32-5b38-4fb9-8afd-6e0a44f69a53", "sighting--8696ebce-2e10-4dd0-ac94-2cfddd287ba6", "sighting--cc360dbc-5ffc-4e4c-bc31-6718a89c2740", "sighting--e5879486-a53f-470e-89a8-7c314f44f3fc", "sighting--467c256a-c906-4761-b231-3cbbe77cf4ed", "sighting--f0ca7f9a-c5f7-4083-b9d5-c08fd54388aa", "sighting--81e5bdc3-0ea6-4b74-920d-4b18686c43b6", "sighting--6e67b824-a6da-40d6-b81d-fae4607990d7", "sighting--6579845d-0bfa-45aa-93d5-e230e580163a", "sighting--109199a3-c802-462f-ac2d-7dec88721fd0", "sighting--3c08b40e-a0ca-4a88-aa0a-30011e7821cb", "sighting--f618af8e-192e-4a02-b747-fb53a6b2fc45", "sighting--3b0a4ee1-5bc6-475a-a16a-cb530e857ce4", "sighting--583114f3-d7f3-4b81-87a0-faa5e203f6bb", "sighting--04d133e2-1639-4d41-acb4-7ebd3a7a403a", "sighting--9e11e6d4-58cd-4ba5-99d4-2d4a1d053ff5", "sighting--9cf44af7-9dff-4020-a800-cfa46a19f3a9", "sighting--050c7d1d-5783-4d3e-9727-1a6684976653", "sighting--3f30abff-bd6d-448a-93d0-cf6f24c1b521", "sighting--db0856fd-3aa6-49bc-8fa3-471efdeb6992", "sighting--a00259d1-2f1d-4e09-9891-815e7a0e5c9f", "sighting--4fc07c21-f87e-4c7b-8653-1a54abeea68e", "sighting--c3a9c913-d236-483d-acb8-b2b1fe6b2d49", "sighting--93b20237-6832-4fc3-93b6-c38c9f696eed", "sighting--357cda0b-16e8-4457-9265-b4c7c9d8409e", "sighting--a0d1977f-247c-4fb7-be45-5d74c29d155e", "sighting--625a63dd-d899-49e8-bd87-b0a021d49f25", "sighting--d24f7ceb-b9d6-4b47-aef5-7a05466749aa", "sighting--14fb1bd6-57e8-4b38-9ce0-e9e4d19d216a", "sighting--cd26f1f7-d64b-4cf4-b897-7194b07059c1", "sighting--e5d099b6-ad57-43de-8901-ee9734b6c9fc", "sighting--def98961-d756-4a68-9d81-016dd52b693f", "sighting--35e6196a-dca2-4095-9b00-5fd0ea0e5cfc", "sighting--5cd9589f-ebbe-4496-88ea-fae7dcc9afc3", "sighting--48871197-f9ab-4191-869b-871e35a74de7", "sighting--284e80fe-f811-4229-ae16-c56658166300", "sighting--83fdfe51-d047-4a94-aaf6-69da1cbe882b", "sighting--c6826ac8-24a2-42a5-a6d8-bcfcd1e5dd5b", "sighting--05a7b764-d510-4b15-88b7-4a06ee985a51", "sighting--f3639690-44e3-44fe-bc3e-4ef163b77c4b", "sighting--4716423d-ca81-41f4-b092-6c045569cc69", "sighting--11b60687-101c-4705-a712-e5a4f5d92e81", "sighting--45a8e398-761d-4645-a89e-2ca60e3cb4e3", "sighting--c5feccd1-cf5a-4f2c-8511-cbafe6a610a1", "sighting--c944677d-1eec-4d8e-a85b-dd29bc4d6300", "sighting--2a43b68f-2d5b-417e-b82a-df8599694fb5", "sighting--4a6cfab3-4e51-40f9-9fd2-a815e6b9ee74", "sighting--682b2387-bfc5-41ea-afb2-cb2f825b89dc", "sighting--6fc9d4b8-17e3-4cb2-bee6-e345420769e8", "sighting--8f403744-be48-44b9-bc09-938132501081", "sighting--56a6206e-740c-4e0e-865c-f53fb82984c7", "sighting--05f7ce08-2920-472e-b0bd-c12263727c78", "sighting--1e4aab45-eac3-4ccd-abe6-81bcfa9edb61", "sighting--42e845e3-27f7-4820-b388-7efe4ab2b711", "sighting--f17f5aac-2916-41fb-918a-c5091c05bd7e", "sighting--44cb9d7f-ca3e-4a59-957c-d69a246bdf76", "sighting--294f030e-0258-4ece-bcf9-5821479a8459", "sighting--a6effbb2-eb48-4476-8359-e0fb891c51ad", "sighting--619bfbe8-074c-45e7-a6b7-0cf474817387", "sighting--5216e6c4-a003-49b2-8bc8-1a62784de559", "sighting--48394a3f-62c4-4c96-9143-1b6611187ee4", "sighting--bbf3ec8a-892f-4757-b3df-d8ab16345a37", "sighting--6956f2a5-f319-4f36-89d6-8b917f311bf7", "sighting--4a0a800e-dff6-4f4f-a320-982606c95f8b", "sighting--ee788397-7539-46af-856d-62ed0d6c0a45", "sighting--d00e5e2d-1419-4edb-8fbc-117dbbaefc1f", "sighting--789241ce-b357-4453-a086-ab6f04bfd0ff", "sighting--367e0cc0-a6aa-4c18-b22f-a966ed949db5", "sighting--f657ac9d-28d0-45ee-85a2-6baaaf2a6714", "sighting--9ca05f69-a8b7-40e7-bc43-da76ea87291a", "sighting--d34fdac9-4d4a-4ade-bfe6-1cdef454ef89", "sighting--0e29c6e4-4ace-4672-a0ad-7c3da316f6da", "sighting--9bd15b0d-7ba9-4e56-8052-9ee02c56ee1e", "sighting--71631776-81a1-42c8-8350-9578477205cc", "sighting--cc098295-7b4f-41ec-b148-565dcb18a64f", "sighting--3e94a504-8fc6-4745-aad7-a09b4a656191", "sighting--a8cd1a11-1ab1-4741-aa81-a86830d2110a", "sighting--df041f86-e573-4ae7-adec-1eec8d0f3fe0", "sighting--9efc036c-fea4-41db-9847-5ff0895df157", "sighting--653aa209-eadc-4aeb-85c1-bade5351a844", "sighting--e0d27324-acc0-428e-8cc7-4abbde81e097", "sighting--208424c4-a632-4ff1-aa94-b9fe5b8b16a0", "sighting--cdfa2e3d-4554-458c-af5a-0324351c3eb6", "sighting--f13f8627-dbfe-4ac8-9abb-2ed7b0e71778", "sighting--cacff581-7e61-454f-9aa9-c13c7b1393ce", "sighting--5cc6100a-1937-40e4-908a-bb1ab99e51ed", "sighting--96c62c8a-9d4a-41b6-8c85-3574b97ebb08", "sighting--6ab23c7f-cd99-48e2-9b78-c81116609f0a", "sighting--26c6b448-d406-45b3-bd84-2108af5cdcce", "sighting--8b49c9ac-6e51-4a5e-a19c-8c3375a143fd", "sighting--05774af0-918f-402a-9a6e-99c422f5fc2d", "sighting--1375a397-0af9-4785-968d-da600fe07a33", "sighting--00fdc3a0-80aa-4e16-9c7f-e3704ad6f57f", "sighting--cf6690a3-ee93-4288-8104-66a01b6e110c", "sighting--6f1ba537-865c-4e66-a39d-c88d8bf5eb95", "sighting--ef0351ec-f915-4716-8d88-d633a56808b5", "sighting--6751f812-1124-48ba-b2f6-8388c2ad1bac", "sighting--201c0a4a-67f6-4c05-a919-90fe2be929da", "sighting--e5c73982-95df-49f5-a1c5-c963738eaf04", "sighting--c5e8bf30-52c7-489b-aec7-0c1847564110", "sighting--c40d7104-ddfb-4ecd-91f1-038b02a25253", "sighting--7965df05-d98e-4c18-b33c-141608e6ff56", "sighting--2b38328e-01a4-41a7-bf3e-e3a8c1043ccf", "sighting--f7ef77cf-552b-456c-a9fd-f5557a95340b", "sighting--54e5235d-12f3-4ff5-bc72-9788c3d6fdd2", "sighting--3f047328-c261-4c77-abc5-40a6b2165558", "sighting--ce6107f5-289d-4d67-a63a-6e2038c94165", "sighting--bb07589c-657c-470e-b1d6-7e24f7011a16", "sighting--386066e1-9044-44ee-bb64-a2e29567d7f2", "sighting--b1fb5396-e8ec-4c9f-9f45-2d036665e4f4", "sighting--50c7d2d9-7ccb-41cd-a742-3a991429b40b", "sighting--248bca40-36f8-489f-8917-381beb15ed29", "sighting--0d55d3f8-fb79-4e40-b34e-a67ec2d7323e", "sighting--2a641c26-e44f-4a5b-9a62-b856d4b2abcb", "sighting--bb30b641-2d59-4dd0-a7a4-dbd2054bda24", "sighting--2b96e592-86b3-4b29-b925-8877bee32888", "sighting--dec4dfff-5279-42da-91bb-7429d66b638a", "sighting--1856a9d8-5f22-45ed-90e6-209e9bcc706b", "sighting--1404ee51-1bee-41e6-9316-d87da6a7784c", "sighting--7bb9d8a5-5e01-4d8e-a0c3-e8af63548279", "sighting--f51eb31b-643e-4975-a67c-44347f9e89e9", "sighting--b30647ef-5d93-475f-9894-e8b1fff1c950", "sighting--43c13838-7b92-449d-8010-0202859ec904", "sighting--3b3ad2e2-a2fd-4e92-a47b-a725f51ca601", "sighting--9217ee60-f81a-4b39-8e0d-bd57c14432ef", "sighting--8909e247-4cee-4784-9b3c-0e6b21ef3876", "sighting--d2f3b7f1-e762-476e-a11e-1570409f0cf9", "sighting--c9680835-10dd-47b0-ac29-53f9529763b8", "sighting--c8df4563-3455-4c04-8839-7f6826342866", "sighting--c89f544a-df7b-49a2-93ca-9abd54073b64", "sighting--f4f5ba2e-1edf-45d2-9f64-17dc8f8d1e1f", "sighting--d6955b85-6305-46a1-a8d4-ca2d03469796", "sighting--bbce7f82-5c6a-4abd-a588-ea449cb55a09", "sighting--227ba287-a1ad-4e16-94a8-b9e8f1a59b15", "sighting--f4c5a0a5-33d5-4640-b962-6c4c704af0f5", "sighting--8aef6368-b530-4696-9aab-d2dd6863d141", "sighting--63e337a3-18f4-49a3-8a9f-7853b153f3a2", "sighting--d22fe9e9-207d-4f59-bd5b-5cd78c545476", "sighting--ea52ea0f-8856-4644-82ad-a12224201727", "sighting--a93bb3d6-3aa3-4888-972a-e8fb349b47dd", "sighting--0e300779-a353-4709-a145-fb997a7f5544", "sighting--09f25b47-6b99-4d60-9ab8-ec4d4f21949e", "sighting--1fba0d77-c750-44fb-8d1e-25b92ce3f2bd", "sighting--2226b1b3-ee2b-4795-a7a2-69f744556317", "sighting--110387af-0ab5-4599-8bc5-dc6e4f462fe8", "sighting--b8bfb71d-6c07-4971-ab5c-8c18001aa047", "sighting--e81fdc67-853a-45d7-9c4e-570b263eebed", "sighting--a222c692-61fe-415a-add2-aa0727ced591", "sighting--7879b906-3c74-4434-bd88-30e8e9f9d50a", "sighting--a118c318-b0b3-4ae7-9641-fb4b6a96cc8e", "sighting--b764c717-70b5-40cd-9ddd-b3d5190f146c", "sighting--589b559f-4e8e-44de-a0be-6996b39c6694", "sighting--37700c73-ba14-4030-b03d-1610acc3501e", "sighting--a34b7653-1177-4de7-9250-78c50e9fb6f6", "sighting--c7d1ac50-c268-4138-98f7-377ad245ea6c", "sighting--44155555-2b9b-4c88-aa09-bb08ab65ab93", "sighting--9008b567-70cb-4601-b8ff-733d79070709", "sighting--2df895ce-f80e-45c7-a171-f8e2e87607cf", "sighting--3db487b2-1d52-45f4-ad50-5faf474277c5", "sighting--5e450f90-b689-407f-8a06-6f41aa405d7e", "sighting--a10fc665-01d9-41d0-96cf-830e98837024", "sighting--7afa2215-7a72-447a-8cff-5d9647932c14", "sighting--942b89f9-a672-42f6-b7a7-b2a27cc494c0", "sighting--66bb9f8b-1ec5-4c78-918f-399700b61677", "sighting--1f58a889-a450-472b-b787-729866e83b35", "sighting--64932e2a-8d08-4096-b1d9-c0159ee223c8", "sighting--a9154981-d8e6-4dd1-8fc7-06d239911d7b", "sighting--a7142f96-2f92-456a-9a6a-16cba57aa9aa", "sighting--1a001af2-b51d-4ed8-9be4-459b920275e4", "sighting--19144e38-e6ba-4fab-bc4b-51aadb6b37ae", "sighting--bb8c8142-fdf5-408d-8a93-f0efa5de7d09", "sighting--12d3945e-15fa-41bf-9bf7-f01b07502b75", "sighting--9dd8ec91-0fb1-4bef-b260-4b3136bb3240", "sighting--87ed6c6c-1018-4b1d-9ae1-48d07dc85369", "sighting--a16ddc45-8ae5-47b6-b454-02a03c95c3ad", "sighting--a44cf8ea-ab88-4067-88c2-43895da5fa7d", "sighting--6de6d74b-6145-40a9-affd-898b038bb157", "sighting--6eef1eb9-1225-4d75-9f09-4b0cc010749b", "sighting--e3e6a5f9-9607-4830-894c-3695abf8b7d7", "sighting--dead6496-1498-4ad2-9f18-a39b539820a5", "sighting--cc2f450a-f190-499d-80ad-2266d7b57d94", "sighting--8afa9065-3e95-481b-9424-1b7fe780ec94", "sighting--8382b455-8be7-4d79-9944-e2e9f828c764", "sighting--6046fa52-af88-4129-a344-e0ab220cae40", "sighting--b583dbff-445f-4334-8c94-875e9c325ea5", "sighting--62efb354-e399-484a-af72-f88c84f1d6ec", "sighting--14d5e496-3b9c-4b17-9aee-11f81e6570f9", "sighting--6a0f14b1-d290-47e9-b389-d215da5d5fb2", "sighting--61ee825b-92ae-4e0e-bf32-728737f3e7fe", "sighting--52d64f44-6f8a-4258-b529-b79383226fb7", "sighting--a60d6dbc-0505-4f1b-9cfb-fbc2a5b4b5c3", "sighting--755821e9-01b9-456e-94c0-1fc9335bcb3c", "sighting--7164d560-01c0-4f7a-a4f4-7964b96ec48b", "sighting--92bcbb9a-e846-4929-b6a5-c13c927396ef", "sighting--9febdcd6-54e7-4601-b5f4-c87065727d24", "sighting--cbe58b5f-2bdd-47e1-bd8e-3b630440eaf3", "sighting--204fb685-bd19-4457-81b7-5b7fe6148c39", "sighting--e7141ce5-a8c7-4b81-bd84-e76db143c105", "sighting--65d36f20-bd2f-4fd2-868b-1bc17fe7b137", "sighting--79837550-624d-41e5-933e-ddb23defd8b1", "sighting--2b299e25-f388-4fc1-aac7-49bc4043b2e9", "sighting--2261e4ec-cbcd-4a65-8d55-0881a3df6a20", "sighting--d44c791e-41eb-4d1a-a0ea-e55dc9984e1e", "sighting--286d14eb-8e90-494a-9781-2791fe365c5a", "sighting--3bdfcbcd-1cd2-4a72-b62c-0f5d0b8d3e8a", "sighting--59ceb725-bedf-4869-8442-c55fdb4b19f8", "sighting--720e6eab-e557-4526-8313-2195f740c6de", "sighting--dcd2f191-9a91-4af3-a12d-723bb7252d74", "sighting--323a3383-4c4a-4f19-bcb2-9343ddca3038", "sighting--451cfa0b-8505-45d9-ba5c-73be82660dd8", "sighting--701bf0bb-41a7-48cb-ab28-532e73d88f6f", "sighting--e0846624-a32d-40ab-876c-2a9e8bccb1d0", "sighting--d5da6e8c-6f61-4e03-ac84-5a0560fa4fe0", "sighting--ab69cad9-02ea-420b-80d2-dae0b6ce8824", "sighting--19c58086-482f-4e00-95cf-6bf1d9e9d2ff", "sighting--0076e588-9300-47fc-bd11-7de33cf36889", "sighting--14cb3546-1d06-4662-acba-2caec801a552", "sighting--ea605a13-9e67-489b-b497-93ac28daaf56", "sighting--e0899e83-4a51-4181-9a58-3c53f2cea5ed", "sighting--6250833b-5f39-4a11-ab2b-7eda04648139", "sighting--f54f4ecd-ad81-4b43-ba3f-2e530d43f82a", "sighting--ecff5576-32d2-48bc-9ff3-b482cefc30ee", "sighting--1e6e9a68-e6ca-4710-be17-ddf1fd725db0", "sighting--872e590a-3725-4dd0-81a0-99b0aae7d1a3", "sighting--ae59e9b2-b48b-428d-88b5-d329c94770fe", "sighting--d7e6afe0-963e-4b38-9812-1f2d7a7feea6", "sighting--c461b361-f9f0-4532-a8b8-66e9716df0a3", "sighting--8b23138a-9cf3-463f-bd5c-4f1261059b43", "sighting--a4b90f6a-410e-44c0-b618-2b461b3eceee", "sighting--e62df658-cdb1-46d2-8204-ec782412cb97", "sighting--4578f6ed-87c3-45e8-bda3-adbd44c35271", "sighting--bd997aac-6dd0-4a2d-96ae-cf89a630b421", "sighting--aa3f2bdd-2664-44f1-a888-1baa59155815", "sighting--a7c3e6ba-c902-4290-b170-b7f58a695151", "sighting--1377a37d-d234-4c92-b74c-f63b1080ed12", "sighting--9be42db5-1367-43e0-9bf3-8550119f018e", "sighting--8995794f-33d3-4987-8518-cd48ff3d81e4", "sighting--def0e860-7f9b-46fd-97a7-51355a45e983", "sighting--4ac14e28-57ef-41c9-83e5-e3c56a77506c", "sighting--43d9c003-79ac-44c9-b73c-af393ffd9b7d", "sighting--ad504e29-5c71-4ac0-882f-0036e2e1f8d5", "sighting--4b33e7c6-9f91-4edb-a828-b47967736f9b", "sighting--4a8ba002-013b-4044-b6c7-19be0463379f", "sighting--8ee1b076-5f5f-460d-9837-32f78fbe146e", "sighting--cde5acb2-fed0-4913-b0f6-e36dcb9146c0", "sighting--d9365ca2-4325-433b-a06d-2e8e048b43c6", "sighting--c795d016-9414-42e7-8e8a-1d4905f1d49c", "sighting--d99f3872-b1ae-4956-b19e-86e427178dde", "sighting--b5189a44-125c-4718-9e3d-4c2c6f8e4834", "sighting--08dead3b-eb58-42cb-a17a-63667048ee16", "sighting--118d69c1-7ed5-4346-b779-e29e222723f6", "sighting--37103fa1-dc0b-4e81-93f4-cacca3a90b1d", "sighting--5640341f-b7e1-4594-8bb3-fc24068f058e", "sighting--2f6bdcf3-229f-4714-b028-48ab1cdd3ee7", "sighting--2bffcb45-4196-47fb-b6e4-51c373fac0b5", "sighting--b6d349e3-8ef1-4079-b81e-ed7a439acf30", "sighting--c726c067-94d9-4b06-b1c5-a22d001bfa3e", "sighting--b19682c1-bda0-4aa5-807a-f40f88e09a30", "sighting--e319068c-ab1d-4039-98da-358eb4825db2", "sighting--21d2f0f2-f365-47e3-93df-d88d1dcca432", "sighting--9c7c2cea-2541-4646-85a7-b398a49b90aa", "sighting--70ec68da-5965-47a8-8584-265e7429db77", "sighting--33f03f76-eb95-46b0-a415-69d7db238ebe", "sighting--4ec9e0d3-64a8-4558-88aa-fb48893372f2", "sighting--430ef46a-d789-4370-b161-730ca58c60a2", "sighting--54aa59ed-91fc-4864-af49-9ab682aa2a64", "sighting--27db08c9-49e3-4311-8cb4-911d231ee7c5", "sighting--38ccea42-62c6-4e6c-8b83-eba898f1cb9e", "sighting--00809760-3c2e-4cc9-a463-bc97b2b012d2", "sighting--ebfb5bbf-5ee4-4d16-b4d9-79e423d6ee4c", "sighting--447b069d-406a-4244-86e5-88a149539013", "sighting--f004d8ee-92e5-46cd-9352-950a29626f3e", "sighting--f389ab7b-8562-4a1c-bc8e-d809871e44d6", "sighting--6c40faa2-0018-4c32-ab47-8e753fd2ddc8", "sighting--abd47fb4-8093-417e-9f64-a9b106c29dca", "sighting--1e33cbd7-584a-4956-a54f-5d032cdf23c0", "sighting--02f99dab-f2c8-4793-8926-2b8d6517d265", "sighting--23c67f68-7534-4348-a4b0-a2c85cc56f7b", "sighting--be72e994-d986-444f-a8b2-8f12939bbdaf", "sighting--022d4521-22da-49a9-b36a-eb2c8673656f", "sighting--42ac2191-9eb4-4ef2-b2d9-4b8222972624", "sighting--c59f9824-2a0e-4c73-9a94-813172dcef01", "sighting--23e54070-3c79-4d08-8a24-0878726697a9", "sighting--4f1a9d47-b807-4b35-a993-6d90db0b1a91", "sighting--3f6f58fd-8e4f-4cab-9eb3-8137e0e0d44b", "sighting--4da42976-2f3e-4ac6-beaa-5ec46aa6fd3a", "sighting--853047bc-7b4e-4e6f-8967-d8707f41719c", "sighting--f2181877-6c29-4c04-a859-8c25ba97f33a", "sighting--f2458aa6-6781-41e9-b4da-2ef0c3c181c8", "sighting--a842a1c2-f846-4b25-876d-6c0af1729656", "sighting--cfa5b355-f15f-4588-a72c-bae724fdd8cd", "sighting--da1ef21a-d187-4373-9bb9-e346edc58e38", "sighting--dfc93051-7a47-4a52-9120-5af3356517bd", "sighting--b161aa8d-a5a2-4dec-9640-9a2539f11485", "sighting--b31ad16a-69d5-4711-85eb-c38f998604fd", "sighting--bb00181d-ebd2-4651-9ce2-f856b8bff608", "sighting--a646ab0b-36c9-4c90-8a45-9f293c8c88cc", "sighting--69648cd1-4886-461b-b85d-3f5607bfac63", "sighting--9d5a8814-e67f-4e31-b1e9-4fbb82658cc7", "sighting--78a2d5b1-c804-4e6f-97a4-6b7e19c438cd", "sighting--e604ddd1-4ac7-4a8e-b47d-ab1f950ba84a", "sighting--9449eeec-dfc2-43a9-ad1e-481a5b6cc707", "sighting--2420c211-cc1c-4c62-a6a0-6a6ab5be2a8b", "sighting--06077cc7-752b-41b9-b77c-75050b227d5d", "sighting--470055c3-170f-4cc4-9907-42a49d947271", "sighting--f94cf8d6-18ee-4176-8039-728a4d6ba967", "sighting--4fb675b4-a96b-4402-8074-9a39f94018da", "sighting--a67ffcfb-9b2e-465f-8bd8-edcaefc5e9a6", "sighting--c6031767-e856-4341-8085-dcf1bb0da9da", "sighting--5103ba4d-8769-4163-9837-268203f7fddd", "sighting--d90a6dfe-26b2-4f62-979a-9e290b844996", "sighting--bf3eaf9f-5c90-4b87-8d87-13e3057044c4", "sighting--b683083a-c28e-4d71-a0c8-d3f7e3ff07c7", "sighting--9e1ea6e8-6de5-4209-b34c-fc37f4690ba3", "sighting--67026b8d-acce-4467-a8d0-40aefd1382dd", "sighting--9fda2602-6534-4210-b1ae-6454d1fa30a5", "sighting--77b8c77a-e56b-4530-b24d-055032d82806", "sighting--be7da7a4-c3fa-4400-a4eb-6ca50184a3b7", "sighting--693fb2e5-ff70-4fcc-bbcf-25a471814044", "sighting--eb70436e-7a5d-4268-a183-ebc11d37962f", "sighting--619d986b-7202-44de-9521-0107d02a9274", "sighting--9f4cc596-e82e-47c8-91c6-fb4333bf6583", "sighting--3c0cfbd1-7851-4304-86f5-e929d7a2cff6", "sighting--6f9a32bb-54ee-493b-af7a-f0090b51068c", "sighting--3677b2b3-f610-40a8-a326-9ac549a5ec2a", "sighting--914c68d9-896a-470f-99d0-e31a7e26bb83", "sighting--1ca353fd-0ffe-440a-b239-af2a4f41438f", "sighting--1ccf9fc5-a230-4b17-997e-947f2135e15b", "sighting--86202df4-4053-4a88-9244-88e6ed48847a", "sighting--75e2063a-c15a-43eb-9745-0ddf3641a675", "sighting--eb32f133-3f8f-4024-a045-14bf7a3f667a", "sighting--3e93525a-3528-4f46-ab04-29b104040516", "sighting--7ae50ac8-a645-48a2-a3cf-f8ff4032d0ab", "sighting--8dd33ba0-d051-4121-a554-6968cd77afe6", "sighting--30421d65-9fe7-42b3-8198-08bc4e1c7396", "sighting--0b8ca4e1-48e5-414d-8b38-7edbcc77193f", "sighting--3bd99179-b612-4cd8-890d-6a11d0200baf", "sighting--dc53208b-1aba-4952-a113-5bad43c3c28f", "sighting--b25b3b61-30c6-40fd-b3e9-e8115ff405bf", "sighting--d13cadf8-dca2-44db-9530-905caf5a024b", "sighting--5e91fb10-700e-4e4a-a6b1-1b68e61d3c5a", "sighting--ac5fee66-0957-4d4d-82fa-d3e46cff300f", "sighting--e72a98e4-39b5-4321-9d2e-33de88c97cfe", "sighting--393babdb-c1f0-4583-82cf-12bcf3ae42a4", "sighting--3dbd5dc7-88d0-4fb5-9bdc-8016f589159a", "sighting--951a749e-cfc3-493c-a0f3-dd24d5beb561", "sighting--528349c2-4060-4c1e-8d5e-c37fa492e173", "sighting--eb082cec-0f58-4194-9f9b-999043a90a7e", "sighting--7e822f67-20c2-4727-87ab-1268787c80d3", "sighting--fb61a579-1075-474b-a530-32cca8663328", "sighting--b02e4f70-b17c-4082-9d1f-bf0fd9e85f3e", "sighting--28ed2076-ea7d-4950-89f2-748c2b12aee8", "sighting--884ae207-8dce-4f1f-be1f-0b7a1879cb72", "sighting--06e1b982-2c9a-4ed5-9f0d-febb6e664ce3", "sighting--7f4b826f-b22d-406d-b8a9-edfd067255b1", "sighting--f782eb02-23c7-4c04-9012-cc66bb7974dc", "sighting--a095cd9e-59d0-419d-835d-e8b32e7204ef", "sighting--31015f6c-96cb-44b6-b47e-0498713071a2", "sighting--5bccbf38-298f-4d83-8dd3-194e052bbb53", "sighting--25240386-ace5-4814-8ef1-9ca588f0edcb", "sighting--a5b41fb1-904e-497d-acc3-7e38f15f3e9c", "sighting--373933cd-11ab-4364-83b9-30761df6c11c", "sighting--114c9e76-aac9-4adb-88b3-9b26450fb04b", "sighting--1cd181fd-af2a-4e3d-a017-438f78c86b77", "sighting--6bbfc329-e795-4035-972a-ca65dc2658d2", "sighting--c88bf9c3-1464-427d-a4ab-c0460c67ce03", "sighting--4f5183cc-63cc-4c38-94d4-1f5b06b7b676", "sighting--e5f76503-5056-42a8-b238-b2f6f1389712", "sighting--5f0a89bb-9ade-4faa-9b50-fe5d985dd4e2", "sighting--9a6e902d-4264-499d-8f61-cfeb17f58a05", "sighting--0dfe21ad-cbdb-4520-9da2-81dad1738fb0", "sighting--0ab643d4-9265-48c7-bcc7-fb64d067ed76", "sighting--4d98c374-8b11-444e-9bbd-254725af6e18", "sighting--0833576d-2596-4c88-b23d-3993b127bafa", "sighting--e318f724-2311-4dc9-875b-2d498db86fd7", "sighting--bfb3ef7b-8768-4861-849d-466e68c5b1ac", "sighting--780298bc-b979-4d10-9e8a-d1c506c9e0f5", "sighting--967ccfac-d5c7-4161-b634-9db15df53731", "sighting--344ce72b-29ef-4a46-bcc0-9cee59bfb03d", "sighting--2f3de6dd-7e61-4daf-b3c8-1ea3e1eebfd0", "sighting--138b4c48-4cb6-4b0c-8df9-a3fe51c67365", "sighting--4af4de10-6d08-4c21-b20d-942e692d1b82", "sighting--215f3bad-fa7f-4957-a36c-be77c9beec54", "sighting--3ba6f4ff-ce9f-40a8-9cb7-c7ee4074643d", "sighting--ecfcfa4c-50ed-4784-a84b-3b105e745208", "sighting--e7db3d53-74bb-4fbc-8fbd-ad0e33a7f5c1", "sighting--ec3b503c-fcc5-408d-a2b4-e01481c0498e", "sighting--4ced7f84-73d4-4a2d-bb08-141f64d1578f", "sighting--94fc78d8-40ad-457f-bb13-b3bf8863215b", "sighting--98ab3c72-68d8-4429-bf27-9f35cbed2259", "sighting--db30b98d-aee9-4639-9dd3-bde58348ebd9", "sighting--2e839d55-fe79-4a5d-ad20-a800fb8ebca7", "sighting--2c409202-7a34-49b2-956d-3769a649e392", "sighting--d821f40c-e3d9-4794-93b2-c46c4599e60b", "sighting--a8d3ae1a-4b02-4318-bdf5-ae3f24be4722", "sighting--f34ba06c-517c-40f2-af88-0419623636cc", "sighting--0d7e1750-6a51-4abc-affd-fc6f42108fd7", "sighting--05e86713-6191-4373-8eda-8c9941855a01", "sighting--6090d5a1-b0eb-4e09-82d7-70a33668f9e5", "sighting--ce563aa7-dc69-40f5-938b-bc377941b915", "sighting--b3fbdf6d-6bd7-4df6-9a4b-baa0e97a0182", "sighting--d38cb75e-3597-477c-a480-cb556403f5a1", "sighting--1a416937-068f-48f1-b754-800a293b152b", "sighting--71ea3877-be4c-489e-85da-a812e3bf1af0", "sighting--299ca2af-ec2a-4c63-b3d6-53b7c11d0a3d", "sighting--72f29486-0e83-4160-9fbd-8da037fd918e", "sighting--28c46064-b45b-4c9e-a638-be467aa59c0f", "sighting--dfb9231d-038a-493f-a700-83200fbe1934", "sighting--a1e76dfe-b795-4042-a849-8a3814d302fe", "sighting--796aa026-606f-4581-8cb4-af7af37c3025", "sighting--40848498-9cf1-4c9b-8ed4-734f23d1f3d5", "sighting--a4f37f00-9f4f-4226-ab5d-886633bbae20", "sighting--bf76a17c-303c-4720-9142-78cfa0a2db63", "sighting--1d7c86e2-2947-41b4-a3ee-cf326c397340", "sighting--159f9a3f-079a-493b-a662-381a173edcfa", "sighting--ef3e9450-f456-4b4f-823e-607d91921406", "sighting--0c869e00-79cc-4030-a97e-7da8c616096c", "sighting--c5a66692-6d96-4b03-83ba-0cfa70395b95", "sighting--c7445106-5fc5-4389-946b-061ea9636a79", "sighting--0351a51f-8413-4a40-a30b-5109afd19c4f", "sighting--329881ce-e38c-414a-bf46-39e706f93933", "sighting--f75935ec-bf8e-4c81-9e32-d523d3028fd6", "sighting--3758ebdf-30a6-4cae-91b2-270ba4c0a003", "sighting--b334661a-41d4-4b87-8ad4-ec1cbe5154bb", "sighting--e35f86f6-d07d-4d4c-bf4c-5891cd360d6a", "sighting--08b95f9d-2ecd-4194-aad0-466d9ec4801e", "sighting--23ac0f9f-dd16-45ee-bb12-72c5d6d32eb5", "sighting--219f013e-9c55-4f22-b994-768d2cb59761", "sighting--57956b12-bb80-4aaf-a0cc-6da970f4037e", "sighting--054ba085-054d-4578-95f6-bf237da297ea", "sighting--17b58482-f6cb-4b04-9129-71d2d8f5e888", "sighting--97c5b493-5d51-4d4b-acf8-8361a3c66ad3", "sighting--321a0c50-34f6-4325-96c4-18ec7c9f86e6", "sighting--c10454ac-2cd7-4ed8-8ae1-31fa5a5075ca", "sighting--48fc17ff-a952-47c4-ad90-ace4d254cb4b", "sighting--680bb30b-1d3d-4052-9efd-fb6bbecc3c20", "sighting--2397a898-5bf7-4407-a87d-e2176f10ca9c", "sighting--8b583fcf-3b36-42cb-af97-e2e9722c0086", "sighting--67fadf07-1974-480a-aa37-21cdeb715198", "sighting--1630a19b-9e83-4124-b2fc-1786f32890d2", "sighting--2b6b2d5f-e15d-4808-a23e-a88c9d7e5ef6", "sighting--57ad7bd2-8700-4c8c-a7dd-8aa5377f8f9f", "sighting--33e5724f-7bcc-4f94-a411-18369c211bb0", "sighting--3c36b45e-f268-4792-9bb8-cbdcca463eba", "sighting--0a030177-4779-4885-ae8b-efd05820663d", "sighting--5d4faab5-c4cf-4aca-aeb3-d6f88f7408cf", "sighting--a10fffa6-9f35-4260-b7b1-f5f5460a0106", "sighting--a2f35e80-18d2-438c-98a9-b99eabd7bd44", "sighting--eda6e714-e612-4ec5-b3f0-72940ad8879b", "sighting--f84cfa45-a783-44b4-a5e3-2ac6d01d9aa1", "sighting--3790437d-2b3a-4288-99cc-8182c8665506", "sighting--2b2a0d95-99bc-4b59-befa-dd3fe582c2e3", "sighting--c7f83c6b-898d-4a1f-b30a-c9673298e40b", "sighting--fd0da6d2-e248-479d-9814-c668e36e42c3", "sighting--b753a3eb-8b39-414a-91c2-54fde4dc9660", "sighting--e1c5c0d5-1ae9-4896-9d1d-6280713693c9", "sighting--3640ea3d-8f72-45c1-bcbc-9b88871dbb94", "sighting--512c50f2-3577-4356-814c-93075eeb10fb", "sighting--69310d23-ae27-4583-9fd5-d265f7ba82ef", "sighting--c05c3c6e-60e3-4a0c-8ded-54636b78229e", "sighting--e13cd749-72ba-42b4-a693-d23674b3d5ff", "sighting--344dfd64-3583-40db-a891-eec98fcebea6", "sighting--e3b9ac06-edf6-4af6-acab-2056761772dc", "sighting--1629ab28-37f9-4fb3-9943-214ea8dda8df", "sighting--7c1ae8fa-55b2-4a10-ae08-1287fa1f9984", "sighting--28e99568-2065-41a0-a267-980bb0bf66ca", "sighting--dba878de-b9fc-4b12-b234-a98ab6fab792", "sighting--c146ea14-8342-4ccc-9918-0d602b12c656", "sighting--6aeeff05-1a47-4aec-ba2a-19de49303592", "sighting--8bacaac0-0508-45f9-8b67-b61bc3346a2f", "sighting--802d59cd-22e9-43f9-9a7c-780edeb942ba", "sighting--1201e902-0a49-4536-ad76-5a734345e3e4", "sighting--6554efd4-f0ee-4fb8-bc66-fc2a1dd034b5", "sighting--0d17c75c-12ab-4a51-afd8-eecfdb71d326", "sighting--917fe098-bd04-4eac-8c40-8e7663bae4a9", "sighting--fad4f3a4-ac45-4aa4-8388-d756abda5d28", "sighting--a45ac0ac-c398-4076-93ff-0e8fb2516b0e", "sighting--c39fea95-acec-4494-be77-f81295c0c74e", "sighting--3bd9b9cd-6b10-44d6-ae4a-3df7ccd920f9", "sighting--baa89f18-5110-457f-a3e3-517f44bbf1ff", "sighting--5339c62b-1e80-4c96-80b9-8d15e5a38cd0", "sighting--c011c35f-e801-40c9-a3fd-b849fb3324b4", "sighting--ad805289-d734-46c1-94ab-5d3767fa0061", "sighting--cc8e1a39-4261-484c-af9f-77af1184d85b", "sighting--60261ed5-e129-4606-80d1-2c7c957fea07", "sighting--e36fa9bc-15f9-4249-bc4f-ec742ec4f77c", "sighting--026c8a89-aa50-47d0-b1c5-16dd95f54a1f", "sighting--555ec77a-d23b-4558-8574-8faf6a1e7576", "sighting--d1ce8e2b-332b-40ac-b7cb-3667733b280c", "sighting--8d2d29b4-5a8e-43b0-af02-916f6495b9c0", "sighting--9b43e862-e1bc-4b49-a02c-6627c863bf78", "sighting--0c74c184-44c0-4e1e-8408-620f7d5cff20", "sighting--379bd788-1ae5-4ae8-8ff1-e95c6ff876f0", "sighting--ebb05792-e1a2-46e8-885d-999bfb604382", "sighting--e3587d0b-6396-4ae9-ba2e-06f724ca2c71", "sighting--bfc875c7-0de0-4283-92e9-ddba819f8d91", "sighting--d116c6d6-3341-43bd-8d3c-44cd4872aa38", "sighting--8ea8403b-1d62-4fdc-a9fa-ec54815654f7", "sighting--04e6de5c-099c-4a2f-b90a-b08c631bb9f9", "sighting--1ebd0216-178f-42da-9a6b-be1aabebd8d2", "sighting--072786f3-edae-4c4c-8fa3-2577ece5ff1b", "sighting--fe78b90b-6f2c-431e-b05f-1210ac112778", "sighting--34d7d202-6d3f-4743-a0eb-cb9f895eb7ed", "sighting--586a0ed2-3b8f-4336-aef7-dc52e59f2f97", "sighting--55ebe0b4-21a4-4276-b30f-a572f48a48a9", "sighting--fdce2f75-61a1-44dd-83e2-fe4fce2d03ea", "sighting--df5bc1a1-eeb4-4d8d-8544-f591cd99058f", "sighting--8c79b223-ff3f-4948-bc5c-c85eb44104c4", "sighting--bfd77a94-d321-416a-880a-863682e3c29b", "sighting--2b445e08-0f42-4bbb-86f7-517a1f74758f", "sighting--73412216-f98d-42a5-a786-2f944ec5fabf", "sighting--4a2ac86b-6710-41d4-b8e5-c1170ab34b3e", "sighting--a39a9d0f-cb23-4237-bb15-cc677438e10c", "sighting--9700b07d-d451-4d6e-932d-5c13c7f81457", "sighting--80b9a24c-0ab4-41b1-ae03-9a87f8696503", "sighting--3f9d38dd-7d17-4cb1-a76d-ad95c657fcb2", "sighting--cf08f2b4-f256-44ea-9c16-3136e0e6aad1", "sighting--09a45f30-a070-47fb-aa22-11f89cee9ef9", "sighting--70f5b636-519a-4ebf-bc23-1cc2a812e3e1", "sighting--3cbaed58-4f63-452f-86fe-4327113178c8", "sighting--94339510-5a55-4963-91e3-4a2d734a771c", "sighting--fa7b7ac8-9492-43c9-88dd-4d2630383421", "sighting--3da8764f-f367-48de-8446-b3bbb8f5bb5a", "sighting--52748d74-b99a-4802-8225-d44a14c3ba22", "sighting--a643372b-70bb-4575-8a27-37fe66275a85", "sighting--8ba2d456-226a-4f2e-a900-ecf462b8bbf1", "sighting--6d124450-813c-4588-a018-1d16f4a2afb0", "sighting--3ad0fa23-d831-4762-9de1-0295ab2f5616", "sighting--4e7eabcd-92f3-410c-8b91-799a9a49fc52", "sighting--a38413de-9b8d-4fe8-9fe9-dbe904657092", "sighting--0e52e27e-335e-4ee4-800d-dfe159598f2c", "sighting--33650466-1fd4-4cd3-89cc-eaf622928265", "sighting--ec6fc20a-4b34-4268-82c5-558b28863d73", "sighting--9470441a-c9be-4c54-906f-8fba3fde7c19", "sighting--d94db18d-9236-466f-86bc-51e1f9cdc2a9", "sighting--8fa47b55-9dc8-4451-81cb-16f70fe4b65a", "sighting--897d9dd3-f969-420b-a258-8a0c903e3d28", "sighting--7acfc651-4230-4d9f-a0ce-7fa4bb8c502e", "sighting--8daf813d-6028-485d-a34b-4ba68675a7b8", "sighting--aba6b6a6-90ff-40d0-bd2d-41191137ccc0", "sighting--1ce98f17-d1cc-4973-98f6-089ef00d95fe", "sighting--6146cbdb-da64-4fd8-880c-4fb1df0769bb", "sighting--13deb7a1-0206-47f8-9fa0-ec3fba7f18df", "sighting--17541e69-72ba-41f4-9e61-603df95f15ca", "sighting--b65f2489-8569-431e-95e9-5932aaf942f0", "sighting--cc9aabd4-e66f-4fc2-a41b-c707c6dc5ddf", "sighting--446aa212-fb38-4777-bc20-f2ad7815ef4a", "sighting--2d5c2bda-1baa-4e40-a840-33a2707f301a", "sighting--da68e0fc-a986-4efb-af12-c931b94239a6", "sighting--909e7ad9-3be8-4bad-bab5-259cc81e6880", "sighting--05ac619c-2a75-4669-b0ec-056d06425624", "sighting--8c5e3363-688a-4f05-92e1-2d6dc726cefd", "sighting--30483a35-d3e9-4a97-b0f2-de1ce09b1a41", "sighting--6f1d506e-d362-48bf-8eb9-7162835b7939", "sighting--ab74a6b5-985f-4cad-906b-afee5f1053dd", "sighting--d84eb149-dcc4-4f8b-8e48-d460817306e8", "sighting--9f5db19a-07d8-4ef3-88f0-7327955f6234", "sighting--b9df71e9-0943-4f73-a632-8cd50bc59136", "sighting--48f24598-71fc-4faa-b88e-0194fbe5ba88", "sighting--9b18e603-6aec-4554-8a15-d15b982d349f", "sighting--15ec0411-7fc9-46fd-9a51-71783c818eff", "sighting--70121b7a-d9ba-4d00-966f-3348336e4bea", "sighting--f0a5cde6-41e1-4fea-b33a-e693bf8a8951", "sighting--f00fc133-01de-4bab-b410-e7f3ed53d5af", "sighting--f90fb1d7-5807-4603-b237-d6073296211c", "sighting--131895b3-d054-492c-b5d3-678dc58a2c7c", "sighting--3959376d-2dcd-4f60-a015-54569d33250d", "sighting--2aa7123f-2ad4-4e3b-bdda-2d1db1722503", "sighting--1542d946-79d4-4ee8-a325-c12579f7b3cf", "sighting--e813d0f8-a42e-49e7-8ebd-6d768d370043", "sighting--df39c14a-a852-41c2-9db0-3cf8fe748854", "sighting--10868c18-f86b-455d-a4a5-29112340af1c", "sighting--74c46820-9bbe-4cfd-9650-0670060ee38f", "sighting--0e9b7a07-39f7-4347-a274-66cbdab23692", "sighting--11a29873-f4f9-4d28-8456-d4c267285c57", "sighting--e94189c9-42ff-4485-9ba9-a420de370874", "sighting--a36257fa-345f-4ad1-b035-36bd7922773a", "sighting--508cde25-2743-40d2-b35a-a5948c011185", "sighting--e6b4c44b-f55c-43cc-99fc-a669e95a7713", "sighting--15a8774b-baea-41f7-8101-3ba9ce5d18d7", "sighting--faecbba2-c099-4d8f-bb96-e7e423211c4e", "sighting--1875da3a-24e3-4a67-af8d-bc3bca6534ae", "sighting--c9f944b7-dd54-47be-aaef-1aecf45d448d", "sighting--c473000d-c06c-40aa-8f72-b5ad20b88738", "sighting--6aceb6d7-2567-4d88-85ae-4974dd20084f", "sighting--42c62372-7c12-4256-93d0-aca43cebd601", "sighting--b3663efd-f499-4ac8-96ef-d9c819a38c41", "sighting--31b58f4a-c4ee-491b-8a83-7e0df040c394", "sighting--518b794c-ac74-41d6-a643-79a28dde2dbd", "sighting--5a3d222f-fe48-4066-aac4-2ab86b700c80", "sighting--b24c0619-3910-4854-ba00-965f4815403d", "sighting--800af61d-e4d3-45cd-b226-555a2bc99764", "sighting--b48e96c7-348d-4b7c-9f5b-f5868c9507b2", "sighting--deac1a70-fa98-4ea9-a525-0733156c49f0", "sighting--f2078483-4f83-4f89-a865-31515ada50ff", "sighting--4cf88e23-56c5-406a-a5f1-37fde7aa6fb4", "sighting--f92f853c-0ab1-4e6c-8393-ea9d327dcdc9", "sighting--3f2a6989-e83c-44d3-9b1a-a5c190d09dcd", "sighting--3400e5c1-43ae-4776-9571-e722190f560c", "sighting--9febda43-e43d-42e3-a77c-9677af621e09", "sighting--778e7825-a54c-4664-b4ea-c6ed499b8918", "sighting--c28d281c-acf9-40f2-98b7-c125ccdcd79a", "sighting--5215e135-d142-4dc4-a0a8-2d079a3bf732", "sighting--d3dc2119-49e7-41cd-a9b1-59d765c28a56", "sighting--ab4e650c-08b4-4585-91e7-428cc9a1640b", "sighting--76f65cef-96c4-4639-9825-42ccfb269777", "sighting--87db56fc-157a-435e-b12d-405a4eb48026", "sighting--d658036c-eebb-4de9-ad83-3ffde7371966", "sighting--2a3568ad-d5d5-4949-a134-ae0c42e81761", "sighting--7461a3d5-75d2-4cbe-8340-4c9a7423ca10", "sighting--e8764f94-737c-46a6-b21b-6f1fbae194c1", "sighting--08dbecbd-14ad-4da3-b71c-8e13d2881d70", "sighting--0a94fb68-3e6a-4f0a-af04-e3dcc5b72f29", "sighting--436c6f52-bb46-4fa4-bf23-25339ea07ed2", "sighting--31faae64-d3bb-44f9-80b6-ec0c3f0cc39f", "sighting--3afee5f1-89a6-4c59-8c9c-b78802e98784", "sighting--080bb4e8-ac6b-400e-875a-8ead4318c6e5", "sighting--c09b86c2-899e-49a3-a59d-21a34b3b7e97", "sighting--ad960ba6-c5ba-4671-b64e-326f36ffdebc", "sighting--a6a38235-dd35-4025-8b53-b007c7051ffb", "sighting--d59205e0-241d-481e-9e0d-e4b53886d6f9", "sighting--dcdd82bf-90c4-4801-9079-fac1d6257c81", "sighting--0754f146-241a-4281-8a9d-8bba965543d7", "sighting--e27a305b-fdb9-4c5d-abc9-646a3370902a", "sighting--476d032a-2d9d-461e-875d-c0d27d77d479", "sighting--7c818a5e-31ef-4b3b-965e-38cc52a4d4bd", "sighting--1593953c-f2e2-4b42-b616-cd11b0ab9e98", "sighting--18231c65-351a-4828-847c-832ce25ff656", "sighting--20c8b8ae-9366-4f7c-889e-8f54692569bf", "sighting--5980373a-c2c9-409f-bf75-654acc503ce8", "sighting--a1764f97-f5b1-4492-86ae-82b135a074c3", "sighting--0ff916ce-bf35-41b3-b04e-0d2578ffbbb0", "sighting--8bba57e6-9572-42df-a867-6ffe4d6e3b44", "sighting--4eb9117a-03e9-4913-a3f1-f853fc45d721", "sighting--a71a8fb5-c480-4870-b1b0-25470d8fb815", "sighting--34762058-9daa-4f45-a339-3ea7ad437a3b", "sighting--7122fd8a-cc33-4176-af0a-a7f3afc11ed0", "sighting--81984fa4-af08-4c66-8878-e4859f900041", "sighting--4fa42e95-e26e-42f6-afe6-746da5428831", "sighting--6bd16726-d2b5-40b9-9a91-22adb0d61889", "sighting--a9240588-183d-4926-92fb-c675538387ad", "sighting--91fc4eb5-8b04-4724-b430-6cb62f1e9a0e", "sighting--42f87ec9-22a1-4f09-8039-8e99ce521999", "sighting--4f1310ec-174e-4a4c-ab53-602c080a6b8f", "sighting--325fa97b-49a1-4866-b0d4-ac79892e1c68", "sighting--6d666e28-34a3-481a-a55a-c650541f74ef", "sighting--6e18e16f-b354-43e0-9f10-af59117fc7a4", "sighting--9cd7dea0-8eb7-4089-bee9-012292334410", "sighting--1c14167e-7ca6-4a26-8ac5-9be315347a08", "sighting--97490cc5-1edc-4782-8491-b1db099b30f4", "sighting--8e047cb5-e5ea-4677-8d6d-7e41a24512f1", "sighting--ba6fe315-5c14-426b-beca-4e630a796ea6", "sighting--4e69bfb8-5d9d-4de8-91e7-d7f4c5a29e44", "sighting--1a2a390c-862b-4171-9656-fb248faa3050", "sighting--bf90feb7-b6d3-4f15-a99c-9217c5aea690", "sighting--44276efe-5915-43da-a03d-18513122ba4b", "sighting--11eadf55-10fc-4bb2-8568-251b672bea11", "sighting--aad66c05-da6b-4aa5-a3e1-fa3b8ac1d060", "sighting--145b7bde-0ba1-4dd4-a243-ee14fb3f7e42", "sighting--1038cb0e-ee34-4fc7-9311-a8a15f0224e2", "sighting--7e73b0e6-29a6-44e4-af93-564b41d1502b", "sighting--4d99f2bd-223f-4ed0-be87-aa962b219dec", "sighting--e6df33ff-bf99-41ac-b558-44b53abc53ed", "sighting--32c556ef-7a71-4048-9d91-be68094006cf", "sighting--8f7bccdf-3e69-4015-88e3-c57b7d06379d", "sighting--aef7ac13-1cc3-42b3-abb8-093f64d9bd13", "sighting--b3b212c9-ba55-443a-a538-7671cedd8b39", "sighting--130c18e5-d0e0-4cb0-b190-fd57d990ed17", "sighting--3ee4263e-d68f-4645-88ca-48e34a921082", "sighting--b4f04330-920e-4779-b093-9772b63800bb", "sighting--39b7ea56-2e1d-40f9-8eb3-73b2d155d94c", "sighting--9d90c867-69db-4a66-9f2d-f7981d8c9a20", "sighting--73d9e622-455f-4910-9396-b00cc1661899", "sighting--f544f833-f1d0-42d3-9989-44102bbe7bba", "sighting--d12fe822-b16f-4651-bbd1-ce3f152aa4bd", "sighting--860f0c49-2c7a-4044-9d04-19dc5de659e5", "sighting--1be8a26e-a788-43b3-9eed-19b0bec114a0", "sighting--47b0c845-cc62-462a-8b3d-8c9b4342bb20", "sighting--1a66e771-9586-4fa7-8889-72a044a8a102", "sighting--1e54f5b9-f13b-4e1c-bf23-f688cdefa907", "sighting--b4d8efe9-4d2d-433a-81bb-5671cbbdcc1f", "sighting--33b61410-6231-462e-a640-a6553b008dc1", "sighting--0c43acf9-ee45-4636-b6aa-2b2a166b94b2", "sighting--6064cca9-78fb-49e4-a724-881bee28e33c", "sighting--34e6948f-1b8a-4d29-8630-7315ba5d1f65", "sighting--880f228e-87f3-458f-b661-b87cce32f64f", "sighting--4518801a-3e83-4da6-bdcc-2cf8714c80b7", "sighting--408fb3d9-0e04-4be2-8239-e0ba616d8e98", "sighting--43919cc5-bae8-4ff9-9fe4-b1fd281145a3", "sighting--1660c784-6064-414d-b747-21ab850a77c8", "sighting--0a00f72d-1b97-47b9-9bf4-430b80361a33", "sighting--674d7fad-1f98-4fe0-9eef-5917c2be676d", "sighting--1852ee6e-be98-4f93-a13c-5ed46c593a80", "sighting--af293c06-97b2-4237-a1d1-b9a9bdad8f5c", "sighting--5784b073-5804-4d09-a7fd-b19e6cf273c5", "sighting--6e1a3bee-11a6-41db-925e-0d6edede7f1d", "sighting--375240e6-251e-4398-9c62-346351dd4728", "sighting--5ad5a87f-faa1-47b7-8fa7-207ea3c9bfbe", "sighting--2e170e8e-df29-4211-8a12-b207431fa055", "sighting--556f601d-b552-4995-abd3-5368e53ab2db", "sighting--75d84b79-d154-4967-ada1-770ac9a38730", "sighting--5396f30a-df13-43d6-8333-85ce781ab0f9", "sighting--92b45a1a-9f4e-4172-a8f4-eb9822a79e7a", "sighting--715f6ecb-2c8d-443e-bd2b-6f69c90924a0", "sighting--bb7e4873-2569-451d-9ec4-01c251aa75d8", "sighting--04084648-49aa-4daf-8dac-490ea8a48b66", "sighting--17928fc3-8d75-4100-af61-9378ddcecd90", "sighting--97932916-637f-4170-8ed0-8af756a8e2c9", "sighting--9ddea461-9717-44d7-8532-31ca70a8a322", "sighting--712a846d-cb0e-41c7-9037-290dcda1f41e", "sighting--19497e51-525d-466b-bf6b-650f2a9b510e", "sighting--26abd193-c7a8-47cf-b6d9-dbdef4752c03", "sighting--9cab29e8-c9f5-409b-8480-72cdcf30b6e0", "sighting--8fa2e1dd-058d-4a90-9638-4ab892d6194a", "sighting--ff576906-6c6d-45e5-8474-54d5c1353e14", "sighting--a4f69d57-5873-48d3-b0fe-f752ec03b198", "sighting--329aa607-7bfd-4c75-851f-e34844e13c94", "sighting--ea0fde0d-9eab-4e91-99b8-dac15e13e9be", "sighting--538f7f81-1c6b-4aa5-9ce0-25bd3a94beaa", "sighting--eeb33782-5888-4be6-9206-c79e70328a74", "sighting--6a018cd3-963b-4bc6-a9ab-134b7cdd8c96", "sighting--d23f3323-9ad6-4a5f-b0c7-da18acf91f45", "sighting--43a1651a-1fcc-4469-9013-c9ce973875a5", "sighting--9a5f86f2-072f-4489-bf75-32b22a979dae", "sighting--813ae3d7-48f2-4101-8bb9-962f079860f1", "sighting--53038332-8c0d-4f54-9bc6-7d1bbb7faed0", "sighting--3003dc07-c105-41d1-b7ea-96d5f4d84588", "sighting--95884d90-b18f-4d48-abb0-3dd859735720", "sighting--3e4df8e4-0763-4484-ac29-674a2ec2a5a5", "sighting--2200b013-a3d4-4121-9939-20e0ca84731d", "sighting--ec4c80d0-09c4-48ef-8fe1-9af39763e52b", "sighting--7b81d261-19ba-414e-9a61-9023a5a499c2", "sighting--84de71a1-6084-4628-8d29-edd560f28d8d", "sighting--ea69cda2-35c9-49e9-8285-50b1a773dbc5", "sighting--e60d635b-728e-42fa-a07d-66b82a1c54f7", "sighting--cd15592c-3a1e-45eb-803b-755c98bf076a", "sighting--14fdb803-2536-47b6-a8eb-1efe59e78122", "sighting--f07ef94b-ff1c-4564-bc0e-96859ecae116", "sighting--fda26fa9-ef0e-4ca6-9751-7a2c9a08be9d", "sighting--0312ea0e-5e0d-4ee1-a92d-fa3944535cd5", "sighting--f53fc1be-a5e0-409f-87f3-14a79f1ba5ae", "sighting--5f407e18-6534-4fb8-9f4b-4c1691634a2b", "sighting--b2e348ac-536e-43b9-b081-c0d8b06e88ee", "sighting--0f9de885-08eb-4325-bb3f-e1c0e43b62e5", "sighting--8f8f1b4e-461e-49a8-a128-2404d12455eb", "sighting--8e5e2011-5fdc-4bed-b375-0ac76b7702e4", "sighting--60a37e69-2c5f-4972-a63c-8b90c339e3d9", "sighting--087150e9-a995-4961-a397-fe8329d72141", "sighting--cb22df12-ac06-4555-84e3-0be072a14d93", "sighting--a45096d2-37f4-4e73-9c65-a423ac6245ff", "sighting--09e8254f-975d-467d-b5c0-cc63e6587330", "sighting--d4fd5ad3-e7c4-4fab-89d8-f8eb45f6ed84", "sighting--dbb2f6f8-7e56-43b3-8dec-5c149d85d8c3", "sighting--39b31b59-3cec-47bc-a623-0d8633331f80", "sighting--9e7113b2-d4c7-4222-b298-d68020235aff", "sighting--4b692966-0a11-4efa-83d8-a8951ece22b4", "sighting--27d22654-c35c-4830-8d8b-601416a63df9", "sighting--b2036b05-0a4a-439e-9cc8-bba01b890382", "sighting--692d4e5e-8ddc-4ba4-b573-9b03da063ad0", "sighting--b35688e8-d33b-45c1-8860-31cfe445b9c3", "sighting--21c9288f-6613-4c05-8ebd-4ce68dc7fc18", "sighting--8278b8bd-5a51-4bf1-b619-ec5fb51e9566", "sighting--daae95d0-15bd-4706-94ed-49d5ef30d723", "sighting--f0888d14-d9e7-42fb-be6c-4d19ecc7c7c4", "sighting--247784eb-b970-45bc-9fa8-341d135e7f5f", "sighting--bdb8a211-50aa-4869-98c0-eadc1d47cb73", "sighting--6cc1b997-3d4a-4141-8087-481ab34c7fb9", "sighting--abc18df7-9f16-4b33-98aa-9e26a3a89ede", "sighting--bec03860-8f93-440c-9aab-766ddd6bf062", "sighting--7c32442f-ba84-442b-a1f5-28ff10a854ab", "sighting--30a607dc-f6c4-474d-8a18-a146be3fe159", "sighting--967136b3-0699-4537-b9a9-a04fe6d1b34e", "sighting--4e305045-c494-4db9-8921-0c8a9e3a8a4c", "sighting--f251f549-6d9b-461a-9dd7-a170ca80c64a", "sighting--56f3c063-c50e-494a-9a73-7754c28f0139", "sighting--86e14528-ed13-4baa-b807-4af83e6c27dc", "sighting--862a52df-46e0-48c0-9217-5d822b31a885", "sighting--46d52029-e620-4a0f-9651-a9bbb9575626", "sighting--1992bef0-8bbe-4d97-ac7c-f6cea004146a", "sighting--dfdb497d-029a-402a-9d53-c7886623c2ce", "sighting--791f9056-2ec2-4483-9206-7dfeab630a80", "sighting--8aa5de23-6735-4806-9d6d-759723b1722e", "sighting--cd0a7fbe-a049-4c27-83a2-c23b72d825d8", "sighting--b5773ef1-8d12-4730-8800-7c4f9fbfb9ad", "sighting--a6efe30f-fa28-4f17-961f-149897f8caf9", "sighting--acfe4119-6a34-4601-b6bc-3ee745343d69", "sighting--e69290ed-dac1-468f-b42a-0677b13ec269", "sighting--2b2c3f5f-e4b7-41b3-bb79-912b9f72da1c", "sighting--1e87cb31-4a7f-4567-bbb2-fc4c68e95956", "sighting--693f6926-9af4-48a3-afdf-6d1708231a5c", "sighting--74aab530-1d90-4d72-a830-1058c13d1379", "sighting--17bf0a3a-67ea-4398-9a9d-0ed39a9da6c0", "sighting--bec95bfd-3ad7-4932-aa19-c2cc19fa3225", "sighting--5f7d991e-fe6a-4037-af70-81e97cf267da", "sighting--206dfa81-eb31-40a2-bb1f-c6aba6f347d7", "sighting--25d2e4e8-f105-45fc-bf22-0a86e1c4c6a5", "sighting--db8edb08-bad3-473a-9ddc-9c270d022d0e", "sighting--a4cd79ab-68a2-4842-a786-666faad83386", "sighting--de5a304e-d7d9-41b3-bf4e-0047d723b445", "sighting--c5811102-7192-4bdd-b27b-21ec8c636f78", "sighting--568b6798-e76f-4669-812d-3fc61a1cce9d", "sighting--2d176a85-74f8-4da3-a4a9-39d8fabaf1ca", "sighting--22b6339d-d6be-4c92-9469-b4dd9bd0f170", "sighting--36d8e008-ea9d-413e-944c-975dd591a319", "sighting--a0862949-6f11-46d7-b045-597b71dfda1a", "sighting--4fb6e81e-f993-4fb0-a65a-b08a17d7d834", "sighting--d11c2d65-3215-45c5-b6ba-5dfbe7151fdb", "sighting--6ec22df2-be8f-4ddd-9ab9-66932452d3f8", "sighting--f5972fb6-560f-4832-81f2-41a3e1b01c3f", "sighting--29ed9392-a90d-4f55-90b5-b41947bdd399", "sighting--707010ab-c3df-43c1-9fee-82072aba7512", "sighting--250550ac-a1ac-48e8-943a-1b9d723890b0", "sighting--a3e14ab1-7a2a-45c8-b054-124260f55ede", "sighting--ac612b92-3315-414f-8cfc-846363f4b21e", "sighting--12efd4bc-490d-4135-8a09-5864afb1b0f0", "sighting--6ce00515-0348-458d-8eaa-e4caff193cd9", "sighting--ebce62ad-51f1-43af-ab03-a0ade98979cb", "sighting--8e4a3484-06d1-49a5-8829-67f947221b61", "sighting--bbd25ed5-6319-4eac-b93b-9d13bee2aeea", "sighting--e8b06f06-1b6a-4407-b936-7c62d330cd51", "sighting--d5af83b0-ffd6-49c1-942d-e9c093659d9a", "sighting--d17d452c-a0ec-4cba-aca5-5f8e87f41f24", "sighting--17ccb95a-5dad-4c99-90e5-3930b4fcce2b", "sighting--65930bbf-510d-4870-825b-cefc679a5488", "sighting--80c5d121-b993-4ce9-824f-0e0785a67a87", "sighting--7a373874-a5a5-4cbb-99c7-13cc8395b13c", "sighting--d675b3cc-db3e-434c-976b-2e97161f295c", "sighting--3c235e6b-8936-4b2f-915c-baea3acd9bfb", "sighting--3273e1fe-f588-4273-bc2c-8ac6647ff127", "sighting--b3b01541-1ee5-4050-a5a8-907ec7737648", "sighting--18b79cb6-1ddd-4bf6-969a-a02ea3569c30", "sighting--76149453-7131-4360-8622-68d8cd435816", "sighting--5ec5492f-2ee6-472e-9756-d0a153096a03", "sighting--51251a6e-bd7c-4b7c-8e95-3dd3e182678d", "sighting--6b33cc4e-e83d-41ab-b636-76e9ebd0bc4b", "sighting--7a357d95-1f81-4cb1-87f3-aee5ba857101", "sighting--c6a32851-e4ef-43e1-83dd-894fa783497b", "sighting--685c99cd-1086-41a5-a6c0-5842528f67b6", "sighting--1a5d8133-06d1-4c60-be84-19e1cb688844", "sighting--dd856a5b-fdc1-4afd-84e0-55c453b84fa1", "sighting--c1ad7aaf-18bd-4368-80be-6b2e6d53c4c8", "sighting--26934df7-99df-4d65-bd46-4b5e2d47ec09", "sighting--697414d7-d50b-4be6-935b-49f42220606b", "sighting--358f3754-e8b7-4036-8002-74d907693430", "sighting--dc024917-0489-4447-9e72-032c599297f4", "sighting--98bf83df-bbea-43c9-833f-bf8e4d7aa834", "sighting--0e0b5a1e-7dd7-4afa-a708-ede73c1c9d04", "sighting--bdf93a36-3cb7-4909-9eeb-2dd4c8a71142", "sighting--c8c64cd5-3029-4b55-892b-90b2a3cbdf53", "sighting--bcce4ccb-0854-4bfb-ab07-db5e131cf866", "sighting--91e425ea-d6c6-47f4-b115-54d9c41afb83", "sighting--f55b3b12-3a73-4ade-b9fe-ad8babaea0dc", "sighting--2ed0c17e-1742-4e73-b56f-147c0149abc8", "sighting--63bbf6a9-11d4-4144-baab-b301a27a9d8c", "sighting--e133219f-99ca-420f-9162-1cac798315de", "sighting--2700723b-f4ce-4c40-8a19-6da0565ccd76", "sighting--23f35dd1-673d-4790-b4dc-19fc93caf4b1", "sighting--32f43931-9c68-4178-8d0f-f2471b245188", "sighting--0eaa6f5f-5041-4b8d-87fc-ef5814347ed3", "sighting--54d130c9-82cf-4d97-89c4-d859f02ad387", "sighting--87a80a76-6b73-4657-a54e-a6427bea7d83", "sighting--cb5611cd-f731-4691-8043-fe5d04d2cead", "sighting--612a7798-daf8-4ddb-8aa2-3159b411ea22", "sighting--ae680df9-af99-4655-9f04-fd6579f01548", "sighting--8e681716-40cf-47d1-9883-ebfa4c2ccc4f", "sighting--73d0294f-5c15-4967-b724-8c38abb7dfb2", "sighting--e91b38f7-ac2a-4992-8ad2-4b320d133afb", "sighting--72d4d92f-bf58-49c6-95c3-29537a2ecb55", "sighting--b93eaacc-2707-4d00-9ea8-05a28e810d79", "sighting--dd8d1363-a112-4f70-b076-29df650e096d", "sighting--95f8c9ad-a2ac-4d7e-8c4d-a8ee17fe4b02", "sighting--1c872bf3-1214-49f5-aa2a-89132cb630bf", "sighting--03f79983-1168-4d1e-8057-a5755c66a32b", "sighting--e33ad170-eedf-4822-8464-b9f724593378", "sighting--0ff0a0ad-5568-4160-9f5e-c0426b94ad43", "sighting--bbffa7ec-f103-48b2-86e0-f8acf2c52d08", "sighting--58bdb640-d36e-4778-990d-12e84e341d55", "sighting--416b7c97-55e2-45a5-b52e-3b73b7f84349", "sighting--f0862b94-858b-49ef-a31d-6256684dc812", "sighting--a1e7ebd6-6942-42be-aea5-71d21e750294", "sighting--88a3186e-9234-48bd-95d5-691ac81919f7", "sighting--fb1929c0-d1c7-4db4-9337-b71cd9230509", "sighting--7eee1cda-1132-482f-936b-045a25a12f5a", "sighting--5ba01309-97bb-4859-b8a6-feb4d0493397", "sighting--704b602a-2a4d-4031-b3a0-d681746d3b2e", "sighting--b86ebb5f-6df1-4c21-aa21-2c74b420168a", "sighting--ab0cd845-6ebe-4d1b-8bc6-4faad9f091df", "sighting--144b2f5f-1697-40f2-b1e7-8cec64a877f9", "sighting--88595584-7546-402c-8897-d1aed5ecca7c", "sighting--b526bc85-e0b2-4f53-b191-d8146e572ed0", "sighting--94441d34-fcb5-4462-be4e-a23a0bfdf3e7", "sighting--2ba1e1fa-4be5-46e1-8ddd-706b547e7402", "sighting--a4160417-8616-48d0-b5eb-14ef30ba606b", "sighting--ec5f0fbf-117d-4d44-ba8c-97cca2c2b289", "sighting--8051bdef-20f0-4503-8ad0-12d9a176a716", "sighting--244d38e3-74ed-4347-9b9a-06513e4ec375", "sighting--abfffe04-756e-4cda-bb19-b41389a48e82", "sighting--45ad3f05-38e3-407d-adc7-e54fb4f2f5f6", "sighting--0c17867e-d174-40ea-83b1-2cab3a15f701", "sighting--48d264b2-e330-4478-bced-f524d8e80963", "sighting--2eea100f-09e7-4722-a494-e65fd19889ac", "sighting--3489126f-1b73-4735-9b55-53d91d4341e6", "sighting--07e8545c-c893-497a-b530-cd7e410315f1", "sighting--36ad8e26-43e4-4739-ad80-c556ed1ea719", "sighting--effa0bfe-4db8-4fa6-b9ad-12cad8bda3a9", "sighting--8300c417-68b2-4217-bd82-d9f10197226f", "sighting--3e2b49d9-e98c-4000-9fba-bb9bef052b27", "sighting--4e65a3c6-1522-440b-b3d3-6783d623ee2a", "sighting--c47e2fbf-a16d-4f6a-aaf8-7015ad55e43d", "sighting--4611a0db-5f15-4156-8fa1-1ae63ca264a0", "sighting--3a50f22c-d60b-47db-88af-289a6a113bbf", "sighting--48ae7e0e-1445-43d8-b3b4-b5ede2cea04a", "sighting--25453367-3695-4999-90a6-b243fec62b3d", "sighting--1daade63-ec99-4a42-9de6-dc40dae7a380", "sighting--44848c06-c67f-46cb-82c4-832c6d5e3753", "sighting--8ed01879-6c59-44f9-84b3-ba826365f7b7", "sighting--9ddc357b-a0f2-42aa-ba57-b08ed8a804e3", "sighting--a8cd22ea-9bfc-440c-b38e-5898ad4af8a5", "sighting--6481c6d3-c5c9-453c-98ac-69cbac746ca7", "sighting--eadaadf8-d787-4235-99cb-b08aebd01c76", "sighting--befb98b1-c203-4e93-9d68-31444cec4979", "sighting--6d17fa3b-d324-4ddc-a87c-439877b3391e", "sighting--1ac2fca0-05f1-4332-80e8-8c3143ab5215", "sighting--5235c602-f4a7-492d-92ba-d19258a1253e", "sighting--8a9da9d7-bc2f-4052-bf51-84862bcc474c", "sighting--62f4f38f-e758-44ee-a5ab-d46d66691646", "sighting--ba81834d-0171-4332-bec6-5513d392f33d", "sighting--fcb9997d-2194-4344-b170-9c6ab20feb83", "sighting--fca1a5ba-e17a-4938-9f9b-683b900d6d1b", "sighting--d8971705-8ab2-41ed-914a-374129005132", "sighting--3acb7b33-08e3-48f8-9408-efbfd560e81d", "sighting--0b5dea97-e844-4c7e-9e7a-93e790a4df0d", "sighting--6aa15445-c8c7-46cc-8560-ba66bd61993d", "sighting--fe16ab18-fd8c-4443-85de-bbd1b3e84237", "sighting--02b46e2c-696b-47fe-9eee-db42af442dfd", "sighting--e8075748-2162-4e7a-9049-f1d2214a45e7", "sighting--324da456-8fb2-47a3-b274-9263187c23f2", "sighting--09738629-aadb-4a13-bbd2-d98808699621", "sighting--632c067f-7498-4be8-bd0d-a79f144d999b", "sighting--040f3829-827d-4c44-9798-6b85c41373ab", "sighting--a456b13c-7792-4f56-b9d5-51f57a3da65c", "sighting--5cc5d01c-e855-4a39-8912-7ca73c84285a", "sighting--5e213ccb-26be-458f-bfff-71fda01a1306", "sighting--3531715d-2c23-47be-ab88-2c0facedd3dd", "sighting--2dd411cf-a5c4-4812-aec7-c495a663271a", "sighting--bef8903d-5507-4d71-b31c-c26554a2114c", "sighting--d451e736-df94-4c8c-9d96-fb44ca7a7790", "sighting--4a1730ed-cc05-4318-a627-97778f47030b", "sighting--4d505c45-248b-4f56-a102-5a8cd04fbccd", "sighting--e4f44973-e710-4696-ac8e-3fa0f063a08f", "sighting--f382c8d1-0440-4778-b5dc-db2daab3f5e4", "sighting--e211b2c8-c484-4578-a2b8-aba668d3f645", "sighting--4b74b8e1-15d2-44e4-acd2-e90423b01c2a", "sighting--6abc6fc1-04b6-423f-a541-5b075563107e", "sighting--cd4d463e-3a8f-4e8c-a7fb-43e35b9805cd", "sighting--5851fbe4-4d3f-41ea-8b5a-4a885887b437", "sighting--c67b9bb9-2ab0-40ae-b0f2-44a2f22e4bdb", "sighting--933b23bd-cc5e-4e66-9d96-4a157a25721c", "sighting--e12309b3-af03-4772-a9e8-5465693db1eb", "sighting--b7ff3a70-7ed0-4354-be38-905b7b5350ba", "sighting--6c33fc93-34bb-4ad2-a9de-f3a09a59cd4d", "sighting--2b83f144-24bd-4dc0-b3aa-1c4af5d58319", "sighting--a83268eb-fbe7-492c-a0e7-7bc6fe0d32ab", "sighting--c9af37b5-4ae6-4974-9a29-9917835f4e02", "sighting--8309708c-71ab-485f-9393-5dba495d7890", "sighting--7d5a5e90-418e-4d90-9e6a-4fb44c343f35", "sighting--1c740435-90e1-4222-a4c0-6381e99e3b47", "sighting--49a5831b-4fb5-4f14-870f-d0fcae054e46", "sighting--96b576f4-46d7-4a8e-b60a-fa712f4162f2", "sighting--f9bd1a67-d32d-4597-ac1d-f9a213ce2f97", "sighting--7397da90-dd0d-4026-9e43-af7ab542c53e", "sighting--a22cfb0b-b4a4-4fe5-9eaa-b5a23c9cb6f6", "sighting--4af3197e-5c0a-4514-9c7f-7a57b4dd783c", "sighting--c8b00548-3b57-4d34-8da6-5c902fa3da4c", "sighting--ba2726bf-3a2b-4699-ac10-5e740bff2531", "sighting--628cfb6f-6a01-4989-ba9a-070c3d631822", "sighting--ccc6f161-3918-4ee6-a5f4-7b378cc2babb", "sighting--a5a51cc1-27ff-4d5c-af93-7207e7ec37d4", "sighting--771b3268-a93c-422e-8212-ab129a625cdd", "sighting--8280dc2f-36f6-436b-8bd6-8f92facf74c6", "sighting--c72354fa-2532-4784-a3ff-967a350a8f99", "sighting--89172cfc-66c1-4434-a6a3-e6eff81f3b92", "sighting--553a1fb2-7882-464f-8019-429669968746", "sighting--9fd4a8bb-f027-49db-a3ea-0690e523e35e", "sighting--9edc0579-2a58-4520-af72-a221a677a99a", "sighting--872c5034-75d5-4a71-902b-0a1f5a9c9214", "sighting--112d8a46-2ae7-444c-ba41-c6bcdac4c42e", "sighting--2864ca48-1e8c-4574-9240-ed30187daa8d", "sighting--ff1f6f2d-3f70-401f-be16-d63d46bdec2d", "sighting--2b4d4f09-fefa-47c9-bfe8-b9e5d7571475", "sighting--3244ad85-415f-4135-9c77-20879df3543f", "sighting--0a24fb79-5505-4107-9f49-5f350e51e5c1", "sighting--fbc4ff5d-1c4f-4887-acd0-00034c3f167d", "sighting--505eb453-670c-4eb5-a383-bebb260f7152", "sighting--349ad0a7-114a-47ec-ba84-8c43c9650be4", "sighting--b5274876-5174-4e82-b8de-5705bf2199b3", "sighting--d98d0654-dc91-4605-b727-b61423b99e46", "sighting--ffa8741b-5f50-4f24-8904-597010576f8f", "sighting--9cad3acf-db79-4c73-beb1-ab2a8c27d06f", "sighting--ce25abb2-2895-4059-bebd-60dc064b0ea5", "sighting--a80b0921-ed98-4547-8f4a-3c8205c3942a", "sighting--37d6b60b-7714-4dcf-9e42-3e3078159651", "sighting--debd2c8c-ef71-4146-a3d7-1258068e95ee", "sighting--ddc018fd-6cb4-4a46-beb7-e25372b6ea6f", "sighting--6b3a469d-a6c8-4aa9-b686-8d80771f1d31", "sighting--cfc97166-c2f1-4488-bfa8-81c57da20012", "sighting--d9a148f7-17a9-461c-8428-a3d3dc320ed9", "sighting--7238cdb5-4cf5-462f-b2bf-22997119bf51", "sighting--a08459e4-641b-4206-a2be-91f5b705a11c", "sighting--548abdff-5a54-45cd-8a0f-4af0e93726a5", "sighting--dfd53a98-51c9-40df-ade4-cc6538370fae", "sighting--c1b20e69-ed91-482c-a093-7f9c64fc81f8", "sighting--501834ea-bac6-49b5-9ba8-a8b94f44cc8d", "sighting--6f027ce3-c3eb-4f25-b8b9-6352647146ed", "sighting--fd71df11-2f1b-44ac-b482-ac796d8862a7", "sighting--88fb3c1f-d8ce-4b2f-9524-25a96aab3c12", "sighting--f9595afb-6786-4ceb-a992-001bdf8c20d8", "sighting--8e4ee7b9-8378-4192-baf5-7a9475912358", "sighting--d7e2cceb-a09d-42bd-adef-a66838881b6f", "sighting--a4ee9222-4302-466f-acb3-07586216e519", "sighting--b30cc92f-7467-4d3f-a7cd-d16a1a5b5f3d", "sighting--c8ade6d2-ec0f-4e7a-b38c-a1373bdb4c14", "sighting--59a336d7-340d-44fd-9efe-cedb79f2c03a", "sighting--50d82273-f884-4c65-b986-4fcdee39f323", "sighting--0aa75a60-f643-4dd5-bb1e-93499852ee78", "sighting--c5273aae-3979-40b5-b0e2-0c741b3512e3", "sighting--883719f7-f7f8-426f-8f4d-9e8809f7e628", "sighting--6e6e834c-42c4-46c9-b107-a6e884cfdd57", "sighting--f1788c22-e0c3-401c-82b1-a5fc65283f51", "sighting--2dbe52ae-2a14-470e-b86e-610aa0750f63", "sighting--59ecd2b5-f6b2-4d5c-84dd-614d6fd34b07", "sighting--e5d0f868-aeae-451c-a675-1e140fb7d9b1", "sighting--71a70405-013e-4751-9a56-7156b4abcd95", "sighting--20473a3c-9502-4cd9-b8df-dc3d72e5cdcd", "sighting--99a0b4fd-6214-4021-b7f6-f3c66185df3d", "sighting--bd46b5b3-acd2-4681-902e-bdf569ec0066", "sighting--333a1611-14d2-40b9-a278-6fc9d211f875", "sighting--55969e6c-32d7-45f5-8d68-11a34c38386a", "sighting--38cabb52-9868-4968-bdb4-ae8eded10b5a", "sighting--48d86ba7-c035-4a95-a738-980c9d32ec99", "sighting--4da1a1bf-1938-4f29-ab3b-000cd5bff3bb", "sighting--e9f336cf-03bf-4f51-8bb3-b2ea0e61d4db", "sighting--d0ef0962-8141-4c3c-a6e6-19d7b8d7a8ad", "sighting--81f0ab04-291b-4a4f-8fe9-c278164404c7", "sighting--9ec24a42-a0cc-4139-b10a-cb6e7899e24b", "sighting--7ff2fdcd-e902-4113-a3c8-e1e1ef382e2e", "sighting--4cd5749d-0ce2-45a6-a958-659174dbb3f7", "sighting--4ef237ad-acf1-4f74-ace9-0c880dacb26b", "sighting--41d0f42a-3e72-4234-b5ed-9a70b3a2d1f4", "sighting--6215677c-8520-41fb-a7a8-7806d358f9ff", "sighting--ad46247f-fd84-4bc5-a3e4-c670d1b5a5df", "sighting--aa87d227-8678-48f6-b13d-439a39ccf9b6", "sighting--527c896d-2d59-49cd-880c-70dc88f954c8", "sighting--8f0cac8a-0647-44f6-900d-28c11a12b75a", "sighting--0850572c-df1a-4f0e-82a0-84af171714f0", "sighting--62662e8c-1e66-4a7c-9259-eb2a5c75a380", "sighting--d2441786-6a4d-495b-b117-1885a35dca82", "sighting--fae9dc9f-6732-4bb0-bf2f-6eb094f43c71", "sighting--578bf290-d7d5-47c2-939f-92ec39cfca28", "sighting--de288083-9491-43f1-bf48-f5919994d03e", "sighting--5aa3359a-85bb-45f1-97d0-f081e68d3e0c", "sighting--f13d3a73-edbe-4049-8d87-bdc1de6fc767", "sighting--7ad59cb5-c542-4185-bbc3-4cf5142f7a64", "sighting--581a924e-c9e6-403c-9573-d787b988570c", "sighting--66130f45-0c4f-49e7-8128-0cee609df8ab", "sighting--6bd0c0a9-53e8-4b14-986f-79951ea18118", "sighting--0af75fab-7911-42a5-8dab-6d62fd2018d4", "sighting--b2046ee4-2fb9-4d85-88aa-da35d6195088", "sighting--9f10fff6-ad8b-4542-8189-ee70cf7de099", "sighting--138868c1-a86b-43e6-8670-a84412928f4d", "sighting--c7e43ee0-8d48-41e4-9afc-3d84c4ace777", "sighting--71ae0386-9592-4a42-b4f0-9b315265d9a0", "sighting--850e4096-e40a-4522-b8eb-6ea191c4817b", "sighting--fe1bbfa8-f11b-4b48-947f-4b48eabdc507", "sighting--77d4090e-f5cc-40e1-940d-43179e7939df", "sighting--515248f9-71e6-458b-9edd-ba7492724f63", "sighting--1e9031c8-28ba-42b3-aea2-d1cfcaca3780", "sighting--3c509f17-0718-4bb7-907a-800f72ebcf4a", "sighting--91a9a1b6-b5da-49ae-bddd-301cfad4f80c", "sighting--e50aebe6-9486-4b48-bac6-1a124b6ea33d", "sighting--b27ea6cc-36dc-47c1-ab77-b2284f4b2c73", "sighting--02d0fd4f-8dec-486c-af46-74533153fb80", "sighting--8b5dc078-f13f-4236-9414-880eef232465", "sighting--3ac0da32-3b3b-49e4-b88f-c50ecdbe4f96", "sighting--e8a02e8e-46f2-41c4-80e0-776b794c98e8", "sighting--a06cb4f9-eb74-4f71-b991-2e5af8b01b18", "sighting--171da879-9f4e-4cc4-99cd-ef47445892ab", "sighting--7a6b1dd4-e7a3-4c4f-b9a8-f906afda0572", "sighting--4625bdb1-b901-4336-8d48-b687ff92d60b", "sighting--686d39a0-6d27-49ef-ae59-291b8d509d12", "sighting--bd3bc832-b6fa-4131-b3f8-cc85fdd3434d", "sighting--1e55ca7b-67e8-47c0-a276-634abd5e5844", "sighting--6e7f8b48-6341-4622-834d-d65b6df0fd8e", "sighting--3e1cc372-1da6-45d5-be6d-244fa9f53c99", "sighting--b773c536-6c61-46c4-a956-5b50f480a027", "sighting--de2f53bb-488e-46e6-a173-1b74f720ede9", "sighting--6b85c12e-0e5e-4c1b-8c7c-a97ab79dbf19", "sighting--ef2e9bce-4b0c-480f-88c6-00b9fe883d83", "sighting--3d1663f9-7c01-41f8-a381-f58870719cd2", "sighting--2f00888d-4f60-4a42-92f8-042069d0f9b1", "sighting--784c10ef-81e9-4297-ad4e-a5fff18b8b77", "sighting--73e90248-0176-4abe-a192-487598915f91", "sighting--208f5161-d26c-4405-96a6-2e07ef4836e1", "sighting--141fc539-fc5b-45a6-b52f-1ede860d56b3", "sighting--17a6a870-6d7a-4a18-82c7-12a42d6c31ec", "sighting--aa426b0d-5f95-41b6-a75b-92ce85618d7d", "sighting--2322cb5a-1a21-40c9-b984-6cba20f88a15", "sighting--ee2927bf-61e3-418a-ad2b-084f8c83b374", "sighting--9aa15019-f48d-440d-bd26-509d54a39be9", "sighting--7ff2b7be-e872-46e7-884e-8abb3127ef9f", "sighting--804d40fa-8c2b-4754-816b-ef36ef8744d0", "sighting--f20534a1-b992-41af-abbb-80a99ee5e005", "sighting--660a94df-9f87-498e-b1ad-ed78cf15a345", "sighting--3f54c38c-aa11-4bdc-864d-ae281d9d6227", "sighting--4fb54398-5e3d-4c7a-8b15-820ab482d0ca", "sighting--b9ae15a8-5b06-40b4-a336-ea9e86634443", "sighting--42f998c4-a300-45da-825f-6b3e10b4f5d9", "sighting--1a11580f-7926-410e-9c85-f3aab276c716", "sighting--49b7425a-1c9a-4e98-947a-8e290b653930", "sighting--aeb8db0d-e922-4fd4-a59e-50aacef907b4", "sighting--0f6ccbcf-c0b2-4bba-b1ed-5178d8ced117", "sighting--fbf91eab-11ec-4f57-add4-e3d8330bd063", "sighting--b4841855-bf31-44ae-9cf1-2a8ee7d34b2d", "sighting--5a984703-140d-4ab5-a4cc-085a55cf90e2", "sighting--9d993a42-a562-49ca-b98a-f19ee1992bd1", "sighting--fd204fec-5981-4adc-9ab8-9c6dbbebebde", "sighting--d13c498b-6a44-41b4-940a-a507a1831ed3", "sighting--daf7832d-3b2a-4076-803c-c04fc8110a31", "sighting--3f38e1ab-31e6-40ba-8285-48eb0cd754fd", "sighting--5ef89760-1f09-49a3-a3a7-51c61d871282", "sighting--8eb14f54-1889-4061-9893-de3c4132737b", "sighting--0d7f0691-98dc-4f5f-a640-4312205211a6", "sighting--350b1bac-2d31-47b0-971d-f713aef519af", "sighting--35644bc9-d238-4487-9c8c-13096b3c5fce", "sighting--f4169e3b-cfa6-4294-8ad5-2a0b0ea65c3c", "sighting--9ef7ffdc-e9be-4cb7-a092-7fb4605c2010", "sighting--a1e2aff6-ac6f-4f05-8dad-ac72f2dafd96", "sighting--82c248e9-ec37-4e40-8cd7-f52da40a7df9", "sighting--071b9ff4-439e-433f-bb7e-995739b5a3d7", "sighting--e6ac1ffd-bebe-438d-af73-8b01dd79bfe7", "sighting--f7f32ac2-32c9-47c0-b3e9-2979dcf77534", "sighting--2db17892-f5fc-4e0c-9d5b-126140a954a4", "sighting--dcc5ab5b-82fe-49fc-a781-cff94cc01881", "sighting--f2c0d629-119f-47c6-a602-9c0415e49dfd", "sighting--f2e9ca57-8ca2-4a69-8282-d35075d02ceb", "sighting--7cd0dd12-b637-472b-84dd-cebdb5c7c2d3", "sighting--75b4257b-2cc4-46b7-a697-dad772d8ef24", "sighting--9819eb5a-c8f0-4cbe-9707-380472b7ddc7", "sighting--4c252817-2919-484c-8c7f-c81afe246736", "sighting--7272b8c9-d3ef-49fe-93e8-0b1cd4220905", "sighting--8af17a6f-2da5-43aa-8b54-6ac2d84382b9", "sighting--ef1e9363-76b8-4aa3-b342-8d8087513283", "sighting--02851b06-5227-4598-ac5b-eafc63f8951d", "sighting--e239c77d-a675-4bb1-a063-ae175f2e3cf7", "sighting--7fdd18e0-bc21-4a42-bae2-fe1917f80247", "sighting--74bdd353-2f59-411a-af68-4037b9c7aa12", "sighting--1ff13be4-d1a7-44cd-90ae-dba5356b28f5", "sighting--d10c990a-0456-4327-adf6-15690cab2d25", "sighting--6a74553e-8608-412e-9127-a12638bd29ea", "sighting--6ad4d3e9-1712-4c0a-b6d1-bf1e1b4c5b2b", "sighting--8cf790e8-1a07-4de3-b099-15aa47397a69", "sighting--f4e77c60-9820-403c-95d2-d20b649460d6", "sighting--5e7cffbc-fb19-4097-8f0f-89f785307328", "sighting--08db2056-9dd0-40d0-a726-a65ae81d0904", "sighting--2d7892e0-8385-4208-8ede-c8c17e67440e", "sighting--36118b9d-38be-47f2-a271-c82223dd06ce", "sighting--2813bd40-5347-442b-95b5-5cec086eacea", "sighting--ab07730b-e5a4-436b-8714-b14ca0d272dd", "sighting--64e7ff69-fd7f-4363-bfa4-25989c49af78", "sighting--5b641cf8-f84a-4974-aca4-fa9d4b6d16f2", "sighting--1bca6f70-0f81-4471-a161-c36de52aa415", "sighting--15c3ab49-3b5b-4a38-a7a5-2c589796245c", "sighting--ba52b337-c520-437f-81dc-e23f8d901174", "sighting--69e40a2c-a8a3-4f69-b249-d6685f5e4f8b", "sighting--322e7ad5-0120-4476-af95-b8519202607a", "sighting--d6b87baa-2922-4956-ac36-a25b770b7122", "sighting--4c2f74b9-20a5-4bab-8a8e-50dd78314efd", "sighting--0faef81d-09d2-44b5-bc04-00f018957d3b", "sighting--ae16afda-1d0a-4aed-bb0a-79878e5dc0cd", "sighting--8b2f39cf-b44e-4d84-a02d-3a7e205a8ff5", "sighting--d3bbac42-2266-486f-b263-dc7a3f1c1287", "sighting--081f3a7a-c23b-43fe-8521-1f4dbc69172c", "sighting--4282ee03-1a7c-4b17-982c-df4e2756caf7", "sighting--0e0686fc-7091-4671-9a7f-2623933b1a3e", "sighting--575db015-8c7f-4fdf-be8a-8ffddd72ce5d", "sighting--f7d66290-c67e-4011-bd33-8c3925c60b73", "sighting--923d12a7-721c-4e51-a074-a35258ee0473", "sighting--c4905765-ca1f-4d1d-8f56-2cf1c83c9ec6", "sighting--b36ea0e0-b9b6-4632-8ed2-0697af1bc026", "sighting--4c18598c-6fd0-415b-80ac-335b74a19a54", "sighting--457ca483-0bc4-40de-8813-708826951484", "sighting--93a9c6fc-1925-4fa7-8080-2a6d3bcd5fe0", "sighting--a612eff3-bcc2-4b32-96ac-3a0428c2862c", "sighting--dadd6cbe-4b64-4760-aecc-93ac747dc328", "sighting--5c717868-e36b-4900-9f74-bf46d2b4ed79", "sighting--d329941c-f624-4f84-a96a-0c7737a1cdea", "sighting--7ed09060-03c4-4bc3-a6dc-f485fbbcba56", "sighting--8a9d234e-ebd2-4ba9-a1c5-c9a9a96cac48", "sighting--d83399fe-1ba2-4cfa-bd9d-0702100113f7", "sighting--1f89475c-12ce-42e2-84ca-006b73730f26", "sighting--279d20f7-f53a-4624-9820-5f94e464cafa", "sighting--6eb881a0-b13d-4983-9b0b-4630d4fb1981", "sighting--e91b3373-bb47-49bb-8dd5-e1ccbb467479", "sighting--a9fc07e3-d54e-40d6-a5d1-bffa35e2fffc", "sighting--a2cc1804-66f6-4b87-adbb-dfab85322081", "sighting--42f97e9a-bceb-4ee2-af86-32efe4d50f33", "sighting--36d9c0a8-e4d4-49d9-b438-6adb6e40efed", "sighting--781b1357-9672-407b-9a5a-a684e617d5e8", "sighting--d811aa8a-c101-45e7-aef7-35699f52b5e8", "sighting--bb799611-0738-4d7f-bf4e-98de6b04cb46", "sighting--49ebefb5-ea9c-4df8-9e4b-3c9620b9e9fa", "sighting--598daeba-03a1-4f9a-a960-6a8072971a59", "sighting--7fb38cc3-083e-46b9-a3ca-de001a7b3292", "sighting--81033195-5e7c-45d3-9985-41c3a777da76", "sighting--f71b3a89-2b15-43fe-b865-0247550751c8", "sighting--f5f8eb2b-4ac8-4bbc-a852-b6b434870170", "sighting--37d5b17b-5773-48d8-9ec0-cd4613e329b9", "sighting--a31ff383-d9bd-4bcf-85f6-7582438ddfcb", "sighting--cfb09d2a-5e18-478c-954d-9a9019e4cf94", "sighting--779f1a21-fbc8-41b2-930e-fecd686e6b08", "sighting--3a74bcd4-3a81-4901-95f0-44eb985b3790", "sighting--38257f33-7868-485c-b2b4-6536896fcb61", "sighting--8c6b464a-a1ee-4623-9cbb-2b058be04893", "sighting--3b3e2c07-219e-4138-b1fd-75503e3d3249", "sighting--cf44c5d5-20f2-4bd3-a89e-646a65aa0601", "sighting--860c3a21-b6ef-44d3-8413-85aacc0c1886", "sighting--2ab5a0e7-cdb1-4bb4-91c9-0b99ae689777", "sighting--e6e681bc-1c68-4e4f-8a3b-fd7a0ddd6c38", "sighting--d20eb855-d834-4b27-9c89-3b74bb5fc02e", "sighting--dfbf9c8d-b078-422f-a9d0-4f88484644e7", "sighting--3c3eab95-eb5f-4e63-95f4-aac178c45cd6", "sighting--b29e50b6-8c22-4fd6-96ca-6e130252502b", "sighting--a741a7f6-809b-4f5b-90ab-6944880134bb", "sighting--c61f5c63-1379-4dc1-9085-074502094ab2", "sighting--15233ccf-bdb3-4b9e-80cc-fcfc124f595f", "sighting--9c29cd68-1929-4e27-8695-87f52a93f0d0", "sighting--b83ce99b-4ce2-40e4-9fe2-f578c60de719", "sighting--9e0d119a-efc7-4d97-b4bf-4c4a0e82a508", "sighting--e29f4f14-c32c-47eb-825b-a91550b2c7f4", "sighting--2d477c48-9052-454f-a83f-0c65cfba7170", "sighting--99b52d98-4f49-47fc-8799-3dc75c889546", "sighting--4193c0ef-2ef7-4aa1-bb80-230a3b4241ce", "sighting--ed574b75-be93-4d3b-b0fd-1e37b7efcfae", "sighting--34f1173e-e275-47ea-9065-ded44af591eb", "sighting--a52eccc1-15f0-497e-a2e2-7f3d8e6b6ede", "sighting--58ef77f7-16f6-405e-b581-173a97aa80a2", "sighting--1898693e-b569-4508-b4fa-7184c2680087", "sighting--0da7a5ce-fdc3-40dc-9ad0-caa69c57ff28", "sighting--e6074496-72f8-4e84-831e-9b2aa11cd9ec", "sighting--3b231b8c-15d6-4ef5-8fcb-b1624428aac7", "sighting--af7b392c-6b5d-443e-8071-bbb5f03fef71", "sighting--4195b6a6-dd1f-41fc-a758-3e6b579373f6", "sighting--c71f1712-fb14-49df-8bce-c81a309f7cfb", "sighting--cd777072-237e-4eb3-b328-0d21149eeee2", "sighting--432b4e5c-01df-4746-a38e-ef656eaea96b", "sighting--e6fec64f-ff46-4166-b5e1-c3675f6be90b", "sighting--0016674e-ca9f-4b24-884c-3755f8635939", "sighting--2d0d2681-8f56-488e-8700-beceefb831e9", "sighting--710eaea6-e59a-4584-bc4b-55ce38495b3c", "sighting--3984e034-6e27-44a8-9483-1bd3581a65d6", "sighting--26a94c07-681c-40ff-b8a5-4b69cfbf1e32", "sighting--01c2e4dc-99d2-4dc4-ad57-08a0203ca7a0", "sighting--e9da305e-0778-4d8e-8a60-7bb98069884d", "sighting--287c5c0b-80a8-4f4c-9189-e50c75803280", "sighting--133bb612-0963-4e5c-b9d9-dcb0f86f0097", "sighting--808fa074-724f-4a24-8c8c-d0aea6c6752d", "sighting--d6c3131d-e07f-4f23-99c0-29d128d4f966", "sighting--11841b14-ea71-4429-a4b3-97a5c2733951", "sighting--2171fbfb-82b8-4515-9621-fb08763b4a03", "sighting--fa3eed68-ae09-44ab-8ccf-c1282524549f", "sighting--2b3cea54-63c7-4b6e-81ab-faf9cee00e90", "sighting--55d7571f-c419-4965-b928-83f36981aac3", "sighting--c224347e-21fa-490c-a507-34ab4f14b101", "sighting--a34e7935-47b7-47a0-ad62-a58ca98b953c", "sighting--8c1041dd-e9fb-44b8-b205-34c48868212f", "sighting--42f56825-2acb-4de2-be90-f79471bef583", "sighting--11af8fcd-072c-403b-b0aa-013d0c23e2f3", "sighting--e0840e76-c6b9-4cce-950d-e2a2454d5476", "sighting--4cc5c6df-f32b-4406-803c-cfa5272a3704", "sighting--b0329bd3-7e72-4cb3-9994-18dcc94a8fdf", "sighting--8a937be9-3928-4aa2-b847-25db6e6009ec", "sighting--7944ee0c-57ac-4544-8942-9bea218f2c39", "sighting--c36672bb-fb9b-4358-957d-ac9cbb177491", "sighting--9655ffc0-f009-4ab3-a5b9-87ec2b9247c1", "sighting--6dba2753-0f81-4036-818f-55510b0ac22f", "sighting--a6e7ee68-ca58-4886-8d52-603af8bd04c4", "sighting--75296cb6-5932-46ee-81f8-142de2f8af38", "sighting--b2fb1cdd-51a0-47df-adcc-2c5cc307e4ee", "sighting--b2327b10-fb23-4f60-9081-47264646ed99", "sighting--c8e11c15-5dd0-4754-bec0-969a18cac6cb", "sighting--d50f8def-b868-4942-944d-ee89f63ab551", "sighting--282f9d3e-1c5d-40e9-9e25-ca19ad8b57b6", "sighting--944e6a87-288e-46af-a5e4-5c816de1e889", "sighting--ac1408eb-bdbc-4ae9-97d6-7779a49d232d", "sighting--65742454-cd68-4673-80b8-81238b629d4b", "sighting--a9bba5f6-8dc0-45fd-b08d-b4808c3b5e5c", "sighting--65b4adc6-aa78-4b20-9398-61914683a99a", "sighting--1fd0b9d7-43d3-44d3-abed-488b636dfa7d", "sighting--cc03e25c-ab8c-4a0a-8dda-8e230935826c", "sighting--d76ae5b7-d293-4352-bc88-3c491ae7e8d3", "sighting--a39fa876-4196-469f-964b-1986f060fd38", "sighting--b5e14b5c-91a6-42aa-817f-db514cb10f9a", "sighting--2d465908-ccd5-4f66-8360-df4f19a14eb9", "sighting--907db379-8ced-495b-9c0f-9828a168fbc8", "sighting--96d62698-1833-449a-864b-5d2768ef9c3a", "sighting--109e6cb6-c0de-4c60-9c35-8fc0df0a03d5", "sighting--15326524-2db8-4b59-8812-d78bb2596e91", "sighting--26f2a288-9c61-464f-bcbd-cd68787277db", "sighting--c27e6011-025b-40ad-8c1f-1eecb63e56a9", "sighting--c3a91994-3516-454b-aadb-56ccede447ff", "sighting--fbf72c3a-23e7-4d7c-bd61-1970101e132c", "sighting--faf82608-e211-4101-b9b8-72f77b5cfd88", "sighting--6fe299c7-08ab-4e74-8374-f2891912c866", "sighting--607b8985-8144-4835-bcc8-9af280519b83", "sighting--2f856b63-cd30-478c-b2f6-9ad7d4eee213", "sighting--40090aa7-395a-4cb9-a99d-3a7e68a484b3", "sighting--edf6fca8-4f68-4c16-b587-d51f4fb1ec85", "sighting--8aca332e-d625-4c82-9509-e29b173f6366", "sighting--246c5df7-6a24-44ff-adca-c89ad8a30fe3", "sighting--4762f3a4-468f-43b2-95e8-2d2a37e7af85", "sighting--b3731e93-ad4a-40d6-b4f4-c15151670f39", "sighting--5f61a50d-35e4-4fa2-bb82-bc179d1c9f86", "sighting--1a15a1db-e008-4306-9cab-a8a26539e837", "sighting--75508c4a-516d-4aaa-b44d-3ddbb3b048e3", "sighting--477b3b97-c9c3-4250-ad6a-adb5dc83198e", "sighting--d563ae75-d053-4d00-8a55-7da5b105fb8f", "sighting--2d071adc-bba6-4dda-9e15-312c98b885b7", "sighting--f68fe8c3-d10c-4416-b5cc-44243d20fa76", "sighting--b7a83875-1531-4aae-bab1-f07dc1092196", "sighting--e5bfb405-0744-414b-8f26-7b31aea112fc", "sighting--8ae14bba-cc43-4b36-8cfa-1ae64aae47d5", "sighting--0ee6c119-a0e5-4131-90af-6f96ea63259a", "sighting--c2b9700e-da35-4a79-859b-e9a1fcb7e541", "sighting--e9f9320b-522c-4ea9-9f14-6fecee8bd6b1", "sighting--1cabc55c-50c5-448e-8a26-e9129c9d346b", "sighting--6b92ef5a-00e9-487b-b5ab-974b91ab780c", "sighting--33a476d2-bc99-491b-82f5-05926c0d0d91", "sighting--39c7eaae-1d09-4bf0-8822-ebffecfd1b21", "sighting--51138097-3555-421e-ab68-2ea2b0e8f484", "sighting--37a78818-3a8c-445d-a493-a75447544500", "sighting--be2bf700-fb06-4a20-b910-844be256ae4a", "sighting--6a9ae9ca-0913-4c47-af88-64fec989d1fb", "sighting--2bc1a1fd-2b20-4f30-8ee4-55b91813121e", "sighting--42f4d73d-3b27-4fed-837e-e2d4638fc61f", "sighting--c617a89c-2bfa-4b74-840b-f53c7aaf9ba4", "sighting--c0e8ba6f-995d-4083-8ccb-462cd7c4e25f", "sighting--cad9cad4-2eb5-412e-9e46-a8b91928a856", "sighting--34aa395b-b32f-48ae-b0e8-ae067db32ca0", "sighting--df39deef-f104-43b4-ae71-c737466c2143", "sighting--ec4e4308-4867-4c5b-bc0a-9f9733ada7af", "sighting--54a6db24-5dd7-455a-9e85-2b462bfedfb8", "sighting--8f252e3b-69e9-487f-88cf-3e5922a82ed7", "sighting--ef3fa8b8-c44f-4969-a36c-8ab6164776c9", "sighting--4f857c0f-a73d-4c81-9d50-6c72def13808", "sighting--3ae3046e-2580-4152-992d-bee07f30a5a9", "sighting--e25b925d-49a3-4c95-abc0-fc294112ea0f", "sighting--d720d784-ed85-44d8-a687-8dcbb8c7c2a0", "sighting--42fafdf5-ff53-4101-903c-0ed4068f93df", "sighting--75f808a7-c4f7-42f4-b7c1-bdb881863f6d", "sighting--053ce6c5-ef4c-40ab-ba4f-8c7a532b2115", "sighting--606a6649-15ab-480f-aefc-4b2d8a0c6eb7", "sighting--63897272-d9e2-4e86-be53-16ff7f54892e", "sighting--2816617e-9e99-4fec-b49e-e1fef3f61c17", "sighting--95950585-2437-44f3-b8a1-463fa606e0d9", "sighting--43abba2e-23bd-446a-9c8e-ea5573e48452", "sighting--4424dafe-867c-4748-bf2c-21b77becc42b", "sighting--12540067-6a94-47d5-85fb-f500a045ac20", "sighting--056d305d-1db0-47d8-9d8e-18f885bf48c8", "sighting--da231344-902f-4cc6-910d-c689d6f223be", "sighting--e0ea3f3d-ab8e-4fef-9798-7a83d2ce4a57", "sighting--67dfa947-e1e9-44b1-9aef-3043465d82d1", "sighting--283711be-9619-48c9-950c-efa432eaec95", "sighting--6a2f5320-5f6b-4b8b-8cd9-82d5497d7b24", "sighting--2a345d02-60d8-4230-b6df-51a76831cda7", "sighting--d473669a-e1d7-4c33-876e-fc21abbc8570", "sighting--55827dd7-1187-4559-a669-d941e79c2ad0", "sighting--bfe36bea-b3a2-41dd-a7bd-1149f642a4be", "sighting--82fd6c56-5da1-41bd-a7ee-0b581a6fd5c1", "sighting--2334e58a-9f9f-4c78-b505-6da7896a5302", "sighting--05765aee-bac0-462b-8507-8b79a8a2d29f", "sighting--84e0780b-47b9-486b-aeb9-d3f74ffe96d3", "sighting--af7ebb20-661f-4bbb-9f30-b26dead42ec5", "sighting--de316869-bb4a-4144-b199-c2f76d622871", "sighting--1ad49ba6-2f2a-4e25-ac18-ea19ff3588db", "sighting--7cdf19ab-5001-4db8-b1ee-a81a3cd3d95a", "sighting--85bb0522-5b62-4ecd-a462-1edf227fecc3", "sighting--062e80c0-3950-42ed-a25f-498d498592bd", "sighting--71a9d7ef-dd37-4bf8-a605-8744ad4e065b", "sighting--e241eb7d-a341-4d2d-99a6-e82905527768", "sighting--2c76841c-ba4f-4c5a-98b3-aa1749355ddc", "sighting--f7b2b0e5-bf13-4125-a4d2-c529a7de7b90", "sighting--5c84a1f5-b025-4589-8a22-93abdcd86441", "sighting--638bbae5-f910-436a-b542-887fa8de15e5", "sighting--505acf86-d71b-4f3e-b382-105eed23cbc7", "sighting--7424ae89-4675-43b5-bed0-db96231f602b", "sighting--2fb9516b-befe-48e9-b613-77039d00bed6", "sighting--b7788361-6d03-4724-8b39-8edf35ba56cc", "sighting--66e22513-aa30-4696-bf48-5735af41225f", "sighting--2a524ff6-706a-4712-86c0-2cb0045b9672", "sighting--5c951cdd-27b3-47fd-b879-8545cfb4cdf4", "sighting--060ee4b7-139a-4f7c-8c2c-43cbac0c0020", "sighting--ca3c6529-ea8b-41c8-8b76-87cb7f9ba1c0", "sighting--9ff013b7-2cc5-4942-910d-cde9cbbbf322", "sighting--34b49bac-1d3d-4930-859d-dd27a15e9f7f", "sighting--a0af11a0-f554-419d-b244-8d4b2deb9455", "sighting--1b900ec0-4439-453a-961d-f7c4d419e168", "sighting--25f0ab78-8dbe-4020-baf5-d1d9e78e0e69", "sighting--c10fe5f7-f725-4887-b8b5-468c6222bc3f", "sighting--f47b7a81-c9d3-4a83-9d4f-ce2df34573a5", "sighting--58117b79-7c8e-4dd6-b70e-e67c9160421d", "sighting--53cd5c49-fea3-4901-bf1c-f4b5b27d26f6", "sighting--c3596014-7522-4c01-8f75-21dcbabd85f4", "sighting--ebd553e8-28ed-47eb-96b1-4d6e1cb2da88", "sighting--f44a66f4-7bd5-4f08-a7d4-4ea83ca2d430", "sighting--d4526dad-15da-44f2-b02c-7ada5935d6af", "sighting--988ebff4-090a-44b3-8252-8868397f5ac2", "sighting--7a5f8043-c822-4869-a5e0-1e7b83d929dc", "sighting--08351fa8-96e9-4384-9fbc-a276b3c00ffb", "sighting--3f8946e6-cd6c-45c9-8775-bc2e2eb522fa", "sighting--e6d17d52-3b81-4670-b7e3-7134e6055620", "sighting--acad9804-4524-4137-94d4-0be6d4df9d9d", "sighting--b94b65d2-e8ab-4d17-8388-937cb546110d", "sighting--e9cb9c36-84bf-417d-968d-5cf04183dae6", "sighting--3a3f377e-4c89-4b81-b9c8-21247f7eb5d9", "sighting--6bac6315-a484-4983-bab5-756bffdebd01", "sighting--c4184176-d15e-4c7b-b843-12973268906e", "sighting--bb8736c3-ad5f-44e0-bd5e-d0c9bc0e885c", "sighting--6c7738e7-71e3-45b6-a7bf-0d0655980ecc", "sighting--44c539d1-2df1-4e5b-9ef9-8a45992c907e", "sighting--e73d665b-27d2-4a88-b6dd-f53a7272dcf1", "sighting--30c2fdce-19f3-4eb3-b277-8b5782266bd3", "sighting--0d780ae8-d66b-487f-ae54-42404325d794", "sighting--47964e56-e87f-4e8c-b988-8b43ad8c19a7", "sighting--171c2359-848f-41ae-806b-fc83f08ff969", "sighting--eba835c9-43c9-4c39-a025-a42aa2b5b07b", "sighting--26d43901-be58-47bf-a89e-62eebf8e7631", "sighting--bc241198-cc42-472f-a275-227775a7bb51", "sighting--f7e09bae-231f-45ba-8c60-2b3ffde32782", "sighting--39ac5b06-19f2-43e3-893b-d9a4ab0d6ca0", "sighting--43a3510c-ce90-4875-a27b-dff190f1263f", "sighting--78c25da7-fee2-4bbe-a4e1-2801c4928787", "sighting--aa2b632d-96b9-4931-8381-1eba41e7297e", "sighting--18412723-2e46-4808-ba62-98c2b89da851", "sighting--e995eb98-e71b-468b-9f06-4edc7c6a9b19", "sighting--dfe62107-009c-4a2d-88c8-ebd21d28b883", "sighting--5b402adf-b81c-4512-b624-35dc598f9fb5", "sighting--dacebd3b-7882-4706-9d03-40a1acd02340", "sighting--247a87d4-cfbf-4c27-8666-15ddab90462f", "sighting--71a4c95c-cbf1-44de-b1d1-966f28902d68", "sighting--a1be516c-e328-4412-8cb2-3683d802400b", "sighting--e9519b2c-e1fb-4bcb-8ef2-957c6f962074", "sighting--47e1cc9e-0838-4c1f-8675-9139db66a671", "sighting--2f201cf1-681b-4aa2-9b9a-ab49ce94ec18", "sighting--1a69660b-75eb-4894-b21c-0e0532fce753", "sighting--ec4635df-5e99-48a4-8479-b8a2aee53f1d", "sighting--8b520497-23b4-4f1c-bfdd-4e0c8a2cf216", "sighting--c3f2d792-0e37-4f6a-af94-26e925f036b0", "sighting--8443ef07-c6b9-4ed2-a70c-c29b88b96e50", "sighting--19fb5022-a4b8-4f52-a9b8-45b0595a8391", "sighting--12a2e86d-c82b-4b95-af2e-5fb5c639489c", "sighting--5e5dd47e-af30-4a41-b5c6-a56a52a39f11", "sighting--33ecfad8-994e-4cc9-89a4-847aa06c1595", "sighting--2882c9e5-bebd-41dc-bb97-8363240f3bce", "sighting--4935f48d-9eac-46e1-a7cc-a55612da82b6", "sighting--e318166e-2349-41f8-ab31-1178c75d27a6", "sighting--0c8b3377-aafb-41ce-bd2d-aa1554b3ed9e", "sighting--0f0c59dc-3a7b-4a9e-80fc-a4eedcf8c75a", "sighting--93dc1eb3-6473-4617-9b8b-6f9a8adc7359", "sighting--d63384fb-544c-43a6-af30-6df3fbb40570", "sighting--d9da42ce-f1fd-49e6-8f6c-47b8b7066cc5", "sighting--b4a92af3-8a17-4699-93e2-aed89c3c9788", "sighting--96ae27a6-76df-468d-99c8-aa37d41ae8f3", "sighting--0078ac38-814c-461f-a6e4-412057b30c0d", "sighting--9dd377a7-e2ca-4453-895f-5272c515db36", "sighting--571b355d-88a7-427e-9deb-cb9c1b19d82d", "sighting--e6f96c6c-b03f-4dfe-8f7e-e777e8fc2389", "sighting--0c8a365d-f5ac-400a-a517-4accda0f1327", "sighting--b6b723a5-c5bf-47fb-8c1f-d5fefc0f0deb", "sighting--93145f9c-f2b1-4ddc-a51c-e3afffcaff9b", "sighting--2fbfd45e-6e8e-458d-88a9-361f4de4469c", "sighting--288f5320-6864-4f57-af06-0c851b50f8fd", "sighting--0be60c06-8192-4edf-9586-4ba48ba41846", "sighting--be74ba03-393f-40a1-be2c-adc2be2deef7", "sighting--33bcd5cc-326a-420a-9c1f-320cefaa34ef", "sighting--facee9cd-fcdb-4061-a8b3-44d1c097f2d3", "sighting--a848b40f-a6e6-4a9f-9172-68b1800d2418", "sighting--719d2033-a9ba-47de-8f39-ad0548aeacb2", "sighting--f1ee9f13-29ce-40e8-998c-cc878f7a0e74", "sighting--4604dc46-8feb-4800-9b0e-137a066a7bbb", "sighting--e4a175ce-9d1e-4ec9-b101-88f88f92b9e4", "sighting--4ce46aee-9394-4bc0-93c8-dfcf4d1205cd", "sighting--791b476c-ba40-4798-b114-161ec6100738", "sighting--e4fbccea-ae10-4015-bb6f-0d47f1fb3016", "sighting--2871e445-05db-49e0-937c-6a9a3ebdf910", "sighting--c16e6f38-345e-46bd-aa79-10fea4b9fb79", "sighting--69fca7a1-0f45-4d20-919b-2601d3f41e64", "sighting--98c9ab2a-e97c-451c-a51d-b914e2af4c3b", "sighting--4a77e38b-f180-4adc-816c-e18e4a0d33d9", "sighting--79b13916-adb3-4935-b699-918ce9d20865", "sighting--6964b800-188a-484f-a5a0-92ce9e6858f5", "sighting--8a854b96-4d41-4b29-8ff0-5326f7a3dbe4", "sighting--4e72bb53-736f-4519-aa99-9ce89ac9e406", "sighting--81549010-695d-498d-8762-1cb84e423563", "sighting--86a8a48f-fdfd-4374-b46f-193750bbfed9", "sighting--1f137ff4-eac1-4676-bb40-c77c7e8d5cf8", "sighting--5b975ad2-95d5-404b-829e-b07aba10b56c", "sighting--bd6ffbaa-6772-4d09-82f7-1e8c51078e7d", "sighting--74cdcb33-84e2-4532-9d44-6642cd1116c4", "sighting--37243659-1f89-46de-9188-1ad752348abb", "sighting--09e12a4f-b5e8-4231-824b-ff7b23fbf5b4", "sighting--ec51f466-b297-49ac-9ce3-78070e20fc25", "sighting--4781403d-ffa9-4fdc-ab97-66b545ff4af0", "sighting--64af1d50-37dc-45e4-986d-9b16420f276c", "sighting--052e5071-a92a-40e3-aa27-4cd90854534f", "sighting--bbe1d7d5-d139-49f6-8dc5-1602a6dfbe8a", "sighting--4b044319-5316-4a15-92b7-bb43a408ff0a", "sighting--aee6c165-da23-4381-b124-357395109f1e", "sighting--9c535431-8977-4ff5-ae9e-d3e3380b0c54", "sighting--eb46df34-e3be-4302-9280-e3f81b880115", "sighting--3c1b67d1-f7b1-45cd-ac36-839f3b789af6", "sighting--da72bad4-5696-4a92-901b-90a737974d7c", "sighting--2df635ae-a574-4d5c-8121-6e4bd4e63bd2", "sighting--28c54d20-717b-4d5d-9bea-2d1be7ff61a3", "sighting--b33791d1-f729-48b0-b3ba-eeefc135b746", "sighting--3bb060aa-505b-4a85-830d-214bd037b8e3", "sighting--f183c346-616a-404d-aec5-bafefe6d0df5", "sighting--af4c19b0-12e9-45f1-b36b-f1209639f3ef", "sighting--406e875b-0f98-4b41-8f23-bdb68ef8dc09", "sighting--d74d1764-adc8-4f8b-af3b-cff57edf182b", "sighting--8444c5e5-c17f-49d3-83c1-62f06650fc8a", "sighting--8c20e2cb-b469-4bc9-a894-d88cafc02d2a", "sighting--5ecd5159-5a5f-4bea-a2a4-8a26a2ccebf9", "sighting--9ab034e8-8149-4c81-b9f0-4bc808667cb8", "sighting--94fd62b3-a69d-465e-9f77-f884aacf3344", "sighting--cb762f87-b708-4bc3-9a08-ddefd8bc01ec", "sighting--509783f5-2d01-437d-9509-a09d80dc132a", "sighting--b2a078fa-eb7f-4297-9589-43f98aadadc9", "sighting--c5d77ef7-5873-45f5-966d-6e1ffbba26e2", "sighting--1597556b-6b25-457a-af55-22b7bc8300c5", "sighting--5ac6bc20-d0fd-42bb-9e79-f20bbaaccd21", "sighting--3311bae1-7863-4724-a01f-68be15971019", "sighting--b0391d5a-cd64-41d1-a1b0-e11aa3c1f263", "sighting--389ab9b2-d911-4468-acb7-ced5f665b7e9", "sighting--e017a213-04f5-4ef4-af2e-2bc84987478e", "sighting--3890808f-fa5d-4c0c-bad1-9b4bd71b04eb", "sighting--cc8c4d38-bf7b-40ad-8608-4bac5a042d78", "sighting--8e539cde-68c9-4c69-9bb7-956d9ff6d8e2", "sighting--c3e0eafa-facd-4136-b0f3-32599f22589b", "sighting--928035b7-bacb-4dd6-a2dc-a9fada5084b9", "sighting--a3c6326d-5657-40c0-960d-ff98061ddb45", "sighting--5423e1e8-0d41-4411-8bf0-188112bfcd97", "sighting--458eead9-ba1e-438c-b383-e00d2b4c79a4", "sighting--f2e3e694-5db5-4141-8106-5b4b4d5103fa", "sighting--c101c6a8-4263-40dd-a275-cc96e7c6cf41", "sighting--eb3c26c8-71ca-4039-8069-f447b58b6977", "sighting--0471df00-b162-4155-bf08-b5baf20c3237", "sighting--1073cc0a-b06e-42e9-b31f-40168ba80cea", "sighting--e904c90d-192c-483d-8f8a-c5da690410c6", "sighting--a9cf8920-5ff2-4c4e-8a08-7592d5dcd513", "sighting--21628059-f6bc-4a8d-98d5-d2fd4467f41e", "sighting--8f860305-551b-4aa5-b105-fdbe3d9a5903", "sighting--ec7e5718-1c91-477d-9fc1-4c6bacb7f07f", "sighting--4986a4a3-0ed5-4330-bd0e-56ac85023f13", "sighting--376e550b-d9d0-48fb-841e-3cf0ad5516fb", "sighting--642002eb-a658-4102-9389-f496c8eb5cb4", "sighting--6ed8b321-2d1d-4641-86bf-743fb6d69a34", "sighting--80f61107-a2c9-4e56-ac9d-65bc1722c8ba", "sighting--3e555cb4-695e-46fe-a514-6e6954ecbf14", "sighting--b3488340-82d6-430a-8345-7617cdcf11f4", "sighting--7b65342d-2ff1-4e02-bad7-2f083d876c64", "sighting--7427145c-a11f-4df9-8a05-683c0de729c9", "sighting--7478eaee-4b2c-4112-af8f-cfe5c97395a3", "sighting--2d5c507b-f32d-40e7-b577-48995ae24960", "sighting--6461b89c-b130-4917-a9b5-4ca407644ded", "sighting--df603542-a2ff-4ac2-9566-a00052f7debd", "sighting--01820889-c907-403f-b2c6-8ebad705e24d", "sighting--c2976177-f1f2-46c6-bb46-3e37e78f28e4", "sighting--d04a28b4-11a7-4565-b60b-5545336a6e53", "sighting--b027ac37-5134-4e0c-80ae-4aa9dfcc0c22", "sighting--fad54a93-8bc7-476d-8202-b17fc0f9ff71", "sighting--b8dfdacc-3b60-4618-bf80-7ede12b8a9b2", "sighting--342c2293-3a35-4a0d-a9a2-f4d8d8c9afee", "sighting--8157254b-4efb-45eb-9bf7-87eed0647b94", "sighting--c772e10f-b4f5-4369-a3f9-d083f46e3e66", "sighting--8377ffcc-28bc-4019-84e7-c6dd1b291183", "sighting--4d2f0bb9-819a-4072-b9d6-86fa8d640dd1", "sighting--42dfa454-3db6-4c9b-ae3a-9062239c5a18", "sighting--3c6d026e-aa07-4bd6-8166-4ab2107a7f99", "sighting--40a68474-5049-4189-9146-197a049e6695", "sighting--707d4b1f-ab3f-4e5d-a131-c0e186561dc8", "sighting--80676a3b-d8e3-43cb-b0e6-54670ace855a", "sighting--d4cf2fbf-0c07-4ffe-ad97-e610f96fe98c", "sighting--bae8ad7b-f2e8-409d-a9b5-bca4f63823e6", "sighting--f6576410-bffe-48cb-81f2-4cee03273495", "sighting--3ed0eabe-3914-4d98-982b-bb6de05b3c66", "sighting--4d8e0dc4-cd84-419d-b8c1-80977ec2e06a", "sighting--44731bd6-502e-4f59-a70f-660ad6b8122d", "sighting--48b6d280-a4d2-4e9c-a30f-7eb8bd5c4067", "sighting--0a0f5af3-90ff-4bef-bb9a-ec7f11983331", "sighting--d53cddb5-1362-4bd7-9963-a9a98a56889e", "sighting--4aa5cadd-9a25-488c-aca7-e85f92d0b748", "sighting--873df0fd-782a-4719-b8c7-67875e71d8f6", "sighting--11ae3a0c-ee13-433b-9c06-31619c3693b2", "sighting--3a6055ee-bc40-4788-86cb-d8e5776ce923", "sighting--12ebe4d4-e3c8-49b1-8406-433a96485c99", "sighting--c228051a-d607-42f1-830d-32288ea1a601", "sighting--ee55408d-2a7d-4168-a649-14e66c3f4503", "sighting--599223c0-9528-4bd4-8c3b-e472b970e86a", "sighting--862440cd-b01f-4a91-9aea-2601fa1fc748", "sighting--8a7fc1e4-5a88-4560-a6c5-5878bc49632d", "sighting--ae9f9f7c-c4c0-4d00-be8a-fabe54707a6f", "sighting--b0af5ec8-8f15-495e-8969-597e6b737a2c", "sighting--6ca69376-8f82-491f-9b5a-46e98db164b9", "sighting--1ddff7ed-e786-4717-a53d-1eb11afd3bbf", "sighting--55381878-82a3-4ae4-ac10-2cc6957c10f4", "sighting--6c103d5c-293d-4f32-b3f8-b13e225a2b12", "sighting--af2bc40c-b118-4dae-a330-c801c1b52e66", "sighting--e3ebab99-7842-47b7-a7e6-9e78976a4933", "sighting--ee847f38-e958-4854-97fd-0fce145cd20e", "sighting--205935d1-931f-4312-bca1-2b18dc4e7a8c", "sighting--4c7e7454-2c15-4a9e-b3fd-a3c22511ec40", "sighting--2aee8b5c-544e-4768-ba8b-9aa74969945f", "sighting--de1ea1b6-65df-40fe-8885-04fc44b1fed0", "sighting--095689cb-84dc-4cfa-a22b-6f9c91ee3f03", "sighting--6b8d5676-aef8-4328-a6e9-b15b07cb858e", "sighting--426dbf78-231b-4433-955e-04e225b7d042", "sighting--010c1094-141f-467a-9357-77911503341a", "sighting--a2e18f37-6865-42b5-b5e6-a08c6994f6d7", "sighting--b79cc9e3-f74a-40a7-a53c-6097265d8264", "sighting--71b1ceff-a04c-4792-99f5-d1ad58d4cae5", "sighting--c4b0c372-c1b5-401a-81aa-d3ff4897ee9c", "sighting--f43649fa-514c-47b4-ace9-917c9fa029ae", "sighting--f742e9c3-de02-4cf8-9dd8-c24a8b660130", "sighting--4dd903d2-206c-4251-9bb6-0d1d57d7fa29", "sighting--76dd11fd-2fec-4055-baf8-638847741f47", "sighting--6f76a013-a0ee-4249-9b9e-b3abe70103a0", "sighting--8b48cfad-9334-4136-b6f8-db9aa2a343ac", "sighting--10b66b10-df78-4ed9-a281-2a4a58ab6cb9", "sighting--099e99ad-730b-4bb0-9c26-3864d7ea4696", "sighting--92075a84-7003-495c-b4d7-d6d9ba4bb936", "sighting--c8477ae9-b3de-4c78-b227-c6e4c44e5d84", "sighting--864a4c1f-700a-4849-a53b-70e38d94403c", "sighting--541a2dcd-8a3f-462c-b5b9-eb33b6cb2aab", "sighting--29f7c3e0-38d8-4678-b9de-ea32ea96d325", "sighting--91abee13-48b6-47f9-b7c5-2911d4b04edf", "sighting--ba254a81-4d50-4095-a552-f15259197b33", "sighting--56b085d7-a624-4939-8a02-3e287bb50683", "sighting--2a188fb6-af60-4ef1-9bd3-0d2054630d07", "sighting--98754f78-eda9-4841-b929-87d73cfd2838", "sighting--bb0e5dfc-3ab8-4281-bc9f-2da3fb700274", "sighting--5af0417e-c9e8-408c-822c-e5d22aa08be4", "sighting--09bd6ac4-4921-4ac1-a09b-a933e72e5bed", "sighting--2e5d9c72-96bc-48fb-ab12-b043c5d735eb", "sighting--e7fb7e85-2c02-4a7a-b1f9-644c9eb0f5b7", "sighting--f440f369-f52a-48c9-8f18-b415c8fe4230", "sighting--ef1d9981-f4a6-482a-96b8-03a6f533a611", "sighting--e866880f-c71b-496d-bcd6-cf6498ba14c5", "sighting--87e4b748-d40e-4a30-a42d-867704a0e3e1", "sighting--f5653151-67d8-4e3c-9703-c53119b95ba0", "sighting--64cf9fb2-4384-4fb4-905a-71abf63c1c9c", "sighting--45959b12-4362-4de7-964a-7467b9bbd818", "sighting--57a3149e-5246-4da0-a395-240515145569", "sighting--67d6c148-9a26-49a0-aa7f-a24952d50d73", "sighting--d93514d3-9582-43c8-957e-2101ae3eaf3f", "sighting--a34157e8-ffb7-4b90-a3ca-6c7d21a114de", "sighting--a9f59625-a6a5-427a-9142-fbe8ac09ea60", "sighting--788d3e45-e1c0-465f-831a-c69caa071072", "sighting--69496940-0262-4d27-82d8-f068bd6a92da", "sighting--d051ede9-2b81-48a8-beba-dd3bafa44df4", "sighting--478ac501-f903-4a48-b607-161e6c56e41e", "sighting--befbc443-41ae-49cf-a36d-065f1af1247b", "sighting--ed610d37-4fa9-467d-8591-0fa3312e6e6b", "sighting--7b6f122f-cce8-4cd8-b218-3ce0a7fd7635", "sighting--e889f533-4a1d-4f95-882d-2cdee4276dee", "sighting--6755dc89-d7f2-4d30-b4ef-62a10c451756", "sighting--2db7f846-06b8-46af-9934-ad1bf094679f", "sighting--067ea955-eea6-4292-a75d-92645acc774f", "sighting--966fbb63-097b-4cf5-87d9-7894880b08cb", "sighting--fa409254-8d1d-41fc-8791-7df5aee8c72d", "sighting--3a0c7042-5a03-468b-8891-119b471d0feb", "sighting--dcdd0cbf-87ae-4bb9-b331-7e3b0f8192d0", "sighting--82b9e441-06d8-4b55-a038-4b7651b67d0d", "sighting--34928360-dcc5-4c0d-8fed-6123b1baeea7", "sighting--a651cefd-fd29-4662-ae63-c35b6d0f98f9", "sighting--387c9de7-066e-422e-8932-381521fc5f9c", "sighting--0c41b2e1-4277-499e-a8ff-b105228e56af", "sighting--b430ab52-ad35-47d8-bd70-56db73b4ab39", "sighting--c87b9676-54c5-4337-9e73-6d271d529414", "sighting--44bd00ff-102e-4f5c-b189-571a6d7618c2", "sighting--14aeff9c-c24f-4791-b0ae-13eb4d05a23f", "sighting--d03fbcde-7e18-4a29-a0bb-0557401c815d", "sighting--a1325133-0bb5-43c6-ac3e-f6ba263938a6", "sighting--4692cb4b-d798-4d22-92a9-9825a65fb7ce", "sighting--818d986a-6112-4698-96b6-3f455acf17b8", "sighting--d98425e1-0c01-4e62-885d-0debd79510a1", "sighting--b5e48369-4e66-410a-ab54-c787f44c1267", "sighting--8da16e00-cfc0-4306-b80e-236b95e699c2", "sighting--aa7f1541-6176-430b-b326-b173cbdf09de", "sighting--8caf4395-c9ff-4f96-8d23-5caccb29a5b0", "sighting--76c341f2-6577-4611-91e5-188f1ec7a41a", "sighting--f3d1606e-0c91-45b4-8d2c-5542e73fc190", "sighting--04e6d846-aa7c-4fa0-a9b8-326586ecab72", "sighting--ff5f57ff-b6e2-4e08-aca9-6fd16862a378", "sighting--db982bc7-ef01-438f-85a7-1a8a6e30003e", "sighting--01c1f03d-0593-4e69-8353-4939d483cab0", "sighting--594d285c-7ff0-4d0d-9433-a52dcb1b2b36", "sighting--49c763e0-3765-4e0c-a55f-030ac478f22c", "sighting--7bd66012-05fd-4efa-85b5-7bcd04340851", "sighting--707173e1-e0b3-43f8-86e6-8b504603960f", "sighting--80179513-0e93-4c09-9347-ca81f0d20bf2", "sighting--a99a4487-5df5-49da-9c1d-c0e9314ac8a7", "sighting--f164fdce-3743-4c60-9da3-019a56d74ae9", "sighting--450ec71e-fbd7-41bb-889f-3c78266bc4d4", "sighting--969d170f-e76b-4a8a-b240-a5bf037d40c5", "sighting--7d91da45-bc82-43dd-b97a-f69849facf81", "sighting--0e99ec63-2cb7-40d7-9d4c-603e5a4410ef", "sighting--7452a314-8f1b-40b2-aa45-1cc24850a152", "sighting--6b0b89d4-c1fb-4440-be08-281028397908", "sighting--4fa5fd6b-60ec-43c5-986e-c20ebcfb5df9", "sighting--1483d576-e910-46b4-b7bf-d137b09395f8", "sighting--244605aa-b910-4efc-a8e0-171cf927e151", "sighting--44c8bfb1-ee4e-41c5-9fa7-770595cf4466", "sighting--e993a8d6-6451-438a-a597-06f09f030cac", "sighting--0b538076-fc41-44ce-b7f4-5acc45156e4c", "sighting--a2412911-87a7-480d-ba34-a6c3a257407d", "sighting--fcf85152-1035-4568-8724-bdbb524868e8", "sighting--60d62edf-5e20-4228-834c-26537f442fe1", "sighting--55878dd4-e0d9-47d9-92c5-f6afa485152f", "sighting--a7e97c46-f91f-4a58-8107-c54ff7b5028a", "sighting--1429a6da-c1a2-4845-a7dd-60cbc1ccd723", "sighting--97ad360f-8ec7-435e-ba85-53b81f821020", "sighting--bae90af9-be10-4cb3-9eb5-a576cc7a7d39", "sighting--b12230b5-d2af-4894-b547-ed388d9f5df0", "sighting--47d86e23-b287-4271-bead-5550dd665f10", "sighting--1f26644f-2db0-4a3e-895a-4d8729b17ec4", "sighting--209d1a2e-ae48-409e-bd58-3e3d874eeb68", "sighting--75186f44-a747-4711-8cb6-a5811541cbcb", "sighting--57750ce4-f6da-4f5d-a13d-f802f6fa33ba", "sighting--38edc855-9dd4-4f87-899e-ed8661eb432b", "sighting--ee921721-a942-45d8-a7f3-66780bf57fe6", "sighting--87bfaa0b-a28d-485e-94d9-af08046bd027", "sighting--849e51e5-ed6e-432b-b375-43729f3bff1a", "sighting--3ad17db1-8f3a-48a9-94f3-23ef6beed5aa", "sighting--d8253f37-8e6c-4af8-98f6-1f3eae9b835e", "sighting--e4141207-f1ca-4ed7-b5ac-c608379eb43c", "sighting--ef390fdc-6655-452c-9128-57243fd66dc6", "sighting--af674478-89a8-4255-8955-3d5de5d8fc90", "sighting--de50680e-994e-4f02-a2c2-f071b2f8f5d8", "sighting--6710fc1d-285d-48cb-a519-43dab677934f", "sighting--ac5073d6-e157-487f-b36f-445791b32d0f", "sighting--a777c241-bb14-497e-94c4-369544a5fb8e", "sighting--44d259ff-ef1e-4aad-92c6-7fce2c02c253", "sighting--5525a175-8a62-4ab5-9e1f-8d7a5473c60f", "sighting--c73d915a-ffd9-46d1-92bd-b5f19cb61621", "sighting--d1e30ea6-59bb-4364-a279-193b89a264ba", "sighting--515fae93-ee28-4cf1-a083-4a7f8b3df1a5", "sighting--671f32e1-9c79-4fcf-acba-b33f76c26cd3", "sighting--90318395-881d-469a-834a-5aeb83bba1b5", "sighting--dfd3f647-143a-481e-be4f-93a93c3a89b3", "sighting--4dae1e7e-f3da-4458-a2c3-0845c453fa02", "sighting--a2fbea98-a3b8-4082-b905-e814f2e38768", "sighting--5e61e6b2-12b8-4c6e-936b-c2e989ba2ba0", "sighting--30801de3-57b5-4b61-b6f4-a2a0f6469672", "sighting--2c8da750-f0a2-4ed3-be63-02e335c8fbee", "sighting--6bf73491-1699-4302-bf56-50bd5ecfb02a", "sighting--9fe6afc8-f5be-4b9a-8b7b-65c2f72bbd8b", "sighting--a7fbca95-11a5-4677-b14f-06675974e376", "sighting--1ead4a2a-6e6e-4259-ade0-1fe38050a2b1", "sighting--c6a45d62-55fd-4e5b-b122-6adfca041ced", "sighting--beada88b-4f94-49ac-9fda-b504f462ed77", "sighting--ff9460ca-1521-455b-9a46-86864dd5cd1c", "sighting--2166172f-5a79-4449-b561-6848eafc067c", "sighting--50f17d40-b14d-48f5-8efb-d2cda663717c", "sighting--3fc832f2-259d-4319-83c5-5d83baa61c44", "sighting--ad7eb9ba-7212-443d-90cc-e1559ee3507e", "sighting--b374684c-9605-44d0-a2f9-41b34dcd5d09", "sighting--97e769e1-a425-4e15-b995-878f5379d757", "sighting--1fd5f3fb-1b19-4af8-90a6-4cb3a253605b", "sighting--a59f8451-fe34-4801-961c-d858e75a3c80", "sighting--1cc26362-1c3a-454a-9741-35a6b1ace62f", "sighting--5708c4f1-6555-477c-83e7-08a0990b0c87", "sighting--f553020d-7d04-4711-93c7-c94155566260", "sighting--fa74ed6a-79df-4827-a50d-f1da69959cfa", "sighting--8c61d27c-ef8b-42ea-8a49-7025ac9a3e73", "sighting--f88c49d7-8c82-41ba-ac7f-c9a2511cf129", "sighting--22dac626-cd13-425f-a55e-42c248351148", "sighting--c9a6bddc-efb2-4bdc-b8c3-3f8c69f5e325", "sighting--bafacfd0-9c01-402d-9163-4774e1ae51c0", "sighting--1a7a64ac-a22c-4473-927d-92978678dbc1", "sighting--f371fb7b-1815-477c-80ad-4c2c5b6fdb8c", "sighting--441d6054-3f03-4dd3-9332-af35fe30fb0f", "sighting--20ff0c6f-5692-42e0-8760-dd86b7f0eca2", "sighting--19de4584-7b0e-4e99-864a-e19bf415f994", "sighting--0194690d-132b-495c-adcd-8b9dfd210878", "sighting--a1d22e2d-fbc1-421e-a3e3-d2af9a8602c6", "sighting--f4b7d62b-8c89-4c47-bc14-a50f4cc33eb0", "sighting--1ee0ecb9-5c23-480d-8d0a-4f51dccb27fb", "sighting--016be362-d8ea-4782-980c-4313065fe738", "sighting--7e11f78f-8080-45e7-a5d6-b8911d81d876", "sighting--47d730e0-36f1-4db5-804a-0a9203eb7245", "sighting--24f3b185-e8c8-4dc7-bc87-ae1b51f23fc8", "sighting--369e727a-b622-4e8f-b038-6fa21348607a", "sighting--6d130fdc-d6b6-4fc0-9edd-a965aa4beae7", "sighting--cb694eab-b1f7-43d0-9e13-282c71ee2ff8", "sighting--eeae3011-ec8a-4d02-addd-b7cbbba27170", "sighting--c2b85ccd-b473-4fd5-9dd0-3c8cb7b7ef30", "sighting--4a0386f3-6cd7-41d9-8669-b4e597ca953f", "sighting--fe715be5-34de-4760-9b7d-556b638c76c4", "sighting--5c04693c-5262-46b3-bd72-65be74f41214", "sighting--10794f33-f7c4-43bc-abd0-27364a147caa", "sighting--9ff3b9dc-d8f4-4bc1-935e-b0307cbe25af", "sighting--c6cee2ca-afaf-4570-b59c-0879ff4810b3", "sighting--14e4b7a4-5e10-43cb-99c6-82467aec2388", "sighting--6c040d4e-1d57-4ccd-af64-65a809b45d8f", "sighting--9cab368c-85b8-4672-bda2-049b3268f80b", "sighting--dbe56257-3608-4e85-bfb9-a54afd0e8648", "sighting--bac58f39-749b-4418-9ea0-e41e91519f19", "sighting--e6b60f22-edab-4bb0-9e6b-79837f072ecb", "sighting--79172cf2-7f17-4f2c-a753-3473e81fa2fc", "sighting--e47b6914-8180-4f5c-8fc9-c4fac8bfa7db", "sighting--194d07bb-efae-45fa-bef6-8ecae88654a2", "sighting--f0562af0-9270-4ebf-8548-5669e3c0d013", "sighting--ca03471c-3d43-440e-bce2-6b6aeae5eb5f", "sighting--ed9c5e96-ec99-4d81-a0e0-0409ee955eec", "sighting--ba4eb67c-a76b-4faf-8482-f6fb027de574", "sighting--464e487a-b207-49f4-8494-7b26cebcb1fb", "sighting--aabdb593-1af2-422b-9859-0c868247c9bc", "sighting--85260515-9047-421c-80a5-f5e0daf131f6", "sighting--ac843e65-52e6-4092-b2a0-4223fa4639b0", "sighting--d9ebd19e-1ceb-475d-9bd2-f21cedb76999", "sighting--4951e7bb-b0db-48ac-a363-0d4434052d6d", "sighting--bd42fc22-8d70-4e74-9e78-d18ce6bf4e65", "sighting--dd55e40d-3492-47ef-97d4-f77d3aa6afd4", "sighting--0e43f044-23d7-4163-adfd-8d04faa8b119", "sighting--8d55b7bf-a74d-4b09-a9b7-4b705d91e162", "sighting--f84c682e-9d4e-498c-985e-c5655d916a16", "sighting--82f70fcc-7f0b-4929-9002-d108dc38c9a1", "sighting--c6bb8aba-a22c-4e85-aadf-fc05396e5f2b", "sighting--668cdfe1-0536-4a17-9a42-fbe585db4e78", "sighting--94db2da3-a747-4e76-9646-274bb2486a05", "sighting--0fcf6777-7db1-41b0-ac45-f1dd051dc430", "sighting--038b037a-f450-4f98-b87d-a9fc38f05f74", "sighting--3704ab4f-fc51-4493-a3fd-c845ca8ad249", "sighting--cfc43124-9ccf-4ac8-a82e-9cc1441193f9", "sighting--48e3133e-9385-4f6e-ab09-b44e0670f4ad", "sighting--a727c7d0-85c9-4be4-9e25-8179ffe80f01", "sighting--4aa0f2b6-2c5d-4adf-afa1-5c3ea783094f", "sighting--11c0a54a-c1ea-44d2-96c8-cc0b425b70db", "sighting--e71eb9ec-dd3f-48c2-a885-100c540dfdf0", "sighting--8932df56-27fe-43e2-8f1d-188566047efd", "sighting--b5936243-ca7d-4f2a-9aad-b7fc67181615", "sighting--c9da46fc-9cea-41d9-8b28-71d597f14847", "sighting--937a76bd-9327-40fc-84b3-a76afdc6a607", "sighting--1193d7e2-caea-4795-9132-4e1f8d128d68", "sighting--f91fcfe8-3ec4-47cf-964c-c429dce38e45", "sighting--4d7dc761-1f34-4be6-9ee9-52a7c157eb81", "sighting--9732ff8d-0c04-498f-9ea2-fcb183ae4411", "sighting--ecb9c640-0a10-4e81-be8e-704a3a82986d", "sighting--e5fc603c-d011-4c25-b062-a785e7f4ef33", "sighting--2a7cd3ad-b0d9-47cf-b61a-9db62493bb08", "sighting--d687d4a7-8b15-43c6-8b1f-22f506b9a41a", "sighting--c4852c03-8b65-41bb-86c1-b5e20431cb90", "sighting--318d8836-6a08-4d10-af25-b73f640e587a", "sighting--51c3967a-84d9-4d62-b383-916c4f7c5c80", "sighting--e20f2fe8-f826-4bca-b106-8e5fe4b4a94a", "sighting--a2bd66c9-32c3-4da4-a982-68cd5e0ecb17", "sighting--b5e35ac6-1fa5-4a7b-8e4c-5149b8a2f2dd", "sighting--898dbe14-0a34-4bec-8012-91ad23a5ae0a", "sighting--5a6aa50f-f61d-44ba-afe1-f2d2ec43a950", "sighting--afe5f5e3-5b92-43a6-9251-81720971d4e4", "sighting--36172be7-961b-4c33-8f46-d8a3ee961411", "sighting--43246eca-66d5-4fad-aaed-d0a40f5ea17b", "sighting--050a6426-2a27-4544-983e-7ca2ae377012", "sighting--9fc474f0-7569-420d-af3c-8ee4ec943d5b", "sighting--fda2c96a-bbb6-473d-b16b-723a7d3b681b", "sighting--70a423d4-c8f3-47b0-8af3-eeccecdd8fec", "sighting--cff4d837-3249-4a82-8c0e-eb85564f39c6", "sighting--27aa6d5b-87f8-4ba8-a9ca-50373465dd9e", "sighting--f45d4e1e-b86e-4c41-b923-72d2d712080e", "sighting--af924f2e-4b12-4cc9-a13e-6f6eb68ed75f", "sighting--a43d884d-2226-4535-a5d9-e054448c42d6", "sighting--87b90e3f-e194-40c6-a9db-f391cd869798", "sighting--567531fc-bbb2-4f3f-a47c-09c67ed66fe7", "sighting--05ee6db5-6fd8-4f09-8e4c-fe9771ef01a7", "sighting--43614540-8855-42e9-ac6a-8438a2a021b3", "sighting--35c9ada1-89b0-4fb5-ba87-552e1d4196d8", "sighting--7a883a83-572c-4749-935a-282af3435ef5", "sighting--ebf33b5b-bb23-4054-a13b-85d1559669b5", "sighting--ec9e8989-9563-458f-8d25-d7a8e758c114", "sighting--bf7c76e8-fe7c-4296-a660-02a7bc4af4f9", "sighting--ce853a60-cb72-4e01-adbc-740bd961216d", "sighting--d48616c3-68aa-4845-8a5b-9a3756a648bf", "sighting--e1492408-9ac1-4f0c-8788-6e897a4eec46", "sighting--30016d73-b0af-455c-a142-2b2699bc8fba", "sighting--335986bf-0fd8-4209-a62f-491ff6468caa", "sighting--d6780358-d9a9-4a3f-bd92-895f1547f32a", "sighting--43b167f0-40e0-4145-b43c-12514e0f48a0", "sighting--ebd2b071-6905-4e83-a6c7-b696968dd57b", "sighting--3c34e0f5-a34f-4bb2-898c-10591b036b03", "sighting--af742148-6298-406b-b069-0096ab13c525", "sighting--6767beb6-2c9c-4181-ad18-c3fc08fdeea1", "sighting--b7a0397a-1976-4ff0-ae5d-9571958d659e", "sighting--03d49502-4e48-48aa-89cf-2c72e6067a51", "sighting--20b5ba22-2a06-4f6a-aa8f-0a33bbfe80f6", "sighting--bfe72460-61e9-4c9e-b3a4-18bd3e49a3a3", "sighting--90ead15e-558b-48f7-81cf-2b1761e90225", "sighting--c9ee490e-de58-425c-bc06-7295fbaa1617", "sighting--908f6249-46f9-41c8-b9ca-164d00e74f3a", "sighting--01c8a84d-c700-42b0-b81a-9ac2782af147", "sighting--c83c6c17-fbac-4701-b7cf-a2929f1c0460", "sighting--fb7ffa90-f53a-462b-9865-0698c1ce30ce", "sighting--1cfcd7e0-65ae-4990-ba10-92f2d0b26a86", "sighting--9bf57aa6-2b72-4bcc-b075-8de826cea9f9", "sighting--679ce5e1-b880-4073-b9ee-c39c59f69fdb", "sighting--6b8ee334-c50f-4407-a9bd-87448cfea69b", "sighting--61dce956-438b-4385-816e-76f43baa8325", "sighting--c24bd4c6-beb0-471e-bd80-fec62925434a", "sighting--54000bd6-58a8-4914-997d-820d3980b417", "sighting--9208f075-cb62-412d-bd07-7777a664f23e", "sighting--22d9bbbe-dcf6-4eda-b980-b9cb7fa58057", "sighting--255590fd-4497-4d41-b8ce-d38caae2e9f6", "sighting--d38938c1-d27c-43fd-ac27-8fd06f86ecbe", "sighting--54079354-ffbf-4cd6-aa90-be764629cd9e", "sighting--17bf5d7b-6a3b-4d67-af01-f7a06f3f7191", "sighting--2af4955a-e88c-404c-a7d4-cdbe64e960e8", "sighting--fe6a4f2c-04f6-48ff-99db-c610f108d544", "sighting--95ed2e8d-cc49-4363-92fc-72e59afb1e94", "sighting--549b9e46-5617-4db6-9a19-5134928a22bf", "sighting--4d70896d-8a4b-45b1-9751-bdd85207aa4c", "sighting--4ce3361c-b453-4011-bf18-f8c790588719", "sighting--4df18ebf-deee-4f44-b4d0-e428a4d4af5f", "sighting--90a1d028-080e-4cc4-855c-2baf9965f681", "sighting--8bb8caeb-dd7b-4c15-88a5-719294b68bd0", "sighting--a201b52f-cb3b-4db6-921c-25c2e1ca3fd6", "sighting--559cb2a0-09d7-41d1-8ba2-45e7e258da3c", "sighting--74aa6544-3dc1-4d6e-9a55-c0c16e5d70a1", "sighting--76c6fb42-0acb-4870-8388-5e05729970b3", "sighting--0b539a00-d367-4b27-8dfb-d231ec2947ef", "sighting--a4ff7e87-ddd1-49b5-9f1c-a20684ed1b0a", "sighting--3ebeb58a-2d7d-4757-b6bb-4f8310f04a38", "sighting--f3f92c95-9e2c-403c-b458-d7caafe56351", "sighting--44a2ce55-c276-470c-8209-aca587ca2463", "sighting--7f8c6e10-dc75-4ab3-907c-a7ede213fc72", "sighting--783f66bd-e0f0-48e9-bdcb-485c215e88dc", "sighting--7b2fdb90-a4be-472d-a229-4951f160297c", "sighting--423c5186-4fce-445d-8890-55021d22c952", "sighting--d482a503-b5d4-4767-8eb6-e5d0e3ecbee0", "sighting--656910e8-66f6-4398-9181-3cd70167ae39", "sighting--112e283b-cfa7-41c4-ab22-2b86d9d57e86", "sighting--eb4821cc-0375-45ed-81d1-be2e8230dc50", "sighting--e9dbd47f-49af-420b-b1f3-0b3147406f6a", "sighting--fae89b83-141a-477e-8ec8-32e30543c875", "sighting--bc73777f-e01c-433c-a4d0-1ee52b10b70b", "sighting--6f6b4457-64b2-4058-93ee-c29780803129", "sighting--01fd0f5c-cfe8-45f8-895f-dd64b67b62a4", "sighting--016ab5dd-1379-475c-ab4b-abb655a49206", "sighting--e67b9a35-8ab1-459f-a136-61b74e0d86a6", "sighting--2d22e8b7-7690-4947-b46b-b2c24dd4c3d6", "sighting--b2dd8b22-ce9c-466e-b609-8920516b25d5", "sighting--6056b54c-2f2b-441f-8ce8-8658e2088816", "sighting--1a725658-9af3-4aef-9781-0b9e7d0ee66a", "sighting--c597ee6a-447f-4858-9770-bf422d0b47fc", "sighting--c6e580c3-b193-4068-8ace-9af8bcacb472", "sighting--6aea41f5-e8b1-450e-947e-8e14614e6890", "sighting--c4131911-0927-412c-8f09-871f9e113f90", "sighting--9dfa6b3a-d380-4620-a545-7ffd4aaf470b", "sighting--02e2d828-1fc2-4d6d-a1e0-c3a4f2154198", "sighting--acc363b8-da77-4fd0-a900-b8a7214f4263", "sighting--9fa7bf66-d6bb-4363-9d01-d045f6a38e23", "sighting--e44be27b-eeb3-46da-b3b6-c133d3903e6f", "sighting--4ab3cafa-03b9-46f6-b622-967057b280f7", "sighting--e722dfe8-8e1e-4153-9d19-0d7cc99505ab", "sighting--5f98db11-d28c-4a0f-a0d3-2cb7e452bb63", "sighting--cccc0856-edda-4cea-9bbf-9de114350b81", "sighting--3d5f9b41-352d-4848-b7a9-c4fb46cd84dd", "sighting--8d3dba32-982c-4dd9-9cf4-7a22202cd9fd", "sighting--8fbf9734-e71a-4825-81ab-204e3b342574", "sighting--355af815-a0b0-4613-b99f-2e660979affd", "sighting--13d16f0a-56a3-43a4-9e72-3be9d62f616b", "sighting--524325ad-d5b0-4fb1-b618-233683076232", "sighting--28faa9e5-9790-4ce5-b33a-9ad3a4987f20", "sighting--483f005c-d56a-4147-b407-d6f98ac9df90", "sighting--a1f3312b-31e0-46a7-8fd3-1e04653f7341", "sighting--84e4435a-b99d-4d92-8b13-eae9ab8d676e", "sighting--24c546bf-d0d7-41a6-b797-f43b263e5c1b", "sighting--9772d2c7-a3c2-489f-850b-0c5926ce49c2", "sighting--4feac6cb-0c4f-4f6f-8e4a-954139ab2495", "sighting--21ead867-733b-4687-aa26-c3d3bc4b25bc", "sighting--89c32295-b659-4b4a-a408-ef6baa683e11", "sighting--b0b5123c-1599-4a6a-b9c9-9505091ae1e5", "sighting--ba28b4b2-fbef-496b-8867-584f3700a5ba", "sighting--6ecb56d3-2943-42e7-b65c-85545ff78259", "sighting--ad704372-b5d2-4566-a773-2f411eaa5b96", "sighting--3db186a3-a2b2-4a40-8ef8-1f05edcd075b", "sighting--cedbb287-66e1-47ca-a615-7cedf4bcafdc", "sighting--20ade5c7-7ef7-4ad7-bcdc-222973c0131e", "sighting--400cebcc-a335-4a9a-9346-69e2d0bff7ca", "sighting--fa66c57c-e79f-41d7-a685-66838cc33622", "sighting--5ed9dc60-29db-4065-9e7b-c6a2290a37c1", "sighting--bccd2b5f-71aa-42c1-a864-5e4f279af872", "sighting--b584dccb-b5c4-4c1b-9322-5d2eea192ad1", "sighting--a96ddaed-b20f-4207-a070-5b331de8d250", "sighting--216c340e-e1ea-46cf-b5b4-74e74d441901", "sighting--0f722fe2-ed8b-48e5-83fe-6c45a9b5791d", "sighting--aeccc527-3024-4f1a-aa82-45653114c113", "sighting--3b7a817a-64ae-4dad-adde-af76ddf49f7e", "sighting--cc83a8c9-dff0-473e-91e0-bd112a829807", "sighting--97e1c4b5-8874-4b28-88b8-b8ff96d36a75", "sighting--1205ff99-ae51-4963-82bd-e26a09d2d367", "sighting--e2c1d177-ec0b-40e4-bc86-4ec3e04edf82", "sighting--5eb48bb6-a1e5-4fa1-a018-3ccb557a3cd7", "sighting--d0e608c2-a361-4057-9bfc-c7b83f6103a6", "sighting--3e1a344c-d3c5-4c99-9e94-7ecf110616bb", "sighting--090247c2-d299-4943-9962-0042912c6de8", "sighting--8ee5cb0d-5b58-41c6-876e-d591f34ddfe4", "sighting--95ea2fe5-e8a9-45f1-9d45-7ac68e87f2a0", "sighting--ab9aac96-b405-4bbf-b021-218a906e60d8", "sighting--902ef108-98e1-430a-817e-cb04cde526fa", "sighting--c58a89bd-58a6-4068-8ee8-516653b6960e", "sighting--3876c552-6db7-444e-8d04-209008722ebc", "sighting--28eb6946-9036-41dc-b801-da695875eb70", "sighting--01f5803c-ecb7-4adf-b92d-60487361e6e9", "sighting--64e78400-1ad9-4f69-b7cf-37ac0d1d084f", "sighting--1efc33f6-cab1-4658-a838-10098ab035c8", "sighting--38f5e400-df24-426d-898d-0c653accbb71", "sighting--daa74487-abb7-4170-b75a-21b1dc14d800", "sighting--5d800126-a64c-4ec4-8fe9-1edad3d50ac4", "sighting--998f5be6-577a-4dc0-886d-e990d001d020", "sighting--873c8fa4-d27c-4d8c-94d3-cd00912684c3", "sighting--e55ea4d1-cf5e-4a60-a584-fe480070c160", "sighting--b0df7671-11ca-4e36-84d6-b42e311f51ee", "sighting--dc264789-0576-4640-99fc-1bb3e6c70ce2", "sighting--c0f3892b-5941-4884-9761-4d3f5be6a816", "sighting--7ae57f2f-ecdf-430e-a9ca-518ddc192012", "sighting--59997852-2f07-4cca-a6e8-f26bfc84cb0f", "sighting--a1e8d958-66d3-48a4-bcc0-9d24ef720f58", "sighting--5b1609ab-e198-4881-9a21-aebbc0f16f53", "sighting--75b175a7-86f3-40fa-8d5c-6ce8df00be1b", "sighting--f48bcae5-d767-4764-844c-942f96c39caa", "sighting--1929aad1-d697-41b9-9155-fd43c614016a", "sighting--0740c23e-8fbb-4958-98f0-55cf64bba2b1", "sighting--50266f40-834d-4a34-8bf1-0673b2bdee89", "sighting--98b2a3f8-7cc7-42f3-906c-013286e8f5c7", "sighting--877612c7-1754-438f-9ddf-906feb7f6ad2", "sighting--5d75e2ce-0919-4505-8645-b5bd5c980534", "sighting--fb7da1bc-7022-41c4-a292-fc6963c8e8a6", "sighting--b2ffb22f-5935-48ee-9035-b7c244091de9", "sighting--0ac3d575-8203-4c45-93f0-db371b9dcb32", "sighting--0e3caafe-3471-4e83-944a-184c7a767c5a", "sighting--e2d889c0-86a2-49f7-95ad-7ec01e9bf5ff", "sighting--fd28164e-cfd5-49ad-b69c-38cf0c791572", "sighting--1c46b1f1-b7b2-4b84-8b93-81ee1c1264dd", "sighting--707ab885-08c0-4561-a270-a09967150e7a", "sighting--11788ef7-5628-4c00-be5d-5608d42608fe", "sighting--da74df09-c4ff-48d6-9f96-6a03fb0f26cf", "sighting--0e19e3d1-d28b-4def-8d78-ca6d7c00e9e8", "sighting--b277f456-3eb6-45b4-994c-4223f1bdc227", "sighting--02ee727b-02e3-43cb-92a4-b660ead447b1", "sighting--ddccac4f-b5c4-4979-85fc-54255a3ce848", "sighting--a6a125ec-8a4e-4388-b582-bade4bd2e3f9", "sighting--63fdba83-aaa6-4850-929c-d64a8ad8bf43", "sighting--a4bdd794-6673-4291-bb56-cc7cd98adff0", "sighting--c6483570-bc1b-4df6-9810-589d9d2d608f", "sighting--c0eba4bf-96e8-4a47-9181-9d968848aca8", "sighting--94f156e0-85f3-4880-bbfe-9ca3d8876c55", "sighting--e0cde741-664f-4f05-9ced-c729c4a1c6d8", "sighting--0aeb1bcc-5b0c-48ce-a794-76e527903ca4", "sighting--2d0105de-98d8-44c2-94a7-16db1847a493", "sighting--2fd280d8-c37a-4ea6-984d-d3f01aba3846", "sighting--9e0a810d-f4ca-4755-8b2b-afc97dd11ed9", "sighting--c2ffc60c-da39-41be-ae06-6601c772ef09", "sighting--c4f9cb36-0943-4637-92ac-2661bf13fc77", "sighting--f214d426-f56f-4504-9079-8e6055912ff1", "sighting--6673649e-9385-4581-b3a9-94bcfd0c7cc9", "sighting--59e41540-5373-4631-b6ca-af7be2f950d6", "sighting--4182fc37-6177-41ba-b2cf-300e6bf8320f", "sighting--a49f8a83-dc5e-4e2d-8edb-0bbb76b770ce", "sighting--979b14e7-6e2e-4d31-a146-3e9feb01b1e7", "sighting--20e80d10-6336-4b8b-9627-5f27fc09d33c", "sighting--fa3109e4-11eb-4941-b116-53d1f6904e71", "sighting--1436850e-fab6-4f34-9197-6e41ae2150d5", "sighting--368a7a25-d712-44a3-8499-06b4f22e1004", "sighting--ab3bb9e2-279b-4e53-8b74-d73dcda24c96", "sighting--4a97da32-e492-4aa0-95a6-abe170e1f789", "sighting--c2a354d7-0fbe-40ad-9283-42628bbf2866", "sighting--498ec6e8-1dbe-45b5-8dd4-9d7deab2ee4a", "sighting--7026876f-ef84-403b-a18a-c025ab4c6ca8", "sighting--f6623b58-856f-41ab-a951-1b720691d5c4", "sighting--067d16d5-7d64-46e8-9e4d-68cdafb52357", "sighting--919e99fe-e740-47f3-8381-387c7a65adc2", "sighting--9d0c609f-044f-4831-aaf7-912ae9a3dba4", "sighting--82b1817d-5105-4c6f-9e7b-92e28c4562b6", "sighting--37061bfa-a1ac-4e62-882f-34cd4be8636f", "sighting--fbf1a362-920d-47fc-a2df-5f13769edfd4", "sighting--b3d765a0-c2dc-4420-a0b2-2d4d1c17e299", "sighting--b9019cc0-9cf0-45b9-99ce-89b350493bfe", "sighting--ada1c93b-71d6-438c-b110-7195005310da", "sighting--1ae66bd6-ad2c-41fe-a0a9-94c289263eab", "sighting--00eaee2a-a57b-4867-938e-36ff33704e21", "sighting--62fb32e2-9f84-4151-aeaa-c6b5cd5cb2e5", "sighting--04b56079-78f6-49aa-abed-15bec5815545", "sighting--0100203e-9a7b-4aff-a6bd-29e567f6e5ad", "sighting--e35ef77c-c609-41b7-ab4d-460787dbf6f0", "sighting--8eba2a33-87d5-42f8-b620-b60e9be2a700", "sighting--1ea93ce9-0168-4985-9d19-5b2d529920c8", "sighting--23132c1b-f748-4c09-9821-844e65e1fe15", "sighting--a12cae79-8d43-4f93-a846-1c6efa38a5d4", "sighting--4beb967e-dd87-442d-a21d-6dc7a2139f09", "sighting--842bf00f-ff38-4b77-bbf9-c47b5dfd72c1", "sighting--2c3474d5-fbb4-4415-95a4-443018e9f874", "sighting--0ba5cd14-d423-470a-a4a6-d495d44aae7f", "sighting--258d6b19-bf60-4777-8c40-1425e48a7914", "sighting--4a53e13d-1628-472f-b2b8-2c0e7897aaa7", "sighting--5b6c7f22-405b-4ce4-9487-63f8d0462446", "sighting--20df3fcb-a26d-4b7e-aa46-ec9c7a3dfc6b", "sighting--6e17cd6e-7772-449b-9c11-f2f8dc091776", "sighting--b5f4d1a6-f0af-44c6-afb7-96f9592e606d", "sighting--778b6faa-303e-476e-8ef6-debfd0f52b29", "sighting--4beb8bc7-a960-455c-ba97-15b7349215d0", "sighting--e5fe0337-a4d6-4f6d-a5f5-6d172dbc1d11", "sighting--c850b0bb-d707-4901-88de-fe2608c8838b", "sighting--14609ac2-f401-4bfd-9e10-fab39103cb3f", "sighting--5755053c-458e-484a-8483-deecb85b436d", "sighting--9f7b50b9-53b6-428d-a61a-53ee2df2f6eb", "sighting--730d14cd-f3c4-4bb8-be5f-cac44e8221d4", "sighting--50465a9e-1322-40df-a5e1-9b3c5c6246f1", "sighting--e8e81567-e3f7-4260-a143-bf7e4747fdea", "sighting--6307dc92-f12a-46d7-b91c-16c7402474f1", "sighting--1851b93b-12eb-46f5-b781-76b5670888dd", "sighting--1bf6460a-f951-4cbf-91f7-bd56a390ff53", "sighting--ad7f1249-4a6c-4ca8-b688-0cd90eeb034c", "sighting--8c2bd15b-8a11-4644-b1ad-b08daf41336b", "sighting--dc12995b-0add-4db6-a010-5b117a27c39f", "sighting--0ac8f75f-fa60-4cac-acf2-ee4202c041eb", "sighting--fc135536-c8b0-4e9b-a0b2-4de47e491ad0", "sighting--e7681307-9764-4df0-b457-9425fc23a1f8", "sighting--e8fb1963-0082-4818-9499-28f17abcba67", "sighting--7ce8ce0b-9da9-44cc-9f8e-2d064f744aca", "sighting--c6451eb8-23eb-4270-9058-53cb8589603a", "sighting--8432a326-16b5-41a7-8ea2-093c7c95996c", "sighting--605e02fe-1d95-4b17-8b2d-2b4a2e3a27d1", "sighting--177062fb-b290-4806-bab9-2ed5f8168180", "sighting--4c25f272-b53b-44a0-b58f-89bc05d8b415", "sighting--21c7d41e-073d-459c-8d45-ddc6825c1e5b", "sighting--20a6f764-6dbe-4a25-8a54-af5774df1a90", "sighting--d6a7d6b2-0581-45c7-93d0-5924ef3fd983", "sighting--7cad5b6e-9f5d-42e8-af3e-04d59c9f707c", "sighting--1e5a50ba-0f1f-4181-ab6e-fc1e602fc933", "sighting--4ea03b63-1a9f-47ed-aae2-70e6e53043f9", "sighting--488d1468-6c99-4cd8-91fb-565d99a6dafb", "sighting--e71e2dfe-7530-4c19-b94e-62b38e80e30d", "sighting--2fb4df75-7db2-4c36-9b6c-0a4c508eae41", "sighting--e97eba3c-11dc-4cd4-9f87-a71ab32e6c23", "sighting--1c421267-c6f2-4a81-a4a5-f0b72211343a", "sighting--8cc26f71-213a-4066-b102-022ce8d6e318", "sighting--f2c55b74-6187-4858-86e5-86646cef8424", "sighting--d86dab33-1ccb-4861-8a4e-721e3ac0b745", "sighting--b5a0e19b-7b52-4489-9427-378d878e28b7", "sighting--881cd9dc-40d3-4992-ba1d-c87016d9cff3", "sighting--b2d8c81a-a48a-4b0a-bdd4-1e7751f73ee4", "sighting--5d9505b3-c615-46bb-802b-e37f373f6b05", "sighting--bb1fb2f3-5780-40af-b0ba-9bc393ece87e", "sighting--3509ac2a-6b7d-4876-9d6d-d5ba39337d11", "sighting--4c92be1b-e24b-4629-89d1-4b18e21083dc", "sighting--f77a4116-9627-4a09-947f-fa279d281bad", "sighting--e42506dd-0405-454c-8e36-c22c7df4224a", "sighting--0c5c6219-19ca-4764-92d2-af9adca33789", "sighting--7a6eded4-0c7f-4df5-9b2e-7d1d7618e791", "sighting--4c692d47-5cfb-46b5-bccb-da9ff666a26e", "sighting--ee138b5d-99e4-453e-9915-8365631c09f9", "sighting--dccda1b8-4b1a-4b3e-a382-29781a06c8ac", "sighting--16bfd524-4a76-4afd-810f-b8df6706dea7", "sighting--425d1b8c-c947-47da-ae65-92c5447f03b2", "sighting--bbb95520-071e-4891-96b6-34e09b0984c8", "sighting--c1cf0b59-c39e-4438-becf-568ce4a50c6b", "sighting--eebc93ee-7bda-467b-9a85-91bef81e6a16", "sighting--58a579ef-7727-4954-98fe-9e738ff42025", "sighting--f80ae6b8-8482-4297-ae5a-dcb909611c80", "sighting--8aab2532-d11e-459d-9d56-883d9ca397c6", "sighting--46366c92-41b5-455f-ae86-e6eb563a580c", "sighting--c2abc587-a829-4cd0-a2ff-68851be5a904", "sighting--930072d8-06dd-4cdc-a1c5-c2127a18ccda", "sighting--4902bce0-6120-44b4-afd9-6051155f88d8", "sighting--cad85cf6-4bd7-4c44-a700-7f90393d14b5", "sighting--997c3203-5011-44f4-b8d3-b262e4474a57", "sighting--0b66e374-b23e-449d-a667-9a5d248a7372", "sighting--e5c013dc-5d61-4df7-a1aa-3ed39a87cd7d", "sighting--32bec1ce-043b-4f82-87cf-1e911cfa7fa5", "sighting--896e857d-2970-48f2-a14e-1d61fe3a44b0", "sighting--2e7d7f38-0c8e-4a2a-93f7-0ea6c7e929a6", "sighting--9510162b-e307-47e7-b9d2-aa4d712c30c1", "sighting--3da038ae-ab9b-4c86-88ed-0eaf5227e913", "sighting--41e4d0c0-5b0b-473a-a990-997753d891ec", "sighting--14261b3f-756a-4508-99cf-fabf6438859d", "sighting--e1b18ff7-b9f1-4c67-9fae-94166bbcfdba", "sighting--a437d70d-14a6-4415-ba84-b17ee19dcdae", "sighting--3725affb-fa82-4653-baa1-e6f0d02a2572", "sighting--0a1aa2dc-c7d0-400f-8d82-5adc15447e74", "sighting--28bcf6f3-0325-4ae1-9d91-6edc6b2175d5", "sighting--f002ae85-7941-4891-b412-6ad3a806135b", "sighting--e1f0c115-d960-4096-a941-88a447bd6460", "sighting--5aeda8a7-c759-4a29-b34d-622d8c837d2c", "sighting--f66532ad-673e-492f-8070-cfb217e0762c", "sighting--97720d53-66a2-403d-b145-65ee1c180eec", "sighting--6394c88f-b29c-48ae-a76f-18d0ada183a2", "sighting--3651329f-6e90-4b94-a04c-fea9e5013353", "sighting--2cc1c68e-53e8-4825-b17a-04d3ef100482", "sighting--38892fa0-e438-4f04-98b4-6ef34de62481", "sighting--06fc6e2d-c008-4b81-b496-9cdf3ccd8485", "sighting--a0b3a1fa-31f1-48f3-a570-81ba112da7b3", "sighting--33a70964-3354-4a10-aa10-ea8ded285f65", "sighting--4e513799-b58f-4652-9f65-e5588dda0a2f", "sighting--2ae430a4-8b35-4051-86a2-599c4d3ffabc", "sighting--ca219c45-06d4-4ff5-bd24-778890a99d28", "sighting--391b83a7-8a88-40d8-bfc5-a40e1088bfb7", "sighting--84500593-8bde-4b63-8cf6-131bef68325f", "sighting--5da9bd55-7408-413e-a99e-1d8e6761c8f6", "sighting--01aeebf4-6d81-4e61-a7b6-b9269f5adc27", "sighting--8008a1e7-bd31-411e-ac32-e4fff4591cf7", "sighting--f0000431-c317-4a0e-9b08-807016402799", "sighting--b3b48bf4-ea3e-4e21-95a9-b4ee41e2b432", "sighting--a35a0669-d0e4-41a2-9477-4e985fd96af4", "sighting--200dd99f-d84e-43db-84ec-1d3e6cc74ba5", "sighting--6f02481f-9470-4722-8c3f-d4ee4ecc677b", "sighting--9a436de9-d211-4e35-8395-d4a29ddf1b08", "sighting--34326020-bff4-4427-8afe-3c06ac13d6f3", "sighting--c221d808-1225-4fb9-8e88-6e26fac85e56", "sighting--e99262ba-52a6-4425-98e0-79cbad040d90", "sighting--97edd464-1ada-443b-ab29-74b045093c18", "sighting--9aaa88df-1815-4480-9d51-bdd43aec9222", "sighting--9abbecbb-e8ee-4005-a1a9-3f1e62ec9dd8", "sighting--5c245afa-b2a8-40da-b28e-547bdb5a6f1c", "sighting--e8afe895-44a8-4d5f-8b6b-a388b9b8a4b6", "sighting--9dfe51ce-7cca-4a0d-81d5-483a9467e366", "sighting--c9310242-6a7f-4755-96c9-ed101cae5bb4", "sighting--d692319c-7d54-475b-a63a-8da5d2ee8b79", "sighting--4ddd1f5a-3a86-4af2-a60d-71e9c919de69", "sighting--194cc304-31c0-46bd-88ed-01c292f9c342", "sighting--3dba6e4d-c364-49e4-a35f-ad6e57ea0d39", "sighting--a27f87b4-d9e3-4e58-a38c-de6445c0c02c", "sighting--31de088b-a90b-4c1d-9c17-11314f1db3be", "sighting--3cc5e6e8-7540-4d66-b0b8-aaebf9b9d9b5", "sighting--e25420a4-acd6-40af-ac85-761ec233cbc6", "sighting--760e8b3e-9288-4287-beb2-0d5418dd332b", "sighting--bbd8266e-d291-4ccf-aa89-ff6c3260fb94", "sighting--2c632c29-839b-4773-9d1b-37fd7ebf0c80", "sighting--b77e1917-5e92-4ee9-980c-671711db02f0", "sighting--6d25c34c-0c6a-4022-8a0c-0a383ae0c1e5", "sighting--2f61ec61-7162-4727-bd06-2ec610ea36d4", "sighting--278f51e7-4bf5-4e66-81e1-8f9a72f46b58", "sighting--58a07226-f2bf-4c06-8d9c-6dcc6d926d9c", "sighting--13743e4f-0db0-481a-a73f-4a38ad43b3f2", "sighting--4140b93f-49bf-453b-8bc7-95cb5192422d", "sighting--9946689a-fa23-4f5c-9b9b-9785832d3742", "sighting--01f87a9a-f601-43f6-bbd3-208e05a43811", "sighting--b7599064-b5e6-4809-8b97-ffe64ad088ea", "sighting--5850a543-c80e-4729-87a1-564f7f275f10", "sighting--8abeeb1a-e651-4f07-86e6-e22804f86cfb", "sighting--f7eead26-f499-4375-92d2-673569a77a3b", "sighting--5c9a45a6-fbbc-4a4f-aa5e-65a547be8a86", "sighting--d49194c6-a15a-4ad9-a913-0638cc71cf89", "sighting--4169ddde-8487-4a9f-9274-d9ae472c51d4", "sighting--8d587ae9-6d4e-464e-9c21-3aa26c600750", "sighting--9953062f-db81-4957-9d82-268dbdcb9225", "sighting--9c172f82-decb-4a89-b66c-c9142425885e", "sighting--7e421ed2-e32a-4b8d-80c7-1bb6a5dd8d5e", "sighting--c52ee083-aa98-4462-b51e-95346cfa9e6d", "sighting--31e8bdcd-7e99-4ef7-b675-c987ab8b3148", "sighting--e44035dc-6454-4eb4-881e-a9711464e247", "sighting--25ac2adb-ffb0-49bb-b9f2-222c0bdf6e51", "sighting--39f751c8-4105-47a6-a142-33b1de2962a6", "sighting--1f271107-e3c7-4da0-b756-cb7d529ea80c", "sighting--0b114cf4-4c12-4164-9084-f2471074bad7", "sighting--11d9f35c-19e7-4596-af1a-d917cd94bb9a", "sighting--4fd25f26-b1ff-4b45-8180-610b3cd1e5f8", "sighting--dbd8e6b7-4255-494e-877f-955f6c3812d3", "sighting--bd492181-ceb0-47d1-9d1a-55ef25f5d81b", "sighting--3fbeeba5-9c11-42c0-8a9b-817521a77ea8", "sighting--c21e9d9b-870e-46df-8e3d-e4f7e88b3cf1", "sighting--35e89517-2afd-462c-870e-b3617929383c", "sighting--9661eb0a-684a-4092-b944-7943a5b3bbf9", "sighting--9192d5ee-ba08-4f23-8db9-8339de16c225", "sighting--3696b54d-2581-4f96-983a-107042d61583", "sighting--cc73c26b-be89-48af-9be5-dfdfa3ecc965", "sighting--39b51a8a-73f2-401d-b641-e047bf35ef6c", "sighting--3496691d-dc7a-4f7c-a0fc-5a087bc44cb9", "sighting--09cdd5c6-0836-4de3-b7c9-158d92d2bd43", "sighting--31fc89b4-435a-4bd0-bb71-68ce3b6a842d", "sighting--5e494a0a-a5c2-438d-b84e-98e1f8b24a3c", "sighting--d6780440-056e-4f76-be69-af759169dfd4", "sighting--30f1a728-7ffb-417d-8dfc-983c035b4acb", "sighting--4988bba9-4991-4041-963a-364d65f05ed0", "sighting--158db4e8-66d0-4db5-8bd1-ae3f8718f1d4", "sighting--6e2a49dd-7903-4503-9033-9a0c53bba7ed", "sighting--81976c42-159c-4a61-8976-db0375d2b510", "sighting--4f5562c4-866c-4a42-8f53-35bd6fef0e85", "sighting--9e0afb4b-e520-4f4b-b55e-36209762a0d6", "sighting--77246241-df3d-48e1-a993-b419e1328e06", "sighting--0c0b15a5-000b-45de-a268-d4fd62008be4", "sighting--0e8a4745-100f-45ca-a83d-e8f9c7febe73", "sighting--91f7ce5d-c42a-4cda-97c2-d404733d6992", "sighting--ba482d44-fc10-4f7d-91b4-911e9c905445", "sighting--650ff6eb-b5c6-4051-803b-f9509e5f701c", "sighting--76d4650c-87e6-4e97-964a-d036fb30f260", "sighting--baf25701-3ff5-430e-9c42-974f3359740f", "sighting--eb568882-4183-48dd-bcaa-4600af31855d", "sighting--86b310b4-ed5d-45b2-af51-fa9f74987371", "sighting--ac686795-1b46-4a73-8540-31046d61b110", "sighting--3fbc2b78-409b-4fdc-ba21-4f47e3a62a46", "sighting--816c3f0b-652d-4274-b144-c37262b99479", "sighting--7ae8537d-1629-4470-b606-81985a9ed9be", "sighting--9dbfaf31-ee2d-44f8-9283-63779d109c3d", "sighting--5578604b-deff-4e83-8fd4-e2512dfd6f94", "sighting--5a7b0bf3-9158-4766-9b2b-6d2d944d3534", "sighting--73b29709-1094-4cdc-acb9-65963cc57c37", "sighting--e4ed434a-07d5-4129-b05c-c5c17d070d6b", "sighting--5961a35c-2997-4cf5-a7a2-0f41658dffa8", "sighting--6dc82671-38a0-42f9-9dc1-1dcd8cca2917", "sighting--48271f1a-0e55-444f-af4c-1cd9be5a4884", "sighting--49ae7ca1-e805-40e5-ba50-e7a4d3023a30", "sighting--53657d37-d514-4edb-a8e3-f63b74387b18", "sighting--7b2afbf4-72d3-48c7-98f1-0df9de1db334", "sighting--f9adac62-98d9-4617-858f-984a73f06d38", "sighting--4cfc2179-e5e9-4d3f-851d-4c8bd9ab8a5d", "sighting--ad705828-f31f-40e9-b047-dea87eb7b43a", "sighting--0b222519-48cb-4eab-b5f9-428b28c62aa8", "sighting--b50dd18c-3687-4663-8a8e-84c82b3f45bd", "sighting--bd08922f-da45-4cde-b387-61b318cbadf7", "sighting--2fa0ca36-1e27-4ff4-a0bb-382addfdf944", "sighting--dc5c3812-5663-467c-baff-8c1069bd538c", "sighting--8dd1c927-cc4a-4266-96ac-7c3643894203", "sighting--f19dbd39-0c41-4213-8475-7b95413871b8", "sighting--2a38eb72-9691-49fb-b008-f61e6c9997eb", "sighting--6ef99985-ae2a-4fa7-91b1-04c3ec76fe46", "sighting--2ca24a8d-63d2-4e4b-8317-241eb17cae19", "sighting--b4779003-fe90-42e8-9cf7-5b5a3b48893a", "sighting--4f61c0b7-f9b6-45a3-947b-9ae87fb94389", "sighting--3a7215df-f2f9-4231-b093-e43e48ee7cb5", "sighting--a84f0d83-2dfe-4d9a-a42c-7c3bddd8a124", "sighting--0468983e-82b6-4927-ab72-ec3658a55b29", "sighting--937c1772-af42-44ae-b0aa-4589dee6fcd6", "sighting--b5af26a1-fa3b-4906-b9c5-2954467b960c", "sighting--aa02ba12-9d9e-447a-bcfe-e833acea267b", "sighting--1d284311-a7f0-4edc-8094-455130a95d07", "sighting--fea66996-e00a-45b1-b1b3-ba7e36ac7e86", "sighting--87ed5ead-5486-4c1d-9595-34d15253e3c1", "sighting--492f535d-895b-4edd-b887-ce474e3a1631", "sighting--da8bd578-5a5e-4439-bd55-a8cc6b8e5d69", "sighting--0f1a2414-9e4e-42b4-9c2f-2675cea119f3", "sighting--826d5c99-1244-4400-8d7a-d96221ab355d", "sighting--574ed8e3-5cde-4e56-9c03-83c5516cec7f", "sighting--c958ce52-c711-4c76-bb79-89f4f0ef088e", "sighting--16909360-d510-415d-abb1-c42c7015ccba", "sighting--1c4ed7aa-498c-4864-8687-89512fc63a15", "sighting--3a279781-15ac-4770-813b-45c31e014bea", "sighting--79f6ded5-fb63-4ff2-a115-d550ea322a42", "sighting--51652760-50bc-48e9-92b4-7abef034c0b8", "sighting--c0ea9ae7-5e71-4b5e-aa1e-703f13cfad36", "sighting--5293bd61-fcf1-4dfb-a495-8f1708e197a8", "sighting--e0b71896-30f9-45cc-9e53-135e6829e4e4", "sighting--f324a698-01fe-4ebb-a511-65ce3ba251bf", "sighting--f8ca26de-b35b-46a9-ad4b-7371b00534ef", "sighting--e97e0e65-9315-4be3-89f9-255957399631", "sighting--bc4c98ac-4a16-40c2-9ea6-7ee5fec8ad57", "sighting--3ff5b78f-e2fd-4ce7-a1d4-93c415c71a89", "sighting--d707af53-4a13-426e-82bb-be188ad3e50c", "sighting--0bdf2b40-ea03-41ce-bebf-c182ea7912d1", "sighting--d2933a3f-584a-43c8-8ae7-c809701d0b37", "sighting--24dbaeac-23e1-4b57-b734-825c8b8b8529", "sighting--2b72596c-903c-4217-8d69-20af6d319734", "sighting--3d3f7ec2-8a77-49e4-93e8-824e8c2b8075", "sighting--ceabf35d-fa8b-42d5-92a1-76e15b2383a6", "sighting--6585db46-3807-472e-bcb8-bb77555a5297", "sighting--06ebcdf2-1f3e-4926-9363-370645b257df", "sighting--486f88c4-9a9f-4c12-beae-e46c9a91c945", "sighting--7735e4fd-1a5c-4a9c-b570-d41d6cd3c8c7", "sighting--5486b730-7177-4ce7-ae1e-6780a045da1d", "sighting--f6f4efa8-9a8b-442c-a531-649736f27b7d", "sighting--5f85a3e4-df81-4eec-ab2a-7c26d6a2124e", "sighting--6cb45e6b-0b68-47b9-bc0e-df52d42d3757", "sighting--0680100c-804c-49c3-bfc2-a3aa8c69658d", "sighting--1d176aef-3caa-42f4-b6fb-9f7d47334aef", "sighting--4a17dde1-0cc6-4f6e-aa4a-c0d148f1f5f4", "sighting--15102579-8b8c-4080-95a6-f1d7517f5e45", "sighting--117fb624-cc15-4e0a-a19f-322cef8e60bf", "sighting--2834c889-4a6e-4dd3-aa72-641a45d92acf", "sighting--6b569d98-1609-4291-93be-9c13b06c1091", "sighting--c3ba0157-91cf-4d19-899c-48068bad1984", "sighting--501f92f8-4a43-4c41-b287-e2f6b2bfe10b", "sighting--46557ce8-cec1-47ae-944d-50dce12e3477", "sighting--52b80b38-ea27-494e-829a-4d0897344cd3", "sighting--f7f00ee0-d8a3-4e98-baee-36c1731aef94", "sighting--7fbcd5aa-f215-4c6c-8ba6-c9650fedecb9", "sighting--d73ec55b-6776-4a76-980e-5d4c2309ab85", "sighting--e210c4ed-0dbc-4805-8493-b19218bd641c", "sighting--0b49bc47-1654-436a-8312-e29833949b03", "sighting--cf8b9232-ceef-4f54-908e-99b5f402f4a6", "sighting--ab52b8a3-12b0-430a-9a86-c2b9b4bf740b", "sighting--7c9c9412-6aea-4f2a-b626-b2b60f4b8903", "sighting--068c3e1c-27ef-453d-9d00-04c9529142e0", "sighting--4b9cca17-d5d2-4f74-8821-834098296df9", "sighting--7615c2e4-4440-4fbf-b3bf-7abdcf776f98", "sighting--90fd8b4d-07ab-4d4a-a693-1f026037da88", "sighting--45ae7f67-87a1-4e65-b2fc-86275513cdbc", "sighting--7cbe8df1-65f3-4b9d-97a1-beb3e22f23f5", "sighting--59e72bec-0172-4a54-8499-d4ad76b9a3dc", "sighting--545928d4-1dbd-4fbb-8051-af93e9dec63a", "sighting--b4a040ac-0382-423a-a475-3b16d4cf737f", "sighting--ef241102-2bfd-42df-b7ad-f33a491e991e", "sighting--3258a196-06f8-401f-9818-92869b47227c", "sighting--2a338fd8-5a66-42c7-ac03-b069fb4b4780", "sighting--09c25daa-9fb6-4d60-9665-53a213d8b8a0", "sighting--63498c49-776e-4554-b17c-86042680a1d8", "sighting--0a128975-292b-4bd7-8d7b-75642ada0b46", "sighting--2fad4cb1-7890-4d09-b7c6-515c60a0a88e", "sighting--3b525dba-f09d-4fc6-a327-8bef69381fdd", "sighting--59bceffb-4c90-4a9d-a142-171a407cba5f", "sighting--adaadcfe-1bd1-4812-86f5-32a728440452", "sighting--7a80f977-bab9-4ea4-b8eb-26a4ddb7f020", "sighting--569e61c3-3825-40ef-8178-c9b58874061f", "sighting--fa818af6-3367-4c78-9779-d963f120967e", "sighting--3de6e8a4-829e-4380-b41a-277d479556e0", "sighting--c7a5eaa5-435e-418e-b04d-f51c21b7d787", "sighting--e1b4b62b-4bab-40c5-bcd4-07e06f92eb2a", "sighting--d0f8e60b-4a40-4a6b-afdd-33b273bc84d7", "sighting--995a6725-ac40-456c-a882-7ad8707ec78c", "sighting--8a5e82c5-3ee6-42c4-91b4-af1735c05b74", "sighting--8b791252-233c-410d-a95c-f780f92f0614", "sighting--d0988b1d-d278-4c31-928d-a49f45f723a3", "sighting--63e281f8-00df-4b0d-9f53-80851ec4cbd5", "sighting--613d48fc-ae74-4330-a488-2c25457bba50", "sighting--f5e24d06-d0dd-475c-8f03-2ddc20ef4b97", "sighting--41188ce8-c9cc-47fc-884e-42ea55126a57", "sighting--3d7f723c-5a96-4f3a-b5e1-6f754f269f37", "sighting--b6b9b774-9ce0-4477-a191-2e4972ff31a7", "sighting--4b24bc78-6963-4171-8b90-90cbb7926ef2", "sighting--f071e22a-729f-4004-80b0-8d6e99d319bd", "sighting--ba3b02ae-64a3-459a-8070-58c21ae39110", "sighting--5557f9d1-3f0c-46ac-b592-734c7414028c", "sighting--dfb38ece-fcb9-42b6-9ec1-635785f1ff8e", "sighting--f4b76e1e-12f0-4a9b-8205-5aa55d31b074", "sighting--bb4fad4b-085a-4349-843d-df96ca882b75", "sighting--6d65fa3f-637f-43ae-89da-c4f9ffc16cf9", "sighting--a580c2e2-24f8-46ef-935c-85afd99c2be8", "sighting--d92eeb85-372d-4c98-b5f0-4c5b86e9285a", "sighting--100959de-d3b6-485a-acea-89fd845a3e7e", "sighting--ab667940-6488-4e1b-a2f6-35a96ba6035f", "sighting--b096672b-a3bf-4ab2-9bd1-ec6a83cf9f2b", "sighting--329c137b-4a04-4440-95ef-c84e0000a36b", "sighting--48601acd-8000-472b-8e27-5f21bc122df1", "sighting--8479a5c5-f660-4410-82a6-d421628d3d65", "sighting--700adaa5-93b8-4c78-8e67-060fddd4b76f", "sighting--a633f1f3-724d-46bf-bffb-0c655ef8daca", "sighting--eff4319e-ec24-40f8-921e-f72bd0160348", "sighting--7398b8bf-d384-4753-a351-267c6b04400f", "sighting--ded4a202-d56a-4750-ba6f-cb2059b45294", "sighting--d93043e2-2647-4939-90a3-77d3e4e57303", "sighting--5214f42b-396b-49d8-afeb-37a4039ba2d1", "sighting--7346f7a1-8c92-4fb9-b3f6-8e44772bf721", "sighting--f1edcc5c-40ca-4e26-b6b0-76903bfe5fc3", "sighting--1a907e27-a141-4714-ac3b-5f2c4de41adc", "sighting--4659f868-0f1a-464c-b266-584afa570dbd", "sighting--b03cb5e2-7a61-4769-9aef-5f7adf9edab2", "sighting--7ed30de5-d189-4a4a-965f-e0f1fd7c37be", "sighting--d851bdf0-cd29-4d57-9757-2dc497091f4e", "sighting--7770086f-9dba-48ed-a481-3ef9c9d24680", "sighting--918be340-81bf-4517-87f8-490cdeaf8657", "sighting--41dba9af-da0c-4e4d-ad94-ab25c2ee4ed1", "sighting--c87e7b27-7bc4-4a9e-a8f3-47ec116dc9d7", "sighting--d5b0910d-241c-4843-bf19-fe7f73a3fd22", "sighting--361c439f-3b76-4d7d-9394-e43faecad831", "sighting--29e28271-bb09-42dd-8588-ac14ba7cdc05", "sighting--dfd10546-cd30-4a14-85fe-c11560715c75", "sighting--d54aec0f-04b1-43c1-94a0-86dae7d6018a", "sighting--d70c7358-2a3f-4456-951a-f9623a985060", "sighting--0b31a848-91c6-4414-b86f-98bb40b89896", "sighting--3ed98f66-b73c-4fb4-b4c4-129eecb4fdd0", "sighting--9eb722a6-ff3f-43f5-b6d7-d5ea5af479ae", "sighting--b2f4dcc0-6712-44e2-9db3-8a1bd582316a", "sighting--da2152c2-6dc1-4a0b-9f5f-b51fad128888", "sighting--7804ae25-cc5b-4b62-9b00-67d6049da568", "sighting--eebe19d3-6d87-4bd9-89ff-3e9ce84f4c7e", "sighting--f34b54db-abef-4f30-b0ce-b2605a129dcf", "sighting--2608f530-a907-4486-9436-8fc212efdd41", "sighting--02f7755d-69f2-4db7-bd1b-12b563ac2b9b", "sighting--e1790d15-500e-45e9-ad01-fd9aa1eca5c0", "sighting--477e6ef3-eab1-46bc-bb8a-5b7acdd092f8", "sighting--79032ce7-eec5-46d1-a221-51b5fd3d9b7d", "sighting--29cc379f-f85c-4d14-b30e-b729227019ba", "sighting--ce295272-7a32-4372-b1e3-ad234b8ad6fb", "sighting--6e0d7572-0252-440d-babe-fbcfdf39d005", "sighting--cbf1d90e-bb8c-4a7f-ae83-5f47c065bf8d", "sighting--381871f9-be0a-4c9c-be36-43ffec93a5a4", "sighting--16dd3411-0e23-4ead-ae4f-8fbbf0507403", "sighting--a322e680-692a-454f-9c46-6205884b5fe5", "sighting--b20a4550-68a2-4747-a299-65c01b485dbb", "sighting--22990469-193d-46a0-ada4-3f0231b528f7", "sighting--c06e95fb-5e39-45a9-91b5-e29f7eef6b9a", "sighting--cdd17b1a-1531-4c00-9640-cdf5e057235d", "sighting--290bde55-c41d-4788-8e07-fb0f044851de", "sighting--a64ccdb7-2327-4f04-ac46-1fbfd1ed1b79", "sighting--97101f90-3e4c-4413-8c41-bf6971407446", "sighting--65329d63-18a3-4972-9483-ab91bdf9150e", "sighting--ad2765b1-203e-4f45-9f4a-094daef5f86b", "sighting--cf8e4880-9b46-4440-b357-79970dbccdde", "sighting--ab575d71-b0b6-4e5c-861e-4f59d51ea0a2", "sighting--b2ab3ae4-bfb5-4b99-ab14-d6304a8568a3", "sighting--8030a8fd-994e-4ca3-8d8d-67c57d918faf", "sighting--8c3586f6-91c8-4c4b-bd49-c37021fa03d2", "sighting--cda13fa2-bcf1-4c96-81ae-16d48f13a378", "sighting--680b168b-a300-4cba-bef1-db12ecd5a60c", "sighting--17f36d50-fc51-46c3-ade2-053ba0a2665d", "sighting--5eebd51c-fb0f-4a1b-a793-0535cc27dde5", "sighting--0cbd262b-453d-4e69-97d8-23227d309c15", "sighting--c9d1bcff-0ef0-418f-9674-e390e5e98b4c", "sighting--2cb798a0-564d-49ec-a4ea-d0facc672592", "sighting--8216d622-a3ae-4fd6-aa4b-96f1c90cffa1", "sighting--c830c369-a71f-4697-b1d6-a0cb927ef423", "sighting--593dbdd5-bc20-4ca3-859c-30c9ecbfc505", "sighting--04affdd6-16a8-446e-aad5-552347be4d6d", "sighting--b6179e6a-e889-435d-8a7f-bbd54bb88720", "sighting--6936d24e-8f3b-4d12-9ffc-f4281b10a3f3", "sighting--9344342f-268d-41e9-96f2-a49bfc22af52", "sighting--5155317e-783b-400e-b0e3-0d635a779ef0", "sighting--938a84cb-db4a-49ec-bfb0-9f237d8412bb", "sighting--a065fcc1-069c-46d3-a2c9-dce3d6cee8f5", "sighting--e3c738b8-6bb9-4599-9052-1abe513f94bd", "sighting--9e671c23-2584-439b-97c1-e2fb87fbf6e6", "sighting--4167dca3-f310-41f1-a7cb-70516b79475c", "sighting--04959562-6ef9-4ac8-b307-10f97b24350e", "sighting--5775bf9f-7ff0-4839-8385-ddc9e93c0a68", "sighting--6f028752-4d00-4aff-9229-81d37080e4e3", "sighting--2f586317-2c21-491f-bb11-4dd7766f2943", "sighting--96041bf9-3658-4781-a9c2-2db2b7dc3c98", "sighting--3a048aba-ca6e-42bf-ade1-a50d488a13ff", "sighting--25555e47-4f56-4c86-902a-0d71d6ae69f2", "sighting--c0a44ff9-cae4-411f-9904-2a5ae2d9b259", "sighting--88d1e01b-db62-481f-8b9c-270db74db1cb", "sighting--e887610b-10ee-4d51-a8d2-70fdd68330bd", "sighting--e9c73436-1184-446d-b013-475f7bcad65a", "sighting--35ed6938-6707-4cd8-95e1-19b19cbc6a45", "sighting--d06f9587-8d72-4a96-8a33-bd426a52d17a", "sighting--3a6fce47-3c17-4fd3-8eb6-cf4bb45ac559", "sighting--3cf4496a-932c-4005-8f49-285d7c37f695", "sighting--4810300a-5c7b-4544-90b9-3ee2a59bb7e6", "sighting--378727f5-7ca0-48e0-b5f0-4c26397f528d", "sighting--999cfed9-e382-4134-ab80-33d0e65d1921", "sighting--003b312b-b840-4103-ad7b-4673206122d2", "sighting--64171c80-8868-472b-adcf-aafeb19a4bba", "sighting--543fa60d-bb03-479e-9744-0e5cb7ffe0f7", "sighting--f73d98a5-e55f-41fd-a1fe-f9242069b680", "sighting--7f8e14f4-6736-4e20-8fb3-0657a6d69c93", "sighting--8164c283-8a93-4b19-8108-0cd052654ed4", "sighting--f2511472-480e-4d5a-b6ce-0a13809e4658", "sighting--31e0c044-1b19-400c-8ea4-3870dbc23e66", "sighting--7d6ddef5-eb41-4cd8-8bc5-a810d4739ec3", "sighting--52119ff9-ded6-4337-a417-bb1f9e57eb62", "sighting--2019df67-3931-4511-8315-7689f0087c8a", "sighting--464c8cbd-ca03-431d-83a0-6f51ab9bed02", "sighting--33be4170-aed5-462f-b392-4a97d4d6099e", "sighting--d24deb50-6048-48a1-800a-a8d079b20e4e", "sighting--82384967-22dc-4ea4-a191-445ccd064b8a", "sighting--ee57f92f-1abf-46b3-8780-56e4657373d6", "sighting--0a15c9fe-647f-4ef5-b3f3-e64824e759ab", "sighting--53517433-33c8-4ac0-b795-9f0db4ea41a5", "sighting--a8bbb44a-3840-40e0-967d-cedd9424d719", "sighting--61d13139-5485-4683-9b8f-24c27917a35f", "sighting--79353e39-a3d1-4061-bff3-ab9ae1f79374", "sighting--840b1371-f4d1-4c85-9746-e0b4c19517a9", "sighting--06f45108-9dcc-4658-984d-b15255f6fe84", "sighting--4c8a242e-f7cf-4475-8a4a-649d58829e4d", "sighting--c93bff47-2b17-417e-b9e7-9dd3f826455b", "sighting--0821b4fc-2691-4bbd-aa10-1a99e22124db", "sighting--d4b3c481-0048-4bb9-8708-afb4a928e485", "sighting--5fbfa1f4-c515-466c-adc8-006a63d67116", "sighting--a74de98c-dd4a-4d9f-adfb-88fb5c6e88c0", "sighting--02442d0c-fb3b-47f4-a29c-f88823f12217", "sighting--8fe07dea-b68d-4393-aed8-62ee28930a6f", "sighting--5bf0a522-6d93-4a75-b725-5329177761d7", "sighting--f037500d-d200-4c11-b049-d0afcf4d82e3", "sighting--763ed180-4078-4dbe-8cc5-dd11ded8cf9f", "sighting--da6c8491-63fa-4d34-ac70-ef153fd783fc", "sighting--0c168480-e985-4934-aa06-ea5976d77965", "sighting--8f4b1712-1e90-4ce5-858f-2b81d9479df0", "sighting--e329c178-04d5-4576-a97c-a2809964d6ef", "sighting--a2a3ce7d-ea8f-42e3-a1e1-eab63ff16f98", "sighting--63bb8387-972f-4b63-91d2-f06606c70db2", "sighting--3d2d6254-ff06-4b4d-ab86-9f2f675c871b", "sighting--5d6762ab-9fcb-411e-8467-d5ed75bf9ea8", "sighting--9eb52082-1c2c-4762-ac54-0043102fc3e0", "sighting--b72ba6be-c6af-4960-a84f-bfd86930e1fb", "sighting--55921c7a-0f02-4f8f-898e-9d19eaf4c272", "sighting--1d92ec09-7b0f-4f77-a6fd-4f8890ef63a3", "sighting--f5f16726-c9ce-4aa1-b001-d84c19f0d364", "sighting--beb8083b-9257-47d3-a972-a2a0b969cad7", "sighting--a15eade8-844d-44ba-b028-f08890e344ab", "sighting--a522ca3c-1703-4c06-b64a-66343eb46821", "sighting--5a8ca32c-5e49-42de-b719-aca816c899f2", "sighting--1c20dbe0-9072-40ab-8ebf-77c594b4dab3", "sighting--93971988-0671-443d-83cb-a0c8136c76ac", "sighting--95244407-786e-45a0-83a7-b18e73559dc6", "sighting--6d01e9dd-7e3e-45ac-8016-483761189d5f", "sighting--38ca3c47-522e-4766-94fd-e6f5ecb818b1", "sighting--bfac0228-59a0-4e5a-a731-7e502f4bbfc3", "sighting--1b36da62-ac51-4692-aece-48be74607c8a", "sighting--34451c31-3a75-4a0e-b7e3-53bae7dada40", "sighting--92e504e0-4ce7-4f27-8ad0-627b4086804f", "sighting--b2c80aee-5e7d-4798-b2b7-3817b0c73144", "sighting--f9a851af-2693-4b4a-b6fe-6890a883de9d", "sighting--a7522c72-8ccd-4328-b824-f3517e0269a9", "sighting--b1e57cc5-aa92-418c-b9cc-36746bc3ccf8", "sighting--753aa729-e3f9-45ca-b592-2be35e6b0e25", "sighting--bb0e8795-8c18-4908-b84a-85135983d28a", "sighting--e45963e9-b2db-40ab-b4cf-c28851b5e368", "sighting--a198d2d3-4210-4fe1-af75-b58b1db62028", "sighting--2ed72379-1520-45ef-b479-fcb18bd8d097", "sighting--400c054c-83d7-4059-8295-cdc09f806bae", "sighting--b7b31e8d-b3db-4de4-b2b4-dd1e80f6f5fb", "sighting--5237f222-431f-45f7-9014-1aa81a3a348e", "sighting--6d86627a-5526-48ab-8301-ca43ab642700", "sighting--ba936e8e-2ded-41cb-a668-fef8d3955902", "sighting--5a9a8d38-1ce6-4927-a5d8-e108db19d365", "sighting--65ef6038-294f-4a78-a72f-ca6cb92603d7", "sighting--368e0e42-2936-4716-a0d9-d18102cf5175", "sighting--edd384b9-52f6-4777-bbf4-f44f251c3748", "sighting--5e7a1d0b-eb77-4e7b-b4fe-d1dee0c65986", "sighting--5143aa46-d805-42fd-969d-8fe830a5b49d", "sighting--a707b5ae-9744-47f4-b753-b1eb32781da4", "sighting--3e8e2cd7-e590-41a5-875a-c56b069baf5b", "sighting--d0598c6e-5a4b-4f1b-bae2-909f84cffb61", "sighting--f82648ab-1f32-43ac-b373-1e3d0423d805", "sighting--c4a3cc83-82cd-4fd7-9e6d-e36b7f7ef9dd", "sighting--9596b3a1-f44b-49b7-881d-f4b815c2e39c", "sighting--570a47a7-dbb5-4957-adfd-73041be51ba1", "sighting--03fb5dc0-eab8-4589-97cc-48c655fc5946", "sighting--7e5579f4-0dce-4377-9e6d-305aa460775f", "sighting--3c0b5597-8a37-40ef-b506-199c88a89438", "sighting--623b41b4-af3b-49f2-b071-95ad5da15ab3", "sighting--ab466559-edd7-4054-8b2d-d696afe46e15", "sighting--7574a53f-ed0c-49e1-b326-ee7e63f873ff", "sighting--0de9ba59-7aec-4e82-9664-539784f29dc0", "sighting--188e26ac-fa24-47ce-b862-c4233ed1d80d", "sighting--460da461-edb0-456c-aab4-8fbb13e6ba28", "sighting--f3957c12-ba76-4833-9414-6ea02eec65b8", "sighting--c0ae4eb0-9de6-47bf-a3e4-742e01f91cbd", "sighting--6f68768c-f6da-475c-a714-ebe97a1abee4", "sighting--b130ea34-2245-4647-b430-251eb2645431", "sighting--adaeeea4-3a9c-4c65-b396-9f4baa906f77", "sighting--2a788d8a-7f18-4db2-956d-c2ec262cf619", "sighting--e47cd689-92ee-4cf3-8779-41c3916458ed", "sighting--911d1f0c-802d-4287-8153-4cbba7ce87fb", "sighting--da0ba50d-6316-4927-ac0b-ce813adfc289", "sighting--ec322fcf-87b1-4081-aa5c-419558895329", "sighting--7f57a69f-c4f4-4a3e-8cb6-f4c2a73a38e2", "sighting--a96dfe31-7d2d-49dc-a1a5-dfb9c7918695", "sighting--1f40a684-648c-4d4a-91eb-7fb3e6cef370", "sighting--88c73ebb-987b-46b2-b0ec-3c7e9058514b", "sighting--49cfed09-8c4b-4bfc-b865-a91279233968", "sighting--eabd9b40-3b24-427f-84ef-824e9a92443b", "sighting--8857b18d-497a-478f-82fd-628c5e15dae4", "sighting--40ec4d8e-b826-403b-a6af-555c54f94851", "sighting--7cccb8f7-9e81-4259-87b0-b40eef74d371", "sighting--b9dd03c4-7d4e-4413-a7d1-60cdbd6fbb0c", "sighting--7f81334d-e70d-4e9e-a635-c7ffcff9c049", "sighting--362cd888-9b18-4e89-b1f4-864c00d603fd", "sighting--6f8c313e-6b4a-4878-9c08-061cf2b2dac1", "sighting--58f397d2-1678-479f-af79-cce4bb16bd66", "sighting--ffea9d16-1e77-477a-87ba-d4e53efb5cfd", "sighting--cd6353fb-6718-42ba-b1a7-bcaa96a52e73", "sighting--9bf9565b-f553-4f96-b107-353f57bf4355", "sighting--6d029a2f-a753-42d8-93c9-4c08dba75c7f", "sighting--0594290f-6d0f-4d09-b970-a1ce54949a3e", "sighting--165ee723-4663-4d98-bcad-efc4a4c60fa0", "sighting--7443220e-aeb8-4abe-b53a-2e474cb7b9d5", "sighting--259bca45-ed10-46d5-8a37-ac38894ee841", "sighting--471fcab5-3b18-4a5e-9bd5-d5f5e4637dd8", "sighting--9c254122-4b33-47b7-894e-78b393618a28", "sighting--f70650e5-d14b-4ff7-bfda-7156ddff0880", "sighting--bf9153e7-f4a2-4f8a-bcd3-a9df08bba011", "sighting--deee68ad-7b2f-4bfb-8b1c-1d83dff2422a", "sighting--6630a23f-a4ca-4c99-9f29-14d1204a8a20", "sighting--880d86e0-517c-4464-b220-af74a39aa7de", "sighting--f29c99b4-c40e-4acd-ac14-2d531a39eb88", "sighting--a1f025ae-c73c-4faf-8a72-f859283a6d8e", "sighting--e9186f23-4eb4-43f9-a7f3-0f5a8a5c3393", "sighting--96e45bc3-39d9-44fc-a710-8465be0e26a5", "sighting--d3ccfc5d-4f10-4ca1-aa41-83663f360471", "sighting--159e2e8c-8163-4017-b67f-9bce7e4a0864", "sighting--4b6cbd34-7f86-44c1-b300-d5c9c087e199", "sighting--548ec72b-8d51-48bd-8855-a00c88697b86", "sighting--6fb8841f-aefd-4c53-b308-29a2e5b1e6cd", "sighting--d6fc1926-966b-42c7-96a8-88244d111023", "sighting--0f20aced-60c7-49ea-8370-46beaf434cae", "sighting--a594811c-6482-4f13-8dc4-3763b250f070", "sighting--d2f721d1-2dfd-4582-bee7-f93a00225e76", "sighting--0d49d252-4cc3-4579-ae9a-e9f6b9374ca3", "sighting--8332fa23-838e-4341-9bd6-d148a2bf17f2", "sighting--a60e5bec-2379-439c-9760-d9c593283eb1", "sighting--667004ac-a671-46b7-9af2-f4388c0702af", "sighting--b40997c0-57e3-4560-956f-529ee8b242b1", "sighting--a5dfbc1f-8ea3-4f08-97ae-404b9b1bba6f", "sighting--b211a79b-c875-4e8e-a8d6-814460731fd7", "sighting--ea54f82f-c3c7-4316-9e2e-63ab54344e19", "sighting--3b7d19ad-1457-4cfd-aae8-574b6e242348", "sighting--10d5b347-c946-4f39-8634-2ea712dda680", "sighting--68f49fdf-8e52-429d-bed3-9b09361484bf", "sighting--cf905b91-242c-47de-8a60-0df55aa02c9d", "sighting--fc88e3e1-2e22-4094-a4cd-e0b2a147be84", "sighting--29f95502-6dcf-4ff5-906d-bc4152d526a1", "sighting--16cc8f9a-9a0d-47b8-9a41-ad09e68a9fb5", "sighting--810f12e8-2034-422a-97d0-19521fadcd3e", "sighting--f1012bb0-072b-4da2-b659-ed5054b88501", "sighting--79fe5991-a136-44e7-a610-af3f4fd222ac", "sighting--332b77fb-e1ed-495c-8be6-69c718f5f5c9", "sighting--8ec44df0-7335-4977-bdcc-dfc76cbeb599", "sighting--4dc6e568-0819-4081-a3d0-90d487e6679b", "sighting--bf4de74d-fd41-478c-bcf6-38ff657d5c0e", "sighting--7801b4dc-2021-4ef9-ad5a-cff9b7417f7a", "sighting--cdb5fbeb-2223-4c15-ac3f-1987c30f10f3", "sighting--cfe73440-c1c2-4b5e-ac86-d290d13162be", "sighting--91ba0219-2042-447d-9b6f-20890e327a8d", "sighting--9c2fbf41-bf69-4b19-98e7-bb038941ba07", "sighting--46ac72e6-5f78-4e51-8cf7-8bb1e37d0b2c", "sighting--c7088791-4ca6-45ce-b539-07e4e3d16022", "sighting--bf0abe6b-7d60-4d02-9672-d7bcae2a40b2", "sighting--4b248890-c48f-4a8e-bf06-2b8a5cc81db7", "sighting--0fd11534-8675-427b-bfc5-c9ddd54b9df0", "sighting--705766d9-cc11-4d44-93f4-7033e1c3d57c", "sighting--e1020885-2b99-4ac8-aa00-2c137c7e3571", "sighting--47fc0018-7215-4576-98f9-1d8fdd8a75bc", "sighting--ff35bb17-be21-4261-990e-7bce9d013205", "sighting--6e9ab4a5-f934-4b79-96c7-15a1cc66c680", "sighting--a7358256-ab7c-42f3-a888-d9b190ad92ae", "sighting--eeb48a04-73e9-40ce-a998-93f401265728", "sighting--76985f41-662f-4fe7-bb06-3d60673f68c0", "sighting--482688a0-dc67-4c05-94da-955cd35383e3", "sighting--a758b2dc-d35e-4f3b-bf3c-930bbf9c6da6", "sighting--08046b34-7987-4596-a82a-ff519a1d9560", "sighting--44ee0609-63df-4a36-a4a4-67ca6c5a48a0", "sighting--8c23881e-2f3e-4845-94fa-2003449bfc0c", "sighting--fe285201-fc76-401b-99b8-bb814def3759", "sighting--db03e53c-15fb-42a0-9b79-d79c52753104", "sighting--62d2450e-9a15-4d99-bc78-ccffc8b8ea9a", "sighting--33c81201-6ed8-40d2-8f57-149e980677ec", "sighting--93035301-fabe-4d76-aa5d-ec42e2ec762a", "sighting--69d3272f-14f2-4102-89f1-5bc100d3e5da", "sighting--9e889f03-1ef2-49be-a176-adad3451345f", "sighting--523d0bfa-34cc-4407-b14d-35b96c58e1cc", "sighting--4118ab2e-9976-43b1-9eea-4745e86a8960", "sighting--7491ad50-b737-4913-9b56-fe89141d4a4e", "sighting--640e6791-cf91-40e7-b51a-6a40bb5b35e0", "sighting--955286bf-42d1-4212-8f3e-35fe604c8745", "sighting--e89ee4fe-4607-42b4-bcc6-e3f6c0b5d10a", "sighting--bd1fd7a9-eac8-4dd8-b94c-fed4993ee67e", "sighting--34f985a1-3124-4598-91f8-33dc0fcea462", "sighting--38dd79c2-5d66-4289-b446-1476bfe8c0a9", "sighting--c0c56d96-e4c4-4fb4-9f55-147bf8da7b11", "sighting--9fe5395a-2c30-4b71-86ee-35c1b00eacc5", "sighting--21f0290c-5521-4a8a-bf72-0b0b6c38af4e", "sighting--55331ca4-5582-473d-9b4a-e93d5232bbc1", "sighting--566e1068-1a14-411c-9552-37f3744ee0a8", "sighting--9844d386-55e2-41a4-8c59-1e1f3b3e32e7", "sighting--bb7dd25a-db8b-4e02-b2a1-a0b9b4780f23", "sighting--6b81d214-c833-468f-94c4-5b94ece02c8c", "sighting--f4d6859b-8c73-4e39-851a-4f7160c5ce1f", "sighting--2725a862-1bcb-4c05-93c3-ad5d6af2643b", "sighting--f3ea0639-10f4-4610-9885-40055a9addcc", "sighting--7876c03f-7d92-4fe8-accf-2d829b3be5b2", "sighting--78d7757b-e0d7-4ee9-8c55-6ab8da9a5a95", "sighting--2071f768-164b-4b61-8515-af1ccd453b87", "sighting--8ee20ab1-1c4e-4f4a-b6bf-578cbdcc4e7b", "sighting--607e7cf6-f93e-4de7-bb94-caaa120b6246", "sighting--60fa9753-8de3-4e8c-b74d-8e9c459b3db4", "sighting--2ad5deed-6b93-4645-a2e1-c720956c0c39", "sighting--60e4ea90-48c5-4674-b304-f7e2ff4ca501", "sighting--5d368e05-8aec-4695-a6e5-c4edc5ce4a90", "sighting--62f8221b-53e1-49c5-b9eb-7cc47d01bce6", "sighting--448aa581-f983-4256-9ec3-61896f3e0740", "sighting--c95a9b4c-e195-4027-8981-2a99a7c530ed", "sighting--582b128d-0c5e-42a0-a97c-a6fcc84cf346", "sighting--aa04b626-84d4-44ab-8a51-c51c1b120014", "sighting--eb3b7ef9-8ac7-4fc6-b0cd-7af1d82266df", "sighting--2db6c836-1616-484b-a651-bb99afd50106", "sighting--4fa4e73e-a446-4f89-87cf-aeae56ebf2e2", "sighting--b7158998-dda0-4c6c-8285-1819ab364c84", "sighting--7507d122-d71c-46d8-9243-e47fa21a0284", "sighting--8db6b9f9-85c2-45b5-b6fb-f2fb151cbba0", "sighting--2071485c-64f0-48a4-9379-a92d30c8a9cc", "sighting--4af5f49f-d1d3-4d7a-83b8-08eb16d9c5ff", "sighting--c56c853c-2147-4efb-938a-389b3cd06898", "sighting--8ced456d-cba8-451f-bf2c-03a995857a01", "sighting--f215905b-eadf-40eb-8664-ff7963188f73", "sighting--02c304e1-7e45-48a9-a5a9-d067d821042f", "sighting--1a6c4ea5-7e62-4273-a0f0-8d31d4d383b8", "sighting--cc719760-6f3e-47c3-83b8-a301a1b9f187", "sighting--48f78ea4-f7db-41e5-bf4b-45a49716f009", "sighting--7d28e64e-9d4e-4207-a5d2-0548234c744b", "sighting--15b44bd8-af8b-4ee0-a48f-9fbab1f4af08", "sighting--8fcf3504-7472-4c69-a0e0-0e5040d7fea9", "sighting--f785f5ab-13d1-4ceb-8394-94b7ab276e1f", "sighting--6807202f-60d0-482b-8f90-0c6ab4e91204", "sighting--93d6857a-18c6-4605-af98-60818daaffb1", "sighting--708cca08-fcac-453c-b96e-45c61833603c", "sighting--905f22d3-f2fb-4cb2-adda-8ae88bc7694f", "sighting--bf46b064-8764-4019-8cb3-8f837ca06d62", "sighting--186f8bb7-51f9-48d3-9d7a-1b35ef6f57e6", "sighting--7e4184f8-c5fa-40a9-be2c-d93399972d78", "sighting--8741442d-0c52-45c8-81fe-30f077b23894", "sighting--62fe31b0-d2c4-4a38-b64f-724f0444575b", "sighting--eb368c79-5cf0-40fb-9f0c-5f4edad7de60", "sighting--2bf6a853-5463-43f1-ab5c-1bd5f5c622c8", "sighting--85621d80-aa9a-4480-9b6d-d731bb97965b", "sighting--e7ba07af-f69a-47ba-bff5-b9d048965e6c", "sighting--43198d73-10be-4493-abc1-4751e15a9ea1", "sighting--b25675a4-6f12-46d4-8801-205ff31eb36f", "sighting--ff9df6ea-3167-4fa6-8d9b-ed70d93f28ae", "sighting--cde26f0b-4e74-454a-affd-4f1e1c0bfc4b", "sighting--ea870f3b-4be3-4a75-80da-ce4f1bede9de", "sighting--e0feecf6-3c62-4f94-a53d-87a4fb4b083f", "sighting--9ae198c4-d909-4f62-a77c-5bbdeab8cd4c", "sighting--e55d7c74-1006-4f42-aaee-2bcc58926307", "sighting--ab0a663b-948d-4f23-9708-2ff183857a10", "sighting--69cde184-1bff-4002-8cb3-c76384451982", "sighting--6a021aa7-7258-44e6-aa00-43b55308ea72", "sighting--f59c6d19-40b8-40fe-bb3b-22da15def4eb", "sighting--7e7c68f3-cb19-4b89-bf0c-616bc46193bb", "sighting--c97901a6-aacf-4496-8a62-fc9e25ec829b", "sighting--78be9dc4-accb-4ccf-8df5-675411f75e72", "sighting--6363343c-fae5-4b62-b1e3-77fd09774009", "sighting--eec56b12-4497-4d8e-981c-fe1a2219bda6", "sighting--ff238417-7da8-4e20-a172-60696f511885", "sighting--696a4ab1-6d35-41fd-ae1d-f2e13601c87b", "sighting--850cf76d-d92d-49f0-a0e6-f0dbf29d850e", "sighting--e41967a0-c9d2-4643-9b2f-14897a4cf60c", "sighting--65647c9b-b24a-4929-a7ff-452b36606040", "sighting--002ef499-5806-4b8f-bc10-225a7ad266c2", "sighting--58e5f9e8-02b6-42cc-a66e-23580886fcd4", "sighting--6f5ad8d3-60f2-43ab-9df1-7ce6ead88702", "sighting--52ef6173-6299-4f64-8f6c-a51fe05af54f", "sighting--4d76162c-9a37-4930-9168-6994a5f9cb9e", "sighting--a078cd21-f58d-408e-8acb-decb705cb510", "sighting--990f18f0-f0aa-4342-adac-399c6aa90ec5", "sighting--223c2295-38fa-4572-b26c-5891191048b2", "sighting--35602405-016e-42d8-97c1-3ee2f839fa9e", "sighting--a5b6f8ec-650d-441d-aa3f-da7a6959b624", "sighting--e8ec3264-68f7-4cb3-a54f-4204aa6bba3c", "sighting--0e22d23f-05f9-48bf-9b53-40daa052a995", "sighting--c515cd32-4936-4482-9c09-9cb4ee36552a", "sighting--41e09236-f20f-4af1-8e8e-f372ffbb7262", "sighting--a31797b9-2a8c-41ce-af3c-042a4789325f", "sighting--3d5793d2-d2cd-45a8-991f-16eeaca8947c", "sighting--56fbb57d-95ed-4003-b0d0-60a67c91800d", "sighting--8285cc38-9733-41f1-bc2b-3d02921dc21d", "sighting--c3e266ab-388c-4694-b3a5-ab4f28bab4a8", "sighting--dc0bb6e5-8b20-41c0-9156-8741483fb5c8", "sighting--584b55a9-7b54-42d0-99a3-99cabf229c67", "sighting--1319f72a-4e82-4e66-b094-931ee6b9e7a2", "sighting--c1519f95-24f1-4d8b-bd56-ee0acfea5c91", "sighting--f6b38978-7d85-4df1-a755-4644b79c1605", "sighting--5d5842f8-197f-4d98-ab72-54357861ed75", "sighting--b200d139-7e26-46f7-ae68-3a4c0e1f4726", "sighting--f58a073e-c978-40c2-a507-9ba5d778026c", "sighting--e0e93bdd-0c15-41ea-8a9f-c9c041acec2a", "sighting--5de2eccd-962c-4cfa-93de-e7709b9fadc5", "sighting--b23b070a-0375-4148-a810-6647d46b7f8b", "sighting--879b00d5-f38c-49e1-b980-8a91cb261e33", "sighting--4244ec21-d5e0-4523-91f1-e91eff3994bc", "sighting--cf9475be-7005-496f-a8cf-0a80ffbf537b", "sighting--9778f10c-f54d-472f-ab10-4cc450df04e0", "sighting--3940b437-c519-41dc-90d7-23da2573640a", "sighting--512ac4b9-4ee2-4df1-a65f-30056b376d09", "sighting--85bd990b-cbe0-4609-b02a-f9692f9c8bad", "sighting--4b2331ff-e4ee-4bc9-bc4a-7e24caeea3a4", "sighting--67150854-61c6-4bf5-beb3-3da31185d050", "sighting--a5ca4236-64d4-4131-95d3-1418e9ef47f7", "sighting--fc55a11a-f950-4eaa-af09-9159fc85465e", "sighting--ba6bb2f6-82f3-488e-82ec-1376e7037cdf", "sighting--4a3da02a-3b5d-473a-bbd1-5c9165736776", "sighting--dc720f83-344a-4dd9-bd67-46d451818602", "sighting--d1499f66-4a94-438d-b180-2015f8451114", "sighting--37faf4f2-4acb-4b79-9ef1-429baf60d77b", "sighting--fa71419d-2b6f-40a9-937e-ded4307fbec7", "sighting--c24456d7-08bb-4285-9f55-b44a5adfac84", "sighting--a1cbf724-244c-4653-a993-075f998997b6", "sighting--910fa8b9-311c-4250-854a-37a52b155c24", "sighting--ff881b74-d3c6-4c9c-b946-33015c60e9d4", "sighting--22837e08-94b1-4fb7-95fa-ad64228b3079", "sighting--5b88fe14-2ec3-4629-9ca4-3ec11f5812e6", "sighting--d68e81b9-1e89-4215-92f3-40bd1edec20d", "sighting--63175546-3d88-4168-89b9-840041a9dcfe", "sighting--359e102f-5825-4058-ab1d-f2d0d7952d04", "sighting--5c55f425-8e07-48c1-bed0-3608de0d9f40", "sighting--5bb63a20-5690-4233-84fc-3c1162bfd68d", "sighting--989a2026-df30-4138-8b3a-f2e73ba2bc70", "sighting--5db06c43-caad-48c0-8d6b-4d972321d2a1", "sighting--0621ac1c-77c4-4f45-a3f9-70819c8678fa", "sighting--16e7672b-9527-46d8-8000-c2e2495865fb", "sighting--adf6dc18-38ed-46f0-9706-901107d672de", "sighting--4fb9c476-9940-427f-b9c2-2707921d029a", "sighting--481e54ac-461a-45e3-a5f8-f101351a2d55", "sighting--2347dc6a-df2c-41c0-9812-f62919dba4d1", "sighting--aa56ba1e-39eb-4d0f-95e4-94bdfa656413", "sighting--25c597f8-9246-4a8d-9a8a-c72a7b552b47", "sighting--51b4c65d-cc78-499b-be28-d5a7984c982b", "sighting--a16d404e-816b-4173-8096-6c374ce929e6", "sighting--06ec4460-cd13-473c-bea6-f3dc084962e8", "sighting--1c9e32ba-e80e-471f-97a5-c62f80bed879", "sighting--3ef41d9a-1ae6-4823-9d1e-f305f2e8297a", "sighting--00ef97cd-17fc-47f2-b18b-53554abe8295", "sighting--17700849-8474-49e0-ad4c-65bbca2a8496", "sighting--8e6dcde7-6675-43c0-b5a4-f0a346c33745", "sighting--08d50337-9a6f-4dcf-8e6a-aab1d8884999", "sighting--021aaf9a-aa60-4ac9-8c3f-2cd668099ee5", "sighting--cc2c15af-78d1-45e3-9760-7c055de4ad8e", "sighting--f5fb9578-36a7-402e-ab42-ca50d3ebb852", "sighting--38006c6f-e0c3-48b6-addf-328fbaf0e26a", "sighting--595691b0-57d9-4bcc-8a86-5c98353fb42e", "sighting--d4aada1c-1f96-4640-939b-3f9de5f96e98", "sighting--3707b3b1-7f66-4807-964d-26a4e6189621", "sighting--dc445d1c-f0e0-458d-925c-0461a477d989", "sighting--291be91a-471b-493c-80e4-4600a778ee40", "sighting--5a82ce86-a925-499c-a40c-b23432b08ca3", "sighting--7282ae28-1802-4ef8-967f-755367d6debc", "sighting--36e292a8-a279-4039-be13-216cf97c9f41", "sighting--c09d55fd-c220-4f78-86eb-da6917f1ec7e", "sighting--b56b1794-5ce8-4105-8e69-9627b6dbada1", "sighting--b4c17217-3fe9-4afe-b9eb-63b6a1fc5059", "sighting--3371a4d8-b48a-4bf7-acff-54153385de81", "sighting--2d24cc25-aba3-4d06-b589-acd0c4048570", "sighting--4b36fd5b-2d23-49c6-9723-2b927c03d21d", "sighting--bfb8386a-a481-4955-ab93-4a27b437d30f", "sighting--67f0d656-d04b-4c05-932c-80afb8cae8f8", "sighting--6b9e5920-7b32-43c0-b865-e5e50a9a771f", "sighting--298105c0-5cf4-4784-b9bb-5893520dacc9", "sighting--abdd38a1-e342-4448-831d-07eff72778ea", "sighting--8960a24e-8b67-47e1-be34-2a2e130300ef", "sighting--9d2f8883-40b9-4a21-a97f-1df7e9a26238", "sighting--394381a6-b5d2-4a67-97e6-f8d794f5d380", "sighting--f146c37e-590b-44d2-bb31-d0fea1ace806", "sighting--b99a01b0-e3e1-407b-a024-eccd2bf33f21", "sighting--15ded956-47a7-4ab9-819a-f24d0021a91d", "sighting--5a82104f-3c7c-4f28-9c71-36b7a201564e", "sighting--4cace46d-3dcb-4a24-9e4c-635a80bf5fed", "sighting--dd399649-f7e5-42b5-b088-f99e1c2653ee", "sighting--e5a42c2d-1fab-48dc-93cb-fc7801c2fe80", "sighting--d52760f2-f38f-4eb7-b872-e9d26331095a", "sighting--bda84839-ed5c-489d-9c0d-d06f3d098f3f", "sighting--ce5a6751-1581-4d34-bdc0-30d08bcf5909", "sighting--87af384a-d5dd-4806-9243-3e92198acb0b", "sighting--6b456bfc-2a67-457f-905d-dc6dc9f46ce6", "sighting--c1c62b20-91e7-4e33-a061-58d08f14ba6c", "sighting--24f15be1-02c1-420b-8147-706fb82e25eb", "sighting--aa68ad52-ac5f-4bd0-9965-14619ff9de60", "sighting--111b6605-02c1-4e5c-93f3-ca17a5c00992", "sighting--ab27ca70-14d0-41c1-b164-8e6625ef23bf", "sighting--d0f63e7f-d557-4614-b245-b3fbca8ab7a1", "sighting--39b958c6-e74a-4ee5-92e4-f492a7b87ccb", "sighting--d3a82d54-f66e-4bb0-86dd-2b87f28c9a1b", "sighting--6e44c9a5-3b92-4843-a099-7981d870274f", "sighting--754ca372-7af4-412f-89a8-2fb04c77a5c2", "sighting--5a22d34f-1298-4a9d-9b98-4610e9435587", "sighting--30b0af5a-3d4f-42ac-83cc-81f63d9314db", "sighting--85fce85c-0405-47e6-a5d0-91483e7761c7", "sighting--92b57545-4ad7-465c-90b9-0707a5f59631", "sighting--c6fec5c6-dea2-4cba-a132-256e21695dba", "sighting--8f7f44ff-8029-4f4a-9c6e-7d7bfb3de228", "sighting--63b706c6-7edb-43b6-b2a2-6bece4e46074", "sighting--deeed491-0013-4a7c-9013-9a0388459327", "sighting--ff422d00-095e-4e12-9d12-c12952ab78e0", "sighting--c816195d-dce4-435e-961f-f5c1ebb76566", "sighting--c638cb81-acd9-42f0-a8ef-ee8d5897a882", "sighting--f3e24086-3850-47df-8d9b-4729710f2981", "sighting--62c06d9f-0dcf-409e-8641-66c627354de0", "sighting--a33f42d3-db84-4019-8fc6-b4869f6c1b26", "sighting--56c7f9c6-cbb0-42e1-bef7-ab8051224c79", "sighting--ec0d558a-2471-4ad6-a8ed-71bd9b47a1b6", "sighting--d20a62ab-3fae-4ba8-ad59-bce948df723a", "sighting--e59d7a79-731f-44f7-8c5c-c6fe5c5102e1", "sighting--c03b74ed-45b5-43f5-8386-ac29261d7049", "sighting--cea59920-af42-49bb-82ea-91fdf86901af", "sighting--021ab411-5917-488b-9fa2-4b0de1d685f2", "sighting--8c5898bd-9646-4700-addb-901b5e6dfc0a", "sighting--5dc21613-5adf-4cf0-9880-bf58cb50349d", "sighting--9e1d4ff9-9794-483e-a232-a3cdab24ba38", "sighting--9fa1c575-0498-4a13-9da3-029ae1529e91", "sighting--1cd25948-6aec-4b85-b0e9-f63bc52dd549", "sighting--21dd85da-14bb-4991-a045-3d36818884d4", "sighting--cdf8a79b-5452-4cfa-bae4-8e4eca440148", "sighting--61f422df-1b90-4720-b920-562fdfe78bc9", "sighting--454cf1ac-9e77-4d5b-828b-3dc5aa6216c2", "sighting--bbedaae2-f378-428f-a5bd-883975396d44", "sighting--fe070c2a-5cc0-40a0-9485-976a0a4bae5e", "sighting--0ae7e398-ab05-437a-9013-ba8bd22a0cc2", "sighting--73b66151-8718-4885-80ff-e43aaa33dc3d", "sighting--fae6aaa5-94f8-4ef1-96ec-366e7e67bdb3", "sighting--91c815dd-73d1-45dd-964a-03260bd68236", "sighting--5870c899-fd58-4029-b9f7-fd8f222d13f8", "sighting--47f4d17b-0c08-4af3-abce-35f864ed5476", "sighting--170b1ff2-59d0-48ae-bf09-697964ff8464", "sighting--93ef7e32-d190-43b6-8682-b1b9064bd7eb", "sighting--9a6fd570-32ed-4a10-a2fe-014d109d2b2c", "sighting--8063a9bc-c54c-485c-95be-b9896355bb38", "sighting--995dbfaa-69c4-4217-8880-c02bb26acfbc", "sighting--91a425e4-e4dc-4519-b029-a4bd212c08cf", "sighting--c1b11f63-6928-489c-806e-1d33879321bf", "sighting--980b926d-75bb-4722-ac81-d47553f37656", "sighting--774ae043-eae5-4dfe-b114-4e09a7d8428f", "sighting--234089a4-519c-43ee-826d-0bec1606b9ce", "sighting--6d16b9e1-513b-473b-bfb4-30dee95504b5", "sighting--397fd0e6-a44b-4c6d-96b2-1fbc339b2b42", "sighting--5b197285-27b5-43f1-ae37-04b0ebb1c4d9", "sighting--af00cbd5-e42f-42f0-a145-ec366b4c786f", "sighting--dee1c00e-7f34-4eee-9e8b-6b8d936d7705", "sighting--5bd28dff-5298-41e5-81ff-196e96b11bf7", "sighting--ca555522-d17d-4763-8ec8-63a7c6f8fa9f", "sighting--0c3c289a-f470-4866-92ec-76e78abd6376", "sighting--0bdfac45-a51f-4092-b57d-31f82ed9bbc7", "sighting--70c16e96-5837-4427-a63a-09822abc56fd", "sighting--79d0b46f-91b8-4964-9759-83a2b0cab8be", "sighting--64da0250-5a66-46b6-9447-8760deeacb81", "sighting--dba7fd56-bc38-4139-a8a4-7d1f1f0c5b39", "sighting--e4026676-ee4f-4fd0-bad1-0be5e4098f91", "sighting--e2fcc38c-807f-4e13-925f-e86ec35f09a1", "sighting--68e17d0e-b194-4e0d-a02b-c74840ad7d77", "sighting--bfadf6b8-b24c-4d08-9c74-9aece085227c", "sighting--71949e1b-8e4c-4de4-a686-5ec3a4685fe8", "sighting--bf48e65e-2626-4e91-bf90-9b523eb927af", "sighting--39333dfb-7ab7-4098-8b5a-078476b05cfd", "sighting--97c45f9a-9931-4072-af2b-278504099f08", "sighting--a8984e20-4b70-446d-8df4-a8c4febdeb43", "sighting--62a5508e-3e24-4936-a567-ad5fc67dab35", "sighting--ad2ff662-7f7d-4d9e-9175-2acfea74985b", "sighting--bf8c864a-846d-4962-866b-6dd0ac0f2dcd", "sighting--85a1eb65-97d7-4e9d-8f1a-a4412abb49e2", "sighting--bb4d50cb-8516-4d3d-afb6-866f7fd08aa3", "sighting--82ebf0c6-3e0b-4818-8b59-2e9a7eb2fb9a", "sighting--68d3f43b-9d8b-4631-81bd-5b100052996b", "sighting--983bfe0e-1b98-47e7-b79b-2e1f5e9cd732", "sighting--62633e7a-6501-4050-b0c0-e7cc13eb1713", "sighting--06f2cf97-a30f-44e4-b137-f6c0ccdf1b6a", "sighting--6452bd77-645c-40ff-b6bc-78a6ceb31c02", "sighting--0c9ace76-8534-4f49-a4d0-29d693c80c82", "sighting--1095eadf-c519-464e-b3d5-40199672c09c", "sighting--170b5b21-2e9a-410f-a4da-795c967d2591", "sighting--cc7374ee-5ec5-423b-b841-4f81db91996b", "sighting--49cbf952-542b-4205-af4e-a591c4961852", "sighting--0a572266-8805-4028-9bc3-8120db461287", "sighting--b038e9cd-7240-4391-8625-4ae8f43506d9", "sighting--8e025f7a-a60e-4371-ac31-f13682bb5b6f", "sighting--668d945e-7886-46c3-ba74-646e14d580eb", "sighting--2196b396-244c-47fc-a6b5-dfefc99855ce", "sighting--0a815a2a-db93-4269-85c4-6f9b73b10646", "sighting--1adfeccc-c5c0-42fb-9d45-e5cc0ff96f40", "sighting--7de0fce7-480f-4bf4-9d3a-227182b37eb8", "sighting--921dae62-4c60-44cb-b94a-17a0467053b7", "sighting--03557bed-e118-428d-accb-51d38ee906e5", "sighting--07add3cf-dcbe-4d81-b268-5090436e7dd0", "sighting--1100d52e-f2f0-4b0b-aaf8-3bafac303c49", "sighting--5579a0d4-75c8-4284-9278-0b679c9b6af3", "sighting--50919e5f-7ba9-4609-ade8-a46b08ac7762", "sighting--a1d85f7c-4e94-4502-aceb-83550c707978", "sighting--94bbe177-f5ac-4e23-8428-41c7c6563b7a", "sighting--0fde25c4-5cb9-478e-bf16-5f13357ea1ba", "sighting--d20bdbb5-38bd-4df8-9f8c-98d6c57df960", "sighting--9883778d-c787-4c51-99d5-58d8d2bec8cd", "sighting--42849716-eb75-40d8-907b-cf9d78f6c453", "sighting--cc4f9a1b-9019-4634-9177-18e3fccd7f5d", "sighting--e4620da5-5beb-4176-8bcd-d20c25ef88c2", "sighting--b961cdaf-a82c-4bad-84d6-dceb1dd5de93", "sighting--ae13eb9b-40c8-44c2-b0e5-0f31fbe9446b", "sighting--706b104c-acd7-4527-9eb7-341cd923b17e", "sighting--9c90e172-3e91-4ca8-8124-c03f9825b2f3", "sighting--362da451-1cd7-4d83-ac47-ce9539e8822b", "sighting--129a5161-c46c-4476-a529-fa23daa468f6", "sighting--6176d7ee-9d2d-4a14-b4cf-6d5141e92893", "sighting--c5dbb8a9-ea16-4180-a941-b6fd086378fb", "sighting--47ebb00d-2596-4db3-8c8d-249140936d30", "sighting--adcfd92b-3e0e-4cc1-9b1b-0a1100e4041d", "sighting--416c3fa4-d5a1-4964-9d61-1530c969ce74", "sighting--b2a33cdc-ce74-4bd6-9e85-b02c663882f4", "sighting--d1daa440-9b8d-4eae-8dc7-4a592c4a7598", "sighting--1629f36d-877d-4b1f-93b4-d102eb060c85", "sighting--ed57a50d-67ba-464e-bf17-d4b37283b231", "sighting--034f5fad-6ba6-4125-8a91-58e48e1511db", "sighting--25fb1350-591c-4a13-8afe-ba9b618873eb", "sighting--f114d8fd-2a52-4796-895c-50f5b7db2757", "sighting--123f5307-835f-41fc-9f45-c8ee60701370", "sighting--a93122f9-904b-45bd-9ac5-4395f112fe71", "sighting--f30e614f-ad82-4e7a-80e7-0e85edbf766d", "sighting--064c0292-3fb8-44a0-833a-05d161f0edc8", "sighting--cd852bde-13bd-4cad-8b91-29e7b18a7126", "sighting--0771ebb8-3804-45aa-b079-5bfcae5bf9ed", "sighting--4f15990b-d814-416f-ad36-dd44b5f8fee1", "sighting--78eb6c1b-38a3-462f-a69b-1589b0e8d112", "sighting--e745c3ca-e13b-4e93-9bae-77f9d75d10d7", "sighting--67335cb6-007e-48ad-963e-7616c75d9985", "sighting--a45c71c9-4e1c-429f-8c1d-70748baadff6", "sighting--1cdb9371-eaf6-4a91-a1f2-560fb50cc3ea", "sighting--c63fa5f0-b2b1-4b91-b4b8-1776e2572d32", "sighting--c55983ff-cb30-4856-9c40-3abbc13b05f3", "sighting--ed317c36-c174-4cbd-bb23-2c090d711d6d", "sighting--75dfb511-df22-4af1-9ba7-b21069489b37", "sighting--e9ae62b4-7eb6-42ad-abe4-c3dd378aae79", "sighting--ace93ab1-832b-47b0-ba3f-43d345d62a52", "sighting--65dd5a24-f98f-43c4-b332-ed4815e2643a", "sighting--9e2274df-ca71-4e7b-b17a-d69ee5153044", "sighting--104d9070-afc8-471a-8bdf-f34643c76e6e", "sighting--f703372c-300e-48eb-af64-c7a4c14e57ac", "sighting--bf5b22da-570e-4a90-a4a7-10e013f151dc", "sighting--828a96f6-73d4-49b7-b90c-fceddfa4e301", "sighting--eb41793e-2d1b-4cfd-8ed2-4ef97ca39bed", "sighting--c9c8289b-304c-4e1c-a1b6-6ce9a91d9e3c", "sighting--77b70124-32a5-458d-8121-813f09681d63", "sighting--0b6fb338-784b-4abe-a89f-8fa561c8cccd", "sighting--cc863c6e-f411-4602-acf3-9a6e8d13f485", "sighting--431f3926-c6ab-495b-9206-b6614d01372a", "sighting--3bc2afc7-0b8a-4374-b4ca-5d227b059c2c", "sighting--4571f675-48d5-4e5f-a324-5e3ff07c6d85", "sighting--3fbd9493-b482-4fc7-ae00-d5866a5b1ec2", "sighting--8de03e19-0ea2-423f-b64d-0024f0ffc791", "sighting--cc475d85-841a-4f56-aac0-8fad1aca7048", "sighting--086446c5-5520-45a6-9107-ab3e1276bb9f", "sighting--82571593-72f6-490c-998e-26ab89619dc1", "sighting--dc5ce10d-ace9-4d44-a4af-8689d8fa6b2a", "sighting--e66ddb41-ea90-40c2-96ea-afd019582ab6", "sighting--3506f328-8d38-4328-bdf2-7156ec491223", "sighting--ca4ba1c3-4269-4c68-9c45-ba5acc49b9ce", "sighting--0bcf1671-af3b-49f6-bb9a-3be24328c439", "sighting--6bafd3fe-7315-48eb-b47b-12a2abd33637", "sighting--aa3df651-70de-45bf-84f2-e9c4ce247c43", "sighting--814e608f-72b6-4217-a01b-0cc0222d0809", "sighting--8e0a9544-1444-4117-a83a-95052d4895e8", "sighting--cdec94e3-4eff-422d-96f2-c76d838bb36b", "sighting--a272ae39-0e90-4fac-b50c-7ac5de08b673", "sighting--7157bb01-9cfb-4c13-9e0e-32af7079dad1", "sighting--61889bb4-1d16-41c0-86ba-363adacaf9c1", "sighting--e75fe8b6-2466-4e91-8569-9f4a395934f3", "sighting--51eff8ee-f465-471a-9b7c-96b0cefde554", "sighting--fd18c761-8429-4470-b3d0-24c1e007f34f", "sighting--a464cae6-6864-492d-9b6a-3891a7d4f7b5", "sighting--3775bdc1-595b-42c5-86d3-a965e42eab78", "sighting--14d54170-46e7-4fb0-93fb-211a817e6263", "sighting--6c556d73-3853-489a-a1d9-1b840f909949", "sighting--a8e052c0-86f4-4afa-abf4-e7508c3388bd", "sighting--b1b1353f-1488-4c39-ab0d-a9a932756a1e", "sighting--337b86f1-657b-4663-8835-a8bcde5bb18b", "sighting--51ed1f08-01b1-4e85-af91-4977dadcf18e", "sighting--5edfd7e9-0d25-4c7d-a2e2-f79ea1164ef9", "sighting--2bf0e2f9-ef14-4e64-b3c4-1a525a1075e3", "sighting--c22d9e10-42e3-43d8-b105-9812765e12ad", "sighting--91866a66-26c2-4f5f-92dd-a120d15fca1e", "sighting--23b13104-a1e5-4faf-a004-6a18376c8dfb", "sighting--839f52b0-5661-4569-87bb-2b8c04965ced", "sighting--35a12a45-d85f-4ee4-aead-aa3f87977856", "sighting--c16aa272-4a6d-4b0c-a431-0ea2294caf81", "sighting--a37b09b5-2cba-4825-b179-d026c4fbd0ef", "sighting--36481e51-6835-4cca-9cd6-00b87c42ccc5", "sighting--ea28813e-aa48-43a1-bc95-555d816ab43e", "sighting--d14e6df8-03fa-4ce9-941c-6202c32764d1", "sighting--db153e35-1b68-45a0-84da-e320b993dcd7", "sighting--fea624ff-7f78-4786-84fe-b377c8feedde", "sighting--937f2aec-ea9e-45dc-972a-8ac40ea572cc", "sighting--94079672-5c33-463b-822f-188a06bb6432", "sighting--a893c0e3-c529-44d6-923e-fb1d0b3590b3", "sighting--90dd7597-1fde-49ae-be88-7bed12db660a", "sighting--2736460a-51ec-44bc-a2ab-848a05a54d52", "sighting--f9e4ae10-f861-45f0-a018-7a9c1030e849", "sighting--96004509-ef56-4178-ba13-0ff1915bebc2", "sighting--3ea87e9b-5a49-45ba-a6bb-aa325407a7c0", "sighting--d61bf235-d2d8-4eeb-a7a3-a9ccdc70bf68", "sighting--5fa35d9a-cc4a-49e2-9e0b-aa15a276f66f", "sighting--cc62d510-c0b3-474e-9e92-7b0768cd25b6", "sighting--fe183480-5b30-4773-929a-4d479e3c732d", "sighting--42a2b8f1-0ac7-4e82-bfb7-754bc1225431", "sighting--c8087089-aae4-494a-a8bf-05d59188652d", "sighting--ba9c4393-27fe-4d6d-b542-ac58d267de2c", "sighting--1ed543db-3c83-44cf-ad00-eb5bae9578e5", "sighting--9c4d0ea2-7f0a-4286-90cf-f14f3c4d3221", "sighting--a61be745-e1e0-4019-9bd7-f6e7d6dd0e6c", "sighting--747b434b-776a-4d96-8f1d-9d6da7493b81", "sighting--33ec190c-18b9-4886-ad00-a5809bf18746", "sighting--d5ddd1cb-3773-4ead-a8f6-104edc574d4f", "sighting--4d27841a-53d8-44a2-aa3d-e5f55c1ea462", "sighting--c3b6290d-437d-43a8-8321-f0ad40f0e39f", "sighting--efb8820e-8d82-4d61-88f1-5e54a30825ac", "sighting--306293fb-1749-4fde-9ccc-478d7618eb78", "sighting--b06fcd61-ebc1-4c53-84a0-542591cfc614", "sighting--e26ac3f9-807d-4c3b-8023-6038f0210593", "sighting--4ab7cd09-9dbd-4c6c-aa13-ea25e1212c92", "sighting--3197dc54-7411-402b-b677-195b487c6ca6", "sighting--73bc6b66-2b9c-47bf-bb06-1f32bd6e7f95", "sighting--7d1da40a-aa9c-4a14-8267-dc7c99bda1a6", "sighting--b89b4a90-4ae0-4e92-ab0a-450bf0856e06", "sighting--593c6024-d0af-40f9-9404-6eb232050937", "sighting--9053886e-c5b8-48da-a5ff-a7f0fc73f82c", "sighting--c511411c-3bfb-475e-b282-0cc5bc2a527f", "sighting--334f0b87-b3e1-4abe-888e-f51a116a9421", "sighting--8bc4aba7-bbfd-4172-82cf-424dfeb978f8", "sighting--295beabf-9a4a-4808-9e7f-b59c59067160", "sighting--b9566b7a-36fa-4faa-bae9-2637f15e2345", "sighting--3d2ccfcc-4cb2-4174-856c-99d1545ddc11", "sighting--29cf24fe-36f7-4768-adf6-cd3b09afc454", "sighting--13d34622-5591-4cc4-8db7-5aa7e2c382bd", "sighting--7c5ca4ba-c8f4-4511-b69a-5c601895e947", "sighting--3cdbdb32-1b1b-459c-8647-175a9f9f6ef6", "sighting--32832644-0d2a-4866-bdf2-e1e6620e88fc", "sighting--0673ac70-074c-47c1-863f-ac55723abca1", "sighting--e2a58198-fe65-4715-b7f7-cea65eb31ed6", "sighting--b83d226f-005c-4a15-b971-a151850a49ed", "sighting--97ce8608-2ff1-4061-b07e-ef4977c4e801", "sighting--0b923176-ef31-4909-b209-d22de170ed0a", "sighting--29caf6f6-ee5f-48ae-9073-9bc4738cbff7", "sighting--7e263e3c-2e15-4c80-b310-babec046c2a4", "sighting--7c2aa580-5a50-43d5-8ff6-d4383e8e6cea", "sighting--711129f7-4b2b-4102-b57a-78b790380274", "sighting--c10b1fc4-a7e7-4f7a-9b49-74111dbd1d8e", "sighting--dc59e12f-06b3-4c4d-a7b2-b6dc97b30aff", "sighting--52c3243f-6a8e-482e-bb85-10dec57feb25", "sighting--5e7fa55b-64df-44ca-953d-38ecc13cec1b", "sighting--025d46cd-f056-4395-95c4-2b8cfbd60ba5", "sighting--ce99854a-4d3a-4c39-8313-7ad18550ee1c", "sighting--39722e14-003b-4542-94b2-68243b089b01", "sighting--d40af009-dbb7-4f85-84cc-b021fd16e0dc", "sighting--168bf318-ebb9-4cfe-92b6-b15619dc7204", "sighting--5993dbb7-4642-49fb-8ed3-b152670f0de9", "sighting--730dd6a3-b298-411a-b0ba-0f027abe9329", "sighting--bfda031c-9dcd-43b5-bf2e-367532d31d28", "sighting--26f1d20d-bcb7-4b85-8c0a-4baee4749cc9", "sighting--2305f98e-2950-4cae-83b9-92f1a49c1717", "sighting--673bed77-a7a0-4c73-b5b4-c8a8564e9ef5", "sighting--22168992-1e20-49c7-a425-941cb41eaf5b", "sighting--80eeee59-dadd-432b-9bae-8846c202dee7", "sighting--abd81941-335d-4f1f-9bc4-d68e15869477", "sighting--7030b473-f18d-4774-bccc-190fd73fabd3", "sighting--696103be-73fe-4a67-81b7-a09122a1f069", "sighting--6608c4e4-e7ae-4504-8b3d-3085291b1d62", "sighting--58c9da62-b618-4f7a-a077-f687037d8573", "sighting--89555c01-7765-440e-baa9-efb2d96d9df4", "sighting--cc8c3faa-4b40-4f90-b631-0448bc9fa85c", "sighting--8bbd526d-85d4-4e39-a74a-bb7216f5d7fa", "sighting--43c448c0-e9b8-460e-bfea-7eee52a3f8e8", "sighting--8947c241-7318-4ae3-902f-ac2dcf51143b", "sighting--32cfcf68-c2bc-4a00-a9bc-0e7ddf34918d", "sighting--97834b83-3b23-4031-b941-9c9cb7fdf545", "sighting--221f3e37-86fd-473e-90a6-395af91a32f5", "sighting--e4b749cb-e118-4222-8a31-9b047867e769", "sighting--6e3bd33f-d94a-4a0f-b1b5-870413a0fadf", "sighting--0b4b4e0e-a18f-4c70-88bb-74716589a7fb", "sighting--4987a6ff-8e4c-479d-90d7-64d81b49674f", "sighting--def08b6c-2b24-4bf6-8283-392c47a7a73f", "sighting--7d25b61d-7076-42af-a4b5-72897a546cc7", "sighting--927b19d0-c200-437a-bc33-d76b57a0e0b0", "sighting--ec5a8d65-ae52-40e5-8d85-f3b50711d6d8", "sighting--7c7962a6-d875-4d3a-b292-0bdb3885369d", "sighting--f8a6cc6b-3f02-4593-a9ec-fbc27197b1f0", "sighting--007cf612-d14a-4f6f-bce9-1bd29c07eb39", "sighting--9e2aa970-de5b-46b9-9ab3-16becc21ac81", "sighting--cf023f7d-6f10-4ab0-9ee4-f2e9a182fec8", "sighting--6f6323e8-5178-4794-b1ed-ca7ebfb354dc", "sighting--8d8be271-7445-4c33-9ae0-75d10bbcfeae", "sighting--6eec6a2a-79e6-4ac8-8094-15ed33b92205", "sighting--acaeb3a1-9cb1-41d8-b997-debb7d70c7bf", "sighting--3044a2ab-1c04-4dfb-b4e2-129773f23098", "sighting--a63d787e-6b79-492c-b27a-ef933f0dc6ef", "sighting--3aaba222-7b4e-4e6b-a515-84f4ca74f697", "sighting--2bcd9652-9534-4e3f-a0e1-ac19a39bf9a2", "sighting--3181aec8-6846-4bee-aa03-80051d8d2a07", "sighting--d9f232fc-a961-492f-bf02-b7ef95c9fc06", "sighting--b6c42e57-9bff-460a-8257-0acf873db1b6", "sighting--3b5ba04e-e49e-48f5-a955-ce2931dfb6c8", "sighting--a5c108cf-dc7b-40b0-8151-6fecf8dfe93f", "sighting--da9ea948-bd61-4603-b611-326c879c5a8a", "sighting--28fbee77-2795-4830-821f-3cebbc5bc968", "sighting--521e7007-1dae-44b6-8bf1-690c52ce81b3", "sighting--4954be4b-c1ce-470b-84e4-ee10dd7788c6", "sighting--8e81434c-3931-407a-8c18-b0ed0adedc7b", "sighting--a7ca9e07-15be-4cd8-a566-7138bd9db987", "sighting--b9154262-1ecd-4398-9953-232f50dbe37b", "sighting--c7302a68-4f10-4ec4-ac24-c0655bbc3dd3", "sighting--488bec50-ee78-417f-afc4-268a7fc903af", "sighting--537f9259-b1da-4969-bebf-cf1d3892360f", "sighting--40e3525e-31ab-49bf-a262-c4608ab63383", "sighting--946f6423-bb42-4ca5-84ae-b08e7ee786bc", "sighting--ecc32d67-e5f6-447f-9e71-3816935abd8b", "sighting--b0f444ea-c3ec-4f40-9857-7235c5d07ef9", "sighting--3cbd03ce-1256-4599-adb3-3aba3baa1fff", "sighting--4a36c7ad-3668-4680-91b3-2b16cd8b4acd", "sighting--3ebc17f3-2d1e-4663-bc7c-7d9a19b5dd29", "sighting--3ca114c4-7035-4519-87d7-911091e82ad8", "sighting--eb5bbda9-a783-484a-a0fc-561d255dc721", "sighting--baf502dd-3f23-4672-9372-c921d8a0567f", "sighting--9c482bb8-6af2-4fcf-ba54-a6b9f29f5f82", "sighting--1925caee-a069-4c6c-baf8-c72d2518e07f", "sighting--f5c10aa7-4cd7-4ea0-89e6-6c18d1d07630", "sighting--6057b166-d6e7-48d7-8ca6-336b8d70affb", "sighting--e2660961-161b-458b-b116-98b61af15c40", "sighting--f7cf8f5f-ba7c-49c5-921e-a9740f59b737", "sighting--0b78db84-ddd6-4889-b6f9-899b72d61614", "sighting--56852263-13ec-473c-a126-d9d69456d06b", "sighting--a0fe29b0-4b2e-4de1-aee6-eef683e48d4f", "sighting--d52bbae5-ad18-4bc2-a75d-de612e2b7d6e", "sighting--354bef64-b73e-44a3-a275-7186f0b725af", "sighting--d2434bb4-2f95-4f74-a710-b561e5cab76d", "sighting--fb9d9075-3b3d-4f3b-8899-7201c3f2af76", "sighting--a8611af2-a51f-4e78-9425-5dbb9cab9fba", "sighting--5438f441-f295-4e82-9f05-5e73605b88c5", "sighting--9ec8bd00-ed16-44e0-9aa4-d3ff19453589", "sighting--186484ed-d776-4077-8d54-c62fcdd3dd45", "sighting--99b5aa7c-744e-4c7f-a30a-f5bda431a59b", "sighting--1a0859e9-9cf3-482e-bc41-abaab43cd6be", "sighting--e554d05a-8b6f-401e-a6d9-f56d8e6b9772", "sighting--dc0600bf-54c0-4287-b609-9b1331354f9c", "sighting--d231ab55-cbd6-4cf6-92d4-3884324f414a", "sighting--866d228a-c4d9-4142-badb-01d1f1e0143a", "sighting--99f11519-8d93-4945-8288-98391bfb4e6e", "sighting--1a69876d-bc28-4af4-b3fa-6484536a6b0d", "sighting--06ec2f44-1365-435e-b710-062e43d2ea3e", "sighting--2377b860-af06-4146-825b-d2d23be90ad7", "sighting--42b60aa1-9a30-43b9-83b6-fe894ba9b08a", "sighting--9dab368a-904f-4eb2-b42a-4563bae46987", "sighting--8dd97901-3f1d-480c-bbc8-d27d9e8799fc", "sighting--72a4893b-fa99-48bc-8a3e-df96006a8a1e", "sighting--0ec3df06-eefd-4217-91e1-055a74bdb079", "sighting--bfcca76c-075d-4627-83c0-23c753654c48", "sighting--9a5ba2fd-c49c-43b3-ab3c-3ad4d1f40ead", "sighting--d023eb8b-9538-4f24-ae44-7bf8098154be", "sighting--a05b3f74-67fb-49c3-a933-760942dfad84", "sighting--2a94672d-6a0b-4ceb-a306-4d5a35e24d13", "sighting--5c171461-87bc-45ec-a008-8248bfcfea3d", "sighting--360ae773-362f-4e62-ae0e-f89826cd64cf", "sighting--9bd78e1f-5030-4fba-a771-3fe5a8ef77d6", "sighting--5bbd9c44-b8cf-4dfd-acda-241cb61f7cf9", "sighting--94fbc1b5-012f-400a-8d39-5e22d6c497de", "sighting--c5c5765d-399b-4d2b-a5e3-7523f349bd41", "sighting--ebcf95c8-ae61-4bab-883d-3f499a44f7a4", "sighting--27bbf5c4-5843-473a-976d-e80ccc144410", "sighting--8ec2a13c-b525-4046-a520-d9ca4aa10f86", "sighting--95e8ed3a-56d9-4528-9c82-0407c50523ef", "sighting--87549e09-f9c3-48f9-8b82-32107594fc3d", "sighting--50bdcf64-1290-4bba-95c8-197f61aa35fd", "sighting--1459b777-f00b-48f6-bb92-aefc11f484be", "sighting--d6445435-e5d4-42f5-b02c-9caf83c89ca2", "sighting--b8afadcd-b328-4735-a6c1-d96226a03e21", "sighting--66099806-c8fa-4285-8e6b-5ac92b736c98", "sighting--e6511592-679d-4b32-97ca-06e2c1adce70", "sighting--8ade0844-378e-4dfd-aff1-fae0fd034c67", "sighting--c0be995b-a409-4e05-92e7-c6986ff557da", "sighting--6ff9392f-8345-4069-8be3-756ce564418b", "sighting--3b29aa3e-fbb7-4780-b0e8-024448f9bf92", "sighting--929256c7-b546-4d35-bf43-1f892d776390", "sighting--f43b947f-0d6f-4671-8f1a-1632186df740", "sighting--501b1174-c6a2-4d49-872a-01ef64d56650", "sighting--3cb7a2ab-383e-47c5-8f50-7ee9d6df0098", "sighting--721abe43-e779-425a-8a60-146659c8e589", "sighting--e9881ff3-3131-4a57-823f-104f8e0319c0", "sighting--a1c5b9b5-f651-4142-858a-1711617118f4", "sighting--420c9e1b-1528-46b4-a6e7-04bccd423599", "sighting--e5e26aad-c278-4917-a439-df03ffa62896", "sighting--c8be5230-c31e-4bf0-91f7-e4a360a668fe", "sighting--0dfb6366-8209-4d0d-9d73-c751a0ab74e0", "sighting--7530d1e9-fce8-43cb-84db-e21deb98b359", "sighting--e3eea7a5-6f57-4aa1-b4f8-2fc740b803fd", "sighting--dd52d7a3-7770-4161-8716-44fa715308e1", "sighting--ddc2350b-b737-45e9-906a-dc22bab4e7bf", "sighting--d1bed410-9646-4f1d-a70d-a7af84de247f", "sighting--ab1bab25-f869-49fc-8fae-78fe61373b21", "sighting--7955011e-c7f4-4e2a-af44-97e707f395bd", "sighting--b4aa7ba8-b9e4-4179-8c41-1f763eea6457", "sighting--1616b35e-0207-41ea-a529-65c24a4ed99b", "sighting--82a17bd5-d77f-4782-b09b-6dafc9c4cbcd", "sighting--0792c478-efae-4b44-81d4-4f5a4ce44da8", "sighting--01c6b533-5160-4076-ac82-483c5cdbd7d5", "sighting--6d2ede3b-9aec-4eb9-b162-cf319ea209ed", "sighting--4a3fe579-007f-4a97-9954-c5c3c0e227e0", "sighting--d40b7dd8-4151-42ae-831c-dad8c31fc49a", "sighting--4de4a52a-5d0d-437c-aa77-1949e920b410", "sighting--ec014f76-89e5-4826-9400-75e250f1e35b", "sighting--3aa60e5b-8617-4835-8bc5-768247d24e8e", "sighting--af275bce-74fe-4bbe-9692-2276d42e005a", "sighting--5fa36591-9e32-4ec9-8cb2-043bb178eb34", "sighting--28a9e6bb-0f2a-48a9-a9c1-77f1663d1f32", "sighting--3b227719-c3e1-4554-9eba-94030d3d2adf", "sighting--abe168b7-bbde-447a-8ecf-a926fad5e656", "sighting--00a6f4f2-330b-4093-bf79-a3b4476490dc", "sighting--265ee719-9927-4ca9-9aa0-6f06f4d67239", "sighting--c4432798-d1a1-4b9b-b6de-e313686a6d61", "sighting--bc2ae0a0-fbd1-4349-90f6-73b9411be249", "sighting--84476b8d-17e0-476b-aa22-a2a5481fc5ed", "sighting--b5f48689-028c-469d-ade2-f45d60dacec1", "sighting--29dc36e8-eb37-4305-bec8-837f322021ce", "sighting--382e0601-0f4f-4403-8427-5a68f34b105e", "sighting--6d091ec7-78c1-44f5-b555-a38a0845180c", "sighting--2729e24d-0690-4463-b0b5-050e0c0ae379", "sighting--c28cce96-2472-4491-b85e-df8c745803eb", "sighting--903c90d0-4b49-46fe-8322-25305dc303b0", "sighting--d85697f0-d8eb-4a52-bf8f-daf49aecd814", "sighting--64e3ad9b-14fb-4c31-9411-6cc4c2493eab", "sighting--7e8252b3-07e2-43dc-956c-9af60097d1a7", "sighting--c5d7ae23-55f5-4e85-a29a-30350df585f1", "sighting--6cd216f0-65ee-4551-be98-40fd2b6d5e33", "sighting--2909176b-844d-4adf-ae41-ad87d966e547", "sighting--77fa2626-f1b1-4975-92bf-fedc31d916cc", "sighting--db299a50-f2e5-4878-ad80-800fea8e2dad", "sighting--ee19b64e-b8f6-4ce7-b366-bf138de08a0d", "sighting--39296063-2b81-4a73-a549-bbb0833c9da6", "sighting--b00fb55d-6113-464c-898e-9807c764fd89", "sighting--471f43ba-14e8-438c-90d6-3df4935454d2", "sighting--155dc8f5-90e4-430d-aa1f-f966311ceb14", "sighting--b92421bb-5db5-4487-821b-fadb4fa87ac4", "sighting--3d3bffc5-643f-4de4-abf7-b27754678f98", "sighting--4f55fc16-6cce-4abb-948a-6023ec43cba2", "sighting--68867a66-024f-493c-903d-f9304521df28", "sighting--80a0d2aa-5909-4f61-8091-43772797d15a", "sighting--3de7ad1a-c5c0-4586-9708-6265410a1b7d", "sighting--5a41191e-cc4f-432a-921d-02b9468ed516", "sighting--4aee32c6-f39e-4920-b417-d87e21ad6550", "sighting--dfb9e5f0-5244-4d9d-b1f7-8fa3e72326e6", "sighting--88ad059d-df3c-4efc-89a4-ae63abe16c49", "sighting--ad7d880d-3bf0-477c-8327-eb8960174bfa", "sighting--9433eff7-7408-4b53-a46f-bcb0ce7be3b9", "sighting--ff2ba711-25e0-4db9-a0b3-ca56c0441b4f", "sighting--95d07973-6a07-4fdb-8f50-e8185c1a2be0", "sighting--1e0320b7-efb3-4239-81ad-a7abc027f4a7", "sighting--02a9a613-9331-40da-9720-02cdc7181bf1", "sighting--d5e89d0e-e366-4dab-b43e-b632e37a09b9", "sighting--f21f1f65-33f9-4892-9f6d-5ec74affc194", "sighting--04134a27-2934-4013-b72c-ad123e29f8e8", "sighting--627b1d09-5969-454d-ac32-c81429a08c2e", "sighting--a1e3cf7e-a510-4718-b0bd-af9df5908326", "sighting--f366bb30-ea0a-4802-b9cf-1c6c4110e9c7", "sighting--6bc71fec-fd53-4a49-8ea8-3c5e3694afe4", "sighting--ac72c54e-d35d-4e30-9cf4-50ffc1f81f39", "sighting--7e44690f-1b36-4461-abeb-7459cf9d2f40", "sighting--c2820b32-0d32-4b43-9649-dcee6c071eb5", "sighting--ad360fc5-6785-4df9-bf35-16d33d870fb2", "sighting--f4aeb63c-fd44-4257-842f-e3546ab7d456", "sighting--e46dafb2-0bb2-4e74-8599-d57cca4e9fef", "sighting--dea972aa-424c-419e-8b19-8e75baee00ad", "sighting--8ab7865c-d221-4dae-9b2d-31341fdf1f14", "sighting--a900a6d5-b1a8-4591-ae99-adb2726737c1", "sighting--acf2bb0d-0c68-455a-b6d5-ae1487322ce9", "sighting--d3632e11-fb53-43e5-9947-7c90c0a1c39b", "sighting--ff8ccee1-451a-400d-85dc-3b002f3ce734", "sighting--3ad9e184-dbbe-4b26-9bdd-a01d564eceb9", "sighting--32630522-af21-445c-b9e8-df2b85449c74", "sighting--8c0ecfd6-10ad-47dd-9acd-e81a5ae5100d", "sighting--6a4d1ac7-00b5-4d22-ae26-3b5bba5f80ed", "sighting--a1832a08-2bfe-4dbe-8709-9c81240fe5ce", "sighting--5c18e9d5-e7c8-486d-93e6-96ad98d7626a", "sighting--43a0b876-20c9-4341-bd0b-d83f50bc25e6", "sighting--89b3daa1-a78d-46a4-b758-538be56d5420", "sighting--7b89c9c0-7dea-404c-a327-96f19ee2615d", "sighting--25e49df6-e076-4b70-a37d-634bf076e45b", "sighting--87ce9357-ab19-433f-bc71-edc1ce318628", "sighting--9e1c81e6-2b77-41fc-8953-25fceec2fdbf", "sighting--851f9fdc-c54c-4236-913a-224e0bbb7ed4", "sighting--9af815dc-8d8f-484a-8ecd-f72b110872a4", "sighting--d1af99bb-78ec-4009-8c36-79a871428064", "sighting--7250c62c-1928-4b7b-bc55-f52d2e23b394", "sighting--13080ac5-f0a2-4604-ae07-15c3193f4397", "sighting--4623d990-94c0-4932-9428-b431ba27d47f", "sighting--54a09429-7d00-4394-bdbb-78ae3827aadb", "sighting--98626bbe-2125-43f4-909e-ee5eac31b831", "sighting--2ff038fe-48a0-4250-90cd-a994185296b2", "sighting--6b54517b-afce-4ed1-aa76-b3e9f1d17d39", "sighting--10148ac0-892a-4495-b921-ca2a4351e11d", "sighting--87270e97-37c8-47a2-93b3-c2a1cce405e3", "sighting--27303e6d-b5f1-4d1e-9fe0-e68287053d08", "sighting--f8a2ce58-ffc8-4e89-bef8-2e35f27cd4ec", "sighting--af3ee804-341c-4736-b920-668dc97f8429", "sighting--b6899e84-2d1c-43c0-8add-f45a35de1bd7", "sighting--52f81e32-e24b-4a79-8875-22b939b91725", "sighting--211fa6c4-031c-45fc-b936-e2b8428fb842", "sighting--6c643271-fef1-4ae7-bd1c-46b546d5cdc2", "sighting--158e369d-363f-4a9c-a00c-eca2007d0d7f", "sighting--8643edc1-68da-45df-a3e4-59d1351529aa", "sighting--0cf1bdb1-09fa-4108-8f28-603e99dbec2a", "sighting--2ba028af-b9d2-4a51-88f9-d071be273a2c", "sighting--f2d44577-98dd-4aec-94c3-3c2699c5ae46", "sighting--a5ff33c7-f9db-484d-bc1a-176568375f85", "sighting--67a35122-3aa4-425e-9aba-7a27f090e5e5", "sighting--f3f6914a-3979-4bfe-8ed2-13a9e3c86bd2", "sighting--c0c0f71e-808a-458c-bc77-54945d43455c", "sighting--f4e174eb-7edb-43af-9a71-6eedf142d482", "sighting--aea476d3-699f-4157-9b96-3b5b4cb7b474", "sighting--a020719f-719d-41ab-88ab-c83eb1312315", "sighting--9a4d5bde-c73e-47b2-a449-f2385f35f3e5", "sighting--eadb2e78-fd37-4868-ae33-4ba28e450fbd", "sighting--27111a73-eaf1-45e3-a982-7d1ee8138411", "sighting--9d1e683f-75a7-4b46-9d62-2eccbb8e8ec8", "sighting--78517ad4-615b-4eda-8360-51fad5cd8d8f", "sighting--0d366d4b-5255-4261-80d6-72306216fe6c", "sighting--1680601b-99ff-4e6e-8ae8-f226ed0b5474", "sighting--3b264823-cf02-453b-9881-0c7329151147", "sighting--6bea5847-d5fa-4532-9427-42a93b0f21af", "sighting--d9e8457a-fcbc-4d88-8467-6d889b0830b6", "sighting--32ed7acd-f78c-4d87-b28a-75d49f2d9ed6", "sighting--80c5acce-53d3-4f7b-8097-4528cb3364e2", "sighting--6afc40a7-67d4-49c1-ad3b-9eea715dca51", "sighting--87345e7a-1e58-4f0f-93a6-b82602d71091", "sighting--f8b4966e-06cc-485e-87a1-c18ece31be96", "sighting--f5ebf9f0-82a4-420c-9b56-6b7b5f7b94b5", "sighting--3e46ce6e-0ac2-4696-9f30-2fe04125b6f5", "sighting--589b7537-cd5f-4b99-86eb-7717c4e12cbf", "sighting--992bfd81-db56-461d-92eb-4eeba4145621", "sighting--7ba29a63-557c-4914-920f-19658d432cc8", "sighting--f00ed9c2-fdb9-4129-bb62-282148d9502f", "sighting--4faad8f1-ee7c-4354-8883-5eb206793ca4", "sighting--ddaddcd5-ee39-43d4-ad37-2ebd421b1a1b", "sighting--98e0e895-29e8-4dc7-b701-68fd1bd1d5aa", "sighting--2aee727f-05a0-4c58-a3a2-94f311f84ddf", "sighting--41388253-48c7-438e-aa60-a8a1b7f294c6", "sighting--eac24335-4592-4339-9b7e-37b69441acbd", "sighting--81404c19-039f-4480-bdf8-3ec23de31c15", "sighting--629ea744-a02e-4391-b8e7-979a55d02d1f", "sighting--fb5e9d76-0929-44ff-88e8-638ac5fd95ff", "sighting--d1d8bc08-7e4b-403e-b277-cf85a9424568", "sighting--04faf77a-9837-40f9-9e50-13e67415cfe9", "sighting--de24de7c-1e48-4d64-a28b-f484f3ed25b0", "sighting--a9a9f209-80e2-41c7-ad04-bff001b7e059", "sighting--5b11b30e-03de-45f8-9e33-4c5ffbec44b2", "sighting--cc5c20a4-6ce0-4b89-b0fb-ecd4f574bf95", "sighting--7fea26f3-46bf-43e6-b021-72cb4319ae52", "sighting--42c67f32-6509-47e2-b46e-c651e6635d57", "sighting--1f6a119d-c09a-499b-a542-6dfcd49588fc", "sighting--8747d6ed-da12-4e38-b7d9-ded6c944bf98", "sighting--1e3a85a3-26e6-429a-b9cb-34cd4eb2ab0b", "sighting--fcfb6b3a-dfb2-477c-b262-6dbe5864a2b7", "sighting--4a69de71-d3f8-4d9e-ac19-8045aa87312a", "sighting--d8b938c5-1e75-40a0-b14c-03eda2acf2c0", "sighting--cb6d2333-c378-4595-a202-5b2d2cdcabb4", "sighting--6287abd5-af16-42e2-9fac-4a023d5171bb", "sighting--a9cb2821-e5c2-40ae-93b4-a4158d6066f1", "sighting--ec873ecd-0238-4b19-977a-5a8f0720ac2f", "sighting--b14dcc12-fb02-41cb-bf2e-138a6f506404", "sighting--d6a6fe59-8bb0-4ae5-9d42-4803f668e3b6", "sighting--46a15a35-3265-49d1-bd8a-580334e40c72", "sighting--3adf298b-1418-4772-9b32-2690d2157814", "sighting--9b33ade6-cbf2-4b13-b62f-105286109c28", "sighting--4de9535a-a976-49ae-92eb-806c485814db", "sighting--2b737e09-ff41-4949-9212-0cec9948bd43", "sighting--d73c3350-edd5-4918-a0d6-013967ea0d67", "sighting--92c4d46e-b1df-433a-9fb4-266b2c30ad3e", "sighting--42e26423-12d6-4dce-904b-7d8b4af2595b", "sighting--6ccf3768-45f0-451f-ae98-35698ebe3624", "sighting--0a47119e-f332-4d34-adaa-872f5ac7e7b1", "sighting--1cb8860f-d6f7-4af8-8ac8-8823defc6213", "sighting--f9e720c8-d767-4a8f-b1fd-e62694b5a22e", "sighting--accee081-4be8-4502-959e-532b12f17e97", "sighting--fb6b631b-fe98-4530-af5a-31d0c68b24a3", "sighting--00bb74c8-78cb-4eec-999d-1cbcc8e60894", "sighting--695964be-9812-45f7-9dba-a129a40fce52", "sighting--817be930-9431-4231-b6f2-950d436bc771", "sighting--dad6569d-4f3b-4a97-ad4f-1af44a092898", "sighting--91b899f1-5658-41ec-b3a9-d6966b0f451a", "sighting--b4902e3b-c720-48cd-8b62-f804c589f380", "sighting--6859a67d-364b-4d71-a89c-988fb8eb5966", "sighting--d0369287-edea-491f-934a-44ae016c5297", "sighting--f4cc41fe-9797-4d7b-93c7-82ce79f3fb23", "sighting--576512f9-cd82-41bd-b5be-556799524659", "sighting--f0cd1d5e-6461-4a82-9bbc-9af7f96c5b67", "sighting--a30c5c10-b139-433f-9869-1a7fac355ce8", "sighting--1d812605-37f3-4dea-8e8b-d0f46c16f12f", "sighting--a294201e-4b8f-4338-8661-ce3d435f2a6a", "sighting--8bbacb75-9d7a-4b5c-aad4-d6833b92f799", "sighting--8503645b-a9e9-4002-a27e-ee65be0b5097", "sighting--c5680b98-a516-4fb0-b8dc-44e721e44949", "sighting--a8ddc943-59a1-48b5-a52b-b014ba552c9b", "sighting--be8cf40c-e532-4083-ad6a-ff82b4ac5a9d", "sighting--d11c44fc-a5bc-46d7-8c7d-bc710feccacd", "sighting--b9e62ac8-e9f9-46b8-89e1-93bbcb6937ca", "sighting--4b3d3676-6e34-4da9-835f-ad33c738cbf7", "sighting--5366b1a5-c6f2-4035-bfb1-9b0281c9d76c", "sighting--b7b2c3c8-4380-424e-a9d4-54283c9d67a8", "sighting--c3f11256-4309-45f8-b217-26ccc852d0c8", "sighting--cce15216-4a47-4340-a28f-4a0e9d0e3d62", "sighting--659187e0-464a-4531-b51c-b9cfd3b8b2a4", "sighting--6b1645cc-2813-46a7-bd88-41b2123128fb", "sighting--b623c6e4-be09-477c-9cac-d7938607cc88", "sighting--a40fda4e-932e-4c91-a334-672a5bf6d3ac", "sighting--0990b2b9-b521-42af-a10b-20e90063701a", "sighting--4dafb94f-ce94-4838-ad6e-11832b4baaf5", "sighting--f069dccb-a45d-470b-b96b-cf30e13a95b0", "sighting--049b6163-9878-400f-94ad-ed9ba5585872", "sighting--ae0e18c4-0c36-4868-b19c-2309821f55bd", "sighting--1b5d9358-9ea3-4ffe-9686-f872126bcbda", "sighting--1c07d08f-c4c6-4b8e-b0a3-8a115f6cc6bd", "sighting--14fe1114-cc55-4017-a1e1-aca5bdb863db", "sighting--7173751e-38a8-45eb-9259-3177ad2bfede", "sighting--cd68c02d-f5c9-43bf-ad33-9f275ae736c9", "sighting--312ef163-57ea-4730-bba7-50f3eb0fa8c1", "sighting--498d5846-09a2-4efe-82cd-49290587aff5", "sighting--a1ce46c8-9fe6-472b-805c-4c15c3bca852", "sighting--d79376bb-7a1b-4bb3-abc9-32ead28de94c", "sighting--492c5797-b99c-4ae8-af45-403f7967590b", "sighting--9af4ef2e-a7c6-48e9-9878-cefcb5a20e14", "sighting--66564fa0-34fc-4537-aeb7-14aa06405f8c", "sighting--a3c9cd20-6758-4112-9608-ef8d84da1de8", "sighting--179accb0-a770-4c83-9a5d-4fa36824499c", "sighting--193af870-3916-4dfa-9f17-11275526a8dc", "sighting--64223dbd-1ecb-4f0e-b9cc-2e84e8f11f91", "sighting--2f4135db-98d1-40cd-9f1f-061344b79b72", "sighting--04df6648-61c2-4230-b9f6-1861ced1fc12", "sighting--62045469-79b6-40bd-aed4-c9adc0ff3f1c", "sighting--4ec4bd53-d360-49f2-bc07-11d44b3068bb", "sighting--b556791e-7098-4c02-8697-5dd399e4ef58", "sighting--a537efb5-49ea-49c6-852b-28e6cf1a9d2c", "sighting--44fd465f-8ebe-4185-86bd-2138d8c89d9d", "sighting--49b3fa62-8b2c-4b82-8345-b36c4b1420ff", "sighting--1abae2f6-8aec-46bf-bfb8-8df1df74401a", "sighting--5f66743e-c1bc-4154-a233-ca88427b4312", "sighting--4ffacc0a-e495-4da0-b578-b775d5de9fc1", "sighting--82b36045-c53b-4f14-8560-9b7cae3e252e", "sighting--d817c3da-b8ee-4cfe-a610-c71450f8e51a", "sighting--bb2ec91e-4b48-4385-9073-4b65ef10da0e", "sighting--d81a9fb4-f978-402f-9312-dbc049de7237", "sighting--3ffac627-c689-42e2-a6a5-bd06b1fcaf0f", "sighting--c738fc01-95e3-41a4-8610-009310fcc5ed", "sighting--c8e893c1-2b4b-41ea-b4a8-53b68cec30e2", "sighting--568a7017-3e5e-4d43-8fff-1be5db0bf21d", "sighting--9a380765-b625-44d4-bc94-4906d85799bb", "sighting--0d319079-0af0-452b-86cb-a0ba04bfe89a", "sighting--9dd7bf1d-41f8-4c36-975c-484582fe794b", "sighting--0571ec4d-7202-4765-8206-51b8ffb6f7dd", "sighting--1a598a75-e7d7-4981-97c0-87441383019c", "sighting--d53f3f72-d5d3-4eda-b602-af6c760e31ed", "sighting--152e1a03-5029-4c4d-812f-e79d625065e6", "sighting--36ca88e5-b115-432b-ad2e-336129f46136", "sighting--9d5962d7-db07-4bf9-b261-21176727bc1e", "sighting--33e7eeb0-eb31-46d6-9770-ee2926e1b028", "sighting--49eb39f1-226c-4dfd-a58c-31e21ab17caf", "sighting--f5bcee21-f0fb-47f3-a0c7-85bab1d69268", "sighting--219ee831-b97f-46c0-9ca1-2133c1c2f66f", "sighting--9caf5928-0959-4714-a21e-d50e2bda84f3", "sighting--795b937a-62b4-479a-a0bc-59420e2d0bc5", "sighting--c052e110-cfd3-4e9d-ae7f-a6354219ec76", "sighting--6f882769-c367-4426-874a-b526a176c5e0", "sighting--8440003e-54e6-4b1c-93d2-5286299e6275", "sighting--2cdc884d-4ebc-48a0-971b-50f407dfc1c7", "sighting--b427b55e-db84-4946-8745-13f18c70c590", "sighting--e770acdc-d37c-4ce8-bdda-4d53b93b3cbd", "sighting--d8e8b2dc-2839-43ac-b02f-3cbd115c73ba", "sighting--dd273b53-468d-44c3-bd9c-aef560213e95", "sighting--a0c279e5-d682-4a4b-93a8-8211288f91b4", "sighting--24af706d-f27b-4180-b7d6-6b627ea84a88", "sighting--4e6d3e80-430a-4ffe-8c2b-a4a7a3e929d7", "sighting--a972f6ba-5dc5-48f1-9a6e-2dd472c014b7", "sighting--b8b6ea4f-0f13-4e12-a568-e476e7f80db9", "sighting--21b419f8-c834-4183-a176-ce98c1d18918", "sighting--25b15b93-4e59-468c-bc04-65fddd4faa3f", "sighting--19de375f-1f07-4675-8069-1d2c38f3291b", "sighting--c604f460-8e3a-4447-917c-c1fe33695189", "sighting--8395bdac-8db9-4cf3-b840-c5505588dccd", "sighting--26faec87-0536-4829-8c0e-d11ceef18c44", "sighting--044d3c59-3153-4051-a46b-e92181b6346d", "sighting--d15f3676-bd20-4ab2-83b7-0715a58c9c0a", "sighting--696b9b10-a294-47e3-81a7-31754a58d4bc", "sighting--525947ab-d0e0-4501-9a1c-a31a0769fb5f", "sighting--86fa38fb-133b-43f4-9d40-98757af20c7f", "sighting--0471c04b-cdbb-4bf3-828c-37afee12b0a9", "sighting--d1eb6442-b44b-4f67-8226-bf34f6e57c31", "sighting--54771463-aaa5-4b01-9ed2-b84a02c7ecb8", "sighting--bef14a7b-525a-4951-ad8d-5b3d2845bd3d", "sighting--27969be8-07c8-407c-863a-ac10fe4e2440", "sighting--e157a310-8349-493e-951c-030806582527", "sighting--23fe5050-e7e1-421f-a346-544196622c48", "sighting--d7087da8-6795-4f99-bb0c-f8ae3dc6e9da", "sighting--3d4367a8-de8a-42d9-aa77-1e02ca496c23", "sighting--b3dfd8db-92bc-403a-b123-af85ea96476a", "sighting--436d0841-9584-49e7-8281-438f9461483b", "sighting--5db2b620-a0e5-4bda-95f1-f6fc1b30503f", "sighting--1dfe0cef-52c5-4bff-9772-b54191a5b6ed", "sighting--33982dde-284a-439d-b5c3-9644e5a0277a", "sighting--a9949e17-0abf-4a4b-b199-2b615e065808", "sighting--08ff21be-a349-4e98-ba4a-cb0926dbc5c5", "sighting--69a7d75d-d11e-4bcb-a54f-300146ce3abe", "sighting--6d45ee60-c6b5-48f1-b84a-cf1f466f2574", "sighting--445290bc-df6b-45f3-a051-9166dec4be2b", "sighting--00dd02eb-dc4e-475c-a542-4854c18d461c", "sighting--2e1e790f-ea90-4eac-95d7-5df212afcc25", "sighting--680715f6-d0fd-41b3-a0f3-bc6a8979b406", "sighting--d13eafc0-f1c7-4c03-9dc0-a800807526bd", "sighting--36df4434-558b-41c6-a11f-aa831481ae8b", "sighting--7812cd65-e144-45d5-8527-8e3a297b59c9", "sighting--85c9a61b-44d3-4276-b349-eb773c86aa62", "sighting--eedc6187-69a3-4e7e-9774-cb05c0690baf", "sighting--8e5c0a77-709c-42bc-920a-02a2c3b31d1f", "sighting--e83dabe1-4cfb-4e01-9473-8a75e75a0948", "sighting--926377b6-7423-4ccc-9d72-46c10a3a8d18", "sighting--00e82b2d-a11b-4e33-b08f-c41708b645b6", "sighting--32309f78-1ebb-4dae-9202-5f5ff9b6c961", "sighting--7d4b5b2e-5252-4df1-b33e-a159a34ee7ca", "sighting--71bd8198-c108-49f7-bb48-af413ac8be33", "sighting--2023bbb6-89e1-4d55-8af1-46fab1fe97e7", "sighting--1898cada-2867-489a-8b1b-4bec46618add", "sighting--5f0e342d-0c2e-4acc-85d0-69d40ee15e16", "sighting--7b7e2aaf-3eef-43e4-b6e8-9d14aeb4e3ac", "sighting--d7d6a60a-d51b-4e0a-aa86-542707685bfe", "sighting--b9cc1a5f-e3b2-47cd-baa9-1088be3475f4", "sighting--4f4d3fd9-9585-4395-85ca-d16b3b0fd206", "sighting--7a2d5900-1ac5-40aa-b114-af23821c8ae8", "sighting--067a59d7-6060-4a0e-b619-85ff8d0c49b6", "sighting--9c1ffac5-c0cb-4bea-9723-d02aa1869792", "sighting--af2ce4df-9b23-449d-b8d4-ed54d52991ac", "sighting--64105583-c475-4d93-b060-819290a94d85", "sighting--09ce2982-5101-41c6-a4e7-6e855b739410", "sighting--34c8fe1d-c0c4-4e8c-902c-d24e78bfaa98", "sighting--796a77d6-4fae-4a29-b766-393e56b718ed", "sighting--7629f773-4f56-4b5f-ac76-0f86196b7f5d", "sighting--1b865c2f-70fb-478b-b01b-5ebd291ff3e7", "sighting--92fc7912-f440-487e-9918-2d411cfb57fe", "sighting--90c10c69-fbd7-4ba9-8d3c-77e3629c3e2c", "sighting--12b90717-aa90-4a90-8795-3c20fd7d71a0", "sighting--68009b98-2088-4525-a903-02aa3617b3bc", "sighting--ae063e17-394a-49ab-845b-13fa5ca7174e", "sighting--9591714b-46f2-4cf6-8e5e-6a0a1d26d3b4", "sighting--a18cf3cd-158b-469a-9011-53996742ef61", "sighting--250d7a3d-3b88-42c4-a00d-42531043ddcc", "sighting--0bc78f06-d856-4696-8b0d-5f634b178f36", "sighting--b81e183e-de51-45d7-8e43-81e2629d25c5", "sighting--88a1d097-0d2b-4a7e-bd2c-30d237202a9a", "sighting--61e34f5f-c28a-4c7b-91fe-bb48a7db9e4d", "sighting--577d2be9-518e-46fc-be1f-ec5357ba8924", "sighting--9ff4ef88-77e7-4003-9cc9-bbc01464d28a", "sighting--42a9a818-7671-4246-9505-c145b49dba07", "sighting--76d43388-5830-4ae2-bbdf-4f4af25e5b0e", "sighting--dfc6ff02-aba7-471d-8c92-68179bc786c7", "sighting--abe0c814-c269-43d0-9b93-c0002cab106d", "sighting--ee9123fe-233f-4815-95a7-921107535423", "sighting--2995df17-b334-4177-8f2e-27f4f37b0c61", "sighting--9fd827be-6375-462d-b7bc-01be2b5212d8", "sighting--2f00d485-c1b1-4416-9190-1719650654cc", "sighting--9171ef22-185a-4d91-aac6-85e9f8539952", "sighting--310ca5bc-e2b3-4382-99dc-5108eeda556e", "sighting--42eb294f-b435-490b-a718-904101e1b626", "sighting--63832e98-9e53-4b81-95de-4ea7b40d19aa", "sighting--dc9d77d7-c5bf-438a-b629-3fdff06e8349", "sighting--36a1c6f0-533b-4f1f-ab9c-15cc41aad426", "sighting--8757b200-2741-4734-9067-042571313568", "sighting--b8d4a260-98a7-47bd-9b27-d14de6ee6760", "sighting--10277a65-d758-4940-b535-4ede9e27da5d", "sighting--85e4065e-2b44-4912-bef2-d76a48b6e12c", "sighting--140bc996-7eb3-433d-ba61-7ae5979d9f74", "sighting--8ab7f5ca-f123-4f19-b9fb-d557b070ea14", "sighting--ae7dacb8-7385-4ce7-907b-06a99a61c2b0", "sighting--ede37c53-dbb2-4126-ac73-43056b314b65", "sighting--1f4114ef-ad80-49a3-b500-2454f87c8da6", "sighting--201ce272-5299-43ab-9bd9-d9d56c47970c", "sighting--ffb6b165-b54b-4dc4-9cf4-e9d236823434", "sighting--f99e9ef5-394e-4633-adb8-1125da75ff7b", "sighting--d79bc62d-2af9-4dc4-91fe-6da0bf27b5d1", "sighting--56bbeddc-c685-4d33-933e-70b82ed691cd", "sighting--1ce7b17f-26a7-49f7-b983-69b234b5aea1", "sighting--6ea8183f-bafe-4c51-8441-e5f8d5e22360", "sighting--cfbd7e57-6e59-4ecf-8d9f-60ff20bebac6", "sighting--bdc26e43-87e5-4488-a280-b105e5c86f5c", "sighting--e6897b87-8246-470f-93b8-1b0f9be139c8", "sighting--c176c854-046d-4833-bd4f-2dfb6ec07fad", "sighting--ac7112e5-1857-4aca-b7af-fad92ebbf135", "sighting--027c6fe3-1c40-493b-a2fa-c1b6ee23d00c", "sighting--27577845-af74-488d-a92a-5c0dbac9bc36", "sighting--ad7750f6-722b-40a8-bf45-32dcc9cc111e", "sighting--7cc6f09c-ace1-4755-bc59-9db2857f6c1d", "sighting--e8ceb4b5-35bb-41c9-8832-a927d1581dfd", "sighting--9282e38a-c8a7-45cf-be72-0654965e3c2a", "sighting--b9fb3cd6-1052-4459-9793-ddc2884c5334", "sighting--4c547289-246e-4af6-8fab-87c16375c025", "sighting--3e2dc1ff-de06-4dd8-8a3d-22f3c5b3ef4a", "sighting--e9cd8fdd-7a0e-4e4b-842d-a70580e3b362", "sighting--a49fd629-e3e3-4791-b980-91a2757ac157", "sighting--f1059321-f21f-40b4-a806-c67f5e91e444", "sighting--d7a35a28-710e-4d36-8639-7768c21d7a1b", "sighting--48eb97a9-109e-42ae-8fa2-e564365c0566", "sighting--3dbf3266-3114-44be-babd-104903fd1524", "sighting--04b4e69b-e7e3-45d5-b179-25ce0593c9da", "sighting--47a5376a-94b9-4a16-80a1-0f984725968f", "sighting--4adc12ba-5dcc-4aa8-914e-c79bdfa2c2e4", "sighting--bef7591d-2888-40df-92e9-4fa6ab5c4804", "sighting--5961215a-ac6b-4684-be52-d550b7bb134b", "sighting--cb8300a3-4239-4cb9-adcd-9368f0263c60", "sighting--15a982cc-78c5-48ca-80f3-4e503fa30b3a", "sighting--3bcbc489-399b-4080-bdbb-770a9794e980", "sighting--67f9fc09-0f6f-4b01-ae2e-f2b9aee73eff", "sighting--918e16fe-34df-45d3-9991-2222840af366", "sighting--bbb739b6-5ded-4719-93ef-e8a14ecd0806", "sighting--1eeaa495-99da-4ed5-96f0-20b34b462398", "sighting--cb908e2f-0343-42b5-9f69-416d4d9d8f71", "sighting--ed3af716-c14c-420e-82ec-557fb005e1fb", "sighting--c1a8a526-cf66-4ddf-9e57-643200b85c80", "sighting--dcbe69dc-0aa8-416f-a7fd-3e10a1491ec9", "sighting--72832ec6-a87c-4f62-a9b6-83d12d8a76b2", "sighting--fa5d3711-25f0-4947-a065-ce513ccb9d81", "sighting--6d836305-69cd-4589-869d-09a487e83594", "sighting--c74bb981-c4a4-422e-982c-b234e55c7532", "sighting--b38cf042-992c-43ec-acdc-2c549e248cbb", "sighting--62abf36f-3bec-477b-9eb2-e5ae7b139da1", "sighting--809c8cbe-6677-4dd1-80ce-dac4ebeb1ceb", "sighting--706aca3c-db24-4abe-a6b6-4b2a4f5d61fd", "sighting--5fac5113-ca30-4196-ac2d-f1be654dd0e6", "sighting--c511cdb4-140c-4d74-9411-af003787d245", "sighting--cfbeb43b-2144-4c20-ae76-a6a1a6de6a31", "sighting--468e6891-aa32-473f-8936-2d2a090d8e24", "sighting--4ad0518e-798b-419d-bcd4-918080c20537", "sighting--0f06a1f8-0e4e-4e28-8001-e428ed730e34", "sighting--f9543045-8d17-4d19-a4c8-91960df39039", "sighting--b91edc58-f399-4348-a402-5b185ff5c74b", "sighting--b93d87e7-cb53-432d-9af8-5fe987bc5e30", "sighting--8dee583e-1caa-480a-a2d8-ffb59891711f", "sighting--28d32724-4e77-4df8-a9c7-7270a8bda28f", "sighting--0052e033-5b95-4352-865d-c8d66e5df3b1", "sighting--d0138cb2-b070-435e-b449-e67fc2b53e70", "sighting--ac3eb232-359f-4aad-af37-bbd25209965a", "sighting--211819de-6fcc-4756-952d-7777f6811b90", "sighting--f442261b-ddf5-4221-86ad-574cda8ef230", "sighting--88607525-8c29-4249-bd84-7b73b92bf9ad", "sighting--3956dbfb-6328-4a7c-9483-23a0ecb40c80", "sighting--ce9c7c3e-bcf4-4bef-87ac-b24e936af8f7", "sighting--15741169-608f-4b9b-ac17-940e693b152e", "sighting--ce277c95-6f0a-4028-ad29-49c0ea9b9228", "sighting--061cb02c-6d17-4195-bb40-9008a83df7b5", "sighting--3c1029e3-a1a8-4293-b38e-dbded5ca4604", "sighting--65a87e4e-4435-48c8-96b5-3da263fb5d7b", "sighting--0365c582-d80a-48aa-9d2c-702de4914136", "sighting--55e3f55e-95b7-4049-9739-3ca285fdf02a", "sighting--e10267b6-0b07-4d12-a726-f4db06cd2131", "sighting--65c00bc9-965f-48a7-9458-cb737b8f6117", "sighting--8a21b2bf-d7e5-4e2a-8b40-bb6e7674709c", "sighting--efb6a6b3-5790-4a1a-a532-da901cd7f745", "sighting--e5adecaa-1de8-490c-8c51-e6ec02d07c51", "sighting--3c872873-0f88-4303-bd17-48992742e6b3", "sighting--41f79313-ff6a-412e-b913-2b904a2e642a", "sighting--a033ce34-155d-4f27-b724-8a858d49f310", "sighting--49d6851e-a53d-4832-aef7-17cffad47165", "sighting--cc5b1813-d6f5-4e36-b57e-a1df16fca449", "sighting--ad412687-cbcc-45ab-ae8a-607abf462258", "sighting--518ba90d-e725-4e36-aec0-c8ef1f9aa46e", "sighting--6cb60cd0-223d-41d0-a0eb-043c68dacc32", "sighting--a98863af-f659-42cd-a2cc-45b0c59ac8d2", "sighting--18be3a49-e8fa-468e-94ed-a78876c54768", "sighting--5e2a365a-5052-4b17-91f4-9f6f33ba2053", "sighting--d04a0202-03cc-4d1f-99cb-c36d6a898174", "sighting--99d7aad3-065b-48e4-a7d0-f3e135592eae", "sighting--38484f82-2dfb-47c7-92de-a99d83ad3809", "sighting--4c992883-67e5-49c0-9519-6509127d6d07", "sighting--04d2cb47-d46e-424a-891c-03043cbc0ef0", "sighting--e8e8094f-0462-4215-b1f2-9c54a4fc35d0", "sighting--06673bb3-bee9-4b16-909d-d33b5f253d31", "sighting--a6684623-ea7e-478d-ac39-1d9529217482", "sighting--cb2f6923-bbd6-4650-83d7-8b67f1377962", "sighting--d71460fa-382c-4c30-a830-604adc7cf708", "sighting--459076b8-8895-4fad-a6c9-9bbfef231648", "sighting--c55d1b94-3c14-4d3c-a18c-4374400890d4", "sighting--a39fdefb-1fdb-4000-a770-9f637bd7663b", "sighting--9d5dacc6-2b42-4da4-ad4f-2bec8e31fa16", "sighting--4f9bdc3d-26b7-43bd-8fc4-c30ba18bddd5", "sighting--c25527d4-05fa-43e4-a3c5-823b9bd7e20a", "sighting--1c03d0bf-a979-47ef-842c-e94bb04fb11c", "sighting--d4601bf8-2195-4110-a072-8d90287f3fea", "sighting--322facfd-05f2-4257-a9d5-11acfda7de22", "sighting--dcdc0ab6-52e9-46e1-b6fb-e25e2b3950b9", "sighting--e1a0aaba-6136-4fc3-9ce9-0a2212fe4a07", "sighting--1910b359-255e-454e-aafc-84cc75de5843", "sighting--c51b676a-3235-497b-b83f-0179cc4b4e3c", "sighting--e77870ba-5c51-47e5-9a5c-78dc074da16d", "sighting--87c04189-3b31-4f0a-8dcc-08204a43ead8", "sighting--3c90824a-73ae-4c29-8019-36ced0c5dbe1", "sighting--bbf628ab-773f-4a05-bb53-878443d08384", "sighting--ab53aad4-0ccb-445c-83ca-2cab007a2208", "sighting--d42cd785-1d84-437a-a182-20977472cdcf", "sighting--2cab28ab-35e1-4c92-a644-272e629edb99", "sighting--a2d3ab1b-23d1-4dcc-991e-fdd6ae801bf9", "sighting--706463df-a7f6-4597-b477-4ee4c25ac77f", "sighting--70864747-bedf-44df-a9b5-0faea8c3d00b", "sighting--abd06607-e3f8-4ad8-b778-c5586ede484b", "sighting--b7d10382-3138-40cb-8572-dc3de5668af5", "sighting--e37ff85d-0a46-4bcc-81c2-8ca9a301b951", "sighting--f05aff1e-de97-49fa-8436-681201f49515", "sighting--ae8cba3d-af01-4010-983f-f14e26b467d4", "sighting--27797747-517d-44f6-ba58-19e37df138d0", "sighting--53b76d5a-3e2a-4328-9c62-55008b80a77f", "sighting--110cb288-c950-4423-b401-03115ddde885", "sighting--2a4cb7f5-2998-44df-a7c3-9caf601249e4", "sighting--7a4044a8-9a72-454d-9bbf-8a4a4c2ab4b5", "sighting--83a921ef-2b35-4f73-a7c4-72c1ba863e37", "sighting--78689e50-d0bd-4cea-8bec-b6d8680a299d", "sighting--5fa25dea-ab3b-49cb-9e8c-5fd561f9a75b", "sighting--81b2ff96-ea91-4433-908d-fad6df94fe93", "sighting--9b6115b5-b5b8-4330-a242-7134d1258e74", "sighting--dc473fe7-6756-4e7c-933e-ef9cda8ba405", "sighting--4773c7d7-9a4c-44f8-96ea-6b91726ebc38", "sighting--b5f21122-2cb5-4bb2-b7ef-78405fb4902e", "sighting--e36afe46-672e-4fd8-8e14-2eb3eece5b49", "sighting--e2a79ee1-d700-41be-8000-3ed445977d58", "sighting--52be6aea-9e5c-49ac-8871-7128d4393931", "sighting--5f3c7f85-4c13-4003-9bd5-6966e93fbc8a", "sighting--28513a14-42bb-449c-9154-0d454a88b979", "sighting--0bdb45bc-8f1f-4940-a72d-de8356fe2926", "sighting--05771c36-ea3d-4404-b547-ae5b85d25699", "sighting--b8eb8e87-c31c-408e-bd27-a81a507e4ba1", "sighting--21fd5d1d-d98d-4fd2-8a6b-984e32d632cb", "sighting--3666a18e-99b7-4176-9352-8f45a3e9634a", "sighting--2da1345a-9a9e-41f9-887f-eb217ff21488", "sighting--5d32b093-3b40-4765-9409-e6f2d054244f", "sighting--7b9edf5e-3f35-4fc5-b63a-dceb7e214ee4", "sighting--b500700c-ef2c-433a-91eb-e7b613a5ef33", "sighting--9587dae7-5bcf-4bdf-a1f2-f3ddc7730070", "sighting--82130d03-1960-4659-9eb4-c3294f95d134", "sighting--11374ea7-4b0a-4dff-af87-fb922b213701", "sighting--f43975a9-d698-4185-8461-5ca4bddf0eae", "sighting--4275b1f2-82a9-4464-81d5-0df0a28ab6f4", "sighting--795b338e-69db-48ad-866f-207f08b6eaed", "sighting--43151a58-c271-448c-8158-a23588775505", "sighting--fa0377a9-2aa5-4f23-b981-da2ce773fccf", "sighting--5121d325-0f79-4cad-9573-3fef8e51aad6", "sighting--0dc21ba4-b60f-4a54-83c1-fde79768b6e1", "sighting--17d3bd7e-cc77-4515-ba0d-6687aa5720c1", "sighting--11bdf174-d2c6-4cf0-80ef-caca4c346737", "sighting--96227380-f754-4fbf-832d-c6ea1f86578b", "sighting--f4d618cb-3ec7-485f-9d49-d5b521cef93d", "sighting--b37cf350-7e78-44e5-a6d5-6f5173370abd", "sighting--ca4e0646-fdbe-4d27-bc03-378bab28aa80", "sighting--0d85febc-484a-4dcf-b24a-d47f5b7dc8a4", "sighting--649184c7-2cc3-40b1-bbc7-b6f056c2c406", "sighting--b6503164-2636-4340-9427-d87830b023c9", "sighting--92de67fc-edae-4db2-869f-d1c66e8d80c0", "sighting--d513019d-344a-4345-a2ee-c2295f59b460", "sighting--c7ff7ec2-f739-46da-9d60-c448f4f69b5e", "sighting--bf42e2e6-4e20-48be-809c-fba9b87c228b", "sighting--8a5b0440-6c7b-4844-a874-e3439458fd92", "sighting--5a9f9f52-5704-4390-bd94-5cd740cbb148", "sighting--7ea6b0f5-5c0c-417b-8bf7-115985bc6607", "sighting--c90cc918-15c1-4897-bbc9-3e946c2680a4", "sighting--9d6c37d6-1df9-498b-87e6-b465b49211a7", "sighting--f3cfbb2e-112e-4033-a6f6-607b9db9e2c9", "sighting--30900c22-e5c0-4d23-91ef-0ab3f47d8968", "sighting--4f111c2a-af79-4276-9715-9538ceecca65", "sighting--c6d95c42-ade0-4a0d-9814-83cf19f71061", "sighting--4aa0e12d-1c0b-437f-b2e9-edfcc43f149e", "sighting--3a6b20ed-5481-4012-bd5b-5d3229ce3893", "sighting--23f244d6-554f-4383-8000-6ed4ccc951f5", "sighting--2a625bb2-8da9-439a-8216-fde1ac6b2160", "sighting--a81bae64-2c69-4ed6-bedd-22f8f7c75871", "sighting--1c9b6e26-094d-4d1d-9f0f-2f8d4caa42a9", "sighting--03fa19c4-e051-4e7a-955f-b1cbceaeee45", "sighting--4b90d9cb-ffce-4be3-87e4-90ef7f7fdf37", "sighting--14000ce5-73ff-49a0-a088-66614213798c", "sighting--0e40a30e-320b-437e-8577-5cf2e96f8027", "sighting--e7f3f854-29d3-4998-8d2d-6bbff066d2a6", "sighting--a24640f4-3f30-469a-bbc0-7d9fa9a9f3ea", "sighting--f781e03d-eb2d-4754-9969-35653e53a15a", "sighting--044c256a-0d0c-41c3-91ad-e8035e3b2ca6", "sighting--73a8dcfb-8372-406f-a05e-e69f78be1899", "sighting--d26e69d0-335d-4c5f-88e3-5b565a01b95d", "sighting--ad7d8227-19eb-421d-ad29-6b70d43d5cb2", "sighting--173a91a6-aef9-46d7-a028-82268c459cce", "sighting--efb6e56b-ba40-4167-b720-bc3a4ad59017", "sighting--c9aa55e7-3914-4caa-8818-b74a6e8f7771", "sighting--32f04ce6-9e80-4f69-8833-6334d7d816f7", "sighting--e9be0b8d-beb9-4ccb-99a1-a53724b92a75", "sighting--a864299d-ba3f-485a-9eab-42eb7d65c3ef", "sighting--e4079afd-d52e-4e20-8b54-f9ad6654965b", "sighting--3ccd7f44-fb49-4c89-86ff-56322eae4809", "sighting--b5f7fa74-2be0-40b1-8be7-97e2ab30d4c5", "sighting--85af5098-31c0-4d7d-9491-1bd5ebaec1fd", "sighting--cc1b3ec7-be4d-4fd9-aac5-03b14a729037", "sighting--1ea9c9de-27be-4969-b436-ac6aecb7aafe", "sighting--58b5987c-3e8d-4a1b-a877-c87c80fa04d9", "sighting--0c64a2d4-8ec7-4fe0-af07-b0854ec13535", "sighting--556af9d2-0a18-4437-9dda-e5c34dfc18dd", "sighting--ff6a3e15-73f1-4db3-9467-e57df267b87c", "sighting--9a177443-0349-4238-906a-d24380b81958", "sighting--8cf24c92-b1d3-487b-a9a8-ab80b91b201b", "sighting--cf4fc8b5-38fc-4960-bb66-1a765e513489", "sighting--ea7368f0-4089-4fb2-980f-1f5662c79c11", "sighting--c5a8acbb-33e5-41bc-8a85-a5528ca3c77e", "sighting--6dfa648c-f954-43bf-8eca-355109e61e7b", "sighting--b0f83740-1c0c-489c-a757-dbcddf22a965", "sighting--983babbe-13a5-42ab-8766-29aead8e3f9c", "sighting--ce2da1e5-09bf-44ce-aa56-7152f64fc8a7", "sighting--709e8730-e98e-45ca-a405-32a54019794e", "sighting--530c7a56-4eb2-44ca-99a8-e3d939255e22", "sighting--2cd03704-e3a4-4bf6-bd3d-65246804653e", "sighting--571f2ad0-9c32-47e2-a7f3-7339bf7a1da7", "sighting--cf601be9-cf17-4ab5-ba81-9ce4d0da838c", "sighting--ec68d53a-3f3a-4b2c-ae79-85221e834fad", "sighting--6363b4d8-4f3f-47b6-8c67-723c9d5a5d60", "sighting--c3d612da-ae9c-4ee3-83d8-45af51be5199", "sighting--d3e62fbd-07d7-492a-90de-1657741e4315", "sighting--eacdcd05-0875-4c75-ba13-5d8a53ca71b5", "sighting--9e46ad2c-60da-4185-96ad-fed0c5fbd3ad", "sighting--a1e959ef-ee42-46a5-9f35-9845b9959af0", "sighting--bce52407-d1e2-425c-95c0-d48692299e6f", "sighting--f976cc2b-a4e4-4117-b8f9-7f0e5889708f", "sighting--4f2a1d0c-106a-46d9-9ecc-1b24acfc704c", "sighting--f0f485cc-b45b-4b68-b98f-24476e45cd79", "sighting--55ee2ced-074a-4732-85b1-0811ff0e6773", "sighting--864d8b6d-75f5-4b95-84cc-0c3fffdbc252", "sighting--dbe3973f-85c3-4660-b9fe-200c4cd54c9d", "sighting--0ddc4c14-9f01-45db-ab20-5c5eafaf4be9", "sighting--9693ff06-66ab-4674-8b6c-759aa0497725", "sighting--0e4d0837-1cff-43a4-9498-12d668913fce", "sighting--4c8cb549-f464-4129-a337-3d2f8c8bf61d", "sighting--fff9a339-159e-4519-b394-809242d06e38", "sighting--41a2cc95-d16b-4730-b0f4-74b59667f6fe", "sighting--5875ee12-64da-40c6-9860-eb744f6bb4af", "sighting--278869ee-dc82-441a-9bdc-41d44755b959", "sighting--3b3dfd85-5979-425f-ab62-9dcba26c8083", "sighting--927f1bb1-cd54-4a4f-82c6-1480428373f5", "sighting--0d78d3d3-f143-4a30-b90e-3ed19167539d", "sighting--cfe7e66d-bfbf-4194-a976-a53c1e917aa4", "sighting--4a8cc1d1-23da-4cca-b72e-390ed38048ec", "sighting--67fe8503-ba52-45b8-b587-32e339081187", "sighting--211bbe3c-f0a4-4183-9ba5-bbc913c2c8fe", "sighting--67c41b3d-03c3-429d-8e19-4d3313638790", "sighting--f86e69cf-adc3-4ab8-9f93-ecf07cb2416f", "sighting--2d8feacf-b18a-46b6-b452-90e14b3b1774", "sighting--21138879-775d-4e1b-9cd3-7880e6498ee9", "sighting--5e43d12c-3abb-4a69-bb78-54b600265693", "sighting--a8de2471-49c1-4afe-83cd-57e47d6b3c1b", "sighting--e171ebfd-d808-461f-a5b1-d89caa3fffc1", "sighting--bf1bd528-0f3b-4847-98c6-995994fd6523", "sighting--bfa53aa2-5e74-48f9-a5f9-7adf99eea295", "sighting--1be96420-7f75-48c7-83fd-576992a1bdc9", "sighting--567b2a9f-5abf-4782-866d-6b6dced98d9b", "sighting--330ecb88-b28b-404b-bc17-4d6277459def", "sighting--cbfa8229-c12f-453b-a7d8-0d8b5aa13ff3", "sighting--cdbf57f0-e7e5-4e26-9a44-52c7565bb34a", "sighting--1ef6637b-7de8-4a77-9e6d-d7c03dabd87e", "sighting--133c65e9-ced9-4e35-8097-59eea9416b11", "sighting--4d47f8fa-5de2-4f46-9fc7-befe7adcc75c", "sighting--8ca93ccb-1a95-40e7-800b-e4d934353f3d", "sighting--4e4f609a-9b85-4cd1-8406-080cbc1912a6", "sighting--dda8d839-4219-4063-a766-6bdea7207af3", "sighting--d4e451da-9fe5-44cf-99c3-1ba40bed31b4", "sighting--65c14682-5d88-4e11-a9b1-48876fc6d0a8", "sighting--79927482-28aa-49f2-852a-a29541d9e59c", "sighting--fd990c4b-4987-4a2b-9953-19dae9c0f75b", "sighting--1dd78649-f0ea-449f-82c8-729d0ace002b", "sighting--0af252a0-f663-4c12-bfe5-6e44b4ed1ed7", "sighting--c89c3bb3-aac9-4314-8199-f4fdeb2dbbf1", "sighting--2187e582-5474-436c-b829-ff847bea1a92", "sighting--7d237e3b-eafc-4232-99f2-f952041b3434", "sighting--2f681306-07c3-4c85-89a3-6de642770764", "sighting--00135382-67b0-416c-8147-c308ef8954e0", "sighting--1c134059-a9db-4848-8e89-cd1d66002e77", "sighting--34f72722-7191-4e3f-9b7d-14ecfe093e30", "sighting--f595c350-03f3-4c2f-92d0-77e9c9e4f9c3", "sighting--ca9a7865-3231-4621-9efd-9ba25960b34d", "sighting--095273e1-609f-41c7-84d0-321bd3797496", "sighting--afa63661-32a3-4519-ac8a-cb6b250e68b7", "sighting--ebf7b790-8a36-44a9-ae00-8a1edea25708", "sighting--1ed00d65-f999-47fb-bb6c-77ff8b4c8aa0", "sighting--2dcd5afa-1f75-42e1-b981-4480ac9036dc", "sighting--82f705ce-d3ff-4cb7-815d-fd6d35233e76", "sighting--16aaba5f-4a1f-4b66-bd93-02d9fab566aa", "sighting--b7545d36-6159-4984-88fa-8f1cab046c99", "sighting--c0e7d87a-5e61-462e-93aa-45e8a916c1ba", "sighting--044b7668-eee9-4393-84cc-072254b522a7", "sighting--bcc40af1-7a02-485d-bfdc-689c1da9373e", "sighting--396db0a0-a95a-4f68-9dd5-e366b8ad0598", "sighting--9b0ed4bb-e45c-4522-9ce9-db72130f8ba9", "sighting--2e6a9cca-e6a6-469a-b76e-dfb324d68247", "sighting--1c260b4e-1e94-4892-a1c3-5b3b44ea2dd5", "sighting--73a8b42f-c1b6-455c-a2c7-2b00ea80dbec", "sighting--1979b8cc-94a6-4106-b0cf-bf2625e7b75c", "sighting--3977a5ad-5e86-47aa-a70f-51cc36777496", "sighting--d5e7e7dc-ec7c-40fc-90db-2e4b254ba58e", "sighting--c53b2221-1293-478a-9d01-499c6d1f5d82", "sighting--6b6d8bef-0490-427e-bf89-ce950bad64f0", "sighting--a94ee0b2-1711-42d1-9a7d-9d33a0c33292", "sighting--0a26beb9-b058-4439-97a4-c6aeabc09bfe", "sighting--7ea58d12-09d0-4cff-87b8-691b7b8a072b", "sighting--3711bd0c-fcb7-44b5-8e83-88424abcae5d", "sighting--73405dbe-3053-4b4e-9c10-10f65aabddcb", "sighting--aa3d50b8-c9d0-41c9-8c77-5bf390692cf4", "sighting--a73c97a1-b897-4708-b320-6b38dee44640", "sighting--55617c41-744a-4438-b069-ec7ff597e5ed", "sighting--f21935cd-0047-4f39-ae56-16e069c05fd2", "sighting--83a2838f-92c1-41a5-a54c-feecfc8394b1", "sighting--1be9d600-8215-4cdf-90e7-73ece34626da", "sighting--176aef34-e6cd-4036-8259-27a6acf56d57", "sighting--948df38b-d2e7-4bb7-80fb-0d57aff2c605", "sighting--04d7e962-9b5a-4035-9e0d-ff62a4d75444", "sighting--4537cc1f-3f43-4dd9-a9da-79ec359f056b", "sighting--a68f4e20-24cb-46ee-9f83-420bc6b996e6", "sighting--38b286af-05ef-4237-ad03-a4efc6a8d5c2", "sighting--bee911d6-68fa-49b5-b989-6e9ef3282373", "sighting--1b735eda-7c19-452b-9a83-a018c90cce7e", "sighting--d8010820-90ab-4904-84e8-60c2f3f7e891", "sighting--3ffd6571-36f1-445b-8660-3c10245b4d29", "sighting--60563182-fe88-42f2-a2b2-7eb134a619b4", "sighting--0f8a8f9a-1af3-469a-803b-d177310b65e4", "sighting--fd6377b9-c92e-4ee4-b1aa-c634d874d1aa", "sighting--44e7e84e-4b8e-456d-9fe4-46b636a095fa", "sighting--7e1e1c46-c573-49e1-a444-adafbaf7d548", "sighting--28f5379a-c165-4476-82d7-a0df7895ac00", "sighting--235652e1-d832-4581-9a84-82a41717fddb", "sighting--2cc5b8b9-1542-4d0d-a53c-39648c711902", "sighting--d8f4da2e-32cf-46c9-a27d-7aded4206250", "sighting--099c981c-6e66-4e76-9df5-d73bdbb82546", "sighting--8b8a00e6-615d-430a-923b-8abb3a3f45bf", "sighting--5d4f4789-8427-4519-94ae-2f1d46715e70", "sighting--7cc6073a-a37b-4676-917d-b71a443f48b9", "sighting--90158744-1e2f-4d3d-a55e-f958a8466207", "sighting--e5b64ef7-d7ee-43f0-8952-f6e37be59fe1", "sighting--afd03eb2-ae53-45ae-af2e-7a1f7d203e5b", "sighting--704ad6d3-574b-4244-b840-887e6e841fd0", "sighting--b0ca725f-ce4a-4cf0-87e0-0a48d3da1c84", "sighting--deda16dd-fc38-47a6-8751-b1db49779e29", "sighting--1e38d8ff-fd85-4e4a-bc51-88c70e3cd6a7", "sighting--e41835dc-ac43-4128-898e-27296a87f3bd", "sighting--3fdc4ddf-487b-4836-a653-a7a89b2c21fd", "sighting--0d8dd843-cb36-4c31-a7d0-830e808a4d04", "sighting--24016e86-799d-49a5-bc8d-62caefd2427b", "sighting--65c94d42-03ab-4c9c-bc24-7fac45afa2a1", "sighting--45b594ab-9886-4c39-a175-650deede10d2", "sighting--7797975b-a45b-4cd2-8d8f-4e801b57b885", "sighting--ee00aff5-6ba1-49aa-ac3d-8f78e435dd93", "sighting--1bb9e7d2-7db9-4599-93fd-86cfc32aaea6", "sighting--2aa48244-ecaa-4e25-8789-f625a250cbc7", "sighting--bbc924e3-d643-439f-998d-b9ddd5604e92", "sighting--7c62eeb1-75a5-409e-85f3-2d9114417b21", "sighting--1c68e1b2-c929-489c-b188-10c7b54b930b", "sighting--08811ad9-6e0f-40a0-9aef-cf31a3fcc11d", "sighting--cbb633b5-9cd0-4137-822d-5c3751e2c497", "sighting--d85a7b9c-76bc-41ad-bc23-23cb6ed9e531", "sighting--695d58be-dd30-48e1-99d6-73f3e7252613", "sighting--32febfc6-ac78-4b67-bd73-58aa96c07cbf", "sighting--1c575fce-5e3a-4692-afc0-9777e716196b", "sighting--f790707c-d0a3-4e05-a486-95514cc134a7", "sighting--c1d8ef91-d66e-4a68-8ffd-646b3c0ea435", "sighting--f314e7a5-103b-42bc-899d-eeb966414624", "sighting--c58f5686-ed6a-4088-8243-692bf9c6a402", "sighting--8d0781d1-6e70-42c7-98ad-7250b1749d1f", "sighting--eb3fadd2-9de3-47b8-8c34-d700ffa3b1ad", "sighting--62dc5455-ef1d-4a91-adc1-8b70c3f25acc", "sighting--36a2efe9-17c4-4800-99a9-e4245e7eacd5", "sighting--117f0edf-34c1-4a7d-8142-d379ad0e6a49", "sighting--13147711-7c18-424d-9d54-3ed03141cc43", "sighting--edaf5942-b56c-42cc-93bf-0bf79462c84a", "sighting--54634f91-993f-4802-a3fa-e21c6c4bdf9c", "sighting--f9c8be6b-c5a8-40ee-ae70-b1d0eb1426c8", "sighting--6b56003b-9a40-4296-bcf4-9615e23a04f8", "sighting--6c05e264-990e-4290-bcfd-844243bbdd92", "sighting--24370666-6053-4f99-90d8-97f61f63a9bc", "sighting--8849624f-8480-47fd-8b1a-ac8c346193b9", "sighting--97d7889d-eb90-4531-8c0c-e55a0386cb6f", "sighting--937304fb-220a-4b28-8990-2f08da5e78ef", "sighting--5ddadaca-63ec-4995-8528-4ce33e1d7825", "sighting--3bdaeefc-093c-472b-80e6-71e49e1876b2", "sighting--0e72f01a-1e75-485a-9642-bba14dfff9a8", "sighting--6b684148-b179-41db-967b-f4962ca3a48b", "sighting--dc3698e4-724e-4215-9c43-c9acdb53e0ea", "sighting--4ab57101-4303-476e-babf-d8f432edd83a", "sighting--1d737e18-a9d6-47e7-a5f6-2a64be0dba36", "sighting--13cbfd6a-fc32-41f1-8c34-d9dbce0d643a", "sighting--360e1b54-65e6-42f3-954b-71aa08606925", "sighting--bec90c96-aec6-4379-b961-43476bd94091", "sighting--025912f4-1ff8-4f8b-9bf6-6d678d422853", "sighting--a1fb2e04-8959-4957-915f-4a7a0399f9a0", "sighting--c20a3d00-df59-473b-a4fd-5a445e10f883", "sighting--585846cd-7c78-4ecc-9f5b-a45abe0583ef", "sighting--5effadfd-3760-47bd-85ce-c22976abbe7c", "sighting--f7ff898e-01df-4435-afe5-cec3282279bf", "sighting--3b482946-2f07-4be6-84b8-1bd3d19b169a", "sighting--81295cce-bc15-4fdc-9d34-9ca85f5078e1", "sighting--4a475450-c0c9-4abb-8079-7a02c2302d34", "sighting--9ef268c7-bfa8-4e5c-9da6-6ae520cb4f1c", "sighting--b77f0ed2-299d-452f-b0bf-e5793c327f43", "sighting--d20e9e08-2b40-4a8c-97f4-1229ceb3f8a1", "sighting--b22d7638-a32a-4991-ab24-164dfd013c4c", "sighting--c891ed27-b053-4a69-b182-7784fc94dc66", "sighting--fc1e1fc9-82b0-4e57-8a40-37f87ec35ed5", "sighting--56991710-e1f9-4db4-a863-0f7f1c8159b4", "sighting--fbee23e1-0adb-4a47-bce1-d084a742a9ea", "sighting--ed0c7b2c-006a-4b75-bf89-0fe30e91635e", "sighting--077e947b-eec0-407c-a40e-a86953ac495c", "sighting--93cd49d3-6dd9-4dee-8b37-0fef257c8c52", "sighting--afaa0891-dfe6-4312-b71b-da348915bc0c", "sighting--2462c15a-d163-422a-815f-82b3cad0e264", "sighting--3a65e1ee-68b6-45a3-b76e-96c83b422a70", "sighting--6bb08183-0b1d-4658-9172-11fc015d8ce3", "sighting--4969b035-86bb-4203-8a74-6820736f2faf", "sighting--ad27b0ae-1053-4592-864f-d6b01d293f11", "sighting--1e1d6b9b-0f8c-496d-8ae1-acef4c98dbce", "sighting--0dbc4be7-84a2-40b2-8f8f-600b64af4408", "sighting--b5b275e8-d127-4143-8228-bde5e22fc4b3", "sighting--14ddfb07-ddd4-48ad-9cf8-26efe5fcdff1", "sighting--3957eed3-46d8-4ddc-8b80-7bc417b058f3", "sighting--0ec81ab5-92ea-43dd-b40a-7b937a2839a6", "sighting--04b61865-8621-4aa4-bd9e-43a0e89a5f9b", "sighting--8bb41569-a34c-483f-b9df-5cba2b5c9112", "sighting--35d1cb5e-35c1-474d-a067-e398907a5cb3", "sighting--94fcab4d-e3d6-4811-a176-1d2dc2c524eb", "sighting--0120375d-d34a-467d-9deb-fefcbdef740c", "sighting--fdcdb7b6-430f-482a-b84f-b1ab58426948", "sighting--07f78738-5c30-41cd-9b2c-025f6287ec0c", "sighting--d3768ff7-21a6-44a9-99d3-a8fbf1ef486b", "sighting--32e60c96-21f3-4bf0-a92f-1f1e2002328a", "sighting--f11ee32e-79ff-4c76-98ce-6a7718d7b019", "sighting--d89ee548-6504-46c8-b8b9-523638c6d04d", "sighting--397df412-1c63-43fa-90b7-13c57e1eed99", "sighting--d5df9216-6c3f-40fc-b29c-902793cc974d", "sighting--1f907788-5b7d-4bca-87ca-3c57956e6f89", "sighting--46e6ee8b-67cf-4a52-9e6a-e69db9578cb3", "sighting--61e7b399-dfb1-4343-8f15-577f2703ed8e", "sighting--f7fdf265-dc0a-42c9-9ce6-fae5b94efb60", "sighting--5b7ca9a8-b5cd-462f-959b-1d15fe6fd211", "sighting--c562add1-b431-4cc6-9984-fea60c57da3f", "sighting--37f5d5f5-2ddb-41d2-a08f-625503fcda03", "sighting--8ef73b4d-f58b-4e75-aeed-3f137ac744e8", "sighting--8a4a13f0-3bc4-4d0e-9a87-1be14b815a14", "sighting--c8257215-f845-472e-8c38-9d0dc943570c", "sighting--9526f453-9f7d-4cba-931e-467085aa7cd5", "sighting--b950d046-27e6-41dd-8ca0-eb5bdb82b2fe", "sighting--223d58d3-a665-468f-8cf9-bb93dddc3be7", "sighting--21579358-0c84-4fc3-a57e-9ceadebcae12", "sighting--e4d44e2c-c472-48e1-8b1f-297b9aac86cb", "sighting--f8989aed-3a13-4b91-ab82-868dea1e0280", "sighting--687dfcd7-07a3-4de5-986b-4a617a3dd911", "sighting--73c63c94-a1b1-46c9-a4ef-5783b7a47945", "sighting--39be67bb-35f9-483d-a311-6b8d728e3ee1", "sighting--4a8f3f4a-dc47-49c1-9336-9a0b62dfdff5", "sighting--fb4941df-d5d2-4d09-934a-d596355edd92", "sighting--26a04225-68b3-4261-938b-f4e89b64a641", "sighting--f9bc2a72-29be-45e3-93d7-bcf948ae3e12", "sighting--14c1bd1f-ec15-403d-bc4e-a248eee2df01", "sighting--01dce653-19c6-4b51-9e49-450561d281ec", "sighting--b7395c25-6073-415b-a234-a09c1cdb59c8", "sighting--34c5803f-459d-4bee-aa32-5d765363fe0d", "sighting--233a70f6-8480-4368-892f-6859c2a4a9a6", "sighting--b8f2f3f0-91eb-44f3-a782-aabddba37280", "sighting--fdc3f9b5-95c6-4dc2-b88f-e5b8f10e4fe3", "sighting--37c374ff-1d05-43f0-a3b6-c6e4128e41ee", "sighting--88c74de1-90fb-4f42-858c-b957847f7b26", "sighting--adac3275-6b7e-44da-9983-3ab2806d7315", "sighting--41699f48-653e-4f90-829f-e131d9a152a9", "sighting--1f7e4409-75b9-418c-811e-0dfb7c7dc6dd", "sighting--f0ee2118-5f01-4134-9ca6-8d21af3e1782", "sighting--d014c53b-6cf2-4042-a030-2f5a7174cf2a", "sighting--42dda4e2-bc77-4d85-b2bd-9df9ff29b12f", "sighting--67743a49-5693-48a9-a73c-7211915af5d9", "sighting--ef8f4508-55a4-4af6-b704-5557e1192a9b", "sighting--150949df-7dc0-42c2-8f43-805300b5a676", "sighting--c981f6ef-af36-47c3-83a4-f24b19e24726", "sighting--28fef597-9ff4-4cb9-b0c5-65214acbe155", "sighting--5f9ac082-33eb-4187-805f-3ec9dfdcebfe", "sighting--65da605d-f9f5-43ed-93ec-39d56db23fbb", "sighting--cd9625cb-5d54-4535-89cf-ced59dd6567b", "sighting--a0de2d61-6222-4b52-b52f-c486d35d8d4c", "sighting--055ee1ef-8e74-4afc-a45b-c845c9cd789f", "sighting--834116d3-5326-4664-9a31-8b12b0b39098", "sighting--031ff324-5449-4a91-889f-07d00632e835", "sighting--8f2a80f4-afb6-43b7-81c6-f74703a73990", "sighting--368f08f0-4385-46c0-8442-b7e1e72a211b", "sighting--ac5f2c00-df86-4166-9fbf-a7df6affbd95", "sighting--01e58df3-9899-4607-b184-fdd7a8b82080", "sighting--336fe66a-0937-4132-855c-2d642d144861", "sighting--c040b9ad-7026-4d7d-971f-003eb6a42d95", "sighting--d06e24c8-2691-4f49-ac55-7d6dd6f2ac4d", "sighting--bda5d0f1-2884-4fb0-9a3c-a59f2471494c", "sighting--a5248c57-a6a2-48cd-82a3-b444000430eb", "sighting--11a99e4f-8d86-4c57-904f-0f791e963e86", "sighting--d6fd8011-bcd0-49b2-ba02-bd5f67d4360b", "sighting--7ef9e035-c393-489e-bc60-eaa43612a0c4", "sighting--27e1fe4b-65b8-45bc-8b8b-8c6f15781c96", "sighting--a87ea443-8734-4249-b18c-5ce19606aa32", "sighting--4ed86dc8-8285-436c-918d-30630d71fdbc", "sighting--a18a88fb-3b2c-4c12-8caf-64d90cc3dbc9", "sighting--04cc5571-063a-4eba-94cf-c652d4e61c7e", "sighting--172288fa-d528-4720-95fc-68cebbb0116b", "sighting--6e202539-b644-4f9d-a948-f07650f03118", "sighting--eaf73acb-9ad9-4b10-87d0-4344d357546f", "sighting--9f7c6b76-0f1e-439a-9d94-1b2189ef6f88", "sighting--32e62699-1bd0-4833-ba26-93e7d0c83223", "sighting--20299926-f263-4260-b69e-62d0e6a5ddb9", "sighting--5cac28bc-48ac-4a18-b2ed-38b89a3e1f8b", "sighting--b63d77c7-b33d-429f-904c-24821288e05b", "sighting--3bd2dac6-16f8-48a2-a120-a1636586f9ab", "sighting--c255cb64-dacb-4750-8af9-cb305d1e9b29", "sighting--d22f6fb5-9aa2-4ffc-b454-9449105150e3", "sighting--efd3c081-3865-4e72-b95d-5c3520f5719e", "sighting--fcb206ba-89a0-49a9-8da0-d6c8f12f054d", "sighting--57f2d5a0-e7f1-4786-b516-c80859f870da", "sighting--4d320f12-7088-484d-aebd-7e4ac140b253", "sighting--11699c88-91ee-46e5-9220-7e67ee7e884d", "sighting--f7ac2676-8181-4794-99bf-a57f31787aca", "sighting--ba56b2c0-fc1f-45e0-ac0a-094d4150bb16", "sighting--907e1076-1a22-4d88-b7b1-7a5c9c618a94", "sighting--b2fe355b-4e34-440b-b9ac-94a48646da7b", "sighting--d05be257-fa8e-4d5e-bbe4-5af27d25de14", "sighting--0d6990e6-ac63-4b48-af10-c120e5789ebc", "sighting--e8b5fbb3-fbd5-4bed-bffb-cf8578515904", "sighting--58ba8bc5-bb51-4726-844d-b6dfed829d1e", "sighting--c1756c35-a739-43fb-80a8-a613a3029926", "sighting--a15687ac-4a62-4ce6-9210-7f8d773e4570", "sighting--e4425eed-1180-4b85-a605-4a9a9e8f3fa8", "sighting--3fc656eb-d214-42f7-9f4f-fbc4dbcaf1c4", "sighting--21b3c129-2f9f-49b0-aaa8-5c1c284f81c5", "sighting--b847af35-cffc-4965-a64e-a68d989491cb", "sighting--53bb7213-9571-49a9-b546-25935be7895b", "sighting--515ce086-c932-4e15-ba10-c98ff5677ddb", "sighting--563c743d-59ee-4cea-99e8-253b2ea99fe2", "sighting--79a45ccd-8b49-469b-96c8-d199f0f8a79f", "sighting--0b975815-234a-4f31-b095-d88c282b5c74", "sighting--770a26cc-35b0-4abd-9f1b-1b06783abcc6", "sighting--8dc284a4-c2ea-4730-a743-5566fe899462", "sighting--86de0145-9e09-4327-ae83-618bd36b960a", "sighting--0e068d9b-16eb-4b80-b134-e538f1d3983b", "sighting--2eec5251-3799-474c-b007-2b049eccefbc", "sighting--da869352-7809-4c14-9f42-9b198d0ad58d", "sighting--770a8238-8691-4c88-afb3-7a1da661de67", "sighting--74e48d78-53c1-4db4-b5e7-e7a3116676f1", "sighting--847127ad-6d31-4117-b4e8-fea2c83d0c95", "sighting--8aa56e1b-5404-42f1-b87c-9245d37cbad7", "sighting--e6d96973-1db1-4fad-9a01-c1b6127cb3ba", "sighting--164257b3-bb33-49e8-b630-33b1b625a7b5", "sighting--46e4ab3d-6154-423c-81a8-17ac9b615b7c", "sighting--7d1411f1-7dfd-4e6b-9c41-b3229f214aaf", "sighting--767ad6a6-8455-459a-a36a-ab9061a0cd8b", "sighting--6a7869b1-da7a-4412-96ed-98af1312dd75", "sighting--d1a2b38d-c697-46bd-a8b5-d6da7ab99d25", "sighting--acf7122f-18a4-4838-a52f-358d94a55341", "sighting--f7543c13-0897-4656-8e39-2089fba8e8d0", "sighting--f9fd8890-e46e-4a0d-b1f3-4959d32df045", "sighting--1d70e458-6f3b-4c7b-b0c2-75a0b81d26e8", "sighting--a0e29a10-62a0-453b-9a89-bce348f197c9", "sighting--9568ced9-81c8-4b60-b274-29807d0a3e97", "sighting--f16ea05e-826d-464a-80af-d8f281e6188d", "sighting--c37f8a3e-9f57-490b-bd70-dd3c8f8f5e7e", "sighting--a74ffcd7-8387-4486-a5f5-b68f94a0d56c", "sighting--2f005a46-e7c4-4c91-b492-2addd56f5d27", "sighting--62c6493d-741e-47d1-84c5-8b847a17eb0d", "sighting--c59db67a-fe10-4ef0-b3e7-c40a063a1c56", "sighting--31cf28f9-98b7-4e55-a47a-843c7183863a", "sighting--ed1cd7ef-9048-473e-b03c-92ec66762de8", "sighting--97f132a0-4926-4430-8988-517a4c7a8631", "sighting--72a961d9-65b0-458d-8e44-91506bc73338", "sighting--c9c1ead8-a61d-461d-98a2-6d635a68cc15", "sighting--4747334d-c394-43e9-aa0c-f2c53c9aa799", "sighting--de8bd7d1-31d4-446e-9cd1-3685aaf435ae", "sighting--58449dc1-3534-46ee-a922-bbca2fc3fe3c", "sighting--017041ca-3707-4461-84f6-d51a175e3eb0", "sighting--ec302339-9bed-4e50-8374-268ebab14fbe", "sighting--9f3652a9-37e4-4ed6-adec-f6c5a3d5f9fa", "sighting--2a40bff7-a6f4-4fc3-96f8-f5d1df56ddb9", "sighting--91c78c4f-8a89-4f02-9fd2-2bfd86299841", "sighting--92f286a2-8a76-40a3-814e-a536b1040fb8", "sighting--44c5ab76-d8f7-4a33-8817-9e3985901319", "sighting--81d1c899-6838-43f0-b847-c369aabd1d55", "sighting--4a4dbf8f-af39-4904-a551-40343bc4279c", "sighting--c617789d-54ed-4b25-9974-e7f233b400d6", "sighting--426139e7-741d-4492-9488-0814da9c170a", "sighting--896e808c-edb8-4671-8275-46fa25ddc359", "sighting--f700cc27-046a-4594-81ca-18af448f6b52", "sighting--36ec978c-91de-441b-880a-be77ca624372", "sighting--ffa6fb7d-21a5-40ef-bb4a-d58bdb08c375", "sighting--af773cbd-e953-4d9d-8cd7-497832ca9558", "sighting--a7dd75b9-639c-45ba-a9dc-3c445b0aebb1", "sighting--572bff66-4907-4807-a944-dd0c811555e2", "sighting--ecc53a0b-508c-4d52-893d-1a7708a3f6b3", "sighting--31beaddb-edf3-4f9b-bb1e-4de8475d85d3", "sighting--09c26a61-2a3d-4ef0-a635-d4ae11066e1c", "sighting--1df7015a-c2f2-4cc4-b91c-40a9dc2d6e85", "sighting--4109e3f4-cd2f-4cf2-8e2f-aebd81bd67f0", "sighting--7a5896f4-b5a8-4abe-9ba6-20ee54ccfe53", "sighting--b529391e-f7fd-4063-be6b-d9139eab75e3", "sighting--ccad7fe7-6f9c-4654-a31c-e341551f8f8d", "sighting--ae7b1d49-f72e-4b17-950e-00dfcefcf982", "sighting--cc295102-547b-42f6-833b-1182defa92d4", "sighting--ae469bfa-7e41-49c7-a072-3293a4d9b54e", "sighting--a78c7c25-2c5a-498e-8bce-33c535e383bb", "sighting--01fa67d6-344e-4fa2-9258-7af5767779dc", "sighting--256061bd-fe9d-4a63-b721-5fd486e74eec", "sighting--e786bdb6-ab11-4e71-8d1d-2ee3e46ed274", "sighting--91ea7b35-e2ad-4233-89cf-e60e1ea67c27", "sighting--9ff3b1b8-9fc7-405a-bd07-077fc04742d7", "sighting--61b63889-7c31-4661-ba34-87aaaa7f303d", "sighting--1ccdde28-ed00-47c8-8007-2552e731bca5", "sighting--60ea4599-ef86-4ade-b834-eb6bd59d37e9", "sighting--2cd36138-940e-4c71-876b-9066a961650f", "sighting--7f7165b4-8d4c-44b6-9a81-c0bcc6acb48a", "sighting--9a2635cd-cd6c-4615-83a8-ab8bbe8ea3b5", "sighting--315f25cc-6aab-49e6-b9ac-a9e3fee76310", "sighting--ff00216e-c657-4f24-8244-de4f2293d727", "sighting--b6159157-f127-4c08-a695-2f4fc3a7a72e", "sighting--cb337f97-f50d-404a-8e77-8509c2be291b", "sighting--a2cf1d6a-b1a4-41a4-b560-edf9fac9ce5b", "sighting--b77eb49f-2800-47ae-bfd0-552b29d9f318", "sighting--6c8f8e45-dc7a-45b2-b36a-84d4cf72d03e", "sighting--52be0d02-3893-4221-a89f-dc06bec8add3", "sighting--ae68d59a-0b87-4d36-8a2a-18e11111bdcc", "sighting--1b965ada-a791-427a-972a-2ccd13a97377", "sighting--d1b924cd-754b-4d83-8bb4-aee02af31b54", "sighting--d5c09ac0-40b6-44ac-91e2-73d24af69b5b", "sighting--698b35a4-04b4-4bc1-a32e-4495f778bb73", "sighting--97779345-8421-456f-b613-5ffa7907c3c9", "sighting--b0128bc8-beb0-4380-87db-6dc36e72fdff", "sighting--93017b32-b861-4b77-b84f-73ab24acd36b", "sighting--f09b5acf-871a-46f7-a61d-f38ce90fd198", "sighting--7bc7d615-b429-41ea-a9bc-7af7f1b25c99", "sighting--b54c0a4c-cf64-4b98-81cc-41576010a1e6", "sighting--0d0c6da2-f9de-45f2-8877-4475fd267920", "sighting--ed3a3334-3a7a-4361-9793-eb3a4d64f244", "sighting--58497be9-c6aa-4203-837d-0c2e3fa874a2", "sighting--ddb548ee-b5bb-4795-ae7a-c4d572bb7910", "sighting--ea733cb5-359f-430a-955b-cd1550ad3de2", "sighting--1c6a8e11-2447-4fbd-8390-8f16db31e670", "sighting--a2763a20-d699-48a2-896e-3caa6b918938", "sighting--8db8299a-ad93-4b98-ac5a-a6a918e004f1", "sighting--7f03a18c-b494-4396-8945-469d8bfaad29", "sighting--4afbc72f-0a75-451c-b7c9-ad3141e8308b", "sighting--45c2d020-d2dd-43e4-84fe-7c119b96e0c5", "sighting--72bedc79-cb26-4ba5-a3ac-db64dc4bf802", "sighting--06b41967-e90d-4c13-a970-050c8c761601", "sighting--87c07aa4-9b55-4121-bc04-997ba16b3d40", "sighting--f63e5565-7be8-4e21-a687-23b3142a6850", "sighting--b6f7b2a2-3846-450a-8126-af256efc55ba", "sighting--6fc8d34a-f0e5-49aa-b5d4-0308d42429fb", "sighting--f07518e8-7dbd-423b-96fb-7fd952a21ba9", "sighting--d8b875f9-7d43-4729-be63-10f6a486e458", "sighting--cb425e73-b02d-4637-b83a-8726843b351d", "sighting--01b81be3-2ea4-43be-854d-da62880efe08", "sighting--f3805efb-91a8-4abb-9d6f-747f5b78a8b8", "sighting--8c6bef47-e244-4c29-a004-e07ee373b302", "sighting--c2d76cfc-0d57-4d4a-8073-e967de847acb", "sighting--6b24d324-2dc7-4f1c-acc9-5a7ecb602109", "sighting--bdd83a1d-ce50-49dc-8008-981f7b307f01", "sighting--f035c3a8-5068-48c4-80cb-322fc032c3db", "sighting--7537d6b2-a489-4847-9f22-336d4bac89f8", "sighting--55b76962-eca5-4bf9-b96d-cdaeb4d8e06f", "sighting--592f9653-8c48-455f-a1fb-632db14a6f9c", "sighting--86ce85e4-1692-415f-991e-ae967602c7b8", "sighting--ff3214d9-1ca9-4d3c-b4cb-6c1ea3f4ee43", "sighting--3a92c904-a4f6-44a9-8489-e3fbbf6b606d", "sighting--000cb341-0863-4c11-9afa-5e68cbf58347", "sighting--ab7fc892-2cbb-4c8b-a11b-0005b632417b", "sighting--57ca410f-5cc6-426c-b11c-ccb79cb3fa1e", "sighting--7d22b213-9a68-41bb-84cc-ec7a3019f97c", "sighting--db2426d8-0c65-483f-a811-bd9cd831e9d5", "sighting--32efb4ef-23a9-4b79-8b1c-d4a7ed8e7314", "sighting--5eba1fac-0ae4-49e5-9da2-d19df2d31372", "sighting--2546c678-b7f5-420e-8425-0e8239e3e492", "sighting--5e87c03e-699c-42d4-afe6-a24566e7df40", "sighting--01ee549c-85f2-48df-a98e-d29afb6cbd0a", "sighting--744e7250-7a9e-4fba-aa0d-7aa3944e1cbe", "sighting--38f3c9b3-9410-4ddf-8acf-d85cc9b0e4b0", "sighting--ad4d0f97-3c27-4160-8346-6efbacb8ba98", "sighting--88969316-6380-4376-818e-91e99e99f69d", "sighting--4e647485-ca3f-4f29-aa8f-469224102d07", "sighting--35b12d26-5f4e-45dc-ba82-6ffce3d6a807", "sighting--7fb9812a-a055-4e27-b96f-4dfc0c5d20e6", "sighting--e2e9d34b-7bc4-4c0a-bb67-309dcf4603cc", "sighting--3eeef434-fa2c-4f48-8b42-e73d5c6c0edf", "sighting--14a6051f-b409-433f-8b29-513285507a09", "sighting--93e9f18b-d888-4556-9d9d-00968e7e994a", "sighting--c110f989-f91a-4ee4-ada8-f506a92ccde9", "sighting--7be18f61-bd29-4e4c-a972-824ecdca837b", "sighting--1db36e40-5c08-4eea-910f-9b771c80fe26", "sighting--4cda70bd-e34e-40d8-9e7f-764b1ac84c0e", "sighting--5a22ddfb-df6c-473f-9e26-9291d6e4895a", "sighting--3268b559-f204-4688-85c2-0f25eeb6b3de", "sighting--0bd95a87-dc88-45aa-a22f-6e25d3cc2969", "sighting--b3228b9a-9c5d-4b29-b89d-97cadac6f940", "sighting--14ff8782-f702-4290-a889-81f5f48fc4c5", "sighting--6928dbe2-4be1-43c5-9e1b-3a3d18274fa9", "sighting--96a3c763-2c1e-4300-b493-71652709f1ae", "sighting--b49e8196-e449-4f90-ab57-e6086f24dfc5", "sighting--7e0b59d7-55d4-4833-9392-12440913be97", "sighting--2b092c07-eb7c-4d97-990d-59137b6b76ef", "sighting--f9dd7ec2-4c42-4470-bbbe-66dfa53e0144", "sighting--f256d9fc-53d2-4e13-9fee-6c60e215917f", "sighting--eb621742-6712-4430-82f8-cdc30582bd72", "sighting--523b9636-6cba-4201-8c30-9664cbb3e79c", "sighting--03c65588-2c5d-474a-8dee-1d4c2aad274e", "sighting--6a782b91-2afe-4b2e-962b-68cf410bfa5c", "sighting--e3064e36-7172-4fc4-b703-38a0dd102858", "sighting--af93ad1b-e54c-45a9-a261-0452cbdd7a0e", "sighting--b65d5c2f-8c9f-4d22-93dd-18cde3fb9e00", "sighting--c96ceecc-5b08-4cb1-94ca-887c86faeae6", "sighting--4aaf1633-4e50-4da3-85cf-1facd86e67a7", "sighting--169a37bd-c2a7-476d-b011-a04e82f5b51a", "sighting--028dfb73-6b88-47aa-8985-4cfb19f34756", "sighting--ebc0b309-7f7e-4be3-8489-a7b33b953384", "sighting--9cc9a3e5-8b3d-46a4-aeb0-c5b7fd827f66", "sighting--e84c9bcb-0efa-4a51-9128-c7c23af05e08", "sighting--bffb9324-b3c0-47ee-a64e-5fbafc44be64", "sighting--0b5b6239-8742-466e-b5c8-8bc837d4613d", "sighting--3a8ee99f-027c-4b75-867d-aa93cf6d1853", "sighting--0f6a8869-82b5-4579-99ba-8861fb0024cf", "sighting--3b2ce27f-4c57-4d69-b073-82771c9ae451", "sighting--a4e67d0b-a0ee-4089-b96f-ae2efddc4661", "sighting--2d487840-15a2-4b4d-9dcc-3abff065736e", "sighting--3d5ba065-186c-4710-a2f9-9b6400925ff4", "sighting--05cf0674-9673-4f51-abc7-9a7b35b365b3", "sighting--bc5d48d1-451b-463e-bfa9-4d74cdf83dce", "sighting--a772f8d0-2b55-467c-a55a-c409d1fe8efa", "sighting--22806047-3cfb-4c68-8fa7-c0b3bccb2253", "sighting--3d49dba8-cdeb-4503-a6b7-c9492eb787e6", "sighting--69f18701-fda2-45c6-b1f3-2e28ca2389dd", "sighting--6047f0d9-13a6-4819-ab84-9f5213412170", "sighting--8bf8fa2f-853b-40f5-bce7-3b80d0dd30fa", "sighting--af0d9723-f4da-4e66-8821-89959fb2b7ec", "sighting--ae9e4d54-1761-4a58-b4ff-3ddabc474bc6", "sighting--9f7d8177-c251-495c-99f0-9b245c8131d2", "sighting--fb5a8dba-7b97-4d55-81da-795518786e32", "sighting--3a75d843-7da4-45e8-a57d-3491b541c4a7", "sighting--3bcf0fa1-2bab-4d3a-afb0-74bde2c8ae09", "sighting--5df681d3-b392-4ca9-b311-03db246ec194", "sighting--b37848c4-1b45-4be9-b97c-98c06025ace0", "sighting--d3b5a20d-2d2e-4af8-81b6-ee004b9a1456", "sighting--475c29bd-cb3d-474f-9ae4-86cd643b6183", "sighting--4f51e1ba-7a7b-49d6-8159-b493e0da83da", "sighting--ddf01d70-f411-4233-92d0-8d4fa3553f26", "sighting--73dabd57-28a6-4ec3-ba2f-9cb07f6147a9", "sighting--cf1cb7a9-056c-4bb9-8a35-5299a2a8e1c9", "sighting--f5a97c42-df13-4038-8875-751dfe613c2d", "sighting--b8310fb9-dcc8-4061-80fb-a14a99e7d6a2", "sighting--b7fd1377-f73b-499f-9a0d-58fb54bd4599", "sighting--a470aaf0-d16a-43a6-8a72-dc064c0db699", "sighting--46b50f07-e8f6-44e4-b6d3-b3b64498b376", "sighting--45c27416-501b-4d06-bc57-1e0a17fbf43a", "sighting--db986054-0962-4ba2-8cae-946342b589ab", "sighting--f000b30f-f4f9-4573-9527-b5ef68e08f7d", "sighting--bb822f5e-96f6-422a-b8b3-0100853d6ebe", "sighting--7b5a6665-e69b-42b9-8e8a-2b9b3224ef38", "sighting--1ac47ed5-06a9-4abf-b9a0-80d210ef8646", "sighting--c9c7c536-cef8-46ca-acae-53b6948e44ea", "sighting--340d9018-05ae-4259-9da2-b0abeac8ec9a", "sighting--77ec72a8-d16c-46a3-89e9-1e38a310ba5e", "sighting--627a3228-52a4-4f23-9bfa-8cb1e774098f", "sighting--6b50f952-e1fb-48a7-b82b-023d281dddb2", "sighting--db402600-183b-4016-81cf-a176bd8e230a", "sighting--948e0b4d-dfc8-4b6a-8b61-564c5d4eddea", "sighting--5473d661-13da-4be0-ba6b-9a3f1010a62f", "sighting--f2b2bd54-671a-4a4f-a9b1-e89fe4fa31ff", "sighting--92363850-bc3b-40d7-974d-41ed8c76e169", "sighting--23b82472-374a-4c6a-91c5-661ac095b64e", "sighting--64e9d3d2-7cca-46fa-8b44-97102111c541", "sighting--a8c811fd-bbfb-4da3-84f3-53639c4fad28", "sighting--070bc360-1911-479a-b0ff-3c5ba0e5a3a9", "sighting--5d5acec4-e674-4ca4-b684-353240ccbce8", "sighting--89fbed28-407b-4294-9dd6-08c79dbf39ee", "sighting--71116daa-a0e6-405c-85fc-d1c80cca3fac", "sighting--a8fcb999-7119-4002-992c-61b7d88d2599", "sighting--1e381048-800e-4383-a7af-f62dd03b4290", "sighting--7e7c378d-d27c-4e86-a8fe-c8ad36587b4d", "sighting--a056c1af-b8d2-4576-a529-02863043929b", "sighting--56387cb5-a638-4590-b89b-e94f111709f0", "sighting--f20f9c5c-9829-4766-b879-3542601ed924", "sighting--76f2232b-6152-4d56-86fd-2d3e81ed0114", "sighting--cae236b6-15bd-46b4-8ca9-2771e98d4246", "sighting--6bcd7973-fc33-4426-a98c-9eb0c576a7ef", "sighting--5fe08bd4-c8e2-4b1b-ad5a-11f7c4d3b26d", "sighting--ddb784a0-9905-4465-aa70-cca2fa636bdf", "sighting--f7a53190-d0be-4812-b5c3-d0f2731d99c9", "sighting--935e6ef9-8ee6-4512-8160-2b434960ee55", "sighting--e096ddf6-fe4f-4bf9-a9e1-84822f039e25", "sighting--6cafd6a7-9baf-4842-92ef-5fa898177e5f", "sighting--73628dce-73bf-443f-8791-b7a549235fae", "sighting--1f4cab38-09bc-493c-8bd3-e54ba14a9b9f", "sighting--1b63d2b0-f7af-4b87-b853-4dc04502f7e8", "sighting--eb466780-978a-494c-aae9-da3a0824c8b0", "sighting--1f23df2e-6b0c-4b22-96e3-b1fb50f8fbc1", "sighting--33896af3-9049-410e-85c7-4bddf27f965e", "sighting--d0b66a0a-1833-4643-89ce-90b2f17386a6", "sighting--ed5f311e-29fd-4cb0-91ee-d53ab551d357", "sighting--82559716-44f7-46dd-aa9e-332836e601f7", "sighting--ef3e23c2-7377-4d4f-bac7-8af8b2604bc6", "sighting--ce104e69-1867-49a8-a499-96581b8ef750", "sighting--5f41c31b-c7cd-403c-bb74-ccc473534a60", "sighting--ad8a9613-0c8e-4d72-ab1f-f7e8df3c64f8", "sighting--e43ff834-f489-4790-83c9-fb4179c001a4", "sighting--f0f0cb5e-2c4c-4204-bc39-2b3d03cbf175", "sighting--e7c5408f-3397-4343-9f5f-28a3799e25d6", "sighting--fed8590e-1d82-4efd-a924-9ed3748b70d4", "sighting--527a4c65-3147-4b97-abb5-c396df32a2e4", "sighting--069e203f-bdfa-4afc-882e-ecc72588987a", "sighting--94310612-a405-4f7e-9447-8ff6533cd3de", "sighting--272330dc-ee98-4361-abe2-87707ab94459", "sighting--23ef85dc-6a64-464e-8157-ac26ecfe2af2", "sighting--46fb1072-ca42-4583-a6cf-fd066c8dff69", "sighting--b865c892-e0f5-4fb4-a901-a99ad50bba09", "sighting--0fadb365-8b54-483f-9d7b-f272683f1877", "sighting--72e28ca7-a3ec-4e13-b7f1-97b85936f85e", "sighting--eef88d45-e931-4745-9c4b-fd00aa2755b2", "sighting--32949ae1-2e5c-43e5-9083-d5b33479009f", "sighting--7e5c4697-b5e9-4c9c-aad3-1c55a45f6c23", "sighting--89896613-fc39-4223-9a1b-8b6b58e496fa", "sighting--52d9835e-4249-492f-ad29-a9b7c1fa6663", "sighting--5cc3daa2-fd38-4bb0-95ef-0a913c4cd2fd", "sighting--f8911a34-89a9-4d8d-a6ac-3c6981b2dbb6", "sighting--3f8f2ed8-69ee-422f-9984-a5dbe5bd341c", "sighting--cfad7b77-e26f-44d6-a3e6-77a9d8190c6b", "sighting--507a5e4c-a272-4577-8146-1e9653973a24", "sighting--e8e85499-2c8e-45a2-b373-122db9fec690", "sighting--96692f0f-d53d-4cc7-81f2-9b14581ccab7", "sighting--c87bba21-64cd-4f8b-b55f-85756c8d44f3", "sighting--a997fcbe-13ce-4cff-9bec-da4c9e3afe17", "sighting--68a44739-96dd-4f19-b567-345de91b11fe", "sighting--d14547a3-d094-4af0-a61d-cd9dba0eb3af", "sighting--970a381f-f028-4bd3-a6e5-f732ad9163e0", "sighting--18c12201-c192-4db0-afa4-2d536ee5cd1a", "sighting--fa4b00a7-dab4-4c41-ad83-7eeb8aee8e06", "sighting--1be8d5b0-2fa8-42c5-9092-250d676af84e", "sighting--45b167e2-297a-45e6-84a5-92db48ef8f65", "sighting--e862bd82-2d11-4cc5-ab5b-8a875fb57b62", "sighting--af2298d0-c5f1-4a34-9a42-e8d90071ec14", "sighting--35d6077c-9f4f-4e9f-96c7-b7b63c8d5249", "sighting--e85b8e29-9c27-43c7-b6d0-e3b59fa259e5", "sighting--a3ceaa30-3b4c-4b0b-9671-530514a38544", "sighting--16a70bb7-310e-47b2-8106-30a91755a331", "sighting--b2ea204d-8d14-4ace-86c3-cc859d67d94d", "sighting--290fc1d3-3238-474c-bca4-1512b5d4ef1d", "sighting--330cfd89-1b45-45f6-8b51-cadf711c7a4a", "sighting--74c846e7-ad3e-4487-a864-b34ce0dbc302", "sighting--1f21c8e1-b098-4ae3-8df6-06a3937475bf", "sighting--3cba5506-f68e-425d-b823-d515098ab05b", "sighting--b41854c7-6b7d-4fcf-be6c-524357dad35d", "sighting--a082e06f-a64a-4a95-8732-f7839baebe24", "sighting--94b1277b-a520-4b65-8c70-3a2d0f01e730", "sighting--974fcdd3-d53e-400c-b23d-6530bcd819e5", "sighting--7acbe123-486c-4a70-89d0-ba26c74e4da6", "sighting--2c371283-5d43-4ac9-b7c5-74f55b931263", "sighting--d953305e-e2fe-464d-9d61-76e6495f7e95", "sighting--dd43746f-4d4a-4558-9102-d5e83f489939", "sighting--0721959e-d7a8-4941-b669-57b94884e4bc", "sighting--c6374af5-2bbb-424f-b5bb-405c44d06466", "sighting--2c0ebcdf-4d9f-410b-9a60-0656b3c4d2a1", "sighting--9ae34f2e-76f0-4890-bc4e-93ef99e76a3c", "sighting--c5422d2d-c479-4d11-9d22-3dd069ca48cf", "sighting--92b9d545-eaaf-4925-b47a-2708f58a1c4a", "sighting--df741de4-84ea-46e0-a027-3f0f1d661621", "sighting--d08e0647-573e-4f29-9aa8-3d455b5363b2", "sighting--cbc6677d-91ce-452a-8c36-603ea3c4fc23", "sighting--1777a798-0571-4a87-82f1-91187c12b685", "sighting--c8bd4077-7c0b-408d-8c11-81862ec5c8b4", "sighting--3c60e2c9-9a50-4679-a02f-0356356b5b48", "sighting--98d90e94-f7ed-4626-a409-424b43e7ff10", "sighting--ed2c26e2-f20a-47d7-bab6-bff7619d093b", "sighting--a26980cb-2c58-47bc-b6bd-fe69dc617995", "sighting--e25ccf82-5a9a-4b8e-b56d-ae80197be37e", "sighting--4278d0dd-41cb-4398-b1c6-c6533d660757", "sighting--1ddf4729-d8aa-44a2-b6fc-35976b2121ae", "sighting--f160ce12-6517-4f0f-9326-686220990f20", "sighting--20431e7f-8f06-4a21-a014-c51a087db311", "sighting--e6f40e95-4905-4691-a42b-51a129db5c91", "sighting--33f7d740-b004-4911-9302-20ba5391b85d", "sighting--2f003c9e-1fc6-4df7-927f-2217acc9f78b", "sighting--4aacb056-6c19-47be-ac6d-2db0fe61c97b", "sighting--f9ee0472-8b1c-4416-ae29-d679c8e6f795", "sighting--2d4dc046-e782-4119-9bac-3f8d2ade56cb", "sighting--43fe41ae-47f4-48a5-b7f8-1affd5755e9e", "sighting--3e605702-3744-4912-a7e2-74cfb000a627", "sighting--2b53987e-11b4-482c-b0d3-3e4ec983693f", "sighting--4e4a03d2-8ab9-4ace-8cef-9172549117cd", "sighting--73413df4-0c60-48f9-b4af-41a02a9a0719", "sighting--d6618c63-f47e-435c-a52d-1de549250d34", "sighting--3b2087bc-00a8-45ad-9c4d-9e5cd10f8c6f", "sighting--2dc5ec78-74c1-42d3-b5eb-60384a053b3f", "sighting--f6b0e0e0-0983-49d6-8c22-d46078cbf097", "sighting--26b0857c-7f6d-4c73-adfe-dadfc5222a92", "sighting--6f58f188-a555-4ebb-a40f-9b8221b05217", "sighting--38969d51-013c-418a-a11f-ab0db83e801d", "sighting--479c442a-fb0e-4f50-bae2-7cb1e50a28b2", "sighting--1f24fa2a-82f4-44e8-bd77-a4322099ff25", "sighting--4648a56c-7338-4d15-8231-350c37adfd6c", "sighting--ed42a643-f051-423a-9ae1-3cabe9b7e99d", "sighting--ce997e66-fc60-40ed-9db2-923da64dda55", "sighting--6139bb04-c0d8-48c8-a41f-f82eaf45a66c", "sighting--cf7c4d56-5c47-4a2e-a43d-624a33cb19af", "sighting--d39bb344-bc29-4f2a-8989-978834ff7375", "sighting--52b5ad0a-3041-4ad1-9361-4b16aebf48d5", "sighting--a886a6e6-165e-43eb-80a7-1c7857697a9f", "sighting--38076cef-1011-4431-b479-69bbc0e842ec", "sighting--abea0cb9-1455-4190-8f1f-c8069196d9e7", "sighting--a0f04aec-0132-47ad-a610-df7ed56c2df4", "sighting--952d68b5-3e73-4be1-a6af-ecc27bc91273", "sighting--bc207f09-8c79-4406-9c19-c5618479faa2", "sighting--328f8255-6b1c-4172-a168-81acc7d529ce", "sighting--cbbf48a0-c3b4-4f74-b837-d3802d68fee8", "sighting--f574ab6e-0938-49f3-8452-93c048d6dfba", "sighting--d7846554-5efd-4200-8d20-33cdd2bc7853", "sighting--de9bdbb3-8c17-475b-a751-2e49988e5d9a", "sighting--e6d28ad5-921b-409a-997a-f51db8210a1e", "sighting--43c434e3-a15b-49aa-aace-2b23338f12e9", "sighting--7fe1f649-3784-4bfe-9d13-65ad5a1c9271", "sighting--165a5d0d-c78b-4934-937b-2f0d55c4ffae", "sighting--91125ff0-d88b-4115-a18e-7cb9257ce05f", "sighting--129d589f-5f74-44ad-bf5c-fc0bd3e87fd1", "sighting--30e9b800-3443-4af4-a790-c106c0f89282", "sighting--dcf098e6-dcd9-4598-af96-b5cd370d03b5", "sighting--e311560e-e812-4c35-bb61-5e80ceae4fc7", "sighting--bff57800-85f1-4773-ac03-0bf9b77d18c7", "sighting--60e6f15c-7130-4c71-ba1a-7d981259d4bd", "sighting--293e92c1-cdcd-48ba-9d32-05e478ab2024", "sighting--d07ca74f-1fa2-43ac-ac5c-e3c2019b4d0c", "sighting--747d8353-4782-46e1-af47-a3c78673011e", "sighting--83e9489c-5d60-402e-b373-405a1be7a7b7", "sighting--bcba0de2-398e-496e-a6d4-069bc9ac1774", "sighting--8c29df38-819a-4fb9-a296-b7d119fdd635", "sighting--1d1b3031-53be-46af-823d-b9a3f04424c8", "sighting--0a4b5e77-c8f8-4b9c-a4d4-55ea9bf60507", "sighting--64746b57-9801-4f98-9f0f-3460b1923da4", "sighting--32220616-515c-4d99-8621-9cc56ca448db", "sighting--f343605e-c9a9-413b-b770-55d11028d7de", "sighting--968e67ef-5826-4693-9295-e8252ee92806", "sighting--9b015c33-efbf-4a99-aac1-d58b89bd991e", "sighting--85b6fab3-7460-411a-803d-6f82a4bf243c", "sighting--9d5d9650-61f3-4ebb-b7ef-047cc9ff170d", "sighting--5bffdd75-2566-4ea7-87c5-ad41941eb25f", "sighting--36e69d8a-050d-4195-b6d0-c6a459ad95a6", "sighting--f2011912-70de-440c-8432-dddf36e5ed14", "sighting--11276ba4-4410-4311-9a87-64e4522c110b", "sighting--bf1e5be0-b7b7-4766-bf79-1bea5344e9bb", "sighting--4f2e8faf-5744-49cb-a530-ac6b6b560189", "sighting--6d73de8c-6610-4711-bced-741a336e8b4f", "sighting--ffc781fe-360e-475b-aa5a-6561f73cce6f", "sighting--112cad6e-5d8e-4a94-ad74-67405ced9336", "sighting--9d85b365-2485-43f7-bd85-2ed2a40bd50e", "sighting--3567dab2-2360-42d7-ae29-c1cd482f8b25", "sighting--c8378881-631e-4ccc-818f-d619546d5a72", "sighting--7b26bfab-c1dc-40df-8d0f-842096cd06d6", "sighting--847d1c85-eb2c-45cb-a46c-dd433746a429", "sighting--3da9458d-e0ff-4ad9-a7b4-e9723ef410cd", "sighting--bf61e3ef-1a57-4148-876c-cd63becac95c", "sighting--761ff980-b409-4952-8099-ba80901adb28", "sighting--25824614-6d81-4b90-a524-dd4c7d20597f", "sighting--5c9b0cb4-c501-49ab-b6ed-b9ae06c7b632", "sighting--c33ef557-18f5-432c-bce5-46fbf64c236d", "sighting--704a274b-4695-4a74-ae45-a8b59b44ab9b", "sighting--8db60f83-09b3-4a2f-9db1-80c34e7dfa73", "sighting--d89994e3-6ba4-4b1f-a8a2-dc2f0e868c45", "sighting--86527304-b1d1-47c5-a00e-30f47b476d82", "sighting--f947967c-4c89-4fe8-b42f-83b220d63836", "sighting--c0b15fcb-792d-437f-958a-d25149d79ae0", "sighting--db834ea0-0b3a-4da0-9382-73f0243a1c4f", "sighting--be4e7c51-b4f8-491f-9e73-8c528e2072aa", "sighting--2e7a5330-3ee4-4de8-abf0-1c5f3a45d079", "sighting--1c403371-563e-4170-9f6e-79955ca55930", "sighting--06666140-8d01-47ed-923f-11d6d3e1cbc6", "sighting--c7b69dbc-aed7-491e-88e3-1987a6a132c3", "sighting--43053b02-cbe8-443f-bf65-e757dab28a5f", "sighting--073f767d-46f6-4096-9242-03d3c3cd7b31", "sighting--5ea6db45-bc1c-4930-a904-b145f238b069", "sighting--b434b33d-05fa-4478-8ca4-04e1142123c1", "sighting--48253df5-5e04-4e32-b3c3-309fa64a2aa0", "sighting--4830ebe5-a4c6-43dd-a087-25cdd34c3e12", "sighting--530a27af-21ba-4d3b-a783-2c06c378d412", "sighting--6cda3332-05ec-405a-bd6b-035e125477df", "sighting--db0cf4ee-0bb0-4420-97e1-84aa2aa1c3de", "sighting--7990fd61-a0d2-4764-8538-f8e12532f7d1", "sighting--c3f9ef97-2c6e-4240-8a2f-84c1b31a0921", "sighting--eac7d368-7e92-4935-b5e8-caf449652c8a", "sighting--7de4eace-f58c-4969-a129-925a173cb4b7", "sighting--bc7d9fe0-75bf-4aba-87f4-0aa4b18cb1d5", "sighting--a9d6fc90-c14e-490d-9367-56f87902ee15", "sighting--d5adc477-2062-4c16-931d-46a040fb6d8e", "sighting--5d57f151-6131-41d1-b8ae-5a00d2da3d1e", "sighting--ce571b96-43b6-421e-a327-ab88ced636d7", "sighting--0689e95f-5f8c-460e-9d75-790e5b99a285", "sighting--b1da5977-01bc-41d1-9f68-43b0c60b4495", "sighting--fa6e75ab-ad3f-4939-91e9-866ed7382a62", "sighting--5dbd6242-fca5-4387-af58-21e62ee2173f", "sighting--e106003c-f126-4aac-bd3b-c6e8dcd75b9e", "sighting--e59ae078-d5ee-46da-b2c0-6099187dc4ea", "sighting--525e0176-3865-4a28-9cf6-b68a67e3c19a", "sighting--f9d1abdd-9905-43dc-bc00-2f9983e4fa7e", "sighting--54700aab-4b59-4087-b700-500b80cf1247", "sighting--72cb8ac4-b950-441b-bc3e-ac2760e3b3d4", "sighting--c46ba917-37cc-4dc4-8434-be9dbe4b9393", "sighting--5b056e07-6e15-4ad6-a101-e5a266748540", "sighting--1a38359e-81db-41b6-b2fb-1bc62d931025", "sighting--0ce46ef5-e2f4-4c42-acf5-1d2a546cc6d4", "sighting--57fbea62-1fd3-44be-a9e4-d25d8c1ba8b7", "sighting--66f1d1b6-c4af-4778-82b0-faa9e5d3d482", "sighting--320e036d-4ec3-4bc7-8bfa-80e16834a6cd", "sighting--7f89d9f3-0b74-4551-ab62-d381868a3c9b", "sighting--9bfa8c71-7f02-475e-8857-f42487a7cb14", "sighting--408bef7c-6105-4240-b692-95b340c71fa5", "sighting--f6b38747-443f-4ccc-921f-bb731b23591c", "sighting--55918c8f-48bf-43ce-8ba2-71391d66af8d", "sighting--896cb25e-ea1f-419c-b517-a859492c6d0e", "sighting--45911648-1c0d-421b-b536-2d36fff18e90", "sighting--781f15da-fc19-4173-8c89-efff4a308022", "sighting--f7901269-22f9-4715-9ae4-b4413e024fbf", "sighting--d2cdc78e-130b-4209-9b71-a742ab5d76d3", "sighting--5ba4d8d2-1df4-46e5-b438-be1f5a92094a", "sighting--3d533f36-5df0-4b31-b929-fa55341e5f05", "sighting--2847dc03-7af4-4d1c-90bd-a2fc80ac9189", "sighting--e47569f7-8173-4f4a-8454-86d47205ca0e", "sighting--21fb2b63-0f52-4ddb-b267-d4d6b4e41a71", "sighting--2547bf81-fbbc-4872-a590-0e8d650bd9dd", "sighting--2d44a0d6-8a5d-4263-957e-feb3c9ad87aa", "sighting--2b5e0d1c-8f10-4f77-bc0d-8a3e139e8594", "sighting--5ed516c5-92c4-4faf-b1d3-e40f21b5f95d", "sighting--ad759d9b-9aa5-48d6-8ec6-7bf3392671c6", "sighting--08c3ffa6-a0c9-43f5-995a-2bf8f58fc6fe", "sighting--a4096c1c-fe01-48c5-be60-52fb39a4c8f3", "sighting--e3826e22-2480-45f6-8c5b-a542a871d6c3", "sighting--f2666fd8-d48e-466e-aa73-587c988455e9", "sighting--38cee98a-52ec-4344-8f9f-22c57b11ad60", "sighting--e02ebc7b-2c8a-484a-a630-4011913730c2", "sighting--3a806b3a-5dcf-4643-8a1a-2f176fc6c7b3", "sighting--0193a218-713b-4d9c-8faf-ab7c9089a15c", "sighting--707f9727-dc0f-4f97-8882-b356b0d9727b", "sighting--fe4074c3-bbab-4902-95fa-9656a0a0f772", "sighting--46647ae6-08c5-42ae-8e5b-78878a83eb77", "sighting--5158fac1-5170-47d5-abb1-30c6329e5500", "sighting--84edebb0-d91b-45c5-a725-c4b0b036bd2d", "sighting--f2e05de1-5cf7-4220-a453-e23e0c34061a", "sighting--21894fb5-d435-4ff8-8e75-5f4889afebf0", "sighting--e0fcfa0b-3b82-452b-8ebb-5e3436509b37", "sighting--54870bf9-3897-4f59-9076-8084a06374f9", "sighting--b9895d9d-c0bb-4c06-8eaf-03c196b378f1", "sighting--758d9d8d-8e91-499c-8154-830bdaae93f5", "sighting--688baf2b-7732-4768-bee1-0ae14996eedf", "sighting--add4a51e-b36c-4db4-8f5d-92e50f6fb777", "sighting--64f0774e-27e9-465f-82e0-a31b791b085b", "sighting--eb4fe8a2-f3f9-463e-a10b-b53f97295e54", "sighting--b06cea43-9e83-4950-bffd-306cd1bedf46", "sighting--de9c019b-c609-4b37-938f-f2e13db1da26", "sighting--afe72170-81c5-4618-9424-3ab7fd3d002c", "sighting--5d38a6c2-053c-4125-81a1-4330b0b91bd0", "sighting--ab51300c-a093-4b93-9117-5d69bdc673db", "sighting--0749ff3a-16b8-4a92-a9da-622e1e1c7de7", "sighting--02ba4c15-8c51-4f13-b549-e579e6007060", "sighting--b77bd3cb-76c8-4ceb-a6bb-63bf575e9279", "sighting--4f9d6f15-357a-4414-a864-b79aebd99aa7", "sighting--8d0c9e19-4afe-4d44-92f6-13c6246bb36c", "sighting--80336a90-ba33-4f6e-ae29-f96ac0787165", "sighting--8e4ecd86-e83a-4567-890f-23707b12980c", "sighting--746f03bf-c2fc-42e3-9cad-cf58ed8164a0", "sighting--d827d1aa-7ed5-4aff-b111-a3dc00ed8463", "sighting--9ad6f94e-2472-4021-a46f-ab2f0013ed81", "sighting--62665fa5-adfc-488f-af9a-66789811fe37", "sighting--d6958d3e-b420-4c99-b7ba-3675d1aa0cfc", "sighting--2b52519f-6663-4c5c-8e34-09c488ce3ced", "sighting--8fa07a79-3d1a-45bf-878e-f094977ebcb9", "sighting--d8217b9a-d45c-4b04-9176-0fa1da42fa02", "sighting--41e745a8-1969-4274-ae72-b6b036f36367", "sighting--83938963-dc40-4cb2-aa84-67e7ff278f7f", "sighting--2500cf52-1fdb-44db-90b2-51e724bb9f09", "sighting--d83d758e-6328-4b46-96bc-563e5de0d7d3", "sighting--5f912553-8967-4c6d-9dc1-b7b0f0cbcc2c", "sighting--cd6aa35f-b41e-4451-aae7-7d189969b563", "sighting--d4e17073-98e3-4afc-af8f-8b46f60e7773", "sighting--0e34a87e-ee3c-45c9-bae3-32a69885a931", "sighting--2472fa5c-d086-4e5e-a5f8-0beac0fe8046", "sighting--6c72e935-2d81-474b-9f5d-1dd7e10bebd4", "sighting--8903e891-d9f3-473a-866a-2d158d2e8953", "sighting--004c2346-4976-494c-bf53-ff3837439f39", "sighting--e6f64176-2cc0-4626-8de8-f3c7076451bc", "sighting--7dd05548-f92f-49d1-a5cc-74653667dee1", "sighting--e1bb5dd7-8099-463b-a784-687552202d0e", "sighting--ce40b14b-50ca-4a4b-8f14-d8f718086470", "sighting--07e659aa-431e-41dc-acee-98690d1ee45e", "sighting--4c036ce0-59e5-49d2-acdb-e18755d12761", "sighting--456dc536-57fe-4994-bc07-28d2eaa8c7df", "sighting--6a64de2f-779d-428e-900f-73f5aaca656c", "sighting--d0f9291a-8a3e-4e08-9ca3-26a4439cf421", "sighting--048bbfc7-d490-44a2-ae3c-6bb099c60363", "sighting--a78eb7a8-7bc1-4a60-a4a9-cc400fe0411a", "sighting--25c34b65-6097-47fe-b25e-782a2cca9cdc", "sighting--d99fa86e-c3d0-48ce-a1c5-c592419ceb1d", "sighting--7d701250-f8ee-4d36-9b0f-e8f9acd5455e", "sighting--7f62fc4f-832d-43ac-b7df-a817853d22b0", "sighting--087552cc-213f-4335-ace5-a86267d2bfc1", "sighting--48f9e2c4-bb28-42b9-ab9a-ea7695743ca5", "sighting--c50b1346-0cb3-430e-ad89-58305ff69ecd", "sighting--2eea67c2-96d4-4e1c-a58b-1f751588ba12", "sighting--ad499b2a-a8bd-4026-b30a-1e981f865ac3", "sighting--4b39802c-dbf9-49fb-ba4a-117133abd4c3", "sighting--af273f1b-ce0a-48b9-b33c-7fdda3fa8552", "sighting--4631be7f-e23a-4d58-8d14-860dbe575970", "sighting--5d3da2b8-c352-483d-8ace-59a3e6e74ef8", "sighting--cf05f0bc-ffcd-4ed8-a420-ccb64e2e1c5b", "sighting--1f90a8df-771a-4a78-83d5-1d15c110fdbd", "sighting--7f0c6bfe-cd06-46b1-8ba0-7371492979c1", "sighting--17fcb1b8-57e3-4792-b17f-80381ba3de96", "sighting--a64ab477-b0d0-4937-bed2-b97ea01ea109", "sighting--ad56eb6e-1092-44ca-b65a-84041ace8f45", "sighting--88538646-33af-48b6-abc7-789ff38650f0", "sighting--4a3da171-d43a-49a4-9694-7a4336b9268b", "sighting--f4cd53c1-64cc-42db-aaa9-ce68eba52559", "sighting--1d11a3f7-48e0-45f5-96d8-a38055b66809", "sighting--b0bccaae-36f4-417e-9f74-2262cec44c3c", "sighting--bcf2316f-0630-4e90-abfa-630ab3ade6af", "sighting--8d40c52f-49ac-4858-804e-ad64c543b95d", "sighting--3bc3aab1-07f1-4413-99c5-8376650cdd72", "sighting--e1d31c98-b7da-4a78-ac48-c7840d816cdd", "sighting--4f028baf-a1c4-4296-b59c-8d09a778e224", "sighting--0f8621c0-3457-4fef-9461-f11d683c12f8", "sighting--efdf123e-4ebe-4c43-8fd6-8a885db785f9", "sighting--5460f979-218c-4b71-b3ac-f41beb0d4b0a", "sighting--88f752d7-3db0-4ff2-a384-6dc0394a4add", "sighting--4d9abb6d-dde9-43b9-8e18-ece1009c847e", "sighting--d05c32af-3c4a-4eae-bf83-f09e40dabdde", "sighting--7ffdb1e9-d1e4-4873-99e0-514ec67bc140", "sighting--714cfc75-8f72-4b0b-9464-0b9da16ce21c", "sighting--f0486138-b38c-48ad-aa8b-387614342f99", "sighting--094d3178-25ba-4829-85b4-b1bc05dfe7bf", "sighting--bd6bdfb3-3dd9-47b7-9238-727216fc53b3", "sighting--7f041ca4-9f80-4bd3-8e4b-fc4104aa35e3", "sighting--201dc4b8-6c45-44c3-9d46-93a4d44d2097", "sighting--ec99d589-0357-41bd-a27c-89ff561035ca", "sighting--33dfb704-9048-47b4-ab2c-632f06b1bda9", "sighting--2da67be3-96a6-4268-96d0-c7f9459cf09d", "sighting--1e75679c-4a2f-4f15-9d1c-fa192073fe5a", "sighting--ecb6d87d-9bce-41aa-9e8a-0615702f332f", "sighting--af75a694-bc03-4c9b-8396-947ae9272bda", "sighting--a464bdfa-2f5f-414b-a8a5-f07793532b33", "sighting--918cfecc-d4b5-4bc0-8414-5f6b242c43cb", "sighting--ff0dba7e-1cda-4c54-9562-23bc6d196a70", "sighting--886fcb3f-cd43-4d2c-bb58-daa497abc267", "sighting--15286420-cecb-48a3-b86c-d0740f06d4f8", "sighting--e7a2e5d1-27c1-4bc7-aa25-a8d9a8f3c218", "sighting--c7541551-a7e1-4579-91d6-09ffb0cecc26", "sighting--91649549-9f0d-40c8-8dd9-98018ca58904", "sighting--a66dafa0-5f35-4385-899f-b79dac630ec3", "sighting--2284999c-7142-4a70-a6fe-0d241b329b17", "sighting--c4d29d8c-76dc-4ba6-8eea-a69f7fd25d91", "sighting--aaa7d16d-7667-49cc-ad07-f866ce53af53", "sighting--9fc1d336-a478-4e62-b286-ccb6f612105a", "sighting--3632432f-5948-4856-a8fe-3cd177c470bb", "sighting--7c677eb8-d7b8-4d9d-8151-4880592e4058", "sighting--8b7b882e-dfca-4d60-8a78-4e0f155cc36b", "sighting--a5341706-862d-456a-8cf6-2d907058e34e", "sighting--9c934fe5-2730-4c69-a3fc-c85ef28e9375", "sighting--e2ee00ee-e64a-45ac-9e5b-c5e01a7ead77", "sighting--9fef88ca-0e3c-4d93-84b0-bdf721da844e", "sighting--0bfe4fb9-548b-48b0-9554-d3ed913f1d65", "sighting--d5810388-6b12-4f19-a51f-72d87ef6c42c", "sighting--41baa70e-2a41-4037-87c0-7cdd7fd578aa", "sighting--eec2c479-01ed-4c99-b486-0872ec802226", "sighting--3bea7633-f670-46af-ab68-6489a88e15a1", "sighting--9d98db5a-1bf0-4e5a-b1cb-0a20c9808948", "sighting--e8aefec2-7e20-4b1b-b905-76d555c8fb00", "sighting--3ef719b0-9be5-4a94-bc97-cddb7671c809", "sighting--ad67c360-c70d-4721-9b06-e306d5d91992", "sighting--5a482c31-18f3-4dd2-af8e-2c958904e1f4", "sighting--edb80856-16c4-463a-8022-daa07c36f987", "sighting--99ada51a-fc09-40ae-8555-125526a268fb", "sighting--bce80610-b845-4d8b-915d-d89536545fbd", "sighting--c48cb1cf-7b92-4687-a528-cafcc1146bc0", "sighting--6a5d3b97-632c-4a90-9790-4e4ca7aab289", "sighting--723d392c-bfcf-4d7c-923d-bea729ed742e", "sighting--ed5fe92e-c171-4639-b8c7-9d4186adad68", "sighting--a744b625-33cc-4955-bcae-1c3e22899f27", "sighting--bc42f9c4-dba1-47b1-a6af-c0b1183de882", "sighting--0b1b65ef-115c-4e41-90bc-acf3dd397593", "sighting--618f2f45-9937-4c51-85cd-8df3ec366e0f", "sighting--1096862b-1642-47c6-aca1-f83fafbfb389", "sighting--bfa37fbf-dab8-43ab-bff4-6e23a3d2f484", "sighting--cb9cf06e-967e-4b59-9089-715cbcc73fb4", "sighting--dcb4fece-3c9b-47a3-ba27-eb5acb02d9d7", "sighting--53488337-c87e-4106-b50e-53fa48972a9e", "sighting--b8e7c6d8-3821-4e5d-88f2-1ca1caa442c0", "sighting--7229345a-0d1e-4480-a3a2-738d920d624c", "sighting--90b09e82-381a-43fb-bfc1-c9d52aedfbab", "sighting--b3da5119-f7bd-4e86-93b9-0e166192dc35", "sighting--69d3d32b-b47c-4ffc-94f7-d80138e6d279", "sighting--c588e35e-7cdd-4ac4-9dca-0d2923c5d10b", "sighting--e0da8145-2bd6-4c27-b90f-547d17fc0321", "sighting--165d7b24-e3d3-4d88-8883-26234c036808", "sighting--e96f72bd-792f-474b-9c4a-759c76aff856", "sighting--f649cfa6-d7c1-4f06-a87f-9ccd6f5511da", "sighting--2dc6143c-3f8b-4f4c-9f96-bb2b876f4a22", "sighting--b08d762c-2596-4e2c-bedf-6976cceb04fc", "sighting--6bb747e3-3bdc-4774-a1af-6723b965cf2f", "sighting--9c56107c-fa0f-4aa6-8f30-ad508005bf23", "sighting--e9556a02-4444-48cd-b10b-d8679bb0e670", "sighting--f3ad9fcc-2b6d-455b-9e88-69d2e7d6de5c", "sighting--ff680625-4e3f-462a-a2b7-753303f3eb1a", "sighting--251b1469-cf38-4131-816a-3f7822acaf21", "sighting--c2f463cb-7e9a-477f-9dec-cefb6f42d9ad", "sighting--956e27f1-ac2b-4f9c-9b7d-7a7ae16df3f4", "sighting--5f07f7eb-d6ef-4c3f-b7e8-8baeb848c2be", "sighting--d49e4083-e1fa-43f4-a322-3560ac0d18a7", "sighting--eeac50aa-0d3f-4b9a-ada4-f390db31b765", "sighting--96a520aa-de9b-4930-9cb2-49a692f1ad2c", "sighting--3025ff2c-65bb-4288-9f27-54abb6caefb8", "sighting--42c0bb12-f78b-4c72-a7dc-29130d8dc9f2", "sighting--b2e49df4-357c-4dda-bf40-8e0855acbfb3", "sighting--03b91d83-681e-4026-894c-addc8346dcd8", "sighting--b25298cd-401d-4dea-93cd-6810eea18d20", "sighting--15665d7e-7978-4e99-97e2-ed1161ff5535", "sighting--672692c9-db5b-4384-96cc-b833e522538d", "sighting--208271a9-590e-4c10-b27c-2b43c7631d82", "sighting--9865e190-3149-439f-a0b7-d16fed0ee6dd", "sighting--c75d2ff3-1949-4460-a9af-63668980683b", "sighting--66dd631c-c7a9-42a0-871f-7bafa0c69b6e", "sighting--8aadee2f-7de0-4c07-88ca-2e70a64c8f4b", "sighting--2ad90aef-32e3-409b-961e-f3a442738aed", "sighting--17e785fb-267c-4b64-bdc3-da377f225ee2", "sighting--ffb3b875-d521-45ab-99c8-64a8aa874d5f", "sighting--b9bf438b-17bf-4ac2-8e7b-cf802010cb36", "sighting--e0e5cf06-bfba-4550-9279-ebb23c8e5d06", "sighting--d0bbe03f-7642-4304-b5d1-cf0bc219a9d7", "sighting--28d87a5f-86ac-44f0-bf01-6352a04b25c6", "sighting--5163ee9d-31bf-4640-b701-728aaff00c3d", "sighting--993bb6b7-e368-4b53-bdbc-a995c46f1c90", "sighting--554736a9-1592-4576-9fca-e72636a9c98f", "sighting--4f435b56-648e-4f93-bd43-b42b44ffe384", "sighting--74b821d3-7fd3-42cd-a832-31c3dc36371f", "sighting--c26d80b2-4f79-4fc9-b364-57d9e91e22fb", "sighting--2a0c7279-fd0c-49b5-9889-6546ab3f57cc", "sighting--7c7a360d-47fe-4172-860e-50f3e63ffdad", "sighting--ace1bd5b-45c6-4932-9196-fae32b211015", "sighting--9647eeeb-9abb-4e69-abfb-ffc25b3323f4", "sighting--b3c8d191-4586-4923-bfa5-2da168796852", "sighting--fb34bc64-721f-4a88-b260-d1ea76c5967d", "sighting--6d9ddb03-fe8d-4ad1-a62a-d6b9d9a85dec", "sighting--2ae424bd-dfc0-496a-b4a0-9911b06afcb4", "sighting--a02f3754-b367-412e-bf6c-fc2346383490", "sighting--ae0d4137-4757-4b39-ba7d-6651d0660c70", "sighting--a1de132a-3914-4ad1-841e-cc0780fb799f", "sighting--07ac9784-26be-4928-a542-215c872836b5", "sighting--ee114b39-7d67-4525-950c-618d45714de1", "sighting--ada645b2-e954-4ee9-afa8-5141312d5837", "sighting--79f058c0-ac90-41d8-8f5a-f009f9b70f2c", "sighting--dbb64c1f-0924-42e1-bd70-93b96d4aafa3", "sighting--0a7d88d6-616a-4a70-8e7c-8ff9372d26ac", "sighting--469e778a-e468-4514-b425-318ff6247ef6", "sighting--a71b5c01-be55-4886-9569-12e075769110", "sighting--019523b9-393b-444f-aa0c-1f57175f42ca", "sighting--d7ecdeb9-a8a6-4679-b818-604457aa1327", "sighting--bbef4482-e583-4fa4-b2f1-7e0cfea987f7", "sighting--7e3352a3-6d82-47ab-836d-afd65e4e58ce", "sighting--5c3969a2-535f-403c-81d3-b6accbf5c401", "sighting--0e549940-512b-4cb8-84f9-8c100c0e8755", "sighting--d0cfcc0d-739f-4909-8b91-badc8213b033", "sighting--8c9610fb-339d-4d84-8288-5baf7f34510b", "sighting--599f5d68-1838-4c69-9ee7-82044d13756a", "sighting--050cb085-1994-47b0-8434-21e97420a5fc", "sighting--237eceb9-0ffb-498a-9bbc-d43e0a585cab", "sighting--340677f3-f300-4a01-bc9e-74e81a3519ed", "sighting--7061998c-68c6-40b4-b39f-e433b6a82e87", "sighting--7c73c15e-e6c8-4b93-b6ad-f64652fa1138", "sighting--49296454-f446-4b82-b7e1-9588bf91740f", "sighting--b7caf336-3848-44f7-ada2-54f028aff20c", "sighting--484780c7-b138-4539-a8bc-059891a28bb7", "sighting--bc2cf1fb-505a-43e0-b527-4e1ffa9e7900", "sighting--3ac2c64e-7d57-424e-971e-279283605546", "sighting--2908fc30-3118-407f-a899-73e6136d9693", "sighting--a631c643-b5ea-427d-914b-9eb45b67b008", "sighting--4a1d4b3e-481d-4ee3-acaf-14bd839bb673", "sighting--8f19c581-feda-4c92-bcd1-9d0246154383", "sighting--877b7da8-127f-4c6e-b079-1dc6a5b0c94f", "sighting--c8f68fb1-3969-4aa5-9f8f-4ccfa5e8cb81", "sighting--ecff80f1-c35c-4345-9504-f7771735e4a6", "sighting--c185a8ba-1933-450e-a24a-a71d61d0119a", "sighting--742817b9-fb37-4765-8dca-0d4d88ce0128", "sighting--db4f410d-bb6b-4176-ae51-7877a8b3dab3", "sighting--72e751e7-b872-48ce-806b-cdb7dad9beb4", "sighting--cd33fbd7-94f6-4e3d-bc89-8732efc1c365", "sighting--4c74a923-ed12-44b2-bc78-9a59082319dc", "sighting--522aa050-8f41-4399-b5a1-381b05abe5fc", "sighting--5c3bfe6b-2eb4-4f67-8c78-22309662e8e0", "sighting--cb33aa8b-a460-4960-afca-2d81e567e353", "sighting--5a2cfee0-a701-436f-9670-abe0fb23b833", "sighting--4b41107f-1f53-4788-a005-2f2a319cbef9", "sighting--3220fd5c-f14e-454d-b5e7-cdeec51feeb8", "sighting--996239af-b760-4a62-8d1d-31f08ff23735", "sighting--ab2d2a4e-d219-4138-84dd-ee2dbd348a0e", "sighting--60218667-7674-4d62-98fb-c091d21fb4b0", "sighting--d5bafdf8-8dcb-4743-ade9-ddfb5216d7f0", "sighting--215d1296-7e20-42cd-91bb-5192746d2a21", "sighting--cd87276f-2a7d-4bd2-a25b-cb2543399eb7", "sighting--80ead5cf-a009-46b9-9c17-30f975a61720", "sighting--65e0c59a-e5a5-4551-8cfa-3e8f7190256b", "sighting--09aa931d-0ff5-4774-a857-03f026a7e390", "sighting--85518bde-fd2b-43cb-88e8-0c8b1cdbe0cc", "sighting--aca90f21-84b5-411f-aa59-7ad162af536b", "sighting--10e6f593-1e3a-4883-a7a2-2c0054d40e70", "sighting--09caf4ca-6edb-4fef-a179-caf8975321cb", "sighting--82dc6e40-8063-46c8-b580-17b9c6335461", "sighting--3e26f597-5420-426f-93d5-2e78f2ec8613", "sighting--696f2065-ca2b-4b87-ae2d-e6377d197115", "sighting--2992e80a-7b7d-4bdd-941e-697fa7b58caa", "sighting--bf7934d4-8f0c-4dcd-a35b-3d855691ee50", "sighting--7fc432fa-f675-4c1b-8e7a-7526c430befc", "sighting--926f383b-d706-489a-8457-4d2b4ec3ca11", "sighting--a24b5708-9b10-4e44-97a9-0e7148e8a8d2", "sighting--10130e5d-06c2-4275-bf55-5efa123ee6c0", "sighting--009885f5-ca8b-4671-bda7-a8600bdd9b4b", "sighting--e966ab4a-7795-4c6c-aded-84372df66535", "sighting--ef982ec9-16e2-4ed4-86eb-1b2791af62d4", "sighting--24e47d64-2cb8-41d2-b2ce-48b39518b4ab", "sighting--352b104f-9256-44a8-bf05-696238139793", "sighting--0f0b6090-0fe8-452d-ae5e-fd8f41b1cdfa", "sighting--7031eba2-5b3c-43d2-8b3d-141d852e32ee", "sighting--607135ca-1a51-46e6-b185-48bb0f070963", "sighting--b70217d7-6154-44e2-9483-2b605c965524", "sighting--bb8ebf57-9ab3-4923-a75c-32e2579fb2b2", "sighting--5b68d5cb-e1ea-483c-a7cf-dd080fdc706b", "sighting--e55a4454-e00b-4dd1-a55f-ed53db83852b", "sighting--5495d3fc-2809-4739-b0a6-f31808b89ea1", "sighting--4512bed9-1a96-41c1-b6a1-96770bebeb00", "sighting--1f75a3b5-d12e-4e40-92ae-f1bace9ab4c4", "sighting--e4da55c6-40a8-47b4-a468-232a093e5862", "sighting--71379e35-bd58-4599-927b-0fea2f1a19e9", "sighting--0993ac09-e657-470d-8be9-8703d380f842", "sighting--c0128599-50d8-4df3-bce3-18c3032d8cb7", "sighting--b2105c38-6f89-49a5-b6e3-34e06564fbe1", "sighting--8111d04d-7630-4c7b-9e85-4cc1c71d74c7", "sighting--dd6db52b-75e7-4ce2-a675-b4f95482c557", "sighting--e7a3c8d0-39f3-4557-9aab-5fc953d767d7", "sighting--6e551859-99dc-4cf1-9c98-641b3dbbbc6d", "sighting--00fb4134-0d6b-4755-835f-91664eb3405b", "sighting--6b02fcbd-e61d-4a28-b80a-0107b630e7e0", "sighting--5f7654f3-7450-49c3-8bb3-2ebb2d86a335", "sighting--fd42d4be-c187-4db2-af43-d26ebd0813f7", "sighting--740ce8c0-f9c5-4d32-8a4f-059f1b16d609", "sighting--dcc10cb0-6874-4707-a4f2-6df4f31fc610", "sighting--88f11144-852f-44b8-a36e-ea20ac5f7eb8", "sighting--56515f6e-36aa-43b1-8de6-d230942f37d3", "sighting--e0c6acdc-7f26-4b56-9e9c-5a652f7aa263", "sighting--55e4b613-8249-45db-b684-e03507bae3f3", "sighting--d6462f7d-bf24-4346-a7bf-fd7dc1539334", "sighting--65da83d1-1eb1-4840-9ee2-e6eee2da7eb0", "sighting--7a34929e-5371-4655-9e64-87fa6978530d", "sighting--45f0348a-7f8a-4b3b-8832-1a7bed1e1042", "sighting--2004607e-e81c-44c3-aa71-9f024111f1a4", "sighting--625c7b69-38c3-4cd7-8f41-1e567fb2bfec", "sighting--b69b42f1-0172-4517-a68d-f45803a0e95c", "sighting--ddf67ae8-4562-47e9-a44d-a05442097e95", "sighting--96002526-46ce-4921-b327-5bb5aa87335b", "sighting--dab328ce-6002-491c-83e7-cec90dcdc6dc", "sighting--473aa027-3d72-4f79-bff0-d639607a4ca7", "sighting--9cc43901-7785-490f-bddd-edd35781a754", "sighting--26755815-e9b5-43e0-b0b8-d8c2dade3eaf", "sighting--2d14ccb0-d5aa-4dd7-8878-e64fb70f9156", "sighting--abf4b876-0ce9-4e3d-a98e-22b0b8b13533", "sighting--14e0c293-33e7-4125-a256-a0bd4026de87", "sighting--78803c44-f00b-482c-8d6b-99111318220b", "sighting--7c6e91b5-116a-4b94-be1e-ed53d6c2ec9a", "sighting--c18c2641-e7f7-4436-bb3c-1be6f315d675", "sighting--0f48c60c-e76b-4607-93c1-4adc58c47e2e", "sighting--e2429291-d9cd-42a6-a516-2b37486c6f40", "sighting--129255c3-b495-4947-a2bb-0e38849ff1fa", "sighting--fa553f1d-9507-45dd-b098-ac2700d5ff23", "sighting--6f6d799c-de82-46b0-9688-b68bdac06b97", "sighting--08b789d4-8db0-4b42-8934-5a89d6ee3a60", "sighting--1e4d8ebd-2615-47bd-a8ad-4d57738aea19", "sighting--f0087435-31c7-4534-ab4d-7a2d80133ab5", "sighting--7c996ea2-9ed2-40ce-bfc6-9d5c5ded9ac3", "sighting--f1c23b5e-b259-4754-bf1b-7c330f244bff", "sighting--00c7d495-a840-4125-b6ee-a4818d8f4d24", "sighting--2f2a3ebf-2796-49a2-a090-357060dbb8ab", "sighting--05c70170-fa04-48f7-a80b-6a1cd08bfb52", "sighting--7bdcf2aa-4054-4216-ba57-0a8588303569", "sighting--066f50d3-e48a-462d-bf0e-cd1554039afa", "sighting--815d2a44-ce8b-485a-8c1c-645cf9e7863b", "sighting--feea3205-a7ae-4595-ac4c-0df33c6ddf71", "sighting--d956106c-15bb-4ad0-89fa-2d3b9b02a52b", "sighting--12aa23ca-8163-4ad0-ba64-91f7f0753570", "sighting--7783c007-87ef-453b-90f5-3b0ee76abf19", "sighting--4ffc824e-0ddb-48c3-86a0-94759644740f", "sighting--9384d292-5763-4efe-971f-e2b3342ebf25", "sighting--ab2e3035-592b-43d5-af2f-e43dec0843a3", "sighting--b1ea1a37-b980-4a20-a2eb-528499d0afb9", "sighting--8920d8f0-c251-4e54-b8b1-de451ef8b605", "sighting--a985b385-b119-4a62-885c-a568430e91b9", "sighting--b660d53f-c486-41ca-a4bc-3eca60cba6c8", "sighting--4c889c46-6795-46ea-9c7b-0ee9fb67d957", "sighting--d18a9f09-d68b-48bb-99e2-a6b1afb454f9", "sighting--d9d57a45-fcd0-4810-a674-cb06e2bc1689", "sighting--4253703e-7b60-49d8-bc91-7fef399abb71", "sighting--327b2b10-b32c-45be-9a40-ba51ed1a5df4", "sighting--915f5c5a-e96b-4e0a-95f8-1fde1bcb7a67", "sighting--b8e32a2b-dc92-4d96-96bd-c4c6ac17f174", "sighting--61fa5009-ec3f-4c12-af78-ecc40dcee856", "sighting--f1dad360-842b-4e1b-b216-94f4fa20d306", "sighting--c47bb82d-ee1b-43b9-a8a7-bf5d2a479cb7", "sighting--4b1f4e8e-f6ba-4b7d-bd47-1bbb90cf17e6", "sighting--194bb6a5-a542-48bd-a69c-a8d8afa4ef02", "sighting--273a779c-f76a-4d63-ae55-0be5a25de49b", "sighting--41b47648-83ad-41ec-be8d-b097324fd46c", "sighting--1d037ef3-bca6-4e80-a156-077e3d71d98e", "sighting--f4afa27b-42c4-4eed-ae5b-0051cdf8819f", "sighting--5c323f51-8ec7-45fc-8fc4-0b30ee52f713", "sighting--dca78515-0d67-4aa1-b4b9-c1987484654a", "sighting--6a9b7c4a-d827-44e2-8ae7-1f099f668ac3", "sighting--72af4b30-35b7-4c43-b65f-40322bc0e63a", "sighting--2f096bea-ffb7-4d9c-b967-48a5a976cc46", "sighting--d3e2ea63-fbe8-4f37-bc09-04c2b32aa60c", "sighting--4a453403-6b82-4bdd-bc30-da29434f06d5", "sighting--f47db27a-d9ec-4dec-a084-3154898350f3", "sighting--23938e7a-7f6a-40fa-82b9-87d29a1648ed", "sighting--706ed02a-8613-4d48-b577-1669b30b5e6e", "sighting--8c867041-177d-4e5b-b6a8-ca31dbbb63aa", "sighting--d311187d-fe8b-426f-847b-4ebaf1211da0", "sighting--86cf50e9-f2fa-454b-9f89-22b659cb70b5", "sighting--5ea06243-dd19-4d58-a81f-a1e60e1f180c", "sighting--a8da9daf-d603-4374-ba99-6d1d245045af", "sighting--c0ed76f4-52f9-483c-bcdc-29f0eeea9733", "sighting--f5f9b397-9bc3-4111-90bd-2f91d7a1a290", "sighting--3b9c7ea8-3ae9-4499-9032-552b4dfaf678", "sighting--9f091650-9e22-4846-9972-a8b642956cae", "sighting--67d20e24-86bf-48c0-adc0-330b43290560", "sighting--f988f133-a87b-4826-ac0c-86bfa168d3bb", "sighting--de42778c-fac7-4d86-a079-f914acb1de4a", "sighting--67426e89-ed05-4228-b48a-2fc23ee7375f", "sighting--e4ae5383-669d-4da4-97c2-62f5c77dd670", "sighting--7b3439f7-8fca-48b9-b6e8-addb0b6c8a6c", "sighting--6e1be9dd-c96a-461b-a9f6-0bf99c91f216", "sighting--3bb8d876-2580-4603-9191-dd163ff620ae", "sighting--a247e066-9ddb-4474-8c79-565533a94a31", "sighting--b9d81944-9e3a-49c5-b8dc-901c199790dd", "sighting--dac85860-bf87-4057-a407-33ca4c062efb", "sighting--6d34cc9d-ddce-49e4-9422-f9db25dc7514", "sighting--f6836f33-d02d-4ba8-941b-ad8075731461", "sighting--567fddd7-aa79-4bec-9432-fdb76c18b8c1", "sighting--5fcdda2a-777f-420b-84f5-b2575d7834f4", "sighting--0a740c22-ba3a-48dd-a13f-5f93b17cb34f", "sighting--e21fb95f-1b64-4277-a212-12f36fc9ee15", "sighting--b729a7be-ddf0-4846-b89a-697b5c3ca072", "sighting--594a425a-8d5f-4192-a559-0b8567017a8b", "sighting--0e01dcd2-d5b3-4c8e-b230-53fd7cc05bea", "sighting--4dcb87b2-c05f-411e-84b2-bdac35eb1708", "sighting--876bec91-13cc-4a8d-96f5-2f081c03b15e", "sighting--186f79a0-fff4-4332-af8e-008fb000db12", "sighting--6d0710a3-668d-4d5e-a6da-b9a10b4e3619", "sighting--04a612a9-f991-4041-98c7-71a9068d8e06", "sighting--9435c073-c805-45a4-a005-db761849e8f7", "sighting--7c86a271-a5dd-463b-9076-0e0162d801ee", "sighting--22120b48-7aab-4b88-becc-c491a81b1fb4", "sighting--e026b354-548d-4fe8-a051-1bd63ed07ce0", "sighting--25739f9c-d22c-4020-af9e-bb4ff60aa851", "sighting--570a9587-40ee-47b2-9c43-0abde480d8e9", "sighting--76fc8453-4aa3-419b-be31-2c801e594123", "sighting--68189004-0669-47ed-bba4-d471bc2a76ba", "sighting--2e1767b7-f996-4d90-b71e-2bb6079fa9dd", "sighting--d171deb2-41ae-40ac-81bc-7179093f92c4", "sighting--7bd422cb-d488-44cd-89c8-eead1a4b1c00", "sighting--001d541e-2765-432c-a0b0-ad5397a8289d", "sighting--4a28ba1d-e1ab-45f7-8153-ef5f81ed1bb0", "sighting--47298956-cfe0-48e2-ae71-2d25edfd2036", "sighting--887e3f5e-0e2f-4678-802c-83c67c7eba27", "sighting--62341fb5-354e-406c-8fb6-fbf14336cf59", "sighting--a853eca6-689e-47e1-9b3e-f81d2263a227", "sighting--3cbfbf79-ab1d-4b9f-816b-0edfb57ef522", "sighting--7f2faaef-e93a-4d23-8dc5-603f69a6bd53", "sighting--cb02b51c-cf63-4b07-a425-e51b40521cbc", "sighting--e5288a54-30ae-4e82-a391-4ff27c9dc5c5", "sighting--4d5dd3a2-66fd-4e74-8213-955929c7aa5b", "sighting--2b396adf-78a9-4953-9da4-50b06a9ffc68", "sighting--caa73ccd-018f-435a-960c-8b493e96f77b", "sighting--d03db8a5-ec38-4625-8e8c-1d15ee759c25", "sighting--80626901-bdee-40dc-9ceb-3631b5cb2ae6", "sighting--403e2bd2-b187-4c79-811e-95531e8cb17d", "sighting--996cedca-59e5-4617-a877-624222ebec7e", "sighting--b4a2a3c3-5ac6-4271-ac94-b899d7695f08", "sighting--7811c5a0-62f3-48e9-b8e1-1ea05a72d44f", "sighting--f3e19031-e042-4d69-b166-d475190db229", "sighting--906d8c31-43af-4c48-8b17-79ef69d79f03", "sighting--9532e24f-8946-4b14-97d3-d44895c882a9", "sighting--5457759f-b50c-41a2-a84d-a67ba35f3113", "sighting--3e65b07b-3c4b-41da-a935-226964401abc", "sighting--3f6a346f-1a64-45de-ac34-1b81354a3606", "sighting--98748a9b-075b-4973-bac9-ae3c0edbad83", "sighting--fea022fe-91db-4959-a47b-96e36bed61d6", "sighting--cc47749d-0963-45cf-b151-4e332ebb8f9e", "sighting--8b6cc60b-b2b9-497b-80c1-b637812567bb", "sighting--4904fd85-5e7d-46d1-9695-d9052849c804", "sighting--c1c4051f-9387-4247-8141-0739b02b959b", "sighting--912ae15e-0843-4de0-8bd3-d943cd8e3921", "sighting--e211aa67-3282-4e2a-b300-6c515366f10c", "sighting--278bfc73-866a-4f68-b76d-e9a8f5c7ffe2", "sighting--41b57841-a346-4dd8-9eab-746d1049edef", "sighting--f58f1525-b66f-499c-83e8-f31c5e23449b", "sighting--fcce9ff3-b339-40e8-83d9-30e6406ae1cc", "sighting--e15f2e78-40d8-4a23-82f8-425a414644cf", "sighting--a795c40c-db05-42f6-bbf4-a7c24dc2b59a", "sighting--e15bfe5c-06e0-4093-acf9-630c113b01aa", "sighting--02f0541d-e041-437e-baca-eae47073c36d", "sighting--e13fa58c-f2fb-4df4-9491-e2de06754076", "sighting--30cdc580-fc4b-401e-b166-f6cea14bfab8", "sighting--59f20a32-8208-4fb5-baef-bd8069ab2de5", "sighting--53a1194b-266c-44d0-b648-75452cacf3cd", "sighting--44b14684-1898-49ff-92c4-c67ea5bb6891", "sighting--9bbe8559-bc1b-43f8-83d6-ba2cccd97ad8", "sighting--a5291dfb-8972-465b-83e4-b4d20411d985", "sighting--53dfb2c0-6337-451c-abb3-1d1d81e17f62", "sighting--616d63a0-a6b3-4091-aa05-639da52a2bb4", "sighting--755ec3ac-8ad3-41e4-ba58-eb35dd78d6ff", "sighting--e2b84fd4-3915-4a93-b11d-a622d715c3b3", "sighting--ba5f1a0d-02a8-419e-bd31-5f1bce4b6321", "sighting--b9858032-f577-4686-9840-df5bb0a6c289", "sighting--17a37358-16e8-4dd5-b2de-de3d2bbf385b", "sighting--516ba6a2-6c01-4142-ba00-feb3fe9561c0", "sighting--4f317f90-aba0-4049-885a-7669fc9a2aa9", "sighting--61419841-21be-4b40-8ee5-9bbe90f2429c", "sighting--d7aebe4d-4134-4774-9854-21ba5f2f19e4", "sighting--54399d19-b3cd-4c75-ae78-be0c5132867e", "sighting--2aa6f78b-066b-4ab8-8152-d63b4c3478e6", "sighting--e2725b38-ff7c-4ff4-b06a-7c3ffa5ce282", "sighting--c2305b77-3a9e-493f-9c8e-418b2b51e2f9", "sighting--0e5b74c3-e48d-4b48-a117-fd21adbb8936", "sighting--e751eece-5236-4d98-aa74-e3a4479b9ceb", "sighting--4ca54fda-d166-43c9-9fd0-7052da0d0531", "sighting--43d00347-7915-4dfa-b1df-0fba168e127e", "sighting--34841cde-9fc0-42c5-919d-9898ba3dbca6", "sighting--00584684-22fc-474e-92bb-8bebf01b4522", "sighting--f097eb9f-74b1-4c1d-901e-b83f9198a4b5", "sighting--39a582f7-3e14-4b06-a26c-6b8f68813a82", "sighting--3c884bf2-af47-47ad-8699-1c785642a980", "sighting--c52c92f6-ef14-4394-aa51-0ad1130117a9", "sighting--0fa38cf8-0405-4b07-aa0a-8a52bff2f8a5", "sighting--95034ca5-4400-4c0c-9da9-ee2c6de164dd", "sighting--9abbc99c-19b4-4f96-83df-7ca99dd804fb", "sighting--fad81c76-f756-434f-8270-9114d7ca20ed", "sighting--6bf0adab-807e-46bd-a229-106937b46092", "sighting--fc4f23e6-5020-4e1f-b34c-3a9fddca3faf", "sighting--5b3bc73f-e29b-4c53-8e31-5a911cdde681", "sighting--ccb62db2-6cb1-4ca0-a943-013dac777601", "sighting--2ed15b64-536d-421c-8d56-9a4a55be8780", "sighting--8ddd15c7-b6e4-47a3-9f94-d0c1526561c2", "sighting--0d3f5ac0-dd56-4dc3-bff3-a17b6ee74a5d", "sighting--dee8b5d8-cb2d-4cda-80fc-284b4ffeb7a1", "sighting--83c46e2c-4323-474e-b684-fbe4f7098325", "sighting--f1c85f61-a06e-447e-a96c-f31ce0a99488", "sighting--2fabde86-2d76-40ee-8b8b-a17b417925fd", "sighting--702e163b-7c1a-482f-9625-3a09dc0661dc", "sighting--4085a299-3a67-4678-b5d1-b6adfd98eea5", "sighting--e91a4d44-053f-4e77-ad98-3f262e4407e4", "sighting--9017127f-bed1-411e-961d-f30c3786353f", "sighting--60da736c-1a6b-4ee7-ab95-528edc098ffe", "sighting--16ef3164-adde-4afb-9fd7-07c542f12159", "sighting--a1cdfb04-dad8-4e1e-a0b4-dfd58d04aae1", "sighting--b393e617-0005-44d4-b4c6-dd0c12bed739", "sighting--32d9c071-a4ec-45ad-a861-e6f1b1dffdc5", "sighting--6587f41e-6145-4013-a61d-1bd9cc74b7ce", "sighting--1001ceec-8804-4645-96cd-e5f0112ef5a7", "sighting--f44e1105-e38a-4807-8b6c-e1198e45ce26", "sighting--2a98693c-3229-4577-93fd-f371e254502a", "sighting--aa21e72a-91c6-44cd-a1a0-8020e0fee3d8", "sighting--fc6262c4-8d26-483a-bada-da630e9c0be6", "sighting--41609bda-c461-4eaf-beff-c13af0963dce", "sighting--a39718e1-874d-4b0d-a0be-0b6d56d303e3", "sighting--fadb4a18-4553-488b-a7c7-441eb9706ca7", "sighting--f73b8ef8-d858-4faf-937e-5a25f5b2fb24", "sighting--d9d4fd38-2712-431c-ba15-d904350931d1", "sighting--f57340fe-cee9-4cab-9d05-2d5d1593f592", "sighting--8ac8b3e0-0c80-4049-a62a-c8bcce7d695a", "sighting--1493ecc1-af5a-49c5-b794-a78d4ed7d83b", "sighting--d399f159-202d-4b3c-8d54-5ac05fc7c903", "sighting--ddd834e6-f8b4-43c8-9011-31a8fb06096c", "sighting--2baaf811-e438-46ac-b9a3-7da28ac457d3", "sighting--62579f30-b3cf-4c57-9aed-f65977a2875d", "sighting--ea473831-4d24-4bbb-90dd-59641bcbf058", "sighting--22e9c388-66f6-43b4-b400-cb6d154addda", "sighting--9d97212b-2b43-48e9-92f8-5d62e1e9bf4d", "sighting--4530489a-f802-4693-99a5-2a0d05872676", "sighting--fa236ae8-48f6-42c2-ac51-92e9adf695ec", "sighting--6781a262-5c74-4aec-8bfe-8f3ad657b8bf", "sighting--ff0dc89c-2906-4e98-843b-4925972735d9", "sighting--2ad45568-9c4b-4a05-881e-f840572f7c46", "sighting--29fd67dd-439d-46e0-89b6-3c3b02f58dd2", "sighting--0089e137-3619-4eeb-8bcf-c88b720e908d", "sighting--24c1ef91-f766-4c10-bd02-56e700bb9830", "sighting--e038f85d-57ca-4451-8b2c-91754a783e8b", "sighting--cd47ed9e-06c6-473e-9d3e-33f2631b62c0", "sighting--2d4210a4-6af0-4e56-984f-81af3041e10f", "sighting--f7af57c7-1ce8-445c-8c0d-e05794520c7c", "sighting--c73c2b1a-cfca-4bb1-af54-1d338f6a9b09", "sighting--652d9ff6-8214-4296-b60d-1c64da538312", "sighting--58999524-edb6-4b28-89e9-265491ae6c18", "sighting--1aefd73b-6bbe-409c-a1b6-ec23b4c6969e", "sighting--f9c19bcc-7b6b-44d0-9253-ae3b464bd50c", "sighting--33afbf93-1741-436d-a124-72522d761d34", "sighting--31b8ea73-a8d9-4d5c-a4b4-ab3502de9747", "sighting--ccc45a78-143d-43a3-b848-07b9b595ce00", "sighting--75497fdc-e9c8-42ee-ad79-bad729b06f99", "sighting--de24d21a-70bf-4880-bb38-470160fc0d98", "sighting--b53249e8-5fda-4efe-8162-6d18d8dee675", "sighting--e1fb1953-19ea-4d3e-951b-a59b60b44138", "sighting--cef7a0b8-528f-48ff-8df5-afb157f96eb8", "sighting--a496475b-4946-485b-ba6d-c836cddcc8ac", "sighting--4eeda11e-3f81-4866-93af-eeae0e7368f9", "sighting--fd4dbbd7-7d03-47cc-88fa-e747b3afb251", "sighting--3e06132a-51f4-4f9f-9ac6-763e495c6158", "sighting--c915fdba-cec8-4b2f-a32b-6b4f83e621a5", "sighting--f4b2587e-29c9-47d9-aac7-1f586573f3c2", "sighting--a9c0ecb6-5dc9-4c93-b552-d19e020a7fef", "sighting--5020d3f2-ee11-40a9-b1ce-70b855bce8d3", "sighting--f5f6dc0d-4e12-4d88-ab48-d834ab26e0e8", "sighting--91b10978-6f73-45da-b8a2-6fc733289c9c", "sighting--86891363-1a41-4505-8261-ef229584180f", "sighting--42f1d785-066b-4f6d-a736-9982be5fc92a", "sighting--eda3124a-d107-44f3-b17f-60a569630214", "sighting--ecf0ae5a-b3af-4182-a6b8-632bac2c8cc0", "sighting--0062afa6-27d8-454c-9334-7b970584dd06", "sighting--78ae6420-5417-4251-90d8-13638e92b129", "sighting--8c91804b-99d3-4f60-bddc-c2b1c815ad5a", "sighting--7767b62e-120c-42cd-be9e-31dfd91972eb", "sighting--99d567f8-2584-4976-bc09-e9b75cf94e3a", "sighting--a2084b70-9e6b-4758-b524-18afeb8ac6d4", "sighting--492d49e8-dd3f-491b-8020-bf9b75764bd3", "sighting--28df9434-ac98-4ee7-a3bc-8ed8aa92501d", "sighting--c01fabfa-5648-4f0a-bc6a-8cfd53768c85", "sighting--cf31cd60-6530-4b08-8054-8c89ed463190", "sighting--5f35b102-037d-4a93-9d27-3bdae686460e", "sighting--fbb201f2-f227-4e98-8797-db499604e724", "sighting--9eae99f5-5177-457a-83f3-d7fb9888d56c", "sighting--e9dd89d9-98dc-47b6-83de-b3bace1d549f", "sighting--8c4f8780-4a9e-48b2-85f8-0c6c4d72dffb", "sighting--2ba936fc-eaa8-4c92-97f0-a3fb631716ef", "sighting--752759a4-04da-48cd-878c-c65facdd7218", "sighting--a2635bc1-cfc1-4fcc-8c36-a9d4970be9d4", "sighting--10223c26-934e-4dd8-b623-7c07e3780b36", "sighting--2e247123-5670-4e02-815e-08a3dcf83b53", "sighting--1b849bfb-4cae-4e8d-8f57-f957ef7e8f2c", "sighting--5155892d-1658-4064-80c3-38a75490c9a7", "sighting--cb46bc8d-3f44-4be0-969a-9bf517fbba75", "sighting--ee94ec8f-8643-48ee-9593-485191c37873", "sighting--f8528271-5fb2-4158-822f-9b95e9eb88da", "sighting--8534b562-6810-4a07-9fdc-6716033524d7", "sighting--cfb63779-ceb6-4a57-b53f-2f6343e710d1", "sighting--23f59f39-e353-4d69-9bc7-24f7b9bb3793", "sighting--5550f21e-716a-46fc-a277-8b892212242c", "sighting--f5ca90c3-ed34-491e-b328-0c968665ffa1", "sighting--6c3cd769-46f9-471e-98eb-5ae7dd4de0cc", "sighting--25cb62da-974b-4e98-83dc-958cf69d1ccf", "sighting--363e1990-d3d6-4bfa-9f82-02c9e6b6d3fb", "sighting--423959c8-2f5f-40b7-b0ec-ebad9633b773", "sighting--52e7ef27-0946-4327-ac44-8dfe5ac26b87", "sighting--4f8b7812-6fd5-42ef-ae47-45df0b74b78e", "sighting--f199f791-e82a-42ce-b281-bb6e1f914f01", "sighting--595acb38-d279-4210-85ef-aed7a4a334cd", "sighting--c23b93c3-fa64-44ce-9ec9-9b756b9c0a43", "sighting--db1aa02c-afb7-496e-94e8-c838bae2def9", "sighting--1b2ca38a-515f-4ac8-8516-d5ded64860d7", "sighting--22bc627a-eae0-46f9-8656-ef53099e3506", "sighting--2a80d34b-de4a-415d-b0d0-7c08c5fb876e", "sighting--a3f91bf7-0008-4999-9e03-0859d519dab6", "sighting--30949618-3dfb-4139-9094-cf5dac305a35", "sighting--b7b2fb3f-b3f5-4ebf-b891-1d2851796212", "sighting--91df91ea-ca7c-4286-b57a-ff59ffc1979e", "sighting--94c38f80-2b65-49db-8f95-fb7a2b34b4ac", "sighting--fa158b19-4a11-4ecf-9c87-7d92b4a44d7a", "sighting--ab010dc4-e95c-4f70-9909-c375fe802d98", "sighting--b1acfff8-d0c2-4255-b163-72d813edca83", "sighting--b5874d68-c805-48fc-9f3b-f5afc22fa0a2", "sighting--07ca092f-a25f-4c3c-a23f-66995bce29ec", "sighting--2a3aa3e8-f0b0-4020-9e8a-ba61f2aa8426", "sighting--04ff2f1d-52b8-4fce-9a9f-8550c1d279c1", "sighting--7fa64f4e-672c-4cbc-930c-18908f407b66", "sighting--190a9341-8a7e-400e-9e27-abc284c2ac99", "sighting--56e35559-6a65-4d80-81ea-9c32697f87d5", "sighting--cc591440-5c4e-41b9-a206-629d041de778", "sighting--8dae780d-8e78-48fd-b691-2f1881a5fab9", "sighting--394add05-67b0-4dba-b158-c647d10f8fbf", "sighting--e258a22d-9cfb-495e-8b9b-343820e9bd59", "sighting--cf7702c8-e73c-437d-9662-48a5826620e1", "sighting--f4c60997-04c7-4b9f-8618-9cfa1502b0dd", "sighting--f00b3890-eef7-494f-9600-8deebee52829", "sighting--6d6663f5-d22c-41a6-8fc7-f290bb6ffb9a", "sighting--a194b866-9b61-4126-9082-39b7a5ed4d33", "sighting--924d439c-006c-4229-b24d-f671cf74a4f7", "sighting--c97eed2e-bde6-4654-a366-02e10777300f", "sighting--762bc984-6378-4f18-8fb7-c07932d32a84", "sighting--dc5c5197-368a-4db7-b8a5-9cb16ab4ced6", "sighting--c6e8ca8b-ca3d-42f0-8b83-88b887583d33", "sighting--1996fc82-6f04-4f46-bd8f-38fc94c4dd38", "sighting--5ca84d10-a524-4f8c-b15a-887b536dc795", "sighting--e7e10047-321d-47c7-b801-f19b22a1517e", "sighting--583da3e7-ebb6-4fa3-8c77-30bc06b0b40d", "sighting--b04f06c0-86ba-46b0-8834-cfa8eafbad02", "sighting--bde89269-6780-481e-812e-0ce2ce63f2ff", "sighting--e4334037-59d3-4a9d-97fa-deb9f29c13ae", "sighting--81340431-3cb5-46f0-b837-7a65467668a6", "sighting--806a14b5-0640-4d99-97d3-a1f98226e2f3", "sighting--90b0d8f5-9c8a-4811-9b20-b466d2c5cacb", "sighting--b7d6c78b-f633-4fb2-be92-bee5011d207c", "sighting--a0318ee6-c4e4-426f-b6b1-3cdf9377c286", "sighting--c83ffac4-5126-48cb-8d87-c96b8f8d3452", "sighting--4080cd05-4afd-4797-be08-926706aacef2", "sighting--fb0004ea-cd64-4986-9b26-146bc31bec37", "sighting--667b3540-75ec-48a8-9170-08f77fe77aa4", "sighting--9932a705-154a-4f2e-bf1b-244715537f9e", "sighting--b8b0fc27-4881-40f4-b7d5-f201a0224fd1", "sighting--60ddffff-f9af-468d-b3af-475271cef883", "sighting--fd97950e-3093-4f43-9624-2c21b2f92034", "sighting--52734bbd-0942-4738-886a-043c684f2cec", "sighting--6116e465-5fd8-41a0-b980-cebcd881244f", "sighting--502ff42d-4373-4fa6-94c1-fecf1845c98c", "sighting--dbcd7b2a-8df3-454e-bc98-069fd578a4e1", "sighting--c27e05b3-c18b-4593-a306-3a265ad676df", "sighting--cae7a0da-d5b9-4ebb-8c6c-7af25a2574ea", "sighting--08c20fba-9f71-4840-9ec6-0b6adc6dd517", "sighting--eb8a6698-924e-4fb9-b2be-aaecde842881", "sighting--0b4c81d3-2dde-4c0f-821b-098455d2646f", "sighting--873e48ba-61a8-4d5f-bec2-f2d77b30ec46", "sighting--ed3565a2-6605-4053-b2b3-2631bb913b0d", "sighting--d68f4758-69cb-4bd6-a04e-7fd9178c32e8", "sighting--f762395f-148b-4f35-80fd-469f8182091c", "sighting--e6cd5b0d-2952-449b-91d4-4618a2e6cbb6", "sighting--562daf3e-3ce2-41a2-a8b1-88d6359e8d89", "sighting--00f94d58-da74-40ad-9dc9-6e9e0f6e48cb", "sighting--d8952fd7-ab3d-402b-8d8d-fcbb3c023823", "sighting--5ea329c5-0d7c-4215-a229-9e6c40eaead7", "sighting--37e0a583-b7fd-4ac4-8e67-ace46441d0da", "sighting--498d9e7c-9006-48fd-8aa6-c14d113698f3", "sighting--6252360c-2f57-476f-aec5-4214d11608af", "sighting--536b94ad-4c32-4551-aa89-6938c598b7fc", "sighting--0a8453e7-83d8-4391-bde5-77a855aa0d92", "sighting--42930640-be7c-4490-91ab-553134957142", "sighting--b860e98b-d830-43a0-bec6-0ce98f78d34d", "sighting--b7493cc8-b07c-46f5-bc61-0bc36a210a6e", "sighting--b853af19-a638-4ed2-b583-57d3bd207683", "sighting--1ba726de-a9d0-43d2-ad4a-9a28a2179665", "sighting--47c2613a-01cb-4f1a-956b-15238c1579e5", "sighting--01bd2b2f-41ab-411e-af4e-fa7005680451", "sighting--cfe6afd5-cc9e-4f48-889a-4747ce44b798", "sighting--8c23791c-39e6-4d4e-865d-de4f78744230", "sighting--05cd9d63-c0cf-4c08-86d0-0dbb40e0322d", "sighting--c1776075-073d-4a85-8031-ae8dcf040b3e", "sighting--2f7099dd-bc0e-4035-afe1-3709fd230d31", "sighting--640f692f-20b0-4c63-b714-3f18f7c9b422", "sighting--1bce90c7-1d8e-40a9-86b4-8238da3dbed5", "sighting--9fec864d-e7c2-459a-af11-1e562548c75b", "sighting--d64b9887-8947-4c62-9798-61cc79092476", "sighting--50423635-efa2-42fb-8fdf-4c281b1c489a", "sighting--4abe60b0-f56f-4b42-a175-b7743c75759f", "sighting--d6aa9c7a-cc41-4b6e-b0d1-43ef8c25f550", "sighting--609b6903-45b1-43b6-a5c5-424b886ec47a", "sighting--bcd2a38e-b77c-445e-8cf8-fefc30b6a7b0", "sighting--d90b0c05-3937-4ff5-b652-81fce0bf9a5e", "sighting--faf564d5-99f3-444d-8a98-421b496a117f", "sighting--d256285a-178b-4fbe-aab1-c28b52797b45", "sighting--997375ad-2544-49b7-a0c4-01354b5df219", "sighting--362c61bf-ff07-4a5c-be10-5149d5bc53ae", "sighting--0c8a61eb-4139-4a76-a701-d074a76a65ed", "sighting--f16261eb-adc7-4be8-bec2-3b46b7331491", "sighting--a4c754d1-2e9a-4bbf-9f90-7b6bbfbfe607", "sighting--a467818a-0da5-4342-b275-9c4df07f3083", "sighting--7663a31b-22b4-4157-b082-3cc8ab1eae1a", "sighting--9a81d87a-bd3f-4c26-8530-a948cf3c7f75", "sighting--758f5096-857a-4ce7-ad5c-04f6ba0dd857", "sighting--27784202-06fc-4ffc-bdaa-e387db7dbbc5", "sighting--a2a2ebf6-fd33-4817-97fb-0874608af077", "sighting--cc232339-19ff-4548-b690-6679bccf5af2", "sighting--3ba92d19-5917-478b-9dd7-8edd4ee99654", "sighting--0de80d5b-bc80-4c4e-92b5-abb85be65ba9", "sighting--124f7e74-237b-4fff-8988-44f1a2f4ad1d", "sighting--bc6b4cf4-a155-4f9c-ae04-bf33700aa54f", "sighting--3f669e83-7511-46fa-a8fa-ed9bae97b27e", "sighting--10efca22-aed7-4240-ab25-d74cf4071dbf", "sighting--1b888c33-5319-4ee0-83de-b4e03fca8a8a", "sighting--6891c8be-4275-40a6-9ed6-50d0ae5a374f", "sighting--b0975165-205f-437e-818b-5c33bcbefa0f", "sighting--d4be4a78-4fc6-45b5-b738-b313370bf00c", "sighting--2c6ca07b-1d64-4262-96dd-daef9c6c70c9", "sighting--7b03bb4d-c75a-4657-8e6d-19c78544d5be", "sighting--67ad810c-bc2c-4ea5-89b5-8d21d17a7ca5", "sighting--5d4e10d5-72e0-4df6-8ad7-95fd5658cb18", "sighting--7d572dcc-20d4-4032-aa01-fd7a2f2fdf27", "sighting--01498260-f75f-41e6-8ae1-c425fc4ddde1", "sighting--95d67dc1-74df-47f2-b929-b4f3e4919cb4", "sighting--cd1386c7-dd19-4855-9dba-81981e0de8b9", "sighting--0b4ce747-b356-49e9-93e5-a12c1f2377c0", "sighting--de162ba4-8908-48c5-8e11-572849025957", "sighting--97290f0a-eb11-4347-a4ad-a4cb93550957", "sighting--d506f272-c0fc-45dc-baf9-aaa33fa577a7", "sighting--06857f90-d0ea-48ba-8eb0-6252777e3c8a", "sighting--ee07f9f7-2d46-4ca3-8852-57c3911cf47e", "sighting--efbe1430-46bf-460e-8b46-0249bb241d5b", "sighting--8db91ecc-a536-4131-9582-e63b89266b2a", "sighting--d829b1a4-1ecb-42a7-af4a-9b0108fbfef3", "sighting--adcec993-d309-4c8a-b4f5-f87e8997b4de", "sighting--670eacba-2966-4b47-9a4c-26fcff6535ee", "sighting--c8a26dd2-c8db-473e-9bf7-8f15fae4a514", "sighting--23ab5d26-e660-4015-b7b1-edf6c7948965", "sighting--38637d4b-ddc3-440d-9754-457ab3648954", "sighting--8abfac3a-37e4-4a5e-a4b2-69eb0977c655", "sighting--ad84f763-a959-4326-a00d-fb45e811b691", "sighting--a764f3cc-9b1c-4311-aea7-c9a6978a5d07", "sighting--22d56430-0cf5-4935-a179-778c68edf3a0", "sighting--d9d59fba-420a-4ecd-87d6-b9fdd7777ab5", "sighting--3359b5fc-7e0d-408b-af4b-c8f6f9f758fc", "sighting--62622e87-c5d5-44d0-825e-8835c4123104", "sighting--9ab774e5-baa7-425b-b2fa-1c6e83c5a68c", "sighting--df4e757f-84f0-4157-bea9-d5fa0b1fd14f", "sighting--c5101e6a-3c8b-4658-8385-ce438cbdc938", "sighting--f7afa319-b0c4-47f5-8b80-5e8532d7daa3", "sighting--90155a35-c3d7-4d55-a7d6-783e30297723", "sighting--cbc2d805-0dfc-4002-a626-3eec5a3ec18a", "sighting--cabc9eeb-f34b-4c4c-848c-270e67f24541", "sighting--6b3b189f-1435-47ad-ab7a-beab82d5d76d", "sighting--d870c022-1851-449d-bef5-fda1bff49228", "sighting--e6066bce-8dc4-4130-9480-3d12934ede2c", "sighting--d1103ec5-03f7-4043-a85a-223cad86241b", "sighting--0e19c8c8-67ea-4261-b692-1efbf26933bc", "sighting--17bc47f5-3ad6-4e15-85bb-ebb2d9ca1c63", "sighting--a9322b9d-877a-4400-9e59-98e7eeed746b", "sighting--4f44bed8-db5e-4d57-bc29-7b31341c76a9", "sighting--d8949aea-1c98-4f17-af59-7b01d1e7be3b", "sighting--ae67c639-bbbb-46e0-b060-5a4fe07c22a1", "sighting--2cc2be4a-3a3b-45e1-a857-07a469ced519", "sighting--301b5c53-a689-4abd-be99-30780abddcf2", "sighting--00c00f7b-a4e8-43d7-a53b-f892aa810929", "sighting--3068550f-8349-4b1a-9c7f-f9db7fc1c232", "sighting--608dadaf-81f2-4136-8cd6-bbc47d559905", "sighting--285ec7a3-b77a-42b7-b8a6-9f1dd8d73760", "sighting--3e7f7d00-acb5-4c5a-b19b-3c511e824b06", "sighting--45197553-22ab-468b-b8ec-16a5e253ff7d", "sighting--089c018f-001c-4077-b00f-479892843534", "sighting--b3a5ea45-433d-4936-a257-2b8913d84493", "sighting--a33cc5c3-8641-4fc7-872f-ebb86173ee57", "sighting--6aef1f8c-cb77-454c-b705-d00b7fb46973", "sighting--eed952bb-222d-4aad-b4f4-a2f7d402ed45", "sighting--62748fa7-6213-4d6f-a84b-76e6d696b3d8", "sighting--11717132-d688-4399-97d3-d29ae0cb00d8", "sighting--c344a368-c282-4d41-8983-9517355fbb2c", "sighting--1348fff6-b5d1-4cd4-b017-ff314de8e497", "sighting--657e086d-430d-4ead-abbf-ccabe783f157", "sighting--764acf75-0a77-4a63-a2a1-a6e34f470da7", "sighting--d77cec27-76af-4d5d-8f3f-4e463c3cd954", "sighting--3f375ed5-7fa3-46b8-abbc-f6016ccb3bc0", "sighting--b55d649d-970f-4e66-8131-156f8aac8e93", "sighting--8782f102-92a5-4c47-9a8a-f3df4ef6a655", "sighting--680dbcfa-0c73-47dc-bc66-161fd5c71bee", "sighting--599ba959-940b-485f-9dff-8fb297cedc98", "sighting--e1afcfe5-5492-44c1-b7b5-4afa1a215519", "sighting--25c947e8-e541-49cb-984d-49deb4c765db", "sighting--f93dfc88-e537-41d6-95ad-6f2dcb956a6a", "sighting--2c4cbe2b-9c1d-4a96-8a14-d33315255985", "sighting--1393fb69-11c7-4391-9ba3-0ff727179890", "sighting--08109b5b-24ac-43d4-acbe-c92582b331e2", "sighting--7116b5ad-1536-4a26-870a-9c2560c61a57", "sighting--03764c79-6157-4fa3-8f53-85b4c67e3b89", "sighting--8a0146ad-a012-423a-9467-3b3882080c57", "sighting--2b987ca3-d365-4665-ab0a-eca88c477cce", "sighting--ffea845f-f895-412e-96f7-1a334341bd45", "sighting--35089298-d4e8-41a5-8587-7eb154c88172", "sighting--ff6de05a-1a24-48ac-b7de-0d1c3a028117", "sighting--f24af8bf-04cf-464c-a8b9-f944af5f09b0", "sighting--f4305798-e0d0-4e87-ae54-d3568c5c0a69", "sighting--4f9cd6c7-4de6-46b0-82f3-6c81fdc8b222", "sighting--14831165-166c-49be-be32-5081b9cac1c9", "sighting--4edf7965-d64a-4ede-aca8-b924df69180e", "sighting--1288bec7-12cd-4577-908e-4f8cfc7c1ac2", "sighting--75f1d1ad-033b-4e41-96b2-85bb4d33b225", "sighting--822a8e53-b190-416d-a0f3-386f8d1a05b1", "sighting--bbbe350f-a713-4fa4-9931-5a02f1d9617a", "sighting--13e07ec2-b199-4fdc-85f6-36afd51d04ef", "sighting--910b2e02-934c-46df-b4f7-4f3f16292511", "sighting--a4379ea6-6670-4a35-8951-913bfad2f61b", "sighting--33d4123c-75f3-416d-88eb-28d8c5190e7f", "sighting--e2ca34f7-619b-4d81-9169-7cda285e54f2", "sighting--e1548ff8-a76f-4c23-89c1-e3f5ccb32750", "sighting--0fbc5638-009f-4a32-8caa-2f6a1158f530", "sighting--d33f236d-d969-4207-8722-7d5c60e77681", "sighting--debd476d-5264-4fe2-a7c7-42f54d1756ee", "sighting--8d60be39-2f54-4fc3-878f-98e9a5ecc70a", "sighting--87875c5b-4fe7-4132-990d-cdca00149ba5", "sighting--aa8e3930-84ce-4680-9307-379ae23300d2", "sighting--66e21b2a-bc45-4729-85fa-0369ec0c897b", "sighting--6e5bacf6-990f-4003-baf8-5f4419edb4aa", "sighting--d23d69c9-e153-4875-9c55-493af3fb280a", "sighting--fcb2593c-1f61-46f7-aedc-5ab446dc1671", "sighting--aec932ca-0fe3-4f5d-9b60-6968aa262ba4", "sighting--01165e86-542a-4313-bfea-0128bacb40ae", "sighting--7f28a630-675e-44cc-8577-f1a9cf4b9ca0", "sighting--9e503a7c-1917-4c37-b04d-dddaf7062f90", "sighting--d442218c-4e02-4e29-b626-6a527365055f", "sighting--d6836adb-1c55-4062-8683-ff6c8d0f6db0", "sighting--c2138876-0355-4273-a576-8acbc980d9c6", "sighting--f91f9175-5677-4afa-b240-91b1953b2f5d", "sighting--801a3cf2-6a70-4874-a574-9821c9e30ac2", "sighting--86ae45e4-15cd-4d60-bb04-b0180296dc06", "sighting--0edf4c9f-8137-4771-9d62-e41096b72023", "sighting--d023a830-cd70-4cc5-ade8-456902066fb2", "sighting--f844de22-3383-44f4-bc42-8ab47046ee40", "sighting--8aa2a9ee-13fb-4983-9b36-61b4ef173b5c", "sighting--f15d6ccd-30aa-4fdb-ab38-27916145faf9", "sighting--545823f8-f1c2-4674-beda-1f2d4745bce9", "sighting--4d145038-cae4-4757-adcc-97fd89327c3e", "sighting--06a0e722-c3f7-487a-bdaf-32813f8477a0", "sighting--c92b4eb5-54d3-4bb2-9a45-da181c840ddf", "sighting--4be5ab47-be04-476a-9198-93113f077ce1", "sighting--abf24c4d-7185-4219-80a3-68e678a9ccad", "sighting--4135eff6-0935-4354-9124-dd6592fd2415", "sighting--59d8ed84-50bc-4e99-bd3a-5efd2ca96956", "sighting--773fd4bb-33e1-428b-9170-18e18e4e0c4c", "sighting--bd8c8422-574e-4832-91b0-d127f067a42d", "sighting--39e4ea27-860f-4aaf-8cf9-714e4aab3e0b", "sighting--4c3e0fce-d794-4b28-a239-76be70c3fce1", "sighting--920fbadb-c94e-4ad7-bfd9-10f09ccb9fed", "sighting--bffe8d4b-9035-4196-87c9-27804424d11a", "sighting--33b80d6d-b569-4e4d-9915-57c56c4a9a83", "sighting--449f04ac-23ce-47bb-969e-aaeb8a99409f", "sighting--f43f3b02-ead3-4849-8669-a6c674401d35", "sighting--1f152e00-6782-449d-94b4-99fa8e41c156", "sighting--a2caaa56-199e-4a17-90ca-9e5b8c99f2f5", "sighting--a26973f7-c3e2-4962-8491-1f0818af9a69", "sighting--5c55bf3f-12a2-44a4-8eb8-164b7fed1dcc", "sighting--bcb765cd-181d-417f-aa20-db7e6d71035f", "sighting--91957cc5-e8ea-4e00-abd2-d1e039eec3a8", "sighting--30d6734d-261b-423f-a628-effd1c1992a1", "sighting--31c3c25f-312d-49d9-a4e1-7a157e6b4a22", "sighting--11d94546-0ded-4424-8f41-96468814c731", "sighting--2543a6e0-ab99-4ee9-a1ce-07b734525f57", "sighting--b48c8290-73b5-4b5c-b232-e091aa2b96be", "sighting--72c7a7df-9091-494d-b210-d279e1b50c0a", "sighting--75c9a5cb-11cd-4012-8477-fbc88a57785c", "sighting--a288696b-87cd-4d05-8f66-40b6b75e4ce0", "sighting--a2cf67b0-d643-4997-a9a3-4f0c942b7820", "sighting--bc5652b9-6c8b-4fe0-8632-9cfaad36283d", "sighting--54bf7960-4c55-4ae6-8727-fcb68ea13528", "sighting--a20a1b23-7bd2-423d-a158-74a2a89e47e4", "sighting--78de25a9-d20d-4da8-a1f3-e7f0d25a3ed5", "sighting--466f9f2f-33b6-4c6d-8a73-0bc4a27e1c97", "sighting--b1f86e10-546b-4c1f-bb55-4fe9f6f78b92", "sighting--e7824fc2-9349-4ca6-a2e5-454e81ef9d34", "sighting--9637e85c-3820-4020-82fe-5b91ce705fe8", "sighting--95f96e92-e378-408b-a51b-72bf0f61ab46", "sighting--1fc3a4aa-cfaa-4a0c-96e7-4966c2b69baa", "sighting--9a3f26f0-d31b-41e1-a1c2-211ea014654f", "sighting--d012a08d-a904-44cd-b78b-7742858dacdd", "sighting--5f732ede-0eb1-4162-be3f-7ada14e674d0", "sighting--04a3013f-a3d0-462e-980d-247f79eac2fa", "sighting--f7b318f4-fef9-4020-b8b4-fc2e774944af", "sighting--a24b538d-f37b-41e1-bcbc-b166c4a793a4", "sighting--b0c523cc-b4a0-4d6e-9a7a-646f1a77985e", "sighting--9ef0edef-c7d7-48fe-9ea3-5933eb61361e", "sighting--3429277b-c9e5-4a26-8725-76a9311cc7c7", "sighting--53704757-909d-4f08-9af0-beb9b4afb365", "sighting--cc655348-cec6-42e6-8ca5-bf70258140c3", "sighting--1480de6a-05a4-4af3-b11a-b46ed65d0e16", "sighting--57a5e576-4705-46c9-a1d4-d84307babfb0", "sighting--9f0a01fb-ac9c-4c43-a894-273aff122789", "sighting--df213120-df8e-41bc-a792-76c7bbe5b55f", "sighting--d6b3bdc5-4762-4465-bc50-cd4c914ec539", "sighting--10983e75-9e50-4722-beac-9ce6785a9bfe", "sighting--931bbfce-0df9-4cb1-9ea6-5fbaf5d35201", "sighting--3fc4d279-9e07-42f7-9908-debe0b7d1189", "sighting--f8e76fa8-cfc3-45eb-8321-55f8f59ba58c", "sighting--576bc44f-93c7-41a9-8a17-07c5618525df", "sighting--968cd6d4-3a46-4f4f-a319-0fb3efaa3260", "sighting--847ffab7-ef09-4e48-81af-94ffc0e13c7f", "sighting--fdf870ec-860d-4d5f-a76b-762d27d5f823", "sighting--b3d695c8-4546-4e2b-a28c-f3f8fc8abbdf", "sighting--6c9926ea-a7c7-4271-b4d6-feee775724ff", "sighting--d22a7d71-f8bb-4421-ac65-5807787d6749", "sighting--65c28da5-d875-42a6-b519-c171182eceb0", "sighting--7062f137-7bfc-4ae5-8975-dff9e071cd51", "sighting--c9274faa-2cc1-4729-9e6f-7edcec6be1eb", "sighting--6305fc39-2e41-4d3a-8d33-f138a62295ea", "sighting--24aec8d0-6295-4410-8a58-60af954d69ad", "sighting--4f2566c8-a498-42e0-8f4e-ede652324093", "sighting--107acdc2-68c2-41a4-b9f2-46c899775b29", "sighting--f4bc82e9-4dff-44cb-b1df-7fe168f76824", "sighting--177b8e4f-2100-4378-912c-93e04b416a11", "sighting--528f437b-5a38-44ef-b596-bc0074bab0e7", "sighting--5c15185a-68f1-4dd8-8ecc-c7fe505d472c", "sighting--73dfbbd9-8d63-4b1e-845d-64a412a1ba73", "sighting--f0cff549-54ed-4522-9b65-3b085bf91556", "sighting--f29e9766-e82e-49df-975c-021d0ef13704", "sighting--fc97747c-9cb7-4d53-9501-bbeeae579d43", "sighting--60301c75-5ce0-4ec7-b163-a5eb49ac9f96", "sighting--4061b77b-70ca-4323-a74c-880f0d56c671", "sighting--bcb85255-af41-4be3-8ee7-300ad8344a87", "sighting--71ff861a-f664-42e0-89b2-6b3261811207", "sighting--9fe37538-26b2-41be-8597-add5a6cabc6f", "sighting--52887fa3-e739-4976-b74a-f2b292e8ec1d", "sighting--7771d8f8-d7f0-481a-8fd7-22fe5b47a979", "sighting--c3594d89-83a7-4697-8399-938076678256", "sighting--5027b522-da4d-468b-93e8-4231a7eb2ef3", "sighting--5e3d4c21-9f92-405b-8e4f-530e7dabbe4c", "sighting--e5446734-9073-4706-9572-ee401684f2e9", "sighting--3277c31c-1070-4c4a-9885-be76a73e5c70", "sighting--6288cf0b-1c56-4628-a457-d473ff9ad305", "sighting--39e4dff2-825a-4d45-8e6d-5f738c569a72", "sighting--ac66a51b-4596-4ee9-aafc-ff6b1bbdc896", "sighting--a78cba52-b397-4c83-a744-f2f4de37c48e", "sighting--ac9c0978-83dd-4248-90fd-98cdbfee7545", "sighting--4096bebd-d903-4715-ac24-28737f59f473", "sighting--a55b14a3-9013-46a2-bd4f-efc14adf6736", "sighting--748e465e-7cd7-4bdd-974c-e98bb63db6d7", "sighting--fd41dcaa-91fa-4129-88c9-432ddfdd4e59", "sighting--01fb04a2-7a0e-4aaa-929b-d874042bf13e", "sighting--f14f9255-6720-4aba-881b-c488fe20a264", "sighting--a697f51c-3263-4192-a3d8-34d363d80d57", "sighting--3f66adb4-9104-4cf7-82a5-89a287560c3b", "sighting--81b85998-5c71-4d2a-868f-8bdc29fc0d2e", "sighting--75dfaf33-8a0e-4bb3-b89d-519e5481ba4a", "sighting--99c1d83b-fc4b-4185-a722-8079ccaa4cb8", "sighting--f644a19f-422c-4820-abdc-9337550b1c1e", "sighting--91f86d9c-7655-4a84-ad31-9685c43967dc", "sighting--66a77ef1-ffcf-4fd1-8ee8-5449a08a4053", "sighting--f1da4a57-61a0-4569-b945-211d355fec51", "sighting--eb0f40a8-a9fe-4805-84f1-f7de6b87dc5c", "sighting--8a619235-0d64-40ef-8a46-b6470e2ee546", "sighting--71f3cb43-60b5-4955-ac2f-4973282e9551", "sighting--fcc4b1d5-f519-4e42-8b93-1481f6fc10ae", "sighting--8cc8be93-735f-4920-9942-32b0c2a0279f", "sighting--d94ff4c6-49ae-4466-a406-85bbe4820fd8", "sighting--4e4d3be0-2f6e-4ced-95a4-c6672e2b683b", "sighting--c1b1f534-1da8-440d-b6ad-4c889bcc0d6e", "sighting--2c92d10b-e5a3-4c1f-ae23-f135271a3c03", "sighting--ed3a85d1-af15-443a-bef0-1b3c86feb5d1", "sighting--46513c2f-84b4-41b8-bfbb-bca3e0c3dd65", "sighting--40e91a86-2e1b-4b58-8f82-95856ea215a1", "sighting--ffedaf88-1c1a-43e5-bb77-35d0b6ac4701", "sighting--13478ef8-6938-4280-ac11-b8a35fe9fcfa", "sighting--65e14885-f0d3-4a0b-8fda-cd9fc01deb35", "sighting--e8eba6ae-e83a-42c2-9efb-bd4d7b1fad8f", "sighting--d9bac80a-6e3a-492f-8ed4-333443875c3f", "sighting--8208ff03-a80a-427c-a71f-81d4066add95", "sighting--c3c8e6c8-5332-4a37-9657-f7b3a3c5d548", "sighting--ccb8f567-46da-40e9-a1d3-ab110a0dce2d", "sighting--845571ae-8496-4548-8dea-0975d8719a90", "sighting--97970d89-c344-478d-a6f7-3d9e7c83c071", "sighting--3e4b3267-b825-4705-898f-17a3561569b8", "sighting--45800409-96fe-4490-b5cb-9b0de9221f40", "sighting--3ffb2797-7d1d-46fd-b2a9-79923e871e46", "sighting--cd1bc656-999b-4427-b99f-fc701c475297", "sighting--1abc7212-8fc1-49b7-8b32-bc240e80293d", "sighting--528ffe40-2b52-43d2-99ce-b0f696d9235d", "sighting--d621f31a-1fa5-4afa-a437-f23585b5514e", "sighting--dac093d2-abcd-4bf5-862c-13aaae6dcbb9", "sighting--6a6a7ca1-0cd1-4193-9047-077cdb195319", "sighting--4c8504fc-b2fa-4a3d-992e-8ba23118d3f1", "sighting--13fd5553-b89a-4a1e-865c-d80cd39a2b77", "sighting--3f4e1727-c73b-4aec-b153-f3d5a3bcee96", "sighting--3db9bc76-7c9d-4b8e-8e30-5e2d4e168130", "sighting--1cb10a15-75dc-4c94-906c-bee9fc255ff1", "sighting--f4162d2a-9258-42d4-99dd-5167c1b4e871", "sighting--99fb43fa-a872-4679-9572-12d06c8c88c0", "sighting--e0a0b9e6-b0cf-4a55-8901-d5e09fc196b5", "sighting--a2bf5892-bedf-46f0-81ee-474355a21b85", "sighting--62106911-f720-4fd6-b658-f49be9f5289c", "sighting--fe83433b-8279-4aea-b5c1-485803128db4", "sighting--3d8b30bb-6ad5-44d8-ab24-bd4d43112878", "sighting--bd78d510-e615-44f4-aa18-e36a2ad97589", "sighting--bb57c03e-a5f4-4a61-837a-e8c336f95aa2", "sighting--aac29ab8-125a-4dbe-8650-0f1aae356ba5", "sighting--47f86518-b51b-41c3-920b-c68210debac9", "sighting--844129cf-0174-43ef-a2ba-9a5603ef8816", "sighting--a0643fd4-242f-40b2-956f-7216f9781238", "sighting--24586e13-b7d0-41af-a092-18ea47241597", "sighting--2178ffd3-6d5a-48be-8255-8e6ab57d634a", "sighting--f8ecae12-4336-4bd3-82f4-2843cd4ec9a4", "sighting--85572df8-f01b-4352-962a-3c28752e212f", "sighting--f3cc1c4a-2d3d-4036-9125-c13e44490af2", "sighting--ef047fa9-85a4-4803-8890-24a632631b6d", "sighting--c0475f59-1390-4dca-8822-67b145093695", "sighting--ff4e6866-20af-4608-95c9-a7fbbaaf103a", "sighting--8d144ee3-d841-45ef-969a-690ee5b89c2a", "sighting--a541e59b-24d8-45f6-b34a-be0ad26ff0a7", "sighting--824863c1-4089-478e-91ca-a096c14405fb", "sighting--75898d85-38bc-49b1-8be9-ea7edeb7fbd0", "sighting--acd35cf3-0b24-48a6-8985-e4b1b01c8b0d", "sighting--7d8e75f0-80a6-4622-955c-4f32890ecad4", "sighting--3a3dc195-b469-4bcb-b328-b63eacdbaf65", "sighting--a9864739-5f37-436c-9d3e-8c10d0aae585", "sighting--f9f5649a-d713-44a2-998c-274871be8c6d", "sighting--741fe6cb-2e1d-4f5f-a021-97161ee9f1d8", "sighting--1fb8f642-28c7-457d-9a59-85aecf2a3805", "sighting--06380620-acca-45cd-aeb7-36e3cfad6303", "sighting--2109154b-b289-484a-904d-18688fb5477f", "sighting--3fdd67cb-d4ac-4404-9ff4-b48bf0d569b7", "sighting--08766402-f0f6-4a40-8879-bd649a106293", "sighting--ceb97abd-0b56-4dbc-ad9e-1a79e8896e0d", "sighting--5f8dd644-346a-4264-8f9e-adf0a2a4a5ff", "sighting--ca4db39e-e92d-43a5-92e9-89ca39dc1fba", "sighting--3c0a03c5-1dc5-4a7f-9ae9-ca035f2b3580", "sighting--d5649b37-e277-45c7-9ceb-89e77d6e89c2", "sighting--e6015480-1dd5-4dc6-b255-52f5d25c6663", "sighting--7b436672-e764-4770-85c9-99a740ebb95f", "sighting--3cae54b2-e3e1-4638-857c-fa28e9d219ef", "sighting--f19fdd2e-131f-479c-a1a7-05d2c9f94176", "sighting--0f0e2aae-cdbf-4240-8f8e-dca9f55af700", "sighting--4014f29b-c317-4e93-9413-0fe16b255297", "sighting--25c02c9d-73dc-4109-9c10-58ff5c29e587", "sighting--48260455-ae32-440f-8c03-5c80aa1991c7", "sighting--d09da4c0-5378-4667-ac20-72b2954daf88", "sighting--00283a90-90cd-4d6f-8965-0aead9bdd7a3", "sighting--57ca46f4-3a9d-47a1-91dc-d2521f4db48c", "sighting--9311b316-18b3-4954-88b4-48dd650dc490", "sighting--b39077e7-d934-4439-9540-5a7c5c43aaae", "sighting--b1d97242-57a6-403c-9305-b9e03d163c76", "sighting--e45694e1-8dc8-4b68-a38d-80793d810692", "sighting--b8866b80-fe93-4319-87b2-674b57f6133b", "sighting--dd656bd1-9651-4c4c-a8c2-aacef08021d3", "sighting--46d54c67-99d9-4f69-9ac2-e2fa52056ae9", "sighting--19c3f942-3a16-48a0-a4e2-30e0875f17fb", "sighting--76fad5e9-08ab-4a9b-b414-2b609fa38889", "sighting--cf88c90c-1ca7-48ec-84f5-63dbd214cb0c", "sighting--9a8a0447-2637-4930-85a3-73af1e6ef224", "sighting--28606e74-d3c8-4eb8-8030-e9193ec719e0", "sighting--e0a4bd12-0640-4bb5-a9d6-8650a9e2b7a5", "sighting--bb09b7cd-1bd0-4bff-9b1d-d229a9ab69f6", "sighting--75541104-de62-482d-8520-26a90e201b6c", "sighting--ea11b4b5-b8a1-44a6-bdee-15f1197191f3", "sighting--372d9167-b57d-4f1e-ab6c-323e11fdcaf6", "sighting--30a4fae2-b4a3-49d5-80f6-1293a7282230", "sighting--de24eabd-aa02-4768-b86f-287a6fbeda24", "sighting--38a5315d-3d24-4714-806f-92fbc99fbaab", "sighting--2a7f5af7-c03f-4a87-b0f2-85c2098621d9", "sighting--1915c796-2902-460e-bbb4-172be2f6e7ee", "sighting--627bb8ca-4fab-44d3-9bd7-b72324488518", "sighting--00e7790e-fb4c-472e-a774-d30331416aaf", "sighting--b85a82c6-17dd-46f9-b677-63065ba23cfc", "sighting--fa21fc29-0f05-4b70-8776-6c25addd8b02", "sighting--d3c1f2df-9506-479a-939a-fddf09cb4eb0", "sighting--a62d6381-4dfd-4317-be91-3e94a6d1b834", "sighting--7dbca658-6651-4078-ad7b-8b2d9b8fa909", "sighting--a71115e0-212a-4f35-bf36-4ef5b13fa9e0", "sighting--efbccb35-4051-4406-9276-a9cb4e3b5be4", "sighting--a0fcba9c-ae36-408b-b9f1-15cf5e07ad3d", "sighting--8fd5cd62-2cc2-4e49-863e-2b2fce7e7531", "sighting--cbfcc762-a347-465c-8edc-862763ce6e3e", "sighting--e480decc-667c-407f-acb9-7ef409937f86", "sighting--be272e6f-efc9-4dfd-aa4f-422d8810b557", "sighting--499f11a3-b3a8-43c7-89e8-7a506fb7e4e1", "sighting--11c20f00-b4e2-40cd-af26-ff337136bd7d", "sighting--a4567405-656a-4a5b-9a75-f09d33791712", "sighting--9d75009d-210f-4e5f-8b93-064f98cad802", "sighting--fb428dbc-6d6d-43ab-bba8-5cc81e97e60b", "sighting--a2218491-4b5e-4d97-80bc-c739e0afe667", "sighting--9b34f42f-ce23-439c-a40c-18aced49f132", "sighting--e82985db-7bc9-49f6-9b15-fe9878a9b126", "sighting--3ab088a2-7c64-49d6-a58e-db18a85f7ce6", "sighting--84d33a3f-f4f8-49d1-8412-89e3ee24647e", "sighting--590e4cae-c475-4b89-b677-ad85e55ee930", "sighting--1e996327-a24c-4efc-a727-37ea07d6887b", "sighting--35ba3198-0f90-4a46-82fc-51dcbf3dba05", "sighting--2c038075-7fc2-48ff-9224-181617e6b64f", "sighting--8a17a178-bb7e-47a8-ba45-fdc99593edfa", "sighting--277eabb1-145e-4a8b-9704-e0372eb8b29a", "sighting--712ee684-0786-43d4-a671-0bfd80e249ad", "sighting--75299d4c-e771-42b1-b30e-7ea85da3e8e1", "sighting--5f8896f4-14d9-4ea2-8dca-a67b2cef5deb", "sighting--f934152e-0b82-4742-969b-b14e92da9ad2", "sighting--2f4cb6b7-f194-4e88-b4f4-323bded25baf", "sighting--876acfcd-6754-455d-b189-cd7874386334", "sighting--d863dda2-f6dd-466c-bd1f-4cd579d475b7", "sighting--2d15b908-7102-4006-aa64-af71d9c54874", "sighting--ad7db21c-c2f4-4df4-8d30-bb99be992ad1", "sighting--11541c82-8374-4247-bc89-6bcde3d2fb32", "sighting--f6c2345a-244e-4601-a2af-ee5183219edf", "sighting--7099b35c-d0c2-458e-bef5-799c2824a6b6", "sighting--b807a6b7-3fcd-4176-81c7-efe20f49181f", "sighting--12cb0818-c131-436b-a3e0-53960a2abc42", "sighting--5b54f4ce-bb87-4339-8910-a40ad64b8b54", "sighting--28545dd4-f7d1-412e-8428-4a4953890d23", "sighting--f3572bbf-7c30-4df7-a04a-88857b8a129d", "sighting--d325467b-f734-4a98-9b26-0beac04742b4", "sighting--cc7d4b31-d191-46c0-8f53-bc4fbfc9798d", "sighting--a6efc6a8-21b4-4ed5-8806-0f2a8af560d3", "sighting--fdcad77d-217f-4362-a9f0-255c07f10d91", "sighting--4d8baa89-f95e-4a89-9899-ea991d3ba2f9", "sighting--4e9188d3-e8c4-4812-9ed5-341e0dcdd317", "sighting--8de04904-eecc-4719-a06b-bb5c630108e3", "sighting--b843ee95-c1fb-4b74-948a-318cc2a011e2", "sighting--5c397544-fc4c-437f-8f3c-0e5dde6c9afd", "sighting--e8fdd7fe-62a1-4124-8776-bef75b46b166", "sighting--635e02eb-0663-4fcd-a449-c96efea83065", "sighting--2ac4957a-ff72-44da-8678-c03daab8134b", "sighting--ba433388-84f4-4680-84a2-fca9dea43565", "sighting--4083f072-f3fd-4a81-948a-2e6334481970", "sighting--2c9fa659-399a-4142-9650-faac2d87078b", "sighting--f46a18c5-acaa-49a6-a833-7093b70767be", "sighting--1df1a6fe-a4e4-422a-a963-644cc4ed9413", "sighting--1f8607cc-5ea7-4f4b-9a60-3533b70923dd", "sighting--bcd69d28-258b-46da-8e6e-364ec8fcdb89", "sighting--f7143fe4-bcb0-44fe-93d6-27967fae4f8c", "sighting--4acfe064-eef4-4139-88f1-2a53f407f2ff", "sighting--5d0705f4-7efd-46b0-b5bb-7e035afa8d20", "sighting--76909b89-bce1-4dda-9a39-15127ef19a60", "sighting--32a027ef-6def-4d91-a11e-ae0893c90c4b", "sighting--a65f8e88-4332-4154-a11a-f2cc9b31efdf", "sighting--8e42f1ff-6ab2-43fb-b8ae-df21a47ab071", "sighting--2cb62448-de83-4a3b-bd6d-7dc40571d9e7", "sighting--b7122ed8-fcd0-4d3b-8228-9b7423727c1c", "sighting--e4988f25-bbd2-4e69-baa6-977d2ee8f176", "sighting--46ef4f5f-7d23-40ef-81dc-950af7fc2479", "sighting--0bd9d6a9-cebb-4672-868e-ad0387b93bc3", "sighting--77ee56da-7b2e-4923-a60d-cc46aa345f06", "sighting--2741740f-c69c-4484-b9b7-91c46d498b95", "sighting--859f1e1c-fbf4-4d8e-9747-05c8ce7511ff", "sighting--1056b373-86c2-4959-a949-c53f5ae542cb", "sighting--c98af60f-6541-46d7-bcbd-7c2d60087fca", "sighting--ae7d2790-8acf-4faf-959b-3d27290c2df2", "sighting--ae05dcf1-fcab-4cbd-ad14-19974f2197b0", "sighting--e632873c-8c05-4bd1-af7f-66cf08997503", "sighting--b49f3c1a-b65f-40c1-8d3f-14a0ea45fd4c", "sighting--b51a2eb5-9a72-4544-8c69-5bf56764d940", "sighting--58e94b99-29ac-4961-8bac-1547a55bea41", "sighting--5eb10baf-3e1c-4088-937e-15ff69532836", "sighting--b51d21b9-9ec6-424d-8a80-81602f516875", "sighting--2be929a3-c04a-43da-bb62-744c202e18f3", "sighting--91d3a8d5-fdf1-4960-a56f-12bc612f8e1f", "sighting--16b0f11e-3b67-44db-b9f6-4a8702f75bf3", "sighting--1d3fc5de-51f4-4496-ae6b-48af71c8f1b8", "sighting--8cdc7dd4-d708-4b19-8bc8-70f631edb067", "sighting--ec4aea2c-e791-4cbb-9742-36ba58bd1f2c", "sighting--055d8de4-2ccd-464d-b0f6-e4fb23b021ea", "sighting--ba981035-f932-472e-968b-a06fe80dcf3b", "sighting--361ec0e2-641b-404e-9b9d-ac53abe445f0", "sighting--6481d6bf-da4a-4365-8d83-94b3bed6c15e", "sighting--38369f63-630c-4e3c-a6d2-dfe707f15d8d", "sighting--7bd65f95-028d-4c38-978b-955382a440da", "sighting--bd112def-7fc9-4682-9fbf-aec78b6a8e80", "sighting--cde6e9ac-6cab-432a-91fd-630271ff6144", "sighting--5183a701-0a2f-4cc7-83c5-c878adcb2b18", "sighting--1f274d24-61da-45be-93cf-d50f121deff9", "sighting--697eb8db-97bd-44d5-8574-41371bb2564b", "sighting--323edb03-7ad9-4854-9780-afc377cccbf2", "sighting--4a64f8f8-0b78-454e-b377-13e2fcb4881d", "sighting--2cba7ba3-8332-4508-94f7-2c0e2e6e3fe7", "sighting--a08be506-fc0c-4c2c-8def-8fcc4be9c6fc", "sighting--302b2f58-2dbd-497d-b1f5-6285c489a581", "sighting--53dc5f03-92cd-47f1-8b8f-26d9b1fd2909", "sighting--9b869f67-7a11-4447-bd1a-fe8c40e7403f", "sighting--fb5bdd6a-0493-47dc-81e0-18305c6467fe", "sighting--d7c2646f-59f3-4de2-b525-15a0bd8623bc", "sighting--329b1dfe-cec6-46ab-b370-fa451f6ccc18", "sighting--3878186c-c37d-495f-b14f-b86fd55a1c71", "sighting--e08b990f-afb2-4b03-a793-92923da3907d", "sighting--a711fe6c-c134-4ce1-9ec9-bb0ee3f1f80a", "sighting--cffecc36-7d1d-4cd1-9dbe-c15dab18c519", "sighting--7b3dc5aa-34af-46e6-ae4e-f013d74ec567", "sighting--e7b96780-be6b-4423-985d-520ce1b5e417", "sighting--584c188b-be68-4100-9524-34cdc53ed6ee", "sighting--5ef17a93-3ecd-47e7-b3fd-a8f9074f0103", "sighting--35aad1f4-c56b-417a-bc70-18aeb42ce9e3", "sighting--91f710d0-ffef-493c-8c55-cb2ee17693a1", "sighting--21ee98f3-1a37-4f73-8452-3da5410b9f7b", "sighting--45b76658-26a5-43fd-8349-ec0610e14dbe", "sighting--49a3e20e-33b4-4a39-8c34-3697a6bd8798", "sighting--fecfb2dc-dbb3-41df-97f1-8088af7d11e1", "sighting--86978ecc-53a7-42de-9efc-7b88872257ab", "sighting--ebabcc8b-0d91-4abd-acb9-21f4264eae7b", "sighting--aad19b5e-c69e-408d-9ef9-60800ba9d43f", "sighting--56c5476e-35a0-48f2-851f-7b22432939b7", "sighting--89663400-4809-4678-8dfd-39f86793b416", "sighting--49c16021-4314-4861-ba07-c7c8ed0c6e36", "sighting--86157d39-873c-45a3-b167-7749561c96bf", "sighting--de2b1641-941b-40d7-9662-4393dbf33f6f", "sighting--0d4f266a-c549-4fea-be64-991fc632486b", "sighting--78a3adf3-fa02-4f72-84fb-0e9e1153a506", "sighting--3a7b8af6-bcce-472c-96f0-30145b399445", "sighting--40ee3104-31bb-4b0c-bf25-141a097aacb5", "sighting--e75187fe-1c5a-4e43-9249-b9447b8b3857", "sighting--bd50c165-fc70-4e82-a3fe-3c477a0711a4", "sighting--93c58295-2d3f-408a-8a92-252d59402cd9", "sighting--5837bd62-3259-458f-af89-33e56563e992", "sighting--c65135c7-1073-4b46-8b36-bcdc96c34fee", "sighting--0094deea-9401-46ab-b1e3-853cfebb6257", "sighting--c1594aab-6a13-470b-a54b-7a551c8471e6", "sighting--d4e20f3e-828f-4684-842d-b3a802b45477", "sighting--8328bcc3-b861-40f7-a08a-be762387d7c9", "sighting--405dbc84-cc75-4e9e-8940-51ba6bf94a29", "sighting--e24c6418-d3d7-44fd-9ebe-7c4143cbeeb1", "sighting--ea8e74d9-af35-439a-9562-f7964133d8ad", "sighting--7802cc71-8328-4e4d-80d3-2edfd1fa2efa", "sighting--f0774a24-35c2-4ba9-b30c-dd1693eb9cff", "sighting--0a0b323e-b636-4f8e-94aa-35ed1a752c3d", "sighting--ef0dd2e2-2180-4b63-8f72-99f5c8384d22", "sighting--78e9177c-eaa6-4dcc-9ebd-97ee4b8abc32", "sighting--51b2413b-92bb-4f83-8819-421113022ac6", "sighting--4722b9f9-a32a-403b-b427-d3c6a5a5f3a0", "sighting--196d5b05-de2f-4c61-a7ba-2e8e732522ce", "sighting--7650ec3f-58d1-4384-8e76-1f4bfa6fa2ba", "sighting--d491418d-34d6-4360-a59c-901cdda0a13e", "sighting--54a2522d-dadc-4570-9bf5-8c4a7a0bb6c5", "sighting--f3ae7b74-3e41-46bb-9c19-e9278330a01d", "sighting--5510efba-17bf-49b3-83ab-156f620d87e4", "sighting--4c62ad41-8acc-4897-affa-fadeb7d0a891", "sighting--8a8eb3b5-2e4a-48dc-9648-1ce5a51dc8f4", "sighting--c19be8fb-61b9-4741-88e6-07b2e39e0195", "sighting--33531050-4438-415a-b22f-0374f5e1e8e4", "sighting--262e4129-1035-4d28-95f4-62af0af639bd", "sighting--bbd91e22-3901-45d0-8d0f-20c56c3f5457", "sighting--c13b8a2c-bb07-4db5-9240-ffefdb60d7ef", "sighting--f085647a-de4a-4a63-a5f6-3cc7615b6376", "sighting--65428598-f8e0-46e6-92f6-3bfcbc4e10be", "sighting--e4d6e9b5-b65f-460d-b4d9-fe7b5bbe9d6b", "sighting--27e8c36b-862d-425d-8531-9eb1faafa6d0", "sighting--c0fc8b15-325c-48d8-a9ca-f51379f7978b", "sighting--4f60fbf4-d9c6-4f93-b118-02a71e7d763d", "sighting--27d0b6e2-1863-402b-874c-068075f0b751", "sighting--d34f4e9a-35d8-4706-bac9-fa0ac7ac9bff", "sighting--7be68299-4672-4f44-b301-dd7e87dfcfd4", "sighting--c17006ca-b9cb-4ad9-8065-35a9eba6db9c", "sighting--f3d07f72-2014-4ff3-9763-ba64e26f72ea", "sighting--90722952-8df4-4f97-bdf9-788a7b246bfe", "sighting--2e86d293-3b95-4a74-9e83-b3f51ebe470b", "sighting--0af3efec-c3f8-4665-9427-5971a1b04dd2", "sighting--48fb3878-ee12-4946-ada2-b02ec434a0f5", "sighting--64caf864-7ed6-4904-95aa-d414fcab9d8a", "sighting--667c3a3c-000c-4bd3-873c-3b60960553d0", "sighting--0bd7eb4e-2045-47ce-bff6-906830294dd1", "sighting--249a4cd1-af28-4292-acd8-bd232751a09f", "sighting--6e81c5c2-8a1f-45a5-ad3a-a9a6491716d2", "sighting--361310a4-5505-4d57-bc2e-e6a9742b0bc4", "sighting--8943ad9b-0778-4560-a99e-0c70004aeb99", "sighting--ead0b773-38d7-44d8-8aac-a204c704679c", "sighting--f5c2b0d6-f3a8-4db5-8d45-8d59c14dd230", "sighting--2984c427-d42c-443d-99bd-18498e1363a7", "sighting--8ba6ed61-f740-46fb-916c-f60729fd0dbc", "sighting--8d172466-f985-4894-97d1-06c27897d3c5", "sighting--9809e4a1-489a-4318-b0ee-5fe10a69c205", "sighting--0e0e6122-3c89-4cda-8128-f4ccad160c4f", "sighting--12dc3533-f9ed-4db7-8ac5-436f6b197fe0", "sighting--c81afbfe-8255-4504-970f-245a5c320de5", "sighting--2c6082fd-f231-46b9-9449-d683618f59e7", "sighting--ace7568f-ec36-405d-8807-a64dfd841b80", "sighting--99b2bf9e-5b85-4bef-afbe-7c6a53dd1a8d", "sighting--782a5457-b63e-421e-86d5-0be4a9ff6d5f", "sighting--68daef81-f5a6-422f-bf70-eef0be55346a", "sighting--7e6a2b88-e2e8-4fde-ae84-0e53c3f52c02", "sighting--b00b0a5d-b8c5-40d5-bc3c-150d3b1a15f3", "sighting--7b8f3a5e-123e-45f0-9c80-f03304589860", "sighting--1054ed8b-3efb-498b-8d7e-3d1dc03a155b", "sighting--7c7650d4-71ee-4648-8448-798e6657fa78", "sighting--ec90b0c5-be4a-478c-99ba-626bfacbd36e", "sighting--eea9cde3-947b-48d1-b9fb-465e0496c9b1", "sighting--a606409f-00f3-48ac-b9f5-993fc8c0c52b", "sighting--3d48547a-85f3-4c6e-b025-5203a2a0401c", "sighting--9ac5d5a8-a4ff-47ac-a2a1-15d7c75fcda4", "sighting--aba88813-d89f-4722-9109-7e05c60b38e0", "sighting--a81ecaea-55e0-4e08-ad53-79ce435e2482", "sighting--c839e4b9-6af2-4bb3-ad2c-f5f2e4f3cd17", "sighting--7ffd3742-7099-47cb-b03f-84836c4bf2b4", "sighting--e2665888-c12d-4726-9cc2-15ebe97aa1b9", "sighting--e6663634-9859-487d-909b-41befc3a7e3e", "sighting--9b96f3cd-c236-4131-aa1b-49d8426adfb1", "sighting--048d63ba-6ac5-4443-bbd1-72bf3417d73c", "sighting--85a1e352-5543-4444-b521-8881321d47d5", "sighting--17bafc77-6e58-4f00-a108-207d95e5ce83", "sighting--db96dace-f5aa-42c8-95ba-0e092952b5d2", "sighting--fa3e878d-94dd-460e-ab98-f0d129169323", "sighting--85f3be5d-85d9-4ede-b57c-5c7173079acb", "sighting--f05e5b0f-08f6-45be-b555-793ad7a8e297", "sighting--92412136-773f-4560-9c05-21b0754c4533", "sighting--73d3d1d5-8fbb-44f6-9f94-57fcaba426ec", "sighting--aa1aad20-6a1f-4ac6-83fc-510b2eb51598", "sighting--bcc6a255-79c2-4741-883a-9520a13dfccc", "sighting--261e0f2c-e451-40c8-a71d-34949e4f7170", "sighting--583353bf-fa43-47b9-a238-7f55dd0164b8", "sighting--26be35a3-6c81-409a-81e1-f2d552e7e06b", "sighting--7468cb93-91a3-4d2b-a3a2-76fbfc299311", "sighting--314cfbd4-fde7-4b59-928c-9de6abf557ca", "sighting--d19dcd8a-71e1-4b86-b939-372337e41018", "sighting--3608d4fd-f38c-4291-b13a-0871d5092780", "sighting--0f840415-2031-48eb-8cb4-97bc39321a36", "sighting--e2e28abc-c923-46f6-82d7-269c7f6d25c2", "sighting--2fc706c4-0dd2-4406-8899-1793f20347f5", "sighting--7fd67c13-e9c7-4ebd-88d2-c2600870be78", "sighting--811ecb73-2fc0-42e5-af88-9411f969d7f8", "sighting--7d31695b-97f3-4055-abed-862c291f2125", "sighting--0d8ace36-237f-492f-b49f-f7aaab707a02", "sighting--b8d9470f-a302-4462-95ee-66adb77bac04", "sighting--4ae813ba-0e4f-497a-b430-30e9c52f517c", "sighting--f3bb5516-7cd3-4787-bafb-57d0b476b3cd", "sighting--b3681a49-274e-4ffc-8103-403028a023a9", "sighting--633f3168-5e75-4608-9a82-6c448233338f", "sighting--496b5bf5-e841-459a-8567-ab50fa7fff4f", "sighting--4ccea40e-adcb-4df4-a3ee-a190de97a1fa", "sighting--ee23567a-19fa-4593-8e9a-47eea49607e9", "sighting--0fa63e4f-7ee7-4257-b565-04d8a64020c6", "sighting--f932b6ef-305b-4d8c-ae65-92336ee6f3b5", "sighting--1cee69e4-57e0-4455-a220-aeb6abe91dba", "sighting--0a93bb80-b77a-4d6b-825e-a16f096bd4f7", "sighting--ac23daff-7277-4dc8-a480-025d26461d64", "sighting--659b3370-6e85-479b-a3b9-f7d07fa4bf84", "sighting--90bdcd60-aa80-473f-b89e-0c0ab6ff8bfb", "sighting--1f9f3bc3-38e8-4f69-aff8-da434357194d", "sighting--efa8118e-23ea-48ec-8903-5e73307314ce", "sighting--80f7d0bd-465f-4338-85cb-a5667cee4e3f", "sighting--d3814688-033d-40d0-b3c2-684461f0511a", "sighting--30118ff9-49fe-4e20-9773-4289c8b9c462", "sighting--46fe82dc-2e8c-4a81-aa20-3527013adb41", "sighting--0887aa6f-1ea8-402b-995b-d5357c76439f", "sighting--d9d8ae4a-9f97-40f2-8020-89c035454059", "sighting--fe0c5072-df57-411a-b6eb-81c4cdeaa08d", "sighting--6ec32aa8-5b64-4dee-9b60-2c4537ca8cf9", "sighting--85363dad-77c6-4a81-8388-9f1300207a29", "sighting--5aa3c548-5c14-4c22-bab2-39e1e201725c", "sighting--5a54b6c2-1af6-44bd-890c-cd30af3f2c66", "sighting--e43b53ce-350f-41cc-ad24-4b4eab6093e7", "sighting--9baac7ed-c098-4719-8370-d2c67bd0f3d9", "sighting--067d8e21-07fa-4c46-87ba-06b37368e301", "sighting--146b7d1a-5178-45d4-a7bb-2c10665b94a9", "sighting--5fc92acd-9f81-48b3-8d99-82618b7f093b", "sighting--f7e26b4f-eabf-499c-b2ae-16e2ae9b5913", "sighting--52942c29-7960-43c1-90e2-c6eaa0b4a06e", "sighting--583aee22-4247-4458-b086-0f66a7d2908c", "sighting--7344663b-f983-4599-aeb0-78b5d37235a4", "sighting--5bc1456b-7b36-492f-8750-402d539275de", "sighting--a75d62ea-c124-4626-8ce0-6b2141c20810", "sighting--52ea461c-4f3a-4ae0-ba77-66243750c784", "sighting--1f539264-37e9-4c97-8073-8ca199a23201", "sighting--edb084aa-81cc-44e5-8090-60f98013902f", "sighting--c70f0665-911b-4532-98ee-5e4ff888e12e", "sighting--350d36b4-e0f6-4b0d-bc98-488dae081f19", "sighting--3e37ff19-c04a-47ab-b350-4c896e1c6a1b", "sighting--c9763ace-8159-4884-80a4-1ea2bc604a1e", "sighting--b3c10cd0-bc5a-4c3e-8a70-10b538f275dc", "sighting--23f1e045-b86f-4996-8b93-8dec40027ee0", "sighting--23ad4e74-d478-4e17-913d-043bd56de75a", "sighting--cfc1652f-f440-4b09-95b4-d6fc05a59ab5", "sighting--380df043-f728-4101-bc19-905675eb9732", "sighting--6cb06481-4b7a-4105-a585-176ddf847fe9", "sighting--42167533-412e-405f-a7d4-08e4d80193dc", "sighting--90469923-e557-4ea8-a4df-5102331113cd", "sighting--d776b5cb-beec-416a-80c4-c31474e8efeb", "sighting--b28b3bd6-f790-42ef-96b0-815a42804cc0", "sighting--38a7ea3d-7bc7-44e5-accc-6d5d47a03a2f", "sighting--71ebb073-80ff-49e4-abca-379ea0fd78dd", "sighting--ce89f2bf-7723-4e3e-87e7-ffc6fa7a2d2a", "sighting--34e66c6f-ee7e-43e2-909b-ec3d4a1d1a9c", "sighting--91d31247-2fd5-48b6-a035-85283e6a9252", "sighting--23b94417-e2d2-4c04-899d-9a2cd5e463be", "sighting--22a52df5-a0b1-4bfe-954d-747e29b436f3", "sighting--925cd022-03b7-4fd3-ab9b-8777018693ec", "sighting--ec79241d-5ea7-4564-8e99-c00bd6d14f6b", "sighting--0c703d48-168a-4084-bd9b-20747ff72f9c", "sighting--281ad237-d7d3-4ae1-b7e1-323883574b69", "sighting--c119095f-973b-47b2-ba4d-8698757d1788", "sighting--80ade178-9eff-4d67-a0b8-6fef04a079a7", "sighting--243b0f20-3f9b-48ec-b25d-6b1683ab415a", "sighting--5328062a-9106-4496-b071-8f1fa98d6e75", "sighting--1991a94d-2822-42c6-b9be-4c209175fe79", "sighting--01b33048-f9b9-4369-bcb6-85980eb827de", "sighting--4b9cfae5-234b-4cee-b462-d1a1d15a57f2", "sighting--2014de27-08cd-4c91-a705-a1de8cab479a", "sighting--5f95811a-8bfe-42ec-ac0f-54ba660bf65d", "sighting--db975562-0a7e-436f-8b75-7a6085e2cb7e", "sighting--c31cf646-8a36-4ed1-a0cb-a212cff3abc8", "sighting--f4145483-b382-4e3d-8318-1d880d83252b", "sighting--09f19bf7-0708-4077-8adf-7b15d23046ed", "sighting--b5493f3e-8425-40be-b8d3-2d5de832053b", "sighting--1dd463e8-4466-4056-9e67-6059f4b50c5e", "sighting--7a8b3836-cc66-4bef-a8e6-88b282db368b", "sighting--72002374-43cb-416e-bcd9-648e27b89961", "sighting--2a609759-381b-49db-9555-7ffbbc0da877", "sighting--278b389b-a238-4ade-aa14-f050349210d2", "sighting--d14a0ecc-676d-40d0-aa47-4978114b707a", "sighting--d7002344-67a6-4734-8fb7-f34b74ff1b52", "sighting--29936de1-49ad-4696-a305-d5e80a71a8b2", "sighting--5b28edd0-02b5-40a3-99e4-136b61c65ea1", "sighting--c9fbbdd6-7fd8-46e9-9c46-e0b4b2e8a2ff", "sighting--b8c252cc-7fa6-4398-935e-a07b6e43f190", "sighting--30d4dae4-ad20-4d2e-81e7-5b02d637e00a", "sighting--8008f0b0-887c-4926-b2a6-4d7226ca070b", "sighting--bafdbae2-4f37-460a-b49d-bf406989c3ee", "sighting--80f050bd-80d0-4a9c-9016-255446641e31", "sighting--a49d14f1-3b25-4350-9522-e29a96041ac4", "sighting--4162292c-cf99-4496-b3eb-1a000c4cd251", "sighting--b175c288-d872-460e-a04c-5e70424a6e77", "sighting--718df13b-f61b-48d3-b35e-e74bb14b52f6", "sighting--570f6adb-dd06-4828-a34b-f166f6f40307", "sighting--79380baf-0525-49ae-aaf4-71a5ddc0b85f", "sighting--c64f7c87-d911-403b-96e5-1b65b2018371", "sighting--fe04706e-2e02-48fa-a952-525fe71321d0", "sighting--59eae6cd-0bac-4b51-a37d-485c970bb662", "sighting--2dc67d40-2423-4b26-b3a4-322458bb3633", "sighting--d2c33785-0587-4475-b950-23f08b62f6e5", "sighting--0f0dbf50-0634-420c-926f-c1ff1b8b6602", "sighting--aa8f9428-441e-4c69-ab9f-8aa4f5db4572", "sighting--d062a481-3ba7-42b3-8672-1c679153489a", "sighting--211389e7-e7b3-4b02-bc4b-6c5e13fe4cba", "sighting--261e5dc5-aacb-48ee-9e9c-014dd629e0f0", "sighting--b7382bb7-dd1d-408b-9309-847ddc3f4a50", "sighting--c5f78930-01bd-441f-8f79-e89bde0e9764", "sighting--264f8e9f-9323-45b6-8277-7063ba09283d", "sighting--3c1e7aa0-2fe0-4bb5-8b8c-ff12cad0e332", "sighting--8d0adf0e-973b-44d7-98f2-63b3dd5a2e81", "sighting--a8a993d0-2ea6-492b-9acd-0b8ade59af75", "sighting--20e387d7-7590-45d2-9387-00b970bdeb70", "sighting--dbb60a0e-f9df-4b33-9b9e-d30ea3c64578", "sighting--07086041-5116-45f9-93d0-e4b3f7ec07c4", "sighting--b4cc0adc-34f9-40b8-a441-7a196f1c729e", "sighting--a5296e07-4954-4d6c-9c10-4e50025c198c", "sighting--6089daf8-53c9-465b-accb-591ef90324d0", "sighting--211dd3f4-4343-416a-9265-c7409d73929f", "sighting--69e00977-36d4-4cf0-a1b5-f73db4e1edcf", "sighting--789f5e6e-b3da-43af-a475-74f6bd10ed04", "sighting--ceedcdd7-48bf-4387-b72f-3d7294457e11", "sighting--a6e652e6-19dc-44d4-9e77-5e98c68a4325", "sighting--7e881219-4cb9-48d8-8ad5-32f406bbbe08", "sighting--168078d5-86bc-4600-904d-1e4fc0697c7d", "sighting--b2754964-88be-4c70-9011-a0971d79e55c", "sighting--15a72cf7-62a3-495d-9518-23d2f1e24a1c", "sighting--2b2b0880-275a-409e-8009-700eca7f3a7e", "sighting--94330fc8-0f12-463d-b68d-75f260ec1a82", "sighting--d5cccf1f-8f10-40cf-b762-90dfe0d63d58", "sighting--d56e8c54-10f1-4312-9d49-e567b22072dd", "sighting--b25aee97-0d1c-4097-97bf-5113238e9924", "sighting--120e5e42-44b9-4f90-ad02-a134e4549d0b", "sighting--fcfe7a57-1651-457d-9187-1610fffeed63", "sighting--4dec831e-120d-46ae-8954-37cb6927d83e", "sighting--9694284b-c6b2-452d-ae11-0538d129fec4", "sighting--a9196ae8-9eb5-4416-a423-25358ca9cb0e", "sighting--50f614c1-7a74-4bca-9802-791851a79afb", "sighting--5c942bcd-b4cc-421b-8d50-3e0cfc1664a3", "sighting--ddea043f-3692-4e15-868f-63eb1bd0bebd", "sighting--a80a7a2b-4432-40e3-9a62-bf2288e70680", "sighting--4c4e8222-9fff-4473-aceb-1e7265a401cc", "sighting--63a0e05d-937a-4bf5-8e58-e28edf9b81a4", "sighting--54c4e63f-9255-44e7-9808-04d4964865f4", "sighting--86268084-074e-46d6-be3f-a2570c7ea84a", "sighting--4a3d487d-3239-4663-992d-fc832db73ab7", "sighting--f6f853ce-1227-449d-a385-0089e5548d65", "sighting--32e014f9-8874-4597-b6b6-f1037d50aaba", "sighting--d4d67fc5-7754-4000-a580-06033faa11eb", "sighting--5ae6b2df-17f3-4ca6-bd86-ce1bf84bf85f", "sighting--d78a1e36-5e7f-40db-928f-31b868aa7724", "sighting--bc2e22e3-1c55-4c20-a7f9-fea9da7a10b2", "sighting--2a895283-1e72-4e58-a08f-dda0ab6129e3", "sighting--98e4faac-879b-4b53-b3be-cb8dbeea2f7a", "sighting--61e018c1-3487-4ff1-a064-0bcb018b4efd", "sighting--057c9154-687c-4f43-bfef-38b44403f46b", "sighting--0f1bf042-35ce-4ade-983a-0173ec4f146e", "sighting--60bc6f2c-467a-4614-b9d2-baeb166615e0", "sighting--dc39be0a-8492-4ef3-8934-4fc0d5b40d49", "sighting--8e873069-1e2f-406a-957a-a89a7313e036", "sighting--c98aa81c-a2c4-4110-909c-7df72fb071c7", "sighting--5ca2ac52-7f4a-488b-a194-e61c0306091c", "sighting--1750183c-8988-492d-9a2c-7c44895843ab", "sighting--1557db6f-321d-480d-93e9-536804494391", "sighting--21153a29-4aae-4553-8b6b-c6ed0e9f190c", "sighting--be3674f0-699c-4799-ad4e-ea8cbed79c41", "sighting--f80ce43f-cbd2-465a-91b1-1c87b06f5507", "sighting--fd1bc5b0-7586-4832-b2e3-045d0193b8b7", "sighting--eac3248e-1ecb-42ce-87f5-687511ff6013", "sighting--3abbde23-5755-4f45-aecc-d722625c685e", "sighting--b29a4cc5-d949-44de-9bab-ba57688f02de", "sighting--b171a548-c8d6-419e-bf4a-6afe73eb5aa0", "sighting--5d0d34af-7a8c-43d9-80a3-6c32c49e5a61", "sighting--12f8013c-deff-4062-a0de-f22e1085058b", "sighting--40034d69-4b00-4c81-888a-4f6dd9d284f2", "sighting--667f9302-b604-4668-a969-5cb31bcbf3fb", "sighting--17881eb3-2cc5-4a5d-927b-f4e1d864d247", "sighting--c41daa3e-ccb4-4443-b68c-5271814816bc", "sighting--01a28ed1-99cd-47fe-bf45-2421a8ed3ac7", "sighting--ccafb718-91f3-43c3-9138-f2ef8f1d2f5d", "sighting--cdaeea77-2be8-4b39-8aa9-a6121d10f6da", "sighting--4142a909-a9c5-4933-9c9e-c4d816b0effd", "sighting--bc339afe-ba03-4648-a8ff-4369196c2230", "sighting--21b72d86-1ca1-41e4-89f7-8c231c52062e", "sighting--9d67edc6-5cbf-414b-96b2-3500f5b1b8d8", "sighting--41c26944-f915-4c5b-a37d-e230d365342f", "sighting--02b6acd3-2019-4cbb-9314-c1e99abad7f8", "sighting--5f28c8d9-7246-420b-85ad-423b41736103", "sighting--c5030c87-e67e-4198-a8c0-7c71a765753f", "sighting--78707ef7-fd91-4a49-9383-78dcf97dd87c", "sighting--2a24bcff-ff9b-4c01-a967-b6b0ed6bca4f", "sighting--118497a0-81cc-4d46-b411-08f9bbd30621", "sighting--b87f9556-4a22-4e1c-94b4-4eaac8071eb0", "sighting--314e5e4f-a3ed-4de9-ab65-d8b7ee2c80ab", "sighting--7595fe15-b01c-43a6-b220-916ff07b9666", "sighting--80f057c2-2ecc-4441-8c1b-03a9771d9958", "sighting--3cf9795c-6bc5-43c4-af87-bda5cff20449", "sighting--055c663e-7c88-4a82-91d7-28a79edaad4d", "sighting--8067cb48-e10d-4388-87f1-c02d6bde5154", "sighting--875f4076-c4a5-425d-ae87-e25b0c9244f5", "sighting--cbc276d6-f65f-4903-bdd6-7fd5dad1f988", "sighting--7bf55a53-2a18-4c25-8d28-7b4d444dfde9", "sighting--c1a90374-ae77-4782-87f1-87b7a97edb07", "sighting--8589b694-8f9c-40c7-9d59-e901a8415024", "sighting--f50d1034-c2ed-4744-96b2-d8de5d5bd38a", "sighting--4169a4d2-1ce6-4ae2-8748-e106db3c2274", "sighting--55fa8ca2-5857-4071-b417-39e15bda2439", "sighting--6b678176-2c68-45ac-a060-aa0442ce3f02", "sighting--57d8c680-3126-4af2-be8b-847399aba783", "sighting--7bb551cf-1521-4988-aabb-ef06a90a5e62", "sighting--0baba2e3-6dcb-4484-9581-148c54844ac8", "sighting--a3b49a54-df3a-4785-883e-41649a5f341e", "sighting--cb4f7f0d-3e29-4613-b294-86e72c448182", "sighting--99fe36ee-bc17-415e-8235-b0b80a76b033", "sighting--d4ec411b-7848-4f46-80ab-5df71d818a93", "sighting--a7156d03-6a50-4e34-b8de-82fda63a91ea", "sighting--55b1a25b-9c80-49f5-ab47-9db98704f834", "sighting--e284ec92-f137-4846-bccd-4d8a151bbef5", "sighting--bf5f6c07-9850-4a38-bb91-da9dc5bde65d", "sighting--f06d8c94-1a3d-455e-8fc9-47a2cd2cb282", "sighting--0b7a3821-e557-4d02-9cc6-f4c3305073af", "sighting--2b7ff8d5-d7e0-49df-bd14-aaa93536f0cf", "sighting--fb930a5e-46e7-4fbe-bce2-a1fd31636f7b", "sighting--af866170-60b2-4a46-aeda-e789d316cd22", "sighting--46921d37-0eb7-48c4-a1e9-950fa0bd95cb", "sighting--8d9995a1-8a05-4b0d-9de6-9c7832aab1f8", "sighting--37943e98-38a3-4c7d-bb2a-eea85941ade2", "sighting--b5002bf9-0dc9-4a36-8546-a1397053a3f6", "sighting--67b8a55f-9a54-4116-b092-c0e80688d1ef", "sighting--a92efa0e-51f5-48ad-868f-74ad0567a009", "sighting--33fe8952-c850-4abb-9c68-ea1645cbfc12", "sighting--c577a9c6-549c-4118-ac2c-52917a905b7e", "sighting--00fd542f-c4f8-4056-bcd4-f8c225a7a634", "sighting--4f95e7a9-468d-495e-9b03-89632a7070db", "sighting--e24dafea-c26a-4c50-950c-72127a7f09e5", "sighting--66d4889a-bc0a-4809-b1f9-397e2e1b5156", "sighting--d1de46bf-ac97-425a-becc-c4e5f5d38e85", "sighting--da462dab-6132-4b8f-b31c-cca2b3140cb7", "sighting--fbda8bd8-337f-4a97-bc4f-d6216211ceb6", "sighting--1ba1f9bb-11b2-4345-911a-835a8a84a36b", "sighting--f59c2f13-0dd5-4ec2-9476-5c4bc0d81e8e", "sighting--6ccb446c-c3e2-4ec5-9503-f52080e7df46", "sighting--382a6541-1754-4553-ab84-9e305643ade0", "sighting--fef250bd-bfb2-4a3d-be1e-979d7b54a004", "sighting--9c718c7e-65eb-45fb-9454-60b41ce7abf3", "sighting--eebecf6a-1ccf-43a7-b8b0-7f6e3a5d756c", "sighting--673fc680-690d-4c90-8685-a2dd45e0abc4", "sighting--96d81f20-cfac-46d5-85fd-0aaa3de58a6c", "sighting--3bd034ea-6256-4128-bccd-1d5cad7ec85c", "sighting--d7105f12-d084-476d-9154-16c23b775aae", "sighting--0e71a586-fb61-45c8-aa2e-b7cc54000762", "sighting--633c6963-e4bd-4c0e-b649-8fc1dcaa98cc", "sighting--0355ab5d-cad1-47d9-b136-018012f9cd82", "sighting--2dfb888e-8428-462d-a3a7-c57bfe00bd5d", "sighting--e0a5705f-d531-47f7-a73c-1e903e0d5c1b", "sighting--357fa106-8a89-4c02-a5fc-2b930cf0eaa0", "sighting--5cd0d355-c7cc-44e5-9081-f60c1d39a35f", "sighting--470b1a79-5bcd-4bf8-9a15-66ca3c0f7ac3", "sighting--7940f5f1-a165-4918-9b9e-803a78d36c59", "sighting--48d3c0c8-b04e-48eb-9b40-6bddd1e4b1dc", "sighting--24741257-e51f-446b-9085-052a8c295d2e", "sighting--de0515da-4ace-4e7a-8aa1-652ed204b537", "sighting--f50a7880-44e4-4452-9827-42fb9ba02ec1", "sighting--fea52e6f-f75a-4e5a-9118-2bfcd9052b12", "sighting--37bda3df-f8ad-4617-b4b7-e59e862a863f", "sighting--2c27c758-72ec-4a5b-907c-9d597be2e477", "sighting--0971e779-b4e7-46d5-9432-b2539fdef899", "sighting--a45e3081-36f4-44ba-b11c-9a5bb582790b", "sighting--3c1f5780-0fa6-4ae8-b226-227b186c1b64", "sighting--96d0f825-0d50-460c-9968-c29d3dcf5921", "sighting--f0a0cb53-50ee-4c6a-9ab9-ecc29326dd46", "sighting--f55d207b-2f8b-485f-94d6-70d279b30635", "sighting--5c4b3fc2-14b0-43d8-8c7a-a63f8fb21b62", "sighting--b13bdc23-25d0-4552-a74e-cc0707214821", "sighting--b1e8a036-ad6a-4d82-af9e-3acef7db71aa", "sighting--2d7b8dd7-2148-4ed4-bc4e-0f5faf1873ad", "sighting--6043f7fb-172a-4564-b2b6-0ee8faa6ca61", "sighting--1fad6f35-d9e4-4948-a27b-1cabc0d0e5a3", "sighting--00905f7d-7f71-4668-b468-8cb73f8a5b99", "sighting--ed949890-6860-4e8a-a8d0-f0a0a5bed1d8", "sighting--f6da3f62-1a61-4eaa-a421-899f485e03aa", "sighting--0f9747d5-2213-41f4-9367-8d54c7e019b6", "sighting--b9773677-571a-4cd6-b3d0-436ac4e472af", "sighting--84d3e43c-6683-40b9-b13b-3ed4c632eadc", "sighting--f1749c5a-f348-4a7d-9edb-c7aab7d86848", "sighting--2a428cb3-0c9d-4926-9dc3-ca7d5bee9b2c", "sighting--ede9b935-f775-4fa8-87f2-ad0587af1beb", "sighting--e6706495-14ff-412d-b34b-192055564bec", "sighting--1a88dcb5-6255-489e-8f7e-2de9d8f1da86", "sighting--562bfca8-a60e-48a3-accb-423473e1e7ae", "sighting--d298e2d2-9763-466b-846d-b0325a949bd9", "sighting--6f78c3a1-2fc5-4c06-a124-b81d45093514", "sighting--7f26ac28-59aa-44fe-a17f-a4c23a57a5e6", "sighting--4ed23b12-d822-4ef0-824e-7d8a10476ba2", "sighting--8f857221-a678-4b62-94e3-f0de2d6bcec3", "sighting--937759aa-b206-44cd-ada7-c86b37e3ad3f", "sighting--4c19560b-1550-4672-b7a1-c0992ea7fa10", "sighting--19bcc39e-6111-4bc9-918f-1a3ad9da3f0c", "sighting--e7aad005-1eb0-48d0-be60-66bc09fefa10", "sighting--2e36ddf4-31a4-4243-8c3a-238d050e93f1", "sighting--f7a11620-c2c1-4b8e-9c67-a558c3305ccc", "sighting--d5a5aacd-902c-49f9-b226-a6d982b7538d", "sighting--53395bca-f2cd-4852-b5da-98019368dd3b", "sighting--220ce53a-d6b0-4317-a2b9-445560b77d1f", "sighting--fa0c8274-c795-49f1-a454-b1130c09e78c", "sighting--c605a089-cdba-4680-ac80-0e718ed2590a", "sighting--661d5c67-dbac-493c-b513-d95223e85a04", "sighting--11e52fb0-ca91-43e6-9aac-95d895c20696", "sighting--7fd8a30c-5da9-4be2-962b-bb0ca71c93e4", "sighting--dfd7b911-c3c7-480b-a7c7-61bc83418051", "sighting--47c0873c-d6e4-463a-89a6-8d844ddf4f58", "sighting--6a7f26b0-696f-410a-957f-ce076537f433", "sighting--374c4871-ac7c-432b-b1b9-875ffbf030c0", "sighting--26bb7e0a-4852-4985-86da-7b107b21050d", "sighting--b4ead17e-c42b-46df-b431-eb214bfccdf4", "sighting--aa8f54d4-27cd-4977-8b1e-0b1c427dc631", "sighting--bce73b59-03ac-47fb-b82c-38dfa12ad9c6", "sighting--670cc5d5-d48a-474e-bb47-f40fdfd0710e", "sighting--5dc9695f-4e91-4a2f-96c3-deb8459c8c54", "sighting--70902287-ecfa-4859-beb8-5a57b0e42a91", "sighting--99c4e385-7e14-46d5-8c94-66a08ab1bb7a", "sighting--bdf967df-069b-4c0c-8ea6-3e129e2bd8f2", "sighting--b37eac77-5140-43f4-a871-609b75468a0a", "sighting--e5eec096-97a0-41a4-807a-f3a18c827502", "sighting--41ab7aef-9c03-42c5-ba76-caa04e96d986", "sighting--95b96f4f-4675-443a-9f93-09ba0faafdd6", "sighting--538071c9-1a99-4888-89d0-67b12e4ed1bc", "sighting--bda081bf-887b-4dbc-b8d4-b700c9959c43", "sighting--759a9a40-dbee-46f5-b5a9-7c4ef1903511", "sighting--dbd93666-f2e9-4007-a18e-fa1273ec8b30", "sighting--c18741a3-c665-478b-9665-b57fb71ad7a6", "sighting--bc74175f-30ef-47d1-ac62-da3b3364526b", "sighting--5d78c25d-d0d7-48f6-a38d-1acea8121e0b", "sighting--952a759d-ec4c-458e-8311-a556d367372c", "sighting--4ad5b097-6bb8-4b34-8a1a-313778df6b89", "sighting--c64b530a-e2dd-4ca0-a40e-cfaa37e0d4c4", "sighting--ef8db1c4-e260-481a-bd4d-c837874069ab", "sighting--0d905d26-d6a4-43b2-9d99-f3b4bb3484f1", "sighting--daec0002-8076-47a9-868c-16815b7bb34f", "sighting--92764777-8db4-425c-b31d-85223f7d542f", "sighting--373bffc0-0561-40f9-9abe-1a77e4344670", "sighting--3621e1fb-2d80-4155-a2ab-706808c3de68", "sighting--151f4e55-6812-4ff4-9d6f-f1c68c37bd86", "sighting--7101cc5f-5729-48a4-83dd-c4526a35fd5f", "sighting--d3b6971f-0366-400e-9de1-4a6237312f34", "sighting--4d8610f1-efa2-47dc-960b-b8b21f3b80bf", "sighting--4c289c5e-2c62-449a-bed9-636cf0eea87d", "sighting--319ab715-83d4-4dd6-9ec8-95abe1e4bc12", "sighting--cb5a80a8-5436-4978-9de7-15cdf464d165", "sighting--5d78b992-3669-41e5-8c8e-09421fe73c97", "sighting--5b3d6109-9e4c-49df-abd9-9a44b59c9af7", "sighting--4e75c08f-97f5-4cfe-a0a2-318b2d078b6e", "sighting--ee70f2dc-f517-4811-ae14-3cd74dd9732f", "sighting--1e4cbbe1-7f2f-4941-836f-14fd37f95113", "sighting--33ad1a6c-f8a6-4d68-b59b-2b2e24a4cd8e", "sighting--a28553e7-a0f4-4b68-aac5-fd475e842a5e", "sighting--2c275aa0-fa21-42bb-a9d3-7bc15db98a1d", "sighting--e791e54c-c622-412b-a6f8-833b9605972d", "sighting--ef978b99-b8a3-42bd-bf98-d0c77c372e93", "sighting--da76707d-bab8-4925-864d-7f97125cfa45", "sighting--d62a22aa-88d2-48e9-879d-5c8c3ec3bf78", "sighting--fddbe080-ec47-40f8-b7b7-c79d7f9916f3", "sighting--61ccd3e7-c8de-44d8-a2ab-3f89c14e7de1", "sighting--6ed916a0-82ff-44f2-8aea-ab4c32f47eb7", "sighting--747b6aca-f333-406d-aa8e-8045c77e10d2", "sighting--faab7d6f-6897-42c1-b4a2-77c33bb60feb", "sighting--f38f155e-374a-4930-ae04-81cc97219237", "sighting--6afa27c8-41ef-485b-b349-500c9ed093d0", "sighting--73561a86-1c57-4e99-b738-c5d40d653b80", "sighting--082df280-12b1-41f0-a646-fe4a3317a3f0", "sighting--154811f4-27ec-4dc6-a576-3e3ff5eb1177", "sighting--c1d1c84c-0437-4ab8-b729-aa10be6397e3", "sighting--a64f9b02-8c91-49e2-b3c5-a81d307cd82b", "sighting--d14f2ded-6cd8-4119-9348-3d79fda3bbf8", "sighting--ce9d1ef7-6ab0-4ff4-aea3-184dd940c3d8", "sighting--c870606f-54ef-49ce-a6e7-593e43ab9cae", "sighting--6143b3b6-8bee-443e-b45d-664fcda79fef", "sighting--7f3257b8-6632-42c7-8963-20a7de2d2efc", "sighting--0b7c27a0-b956-41e0-b310-bd280a50b302", "sighting--e603163e-afe7-4fc3-809d-d5e60e98b45c", "sighting--ec28018d-3b60-4f79-9ac3-affaefcf4957", "sighting--7957e166-17ca-4af4-8af8-7a863a51178c", "sighting--71841eb4-0249-43a3-a6b1-2bf9a67915c2", "sighting--20df26a2-5130-47b6-928c-c4afbd707926", "sighting--79bf3912-38b3-4945-b5f4-f94412edc20d", "sighting--f9fce62a-b174-408a-b59d-96be94d9ab9c", "sighting--5e4d3684-8efb-4971-b7e0-cef793043929", "sighting--72aa2a30-35dd-4522-b4ad-b196ad8082b8", "sighting--e4e95992-edd1-4427-9c59-ee17ffdeeb92", "sighting--47e8e959-048a-4fa1-aae0-2121b1f18155", "sighting--c02364c3-b3c6-45b4-bac7-62949414aa50", "sighting--cf4eaec8-22c5-4b9d-9e57-600bb43dfa7f", "sighting--8db8f429-e011-42f9-a9c2-310d9771f48a", "sighting--d8701606-6f5a-4894-a317-469601d05f62", "sighting--17415b5e-ebae-488e-a9c2-5ae8e2cbaa60", "sighting--6d9cfee5-5f1f-4347-94d9-b352fdb02425", "sighting--43444635-3162-4c7f-bc48-5a18e166bb7b", "sighting--f0058e81-84dc-46f4-ba5c-fa66e5e62b19", "sighting--0fb1bb35-cf23-461a-a228-b292971474ac", "sighting--fcca6389-b077-44a1-b602-fe0b56d7f7c3", "sighting--8adf2eba-efe7-4b85-a64b-ccbbd9dc61ef", "sighting--2cc17871-4ac2-46f6-b06b-39df74a1f7ea", "sighting--b5acbbdd-6ca0-44ff-9f61-953f4deeb539", "sighting--9b678052-e734-4f3f-99dc-0ddd5b4c128f", "sighting--72079b7b-6113-411c-a69d-8bded39fcda5", "sighting--e84c99a2-f2ef-46f3-aae2-e9eed5927535", "sighting--94a9bdab-f576-4ed7-bea6-4696c9487e5a", "sighting--36a3749a-11e5-4559-af22-d06fa3f0bf80", "sighting--5c65ba68-4078-49fc-9dda-94ec4a73cbfa", "sighting--a199567d-0f9a-4a41-a92b-35490ea709a3", "sighting--55139795-9282-46cf-a40f-c48decdaa642", "sighting--7126385e-0843-4fee-8a5f-a9104ec02639", "sighting--86bd2df6-2e41-4398-a900-5a47b68300ca", "sighting--64e04635-2879-458f-a0f9-cb0d6692f7dd", "sighting--21ec734d-ba35-4e6b-a54c-8ce649901d47", "sighting--c4e368f1-9ab7-4dbc-8872-f80cdf6bec8d", "sighting--2aba1e54-db68-4f9b-90d6-3b7e831cdda1", "sighting--4d352245-7c4f-43df-a6a0-e9ae628019c7", "sighting--68f59b1f-bc83-47eb-b7cb-21f7842ddfe3", "sighting--ff8224be-9896-4284-812d-48bfa8b6fe6a", "sighting--9f7aa9dd-1287-40dc-b7db-8f85839bbd22", "sighting--30f4c570-6c98-4072-95fe-a3e69c82b619", "sighting--9df7eb42-c56a-4b94-ae35-193304684cc3", "sighting--14abd996-ad0b-4572-983d-57f87d27efa7", "sighting--64e09c25-b923-4e1b-a307-8c19deddd1b3", "sighting--3e250823-7555-4642-9929-40639528deb6", "sighting--bd594c77-5655-49c0-893d-c894916b24a5", "sighting--4c536de1-e7b0-4609-a43a-8acdf2d42353", "sighting--05e77a6a-fa7b-49eb-b51d-d8a5122a086a", "sighting--a2eb406a-7ae9-4f6a-8ebf-972ab53c966b", "sighting--da7c4111-5355-4b7d-a396-80626f8a0fcd", "sighting--60f3904e-c7a8-4c2f-8492-8612fca8c63a", "sighting--987d5db8-126b-4c51-8441-f643c8036120", "sighting--cb70146e-db62-45ce-ba5b-7adfce6b1c4b", "sighting--5aac7a3a-eca3-45f2-88d0-8c4c2db7f733", "sighting--b0160bc3-5288-4f79-b701-b7145eb506e7", "sighting--fab21e34-5bfa-4bb1-b4f8-ecf6379a07d0", "sighting--fac6d246-479a-4e2f-8da4-c51f8fc89431", "sighting--a8e96112-ef57-444c-8757-d5b5f6d1f7b3", "sighting--8a51aaf5-1990-4b4e-a40e-479c493a0c17", "sighting--fd7edb75-d195-4356-a054-341b7cb030c7", "sighting--fd68f2df-62f6-4d7f-aa61-3ca036bfd7a4", "sighting--adb3b906-17c0-4ebf-b1aa-7e270366f77b", "sighting--e49c6720-c1cd-4fb4-98f2-cdc49a165f7d", "sighting--b6d26651-9d5d-4e1a-bbc5-5724e48bec14", "sighting--1404d5cf-a466-4feb-9006-3b63cd35373e", "sighting--e8b8e753-63ec-4c44-86bd-f98ec0434c04", "sighting--f7c09a1d-a307-414d-94df-99a040d7deb6", "sighting--8d44a3cf-9bcf-4399-869b-938cd4bb320c", "sighting--140513c9-3373-4092-8582-0e0e6387b11c", "sighting--a85b1498-8e10-467d-b6ec-1c93e5ea18cb", "sighting--01109eb1-a538-4c24-898e-507387dd7be9", "sighting--90d1d820-3162-48a9-8066-ea7186e46fbc", "sighting--0a30f3f5-40e8-4c2c-ab87-de2d9c70954a", "sighting--9d1126af-56ed-4d52-a4a9-8986961d7d38", "sighting--917441b0-315c-46c3-a187-b802d074ae9b", "sighting--e3972b02-602c-47c3-a1d1-c8486beb751b", "sighting--1c8f2fdb-d5d3-4224-82b4-7b16cf844539", "sighting--df3d2026-b1f1-49af-8ade-3efcadda0904", "sighting--1d7dced6-c982-46b4-a842-e99003d69a77", "sighting--2843dc06-c859-466b-a4bd-80d7541226d2", "sighting--ac7f3bfd-be0f-46b4-b76c-24d26dfae28e", "sighting--2c7d5ac6-e069-4774-b574-4bceb61544e5", "sighting--968977e9-de8a-4e1a-b828-24cf4d16e159", "sighting--50e45610-1086-449c-ab11-bb0da08f4d41", "sighting--2f13d073-1fa6-4a8d-b40c-79a72b6f1d9b", "sighting--b80fdb45-dc7a-4ce5-921d-126c33da8e6e", "sighting--538dfd6d-2856-4431-a788-8fd98f96db15", "sighting--a43252cf-4743-473c-be3d-85c688b3d9ca", "sighting--39a321b5-814d-42e2-a756-aceb2cc67299", "sighting--6b84db5d-a9a8-4554-8a46-11c96f18af4c", "sighting--c02e4b95-47e0-4882-9b63-214334d2403a", "sighting--e09fb545-c6be-4f90-842f-ed1b8315bb85", "sighting--984f3583-a7e6-4a5e-a1de-2ff61d0cdbac", "sighting--76813200-8442-47a3-8e4e-f9e8bb12d138", "sighting--3340e0bd-833a-434a-8d64-3fe625e68441", "sighting--8a5e21cb-49b5-4c68-9863-7059b1096716", "sighting--adfe53d3-62da-4fb1-a5e0-de0d5180ddc1", "sighting--75c1e45c-ab7e-43aa-8ae6-2bd6ba8db79d", "sighting--2a730add-c5d3-4d52-aa7c-4af2c1e242da", "sighting--cd61c882-9827-4693-8668-9cbf58e94568", "sighting--590d64d4-281a-478f-bd76-038ba071ce5b", "sighting--48afe52e-35a0-4041-ab05-76c542dc443f", "sighting--40c69f82-dde5-433c-9487-b952ef222e29", "sighting--41b8747a-8f52-49cc-b35b-18cad040f72c", "sighting--13f52e8e-4ccc-4f02-8050-95e0a28ebb40", "sighting--6ecbaef0-e1d3-4f6c-846d-38e24cf446a9", "sighting--900ced75-a248-44f8-84c0-c985c88e1390", "sighting--186756d7-1c50-48dc-8a0a-3c7b2f6a4ddf", "sighting--a4528ad1-75a8-4ebd-bb78-27bd6907b8ff", "sighting--f1f0d744-8ff2-45c6-a4ce-91bddd83eb3d", "sighting--4cf642ff-f369-44e0-b2aa-3a9e3cf3e76f", "sighting--064db930-46f4-4dce-8b03-c948a7c27369", "sighting--a7297b34-c1de-494f-8ee5-daec93d8b100", "sighting--f03129fc-4c97-4dbd-a81b-e590e1905062", "sighting--86390460-d72b-4045-b49c-215a7df6d993", "sighting--cfc77667-1916-41a8-9ac7-acb5b963e717", "sighting--888c175a-4a9d-45b8-af86-64f601e593f0", "sighting--ddae8f6c-c5af-4e87-852e-775ca6f13229", "sighting--38eb17e7-edec-4b24-9aae-b724682cb69c", "sighting--207310fc-81cd-4310-9188-af04e7cfbe56", "sighting--edde3409-0f73-4aff-9ab8-ec85245f1cbe", "sighting--f40ec186-2449-46eb-a994-c69c8385fc88", "sighting--75fae485-3165-4afd-b242-fba94c700615", "sighting--067a5ab8-e75f-42e0-ae60-d455e73b1965", "sighting--79c064bd-ec70-45a8-b6d7-a06b8e0b81d3", "sighting--4e28676f-7da6-468a-9d33-13496ace2049", "sighting--860bfd08-fcba-4629-863e-6a59e0e67f7e", "sighting--cd0e7af1-dce2-4504-a964-6692c413869a", "sighting--90464756-8ae0-4416-9f69-819bd7df0d98", "sighting--26b0e915-551c-46a1-9c2b-05a26fd18e15", "sighting--1d1c3016-a4c8-481a-ad3c-ae3d732e08e7", "sighting--51d95f19-46f7-4140-89e5-14959e5ddc90", "sighting--b18db43f-7a98-4738-8f08-4ba75e114b4e", "sighting--819f333b-f789-400a-a389-055abb2be69b", "sighting--7b2ed1b5-0099-4224-9457-ca84cdc910a8", "sighting--f3d12c01-cca3-48db-9f78-6bbf90c978a5", "sighting--31be4755-4a5c-4d07-829d-f16b5b860e0d", "sighting--e91c876e-6e83-4a74-960a-2d3a6b956e71", "sighting--a4578047-0b45-436a-9c1a-cc4c879d67ac", "sighting--adfe8959-7525-4249-bd6e-face4263d1ec", "sighting--c53a6b5b-a2d0-46e2-a8b3-c8588082b5b2", "sighting--d98cf542-3196-4f8d-998c-191b67e8b77b", "sighting--c27e3b3e-990a-43c2-ae8a-6ad8425bfd20", "sighting--20cdddd9-9081-4710-8940-66a45c00324b", "sighting--00241494-4298-472f-a049-482f274a56ad", "sighting--25192267-1aa8-4dbc-82dd-6e12dd0246e6", "sighting--ce66ec6e-2b8e-4ffe-b2c2-586ac6d57b53", "sighting--f9fb9f70-b0c5-4e32-98d0-61b47dbcac91", "sighting--e2c94870-0b44-4ae5-9a57-5ed251bdbea1", "sighting--0d776ae4-5266-47d2-8560-90116c2d2ee0", "sighting--19fc672b-4f97-4f37-99f2-7ff9faf68df5", "sighting--4bfa23c9-868c-4805-bfe0-06b46b028810", "sighting--e7d53baf-5c32-458b-a089-66630b0c5427", "sighting--ed819a34-528c-445c-870e-33ccb07b8eed", "sighting--a08d48f2-26fa-49be-8437-6fb3ea98d59a", "sighting--c82139e2-ab6d-4ef6-8299-58a31aae56f4", "sighting--8dccdce8-f357-4b7e-9ee5-b0f6fb129d22", "sighting--9caa6f51-0ad6-4ba1-9d66-75b00044a8a5", "sighting--3ad5713c-d8b2-424d-867b-1baecde61d7d", "sighting--c4d34ce6-c9e8-4114-908f-6ddc2492860e", "sighting--8ed922ee-c0f6-4a54-ab1c-7b61ac180528", "sighting--71cdc502-255a-432f-a853-0fbdba6eb2a2", "sighting--d90c9cd9-1e5f-46c1-9cf6-490be4782d3d", "sighting--6826c442-cb5f-4c67-a82d-26c8ee4978eb", "sighting--2c4d71c8-d128-4be4-b992-1f25aa84821f", "sighting--eb6d51ad-e40c-438f-b550-4063c5039972", "sighting--7bbc66c5-9efe-439a-9d0a-46c05a0ec275", "sighting--0632c695-5797-4dfe-b15f-1cadb8f7b83b", "sighting--8a7ebf8e-c047-4960-aa48-bfd37de54d1c", "sighting--ddd108d0-25d6-42cf-981c-2f719e0ca3e5", "sighting--c1370ca2-fcfd-4ef9-bb1b-a72d576fccb9", "sighting--453bb6da-b5f5-4661-9ad1-924c8181778e", "sighting--ea3e4140-d705-4940-a160-8699088c3208", "sighting--c88bd415-7c03-45c1-aadc-52dda6e031aa", "sighting--25c52837-484e-4bbd-bce8-8dbc768449b3", "sighting--6975cb07-d346-49fb-87c1-2cf229462497", "sighting--1aa0c8cb-3f95-4aae-baef-d5340d4526e4", "sighting--eabfd1c6-13f2-41cc-b7cb-939443b15590", "sighting--2e56c20f-e39f-44da-9fd7-097ef8c8c483", "sighting--8b4d5bcc-63e0-48b4-b030-1a80eda64f9c", "sighting--d6a42409-895a-46c4-88d1-26c0cc12bdea", "sighting--bc4cec5b-78be-49d7-a922-c2472fc12aee", "sighting--be75270c-cea3-4367-ba0b-0eff01426430", "sighting--a49b6ffb-f826-4f64-b461-29bb69e9ffaa", "sighting--562aa411-bede-4711-85fc-3b5a99a6d032", "sighting--d31be14c-2172-494c-9c12-b6e6ef471af7", "sighting--cb980293-87b3-45ee-a054-aa92700f0391", "sighting--00ab83bb-e816-40b2-99ae-1588cda6b973", "sighting--6b47ae7e-f03f-436b-bca5-ef3a5b98674b", "sighting--f97dd5f9-84d0-4c87-b5b7-310edfcb81b6", "sighting--2536fc7b-384d-4d91-8cac-230a5b94f252", "sighting--0e728e7f-cf7a-4d5e-8989-c2dd7b2f3b37", "sighting--75bee165-8b31-4bff-8989-4263e519823a", "sighting--bf683e4b-2b8f-4197-88ac-e44ad1502d7a", "sighting--3214f94f-da47-48f4-b033-f88efaecb62a", "sighting--a75803ee-c9ff-4238-b4a5-7506c3ba19c5", "sighting--18e20cda-be36-49a5-8b62-38e2fa6c25cf", "sighting--dd3b8ca9-d44b-4999-8179-edad64c3f50d", "sighting--f779b497-f8db-411f-a539-54f0454af9df", "sighting--b4a3376a-211a-42a3-ac8c-dd6de7766915", "sighting--31baf032-6e00-41b5-b843-27d4a0976c1f", "sighting--0586e29f-c279-4d5d-9516-e249e777b5ef", "sighting--9e28bba0-9303-408d-abf6-a30aabdaaa3d", "sighting--9bcc07b8-97cd-4f4e-a9a1-d2ad86cece94", "sighting--321494c1-bea8-4d53-a822-7ce8550365e0", "sighting--9498cdce-7af5-496e-9395-b424d19c54b6", "sighting--491e757d-b2d2-4f5e-b91c-b097a678affe", "sighting--c0889acb-c70c-43be-928b-c5cca024151b", "sighting--9bd93b62-5242-4251-b5af-8b715a74a83a", "sighting--b759edc2-a8ff-4511-b4f8-b5761bc8b557", "sighting--54c6e2c4-7238-43a6-a6a9-bf085fdfbb8f", "sighting--6746657d-1699-4a3f-8f51-c71b2b785766", "sighting--ecd40174-49c2-4fe1-943b-9c9ddaf3b777", "sighting--5356d8e4-0e59-45b0-8225-eab6f2050bbf", "sighting--356bb767-15c8-475e-a3e0-25b89c16b105", "sighting--f3514b9a-bb1a-4c54-984a-f87ff6b569a8", "sighting--b0e23c8a-4f41-463a-b30a-4ef6aaf9f2ea", "sighting--32bf94b7-958a-439d-9e7a-cbc513ce92f9", "sighting--0154dbde-9730-4637-87ac-e672d7992be7", "sighting--c724ef64-4544-407a-b54a-97a99a108656", "sighting--c3225641-38bd-46c6-9ac8-6b91825f0595", "sighting--cb678da6-4405-49f1-b2e1-493d83a2a97c", "sighting--730ece79-abca-4e9a-9c6d-ca03f50f2e81", "sighting--46e2b8e0-15bb-4186-937b-1d24e8282e86", "sighting--1b450af6-fe7e-4072-ba33-127cdcfe20ba", "sighting--9630753d-ed0d-4114-b841-1d7cb8e40b2e", "sighting--e6d02ae6-fea3-4efc-a8ec-f3d489cf5926", "sighting--4c76bc94-bdf9-4832-8dfc-bb056fc98ff4", "sighting--4f1bf3dc-ddef-427a-a5f6-bea98d7fc2c5", "sighting--8f89ecc3-ef14-47e3-b2a1-911fc00fee10", "sighting--42114bb9-960b-4418-b9a6-597db58da9f0", "sighting--8ea89c79-9f75-49a3-b67d-32b7b03211b2", "sighting--07e7ad11-43b4-4839-b61f-8e7e2ad66410", "sighting--5176f043-764f-47b9-8938-4b5f1cc8623c", "sighting--aa00468c-2292-4d11-9d83-8fe07d8b471d", "sighting--376e415e-1763-40d3-bb87-2c9b5434f9c6", "sighting--0c8cf7ca-f254-4437-ba24-a5dcfbd44941", "sighting--a9b2f4eb-49b2-4109-bdf6-6d9ba59c5e92", "sighting--ca648803-100b-4841-b0c4-be7a243963e4", "sighting--b185435c-b99a-4c37-9018-0b3f92cd474c", "sighting--20364c77-cfc0-4a68-b512-fd87af3ec135", "sighting--4948bc55-bce1-4332-8c26-b658de95d082", "sighting--57618ea5-0fb1-41d3-b419-a0233a20d8eb", "sighting--ac2615a4-6482-4ae8-b048-7e3174da6d2c", "sighting--68e22cea-2ccc-45d1-9dc4-f63e6d3a0443", "sighting--fedfc0d3-30d0-4f26-9644-1ec7126789c4", "sighting--bd5ec3ee-58e0-42d8-9564-9d6c4fbe09d5", "sighting--1bbe956a-92f2-4ffe-9768-f10b70cd1772", "sighting--1a05fc7f-731d-47fd-bfaa-4db65d0cc639", "sighting--80231f30-c184-42ca-8e27-3997be048bd1", "sighting--e4285a05-9fe5-4788-9746-519ad9ef93e8", "sighting--fbe93fac-b569-4a83-a666-a41ff9407bc7", "sighting--c4b6c5fb-820f-40c6-a028-542c1720b7e1", "sighting--ce6aee1b-906e-4465-a23d-57d584d7819f", "sighting--6c6477d8-a5e2-4b77-a7de-fd041319e9d2", "sighting--6b37aabf-9c4d-4e6c-8a74-d8a2e150f615", "sighting--9fe816e9-f240-4815-acf4-331277f21e79", "sighting--ef1b09ce-34b0-49bc-8ccd-f41c032b0e11", "sighting--0c23336b-b606-4cc2-8043-38d88cca5238", "sighting--e1179e70-d657-4820-b2f2-7442587cd2f2", "sighting--60f5c9f1-aff9-491b-9217-1a01ec7c4f77", "sighting--a1c006ac-f72f-4e64-97c0-ed164dfc5cae", "sighting--38cdfc4b-2190-44e0-a04e-c87d9c28a751", "sighting--01c81987-212f-43cf-87cb-19c4d5e51d33", "sighting--3d1aae4a-7200-4147-8409-a06b51eb74ce", "sighting--f6c52465-8186-4285-8155-6a9b0d685424", "sighting--a6044205-5a43-47b1-a1a8-e813f53e4d1a", "sighting--e5e59018-8428-476d-9da3-f97e82d67a9b", "sighting--f762cc0a-44ca-4a8e-b2d4-4d20f0517f47", "sighting--0b31259f-8249-4656-b24a-92fa9e412456", "sighting--716dc789-0075-451a-8a98-4ca6ef306262", "sighting--d920937d-0e1f-4da5-b0e7-2446a687c314", "sighting--87d9f85b-7ee1-4893-a199-872713970750", "sighting--0d1be5de-e9b5-4a02-b835-742bd5be269c", "sighting--ffe71a04-1ee5-4347-aab4-b9016d8a5ac6", "sighting--c9ef56d9-5160-4551-97fa-46c2de0a8d59", "sighting--79cf4e43-8de5-4cc4-8221-95559e74be44", "sighting--909ae5fe-1862-41d1-9db0-85ae02d01453", "sighting--615ed7d4-a756-42ee-9a7b-ec3c36d4e125", "sighting--2d0edc48-4c0c-47bd-a4df-590ce8b714a9", "sighting--ef3f47c0-efdd-40bc-8304-b8542f3c6cb5", "sighting--595a61ec-3b20-4719-b964-89d90773a4b4", "sighting--981db09d-299b-4041-9302-5eba0e81fa46", "sighting--5371f858-5799-4e20-864a-b8f3b2eace08", "sighting--207a133b-c5c6-4573-80bb-3ac7fb53254b", "sighting--d83fe903-1e4d-491c-9cb0-0b2a5079bac2", "sighting--d38c3a90-51c6-4372-b11a-804748cb992f", "sighting--6a394166-502c-4a72-b702-080dc4c6e153", "sighting--a102bb83-9604-43ef-a881-cdca64739ef2", "sighting--ce5b12fd-8527-480b-b60a-2dd34ff8c5d5", "sighting--21e60fe7-1b6a-4dad-8fb0-9b720a038d2b", "sighting--5a1c2c5a-3f6f-43a3-8185-f2bcf93622f8", "sighting--681a852a-c6aa-4b7d-aae5-ae0230331c65", "sighting--b2917383-a8cf-4e69-aa3f-f040a109f6c9", "sighting--20d5342e-e062-4357-9c25-88a21234c297", "sighting--4c8f0a92-8ba5-48df-8c90-b6e6a9dc7e44", "sighting--7e86b0d7-178a-4fd9-8c06-03d0c3079f7f", "sighting--c3131252-c1a7-424c-abc9-95eb699d6de8", "sighting--b91967a8-6450-40d6-ae56-62a374acdd42", "sighting--bb20be9f-dfe6-4278-8dd3-911ccf28cb0f", "sighting--fe2f8fc4-00e5-4393-877d-5fd4dbca6eeb", "sighting--a9f0e776-2e6d-4c68-81e1-aaa41eec1065", "sighting--825713bf-86b8-40ab-afca-aa8402e53062", "sighting--7b1b9fed-4ae5-41ea-bb50-645dfb3be9a9", "sighting--9ada6618-cdb8-43ea-9c52-f96ed7c34afe", "sighting--d42b55bf-314c-4686-8293-d3d733062083", "sighting--53d67fd2-f3e6-4004-9291-8812f4add443", "sighting--d25c1cb9-390d-420f-ab86-cb2110523810", "sighting--f8d0126d-c4ad-4b1a-bda9-515226e1e9a0", "sighting--1e6bd862-ba0c-4ecb-bc46-75bc283bcd74", "sighting--3baea8fa-a433-43d0-ae2e-ad635667d8bf", "sighting--ea9b8ed7-d76b-4516-b560-30818cb1ec4e", "sighting--66918fed-ae05-4a1f-8c88-24fc876ac874", "sighting--45ddb9bf-623d-4c33-8ea5-021a6335525c", "sighting--67ba544c-15e5-4a84-b812-f916a8ed30b3", "sighting--9a046ae2-eb92-4fdb-88bb-13fde3beac37", "sighting--2cc03330-a31e-48ee-9582-1d17667d013d", "sighting--521d2a72-248d-41b0-a9de-e12db80ad9ad", "sighting--feff74bd-523d-4a8e-8584-d01778131575", "sighting--5086c673-dd59-43f3-87d7-1ee449d1825a", "sighting--87ce4ada-ae7a-41f1-9f35-9830e6166c4c", "sighting--5aeec705-1d8a-4aac-ad91-e78d9cfc090b", "sighting--de319b6f-ce13-4c24-8928-b319204c80ef", "sighting--72b47a07-74e8-4434-b884-192deffd6036", "sighting--37707e12-a0bf-4a71-a7d3-5afc459f0b12", "sighting--a9ff60cb-271c-48e7-8818-2317bae10f46", "sighting--58900b08-8385-484e-8584-9a80122140a2", "sighting--9fa36cd8-52a3-487e-8fad-5266e61d2a10", "sighting--8e6edf77-46a0-47cb-a0e4-b653c694e016", "sighting--6c16a3ac-fd69-450d-ad56-31f62aa5dac5", "sighting--f50f9325-fbfd-44da-8114-2ab2b27f4616", "sighting--afb455b2-fab2-4140-8f9f-814644a24554", "sighting--ac94f699-df74-4f89-bb89-f6e0c8770647", "sighting--38cdf43d-5d82-4ea9-af15-da12a2058552", "sighting--746587c1-7283-4bf9-a522-391008c93ae0", "sighting--b4b76f5b-1878-43db-b76a-4684082cca19", "sighting--d80f6297-37ca-4384-ac52-99a9704522af", "sighting--32ff52d4-5adf-4316-b8bf-e1f54420d5d4", "sighting--492086f3-50a6-4c97-a83c-b87396f1fa3e", "sighting--11ddcd4b-de9f-42a1-be48-a65df013d89f", "sighting--6207071a-b7b8-4750-8450-304624e1b15e", "sighting--e67d9974-6940-4aab-bd4a-c5222d7c66f7", "sighting--9a857584-7c20-4070-a6c0-d51fc6b4e61d", "sighting--70945dec-4957-460e-98b0-5f5eb80cba33", "sighting--2857df3b-1a8d-4d0c-952f-caf906a4ab39", "sighting--53e5bbe1-7fd5-4e4d-9ece-5afe087c43d2", "sighting--28196c8e-2d52-4009-948a-69119d2ad15f", "sighting--40163354-8fb4-4bff-a2e6-4f9f2d71b535", "sighting--1f10a8be-5adb-4851-b92c-185baf89082a", "sighting--616c9228-f1cd-4307-a3ff-4b4bbad45b37", "sighting--fff1a59f-1c92-4a82-b6d0-6f6c51782b81", "sighting--e5c65de9-f13f-46d4-b095-1b1e3eeddaaa", "sighting--f03f6c53-e2b1-4f1e-b07b-6ce4e8a74c86", "sighting--b976f4d6-34ff-42bd-b0ab-72da5e72073c", "sighting--6e517a2a-d14f-4b9e-87b6-40cd99ecf940", "sighting--40e182d3-8834-4e7c-9a9e-75378d5dbcf4", "sighting--88b12e8d-9880-4149-9a3e-4a24a0f0fe3b", "sighting--0ed9130d-e248-4019-ae39-ae37346155b2", "sighting--f2b12bca-f15a-40c8-94c1-58a864475840", "sighting--ae9e5231-d6a7-4642-ac8c-d73e1df23780", "sighting--88e22fef-57c8-4162-bcbf-9f477d7f36b1", "sighting--e96eb75a-987b-489b-82d1-c5fcccc7967d", "sighting--0f4d7768-3c50-42fe-9e02-8e957e6194b7", "sighting--3dd32ed5-30ca-409c-b5b8-86ded7ce97b8", "sighting--1a876b75-2176-4a68-afa6-3af8e708858a", "sighting--bda39f81-3012-436a-a659-4f8881e881a8", "sighting--abda5dd6-baa7-4ed0-b0d2-3d8e2ede3d4f", "sighting--7b206f84-3049-41b0-995f-16aefa0f03f0", "sighting--1431ddfe-10b4-444e-9e4e-b2d12e1aee2a", "sighting--ab774e4a-739e-4ddd-9d66-0ec58634aa30", "sighting--520977e5-3ea0-42bb-8021-18b356573e86", "sighting--b60c4742-4825-4c32-8bd8-e9109158d8b5", "sighting--a82e112e-f465-424a-8c4e-3539ac90ad60", "sighting--0e367497-0a07-45a5-81ab-1c85174b9055", "sighting--015e3ac7-db55-441f-ade7-4bd266a955e9", "sighting--c5d8e182-07f2-4531-916c-04b334549de7", "sighting--18cc2099-3fca-4ab9-a270-32dadc1415f4", "sighting--44f515da-400f-4bbb-8930-fac40ffe4dd5", "sighting--48bfa9cf-4d62-49f1-9dc2-466d2cf3bb79", "sighting--fe9aa007-7bef-4f69-a3aa-1eada7e3d210", "sighting--05ca91f1-7930-4b0e-8cb6-1c97a7b065b7", "sighting--845a08ee-aa11-4668-8808-a4ad147716bb", "sighting--93e68fbb-ab43-40bc-91fd-1987d84a6104", "sighting--7b26a9c0-b761-4cb2-bfa7-e244b4c6218e", "sighting--04e86e50-fdac-41b1-9191-cf5a0e623ce3", "sighting--d94657ac-43c6-43a3-bcf9-98e767b73b1d", "sighting--af6c5b72-8ee9-49c9-b242-2f9f15eff5bb", "sighting--8b9cb81d-74c1-4e8f-9dbc-138833448d2a", "sighting--d56c505c-8f42-4034-a205-ffb1da761025", "sighting--e566749c-cdfd-4808-9f6b-4f996c1a8ed6", "sighting--0b2f79c6-5ac3-45f9-866d-2b349007231f", "sighting--247a1f0d-987c-44b0-806e-c41e28d10682", "sighting--9c6f0604-7a8a-4b66-829a-00f1b8afdaa3", "sighting--4a8665c2-b775-401f-b4ab-cf7d4d6e927b", "sighting--35f75fd0-70dd-447d-b147-b7e87371d7be", "sighting--7ceef950-20db-4dea-b394-ea3f5ee8fea9", "sighting--edac6d98-d55b-40fd-9c0e-ce92bf3b8af4", "sighting--2233aae0-6ae6-4f85-a6b5-b0b32cb4ba72", "sighting--904a6735-5887-4392-9c91-edb042f899fa", "sighting--d151a149-4dec-4bad-9134-f01fcf4976b2", "sighting--b1d33dd0-0a54-4e9d-9eb2-9d907f7779f5", "sighting--5b67d164-f7f3-4607-8b41-78efe1717bce", "sighting--d2c36e8e-8a23-4f8d-a62f-9b30e8cb5dc3", "sighting--bc9dc7f8-2220-418e-99cf-395445b27aaf", "sighting--1b11461b-bf30-4d6d-acdb-799be97889b5", "sighting--00c0f206-83a4-4347-a2ca-8184f80cda31", "sighting--011af508-6bdc-4cb5-89c6-5b401a4ef5e4", "sighting--5483d9bc-2f8e-4896-87fd-2e7ec2bf2fb9", "sighting--839f7fe4-c706-479f-9e3f-e863c3e62918", "sighting--e93e4a76-da1c-49eb-be5e-da9558c3a158", "sighting--38be2c98-3629-4b5d-aa21-7c7fa9db753e", "sighting--1cac3d6f-aaaf-4448-9f20-d30f71568bf4", "sighting--c62ba6bc-3480-4e24-a308-7cfc08e4b14f", "sighting--9c824a55-c06f-452f-8324-1954120b0ad9", "sighting--82fda919-ebea-43ae-903b-8adada96ddfd", "sighting--5e42002a-9fdd-4d68-b19e-90489383ded4", "sighting--bd968d45-fdb0-4489-984c-0da289c5ad21", "sighting--859df1b3-a556-405d-95d6-e91939cfa806", "sighting--c5dc78f6-d43a-4157-bc80-f39d6a801f52", "sighting--3385acac-bd1a-4e6b-b8e2-aec37e4f4c59", "sighting--d1ecd9e5-ee4b-482e-a0d1-c6417148d40e", "sighting--001f93ca-0964-4ea4-96c7-2eb2dec848fd", "sighting--58f17692-65fd-4f20-8659-8ff09842268e", "sighting--28171335-6d53-4345-8d6a-37631fc8bf85", "sighting--9371ba29-0dd6-4144-bbd1-77783ea7f769", "sighting--3f102abb-9f5a-46b1-82d0-034a61b0fdf8", "sighting--43d47513-2da4-4674-b314-adbbd25b0bce", "sighting--8b640faa-a88d-479a-925c-e1bea634bcdb", "sighting--3763ce81-7069-4c7a-a49e-da7d401c3027", "sighting--6be00354-f4f8-480f-9a6c-e8c9e1a47e8a", "sighting--c43f12c3-f813-48c5-97b4-b0071496f95d", "sighting--d44fcb9a-576f-4b48-857a-c4631c97ec04", "sighting--7776f02a-4d0e-49fd-b927-88a845594d9c", "sighting--25015923-0afc-4e1b-86da-49213b77ce85", "sighting--01f784b7-d026-4e0d-b313-b9d53d6d3355", "sighting--90934933-36de-4f02-a531-72a9bc72382d", "sighting--41a16315-ca12-4369-9926-c479b1fba53e", "sighting--ec29eb84-f43f-49fa-bce6-a7cf78b63195", "sighting--4174d377-75bb-48f1-a92d-74f82eb23aef", "sighting--55ab42ce-9722-4d4b-aebd-7a56eeb10ad4", "sighting--c754ce25-1f68-4ff3-88dc-d0c31e69326b", "sighting--6fab44ea-9cc9-4002-a8c7-78f8899e2b74", "sighting--1791727f-2957-4c07-b556-53eb4fc7d80f", "sighting--20112047-00d5-4db7-9610-66705bd7f0fa", "sighting--26cea84a-e8da-4bad-a99a-4e4e8e8949ce", "sighting--d54b12ed-c4c9-420f-ba3a-88871a9f1f13", "sighting--82252a28-72e9-4ef5-9d15-b795967c47c8", "sighting--ba001e9b-d788-460f-b61d-bbb5c7aab49a", "sighting--d0b0135d-2a5d-4488-ac86-75114a54c122", "sighting--a62e6409-233c-46ff-8018-83fbbbb9bc5a", "sighting--82ad26c0-9d23-4dee-b444-e7ccecdc6083", "sighting--43fe71b7-3d70-4201-b6f4-57136b79ea68", "sighting--6000ed57-9ea8-4f36-ba3a-b1e9bb905393", "sighting--aeabe5dc-cb9e-404e-b7eb-ae192131aa7a", "sighting--d301b9c0-d56b-47e2-be3a-c3ff7d9be865", "sighting--283041b4-523e-4470-8aac-461a97b7b54b", "sighting--ca237ac9-939b-4c4f-95c0-885fb790ca97", "sighting--650e8e02-fb86-4537-9634-a94bdc246189", "sighting--0a8a8230-ae07-4d8d-a1e2-83ec1d4b20cc", "sighting--6d30dd53-8230-4c00-bec4-66efc8a18190", "sighting--2ec5247d-2de9-4818-ab52-180621d9f902", "sighting--d0999e86-1dde-4f82-b618-6a8aae1105f2", "sighting--00ab61be-45af-471f-8513-e011f8d62074", "sighting--9c500d3c-79dc-45e9-9f9e-f46ce9c0af83", "sighting--89353568-f2c3-4b34-adfe-cade79ee6b6e", "sighting--2456b58a-639d-49b9-8da9-f2ff06ac61b9", "sighting--94b7eee5-b64e-4dc6-afe0-278273434247", "sighting--6ff02be6-751f-4ab1-bfdb-5a0e1243746a", "sighting--9b6e53d5-403c-41a3-ba45-84471179483b", "sighting--2f17e9f1-6919-4012-b29b-a3f5145fe519", "sighting--627c6433-c785-4791-b798-d9d753c0b494", "sighting--bac9b784-55f3-446e-b0cb-765204b54659", "sighting--2008e5c1-6035-420b-9688-c61d00704acf", "sighting--36cb6f9c-1631-4c33-ab47-fa441753f73c", "sighting--d8676b18-a23b-46cc-89e8-736096a7d244", "sighting--0502d7ac-7445-4963-a54a-b84cf56276fe", "sighting--51411288-cd69-49c3-8c9e-3a66007d33ad", "sighting--4141ab7c-f5a5-4d75-b174-f21e8f921983", "sighting--61173a07-d4f4-45a9-b997-e22640e974c4", "sighting--9901cb5f-0704-4fc3-aaa2-94668cf9b27f", "sighting--16526b8c-7842-4657-99dc-299105a83ffc", "sighting--5d43a5d7-4ed9-40f3-8df9-4bed289770ac", "sighting--2f67407f-65e8-40ac-91a9-6ca62f31de8b", "sighting--9ef769b1-98b3-4f3b-8ce3-059a0b98730a", "sighting--8916ecd3-4be1-49af-b806-d07b331d880f", "sighting--3e7dc61c-675f-4535-aa49-78042acba7a5", "sighting--98620709-7ffd-458d-9830-230fc852dc2e", "sighting--3e0832ff-9d2e-4fb6-8ccb-b2f352ee37a5", "sighting--1122218e-8855-4fe4-bd6d-54da2e333a25", "sighting--c1c5ceee-3448-43cf-87ce-37bf5dca403a", "sighting--983ff5ae-a1b7-478e-b4ee-4e0b660c17a2", "sighting--cf8403e5-d19b-4c94-958a-2b47530b57f5", "sighting--bd40cd4e-0aec-43ce-82e4-0b73b2362c89", "sighting--762e9666-1514-4264-a3c4-b6f25f6a3339", "sighting--63dfa211-dfa3-49bf-a740-8e2b99c4e56c", "sighting--e79bf132-34fa-4a1a-b0bd-900cd66a963f", "sighting--21d06103-1508-4455-bebb-09e4ed2f0616", "sighting--2dd1008a-d1eb-437a-a6ca-154120fd8cb2", "sighting--932e7974-581f-4ee8-96e6-09b388f2b114", "sighting--83ddb110-d555-4241-9b01-6955e482bec8", "sighting--58d9999d-3771-47ba-8e62-eae36f835cdd", "sighting--12839db7-2597-4c1b-ab32-bea3a08a7bbd", "sighting--1bb4f49b-d0ed-4537-961a-fce11d6b69d2", "sighting--06ce8d66-3b24-4961-bf61-ccb4984be533", "sighting--74d10d72-2b42-47e8-8ed6-c8141722659c", "sighting--c3560d33-608c-47e2-9aa0-be6f26e73989", "sighting--2fb8d614-72a4-4950-97cd-107eccd99b09", "sighting--f827d0d8-e129-432b-aee7-56f9a9dcc76b", "sighting--68dabbc5-a993-42dd-9394-d9b945e477b9", "sighting--3eb65b9b-b61b-4ec8-8854-be96ea2f9eb0", "sighting--5af36ca5-f8a1-4cce-bd86-c9a94c34d0a6", "sighting--96d53ed4-e733-4c21-ae4b-ce846c74ea63", "sighting--c8c89af5-ba4d-456c-82cb-f9df8980b46a", "sighting--0312b722-8049-46b6-911e-bf686ad6001e", "sighting--cd7283f8-8c9d-4dc7-9283-831638ff215d", "sighting--882e06f5-ba5d-4436-acf9-653ba39ee0c1", "sighting--503784c1-3bbb-4ca0-b040-5765edff8b40", "sighting--fca240ed-bafc-46f0-83de-2943a67184a8", "sighting--f51c3f32-643b-42b0-8b7d-11cead13633f", "sighting--3fb0f08b-98a1-4fbd-a5fa-5e7db4a9b804", "sighting--514a5b35-37f5-4b2f-8403-01c54637ed9f", "sighting--c092531a-85d9-41a4-bc90-1054f947470a", "sighting--c84d9727-5263-4ce4-878f-4859fc81d042", "sighting--273ae8d0-6d54-4e29-8e10-1ba9b0de90fc", "sighting--5fdaf76b-9571-42eb-ac7c-85945a064903", "sighting--8f84f5b5-914d-429a-9102-00beb955ac25", "sighting--3712b3b1-6515-4671-9257-58d2a00908a0", "sighting--f560c4cf-acdb-498e-a3fd-02db1fb32ec3", "sighting--038f1528-36b4-453e-a8f3-bb5b6160b82e", "sighting--f2452e68-1990-43be-a0ff-2f14d0a67c91", "sighting--26ae5295-b626-4822-9a11-f503b422d1a7", "sighting--2eb25fe0-a92a-4e74-b5bb-5cd740da4d9d", "sighting--4ee9c795-5c50-482b-a5f4-0fd9c3b971ef", "sighting--96a41869-ff03-43a8-a9a4-315fe9adb6b6", "sighting--98b310fe-b815-414f-9803-9d816843af5a", "sighting--6b5d4516-c6f5-4b35-addc-e057f2af6a7e", "sighting--2b7b721c-0c91-482c-bc51-50ae48c1a544", "sighting--5280c342-3c2b-40c7-a211-5044b31c0b7a", "sighting--9f0a1cf5-614d-4107-b6bb-4302f37a96f5", "sighting--17dca3db-2480-45d0-99e1-16995dd9f44f", "sighting--0b6b4a15-ed1f-4cd3-b336-360b8982c378", "sighting--76d25fb9-dc9e-4f17-bc01-7f26af1b2062", "sighting--2b6f7e99-00f3-4b56-9211-51971a154555", "sighting--a155022e-9b7e-40f5-979d-9a253a633b85", "sighting--1925fff8-3b6c-475f-8d1c-c1b395e6dae3", "sighting--5048555c-69bf-4e2a-aac5-f7ff82c68d52", "sighting--c1d2e53a-8a26-42e2-9803-6284da0477c5", "sighting--e35b583d-6d60-48c3-9435-25b2636904a6", "sighting--176c5ffd-443c-484e-9504-417241d309ff", "sighting--0b4ff3bd-7518-4230-a124-88e133a9f26a", "sighting--03709536-c54a-4768-8cb7-855d5bd4a5db", "sighting--7205145f-c451-4f45-9223-131556f5b361", "sighting--a8a2aa8f-1413-4fc1-8576-0c651494f62f", "sighting--bb4f22e8-a9bb-44be-8b09-9972d70ce208", "sighting--cdb2495e-a3a3-4a2a-996f-d10481179d75", "sighting--25cb8312-309a-4379-a320-401ced8a131f", "sighting--4284351a-6aee-48e4-bb8e-5cbe57e4f39a", "sighting--771c3961-9fe2-4ce8-9b74-2b8094803e5c", "sighting--e7b637b8-e070-4525-9590-bc88821b24c3", "sighting--8302e94a-9fe4-4f31-81b9-0fda12073a5c", "sighting--b7e4ea9d-8784-48e1-a926-b7f2b203bac8", "sighting--e947f424-ac59-4d7e-b344-eebe55c59317", "sighting--1277a241-0486-42c9-b591-27629fe8de14", "sighting--dfc0ecbe-2cbd-48df-b8f9-2df195b24bd4", "sighting--df58b964-7608-41f3-8805-5e44b3ed35d7", "sighting--21142160-3692-4758-a605-90a791a96334", "sighting--957df081-cb65-42b7-beb1-1b9e4de53176", "sighting--30660f62-3133-424a-8d42-fcf9d9e99ee1", "sighting--ecf1b804-1d91-46d9-be5b-dc3584ae35a6", "sighting--b9bc8d35-89d2-4c76-aaca-084a081762a7", "sighting--54cce404-dc42-4d70-a44d-5fec234b6161", "sighting--8548f999-05a3-4188-9218-82a8b8fd2e05", "sighting--d3cdfec1-9bb2-4896-ae5c-727d5442e44c", "sighting--06de9b0b-d583-43e2-9faa-28fbdf4a6a2e", "sighting--816bdaa7-dcf8-45e8-92ae-ac135f90479e", "sighting--f588b382-7d10-41c4-b70c-f86eb8d2e9de", "sighting--825115ff-389a-41f3-8c58-46d55f2ef464", "sighting--5d4f8760-ea38-4944-a4b5-7fc1ad5b45b6", "sighting--147d7c28-89d2-47fb-a6da-819688a603ac", "sighting--8b439622-3cb0-49c5-90b3-648c80106633", "sighting--59d9d0c2-a268-4657-be27-e186d3033c2e", "sighting--9c0831e1-4371-41dd-94ec-151c219a76f9", "sighting--c8f366ff-93a6-47b8-943c-961acdf56dab", "sighting--c78e54a1-3c07-45fa-880c-b6f053e1841b", "sighting--33046226-fd86-4bfd-98b0-1ec69685b2f8", "sighting--316b87fa-1dc3-4d72-87f4-4a2925388545", "sighting--2f4fe79e-03a1-4db6-8a5b-031ef4da4899", "sighting--27cc3cdd-45b4-4368-9f96-ad1d56d5080a", "sighting--50531d17-3ced-431e-b755-e3590aa95c92", "sighting--3bae5ccc-e837-4555-bf29-c0213d00ccf2", "sighting--f17a9f8a-42c5-447b-8c17-8dd544345b6b", "sighting--76986537-aeb8-494d-b93d-a1962ae5d8dc", "sighting--f1fb9a87-c2ee-4071-9921-164c33906387", "sighting--6943a74d-119f-4ca2-a5d7-1d5382f758e1", "sighting--db85266e-19df-4bb8-8b29-c4eb707b4e10", "sighting--3199b6a3-7d4b-4d5e-991e-ebaaa0aacde2", "sighting--27626088-4701-41f8-98c4-4e390b3c70ec", "sighting--b3fee5d9-dd72-4c36-bc05-fa16a8a2758a", "sighting--331494e8-8dd4-4553-b4ff-c488ce976ca1", "sighting--61aa4d24-392d-45e8-8db4-8a44961c882d", "sighting--2e8af0dd-3fc5-40dc-9704-e2a17185e869", "sighting--d0cf7770-27a9-4078-9c57-e174b7349a85", "sighting--a442f9f6-c096-446e-9507-7ded9dadd017", "sighting--4bafc019-6e52-4c59-9b44-c21420bc6927", "sighting--907c3fe3-e6eb-4f5d-887a-3fbdf3791c10", "sighting--ee094b33-0569-42eb-919a-cfc0856648dd", "sighting--78c275bf-c0f7-4e74-8e83-ed1fa59e4279", "sighting--b6a9f7bd-903b-49f2-81a5-55051e17c40d", "sighting--b1bbd6d0-0925-41c9-9639-cc988e80195c", "sighting--9e8f6c88-577a-4cee-bc36-0dc1075709db", "sighting--0e74f315-c92e-4264-99e1-4a514eb5b809", "sighting--d654446b-22d4-4072-b6df-86c624fcb2bb", "sighting--d574e3a0-9d5f-4624-b19e-73442d515079", "sighting--6041cd49-7cea-4eb1-a570-8648a643cfef", "sighting--6473c060-c4de-47ba-9da1-e35566d67799", "sighting--7613c6c3-d47f-4339-9697-41739888993b", "sighting--d0472b47-4597-470d-b8fe-af5e19987cd1", "sighting--b2af6c84-a690-4d47-a206-106c8503f1fb", "sighting--1844abe8-0381-48bf-904e-3889df615bfd", "sighting--ba61afcc-1f13-4f81-af7e-32270c819f4c", "sighting--9497c69e-c555-4677-bd03-56d2d4bb20a9", "sighting--ecbf3595-ddf3-4ad9-bbf7-b639bae460a4", "sighting--2a8216c5-46a5-46a1-a7b7-10d93157a2bd", "sighting--ddedfb49-ea6f-41fa-ab9f-61b8583ec197", "sighting--f6da7432-08e2-4f69-89ef-8810106cdf00", "sighting--03dee8dd-f95e-478d-8ce1-40a38f515280", "sighting--7a55a5bf-819b-4657-a144-9d318367e04d", "sighting--072d7daa-bcf1-4985-8dd5-e9b9dd7df523", "sighting--57591697-4ccb-4be0-b59d-d2afe4284ada", "sighting--bfda6bb9-1bdf-40aa-9e5a-a8454f6beeff", "sighting--28d54762-7165-4c92-825b-7f301ea148b8", "sighting--af6c5289-49eb-401a-a797-08405eedbabc", "sighting--55181108-e204-497d-bffd-25c44cb71a2c", "sighting--25933bc1-dbeb-4d01-b4ce-c64d076ec984", "sighting--d299dbea-3a60-410b-939a-5d4b98ed6add", "sighting--202593c5-572f-4353-a090-aee9b3e4fec1", "sighting--5da50ab0-587b-4093-adaa-b53d2d06357a", "sighting--b6952a69-c0c0-4e5d-adf7-52ba91411301", "sighting--d395c950-9573-4d50-b757-02873cef377b", "sighting--e60750e9-94e1-4d92-a36f-5c9f439656c4", "sighting--b9ee7708-6f5d-43a1-9922-d07bc3433cea", "sighting--d64eb1e5-87b3-4ed6-aa3d-2e5c06d7cc23", "sighting--53ab110d-9e2a-4f1f-bf34-7d5116fe3dd0", "sighting--e105cb80-3eb0-4d99-a700-7a7cfe85380c", "sighting--9ddda35d-03c9-4973-9329-1489007d2dc9", "sighting--67a7667b-1ef9-4ab7-a78f-9d071bf93276", "sighting--c93be314-a532-4a7e-b9cd-8506a8437383", "sighting--8d5d5837-ff65-48c9-94a5-091952ee143c", "sighting--ada24505-be8c-4227-beb9-d1a4f5c3c592", "sighting--2e97906f-5a54-4939-9472-0e70994b5c36", "sighting--6c570053-7edd-45cc-9405-dca8c63871d7", "sighting--2daf93b6-0a25-4af0-93f5-d48645325cb8", "sighting--9fc3c1f7-9e5f-4ad1-a256-66b5018c01f3", "sighting--296ec63c-74d0-4175-bdf4-e6f0075826b9", "sighting--9b2e0af6-5059-4b25-be00-02fe5bdc6a57", "sighting--19130a95-b37c-401d-983f-ae7592a331bc", "sighting--d787682a-385c-45ce-9168-1fd7929a7277", "sighting--90ffc805-22e8-41bd-97c1-d295803090a6", "sighting--1dc9a6e1-b555-4d9a-92b6-3c4dfd1d93a1", "sighting--933fd21e-78aa-49ac-a47f-bf31a44fb101", "sighting--59db21da-e8ed-4a40-8fae-f50cb7a911cd", "sighting--ec0964a1-9200-46f5-a8e8-54c114062b68", "sighting--e3f6e519-2b49-42dd-b8d0-3c75899f1dcf", "sighting--60442f58-046e-4ac7-9856-b73298390278", "sighting--d64163a9-e30b-45fe-93ce-4f24b79470cd", "sighting--f9ff6b4d-5a01-4787-92b1-3f74749227e1", "sighting--227ffe0e-24f1-4cb8-bc5e-efc10ca6f402", "sighting--5d2daddd-d222-4c40-96d1-770de417e838", "sighting--eb9c99b1-53ec-4d61-b5b1-a6b0e9eca22c", "sighting--0fe719c5-5571-4578-ab34-9f8adb2bb33c", "sighting--30144ce1-b4f8-4e0f-94af-30f43dd2a63a", "sighting--e94a1f48-d0dc-47b2-8c7b-7a94b732e6fd", "sighting--1c1ec4e3-dbb8-44a6-bc7b-65ea87900a23", "sighting--fbd0724f-f74a-40cb-87bb-449dc0b7ba78", "sighting--786e2e3b-f0ea-40dc-ae6b-88745e1b0921", "sighting--0fe94aab-3818-42a4-9ff0-36d750526659", "sighting--781eb6e6-8447-4b46-8434-e000fceb4821", "sighting--9a28e355-e8e7-473e-9be4-67b0bc6682ff", "sighting--a9c6256d-6f3f-481c-89e1-fc9a750f32b0", "sighting--7773ea90-fd53-48f9-9ccc-aaca162da4d3", "sighting--203f99df-0cf1-4768-b6da-9d1ce8748983", "sighting--529fdf35-9b46-4633-ab18-41734329eba1", "sighting--5bb84c16-7f35-4986-a0f8-c5c8bec93140", "sighting--3b73e885-e86a-4025-a802-68f56588e58e", "sighting--f37463d0-2374-4bc2-8fdc-b57d88d235d5", "sighting--46c0abc6-062d-4598-a42c-b761461b5db9", "sighting--aca9eb01-6118-4f4d-82f0-6b1c90089a82", "sighting--260014c1-9a7a-4521-910a-f36f7f12547c", "sighting--baf71d0c-250f-4a3b-af22-8dc6b207d148", "sighting--d84265c4-dff6-482d-bda6-7aa83c508aab", "sighting--19d6fba9-0644-47d2-877b-d2e26485b1f2", "sighting--472a0fda-2fa4-45f5-97f4-35e31e22f834", "sighting--2fb2f4d1-9996-45f3-970c-9471e58e446f", "sighting--317e4167-dcb7-4f7a-8e95-0d7f16c02e33", "sighting--dd76a9e0-dbda-44c8-ac20-152759b030ee", "sighting--8868a11b-87d7-407e-b484-fe4af97678b6", "sighting--0f915743-904a-4888-8507-c4685dea9de3", "sighting--698b738c-bacc-4564-b07a-4a93e3838c16", "sighting--22ef7fc7-3556-4f92-a666-45edce7ee3b8", "sighting--bfeae827-703b-409e-8c14-ea98a8cbc9e5", "sighting--7e7c1f1e-3650-45bb-bb4b-148f5c0a4768", "sighting--ef75adb6-3d75-4a04-b742-fcb0bdcb7b44", "sighting--d7569e92-a64a-4975-9cc6-e70da5e9f004", "sighting--fb1199ca-44a5-42e1-81cd-1e487cb4b892", "sighting--ee04b514-489c-462e-8311-548a7817044d", "sighting--0efe2844-3340-4b5d-88ff-3def07980a9c", "sighting--75511a66-0259-4e7e-9a5b-e9047bb43393", "sighting--8512693c-72a1-41b6-a7ec-127d13cc8f9d", "sighting--5956d3f5-d831-4946-b568-790ca34d970b", "sighting--3320db81-0dc6-45fd-992c-5440eea5355b", "sighting--9ddafb03-0008-4c1d-a3de-e46d2c832833", "sighting--71747b60-5477-40e0-85d9-444a8ae27e48", "sighting--ee1814c5-b490-4b6a-9a0d-686d99a2dae8", "sighting--935d56c3-fb7e-4a98-82a3-ba262ebd5601", "sighting--b0cc21a0-cbe7-4087-b521-21ef5c264c2f", "sighting--5e56b215-b4be-406f-8c87-97da4790f984", "sighting--4318e370-6ad0-4b88-acce-611e71763139", "sighting--e9b6f809-72a1-49f4-a855-072f97965612", "sighting--c52d4466-49ec-4034-a8f4-1ae50073cca9", "sighting--af13fd5e-a037-4f0b-b837-0ad90c1217ab", "sighting--dab0bc71-5f7c-457a-9cdf-b30d26a9e8a6", "sighting--a3ecfc63-85b0-4aa0-8a88-401aacf2a6b6", "sighting--f7943a5c-2959-40f6-91ea-82609ad0e1ca", "sighting--97933c94-e8d9-4894-ab0c-1198723c711d", "sighting--f37c8e2a-9eef-4155-bdec-aaf6123d1b1b", "sighting--db5676e1-c27f-417d-a430-502214470d5e", "sighting--a35dd0a8-2cf7-4ab1-b0ca-730c7c41f9a7", "sighting--0b58c945-498a-4795-9baa-5481b9f2e378", "sighting--86204525-6eb1-4a24-8086-434524cd7d2d", "sighting--f2008ec2-919c-400c-be71-808ce305b671", "sighting--8ff5f366-3775-4c46-aae1-2f60d15e7cd8", "sighting--a63144d8-ff11-49f3-9173-1ffa5cdba711", "sighting--dd41db56-7fac-49b8-8427-ab46ff6512d4", "sighting--421da663-9a31-4eeb-b1aa-18670876de58", "sighting--4554bad6-94ff-4a81-976b-69161d19155f", "sighting--ec6b5a0c-8100-4980-a675-bbfe1aa74fd2", "sighting--c9582372-89e6-4745-8c77-2ecff545d75b", "sighting--a98bb5c4-803b-4757-8092-067fe357c660", "sighting--724be6c8-8a3a-41a3-b8bc-d65f83ec2968", "sighting--d059ba44-c0d6-4225-b42d-db4f3289ea1c", "sighting--2cae5f0f-7c0c-4bb1-8b60-916a561b7598", "sighting--1f1ed12d-af77-4e46-9c1e-4976390dae7d", "sighting--7dce3c4d-0b72-4d26-9952-452016df5177", "sighting--007e475c-22ff-4c71-8244-c08fc236b34d", "sighting--6c9ba6c5-5b5f-438d-baa3-c197be7dcc82", "sighting--a3fd26d2-e378-46ea-9345-7c015f571455", "sighting--2369c1ff-99ba-4b57-b3cf-0b0b06790168", "sighting--fc3d4a2b-40d7-46dc-9e2f-697fb34db908", "sighting--c14d0d98-60f2-42f7-a121-c936e30d6cbb", "sighting--eb5ab6b2-3eca-40da-91d8-66fbea40b73a", "sighting--6852f1fc-9a17-47fd-8efa-0cdc87b9872d", "sighting--582ec882-a45f-4fdb-a9f2-4a87c6e9168b", "sighting--c949db66-477a-4df3-946d-48a42b4b69e3", "sighting--56e90931-753a-458b-9c15-51a09cccfe67", "sighting--3aceca03-5107-4a06-a4fd-8310ad4f3047", "sighting--045dae37-1151-4c55-be3b-50e9fae467b1", "sighting--b2cc08fa-5df6-4d37-944a-079c185aa768", "sighting--19d8fbfc-83a3-4f7b-8c2d-3c88e43e1572", "sighting--468096cf-8b0d-4666-abb3-c7b79d389c25", "sighting--99749062-e7f8-475a-b2bd-f93e01383c3c", "sighting--2167ec76-c671-4839-a91d-e20ab490d4bb", "sighting--ae3fd4c9-f26b-4433-849d-fed533b4ae0c", "sighting--0d0c0498-7f4d-4780-8daf-c3eed661c1f1", "sighting--0c2de0e7-1c59-40d8-8dc4-3e64eb7d4388", "sighting--f6cfbe1a-7b87-4cd0-bdc8-5c401e1f0f55", "sighting--e37bedfd-58fb-42a6-9c49-e142e2c81411", "sighting--aa44984d-3de6-4d89-aa0a-9bb9821e8ebe", "sighting--b8ce6bb0-e27e-4f29-91d4-bdb3fde29f16", "sighting--034bace4-59b1-464a-8b81-54e648756ea4", "sighting--5c8784db-8d87-4298-8783-529d80ae9517", "sighting--fca04406-54d7-4722-a197-e689d790586f", "sighting--31875b23-2733-4623-88c4-86a8e8356b36", "sighting--9d5101ab-8061-4468-9fcc-f154d0410e2b", "sighting--d2549ef7-bd97-4382-a827-169999477c5a", "sighting--c8c2155e-6934-445e-9905-0835695fd2bb", "sighting--08a61584-867a-4423-87b6-cea1f89d415e", "sighting--6d4ffef4-3707-405f-9f7c-88484d4e4acb", "sighting--c72fe3b8-9522-472c-a0bb-0bf75c69c637", "sighting--2d661410-a7a3-4b73-a4de-f575b023ec5c", "sighting--21edfcf2-2502-4f1b-8e0e-013fe36757b2", "sighting--0d4f1304-d1ae-4b22-b203-41c57dd8d2c6", "sighting--d08745da-f242-4e93-a01e-9519ce6dc61a", "sighting--0fb0ed78-6eb7-4a84-96c1-d3a9f86d3739", "sighting--0f2a1d8c-9c81-4b78-a489-0dc404cfdaf5", "sighting--276406fa-4b3f-44e9-a609-f7bf47502180", "sighting--248c3add-3709-4ccd-8ae5-937fc64bfbf1", "sighting--f7723dce-3399-41a2-bf1c-cdd7ce77fefc", "sighting--53f22255-b4a3-4b94-8519-fe3b447844a8", "sighting--f91f15ad-47a3-4663-9b59-d13ddc79e7fe", "sighting--3309a9c7-0a06-432c-b446-ab2a45f89911", "sighting--1ef984d2-359d-4fb6-98a6-66972b714c63", "sighting--4803fcc3-e4ee-422b-b422-fa7e1f69ccd3", "sighting--db1d20df-8084-4696-9860-8afd1a7f082a", "sighting--19d08a2a-2d75-4c71-9676-5a86fc2fba9c", "sighting--57d1ac5c-c21e-468c-9c07-5675c49dbf17", "sighting--845d4aee-a445-43eb-8490-d2e9b94982c6", "sighting--78b0ef91-dd33-415b-983b-5e313d614b26", "sighting--e6057812-450a-4776-bc70-3f46a1543551", "sighting--54a749aa-7cc2-4627-89a9-5be232c93cbd", "sighting--19650cfc-f379-41bb-8cae-aca2ab2e6d7a", "sighting--e21db5cb-bebf-45ff-a52b-fa6be70262fd", "sighting--ab5208f0-d8f5-48d0-a495-7a9a367926aa", "sighting--3ba35b7e-56f0-4259-a6b3-1a41ce1701f7", "sighting--82dbc201-5ec1-44c0-abee-13cd19c0ee48", "sighting--3d7d14a3-709b-47a7-b19a-e437792b00c8", "sighting--ff200b81-fd28-4970-83b8-5ad33120af43", "sighting--2bd62968-d633-4481-b3d2-4bb529c97685", "sighting--9e79e849-4dd5-463b-b881-9b8a35f265ad", "sighting--00321cf3-50e3-4657-b763-4b17036ca2c7", "sighting--961bf07d-ba61-416c-8b2e-d257100ec5f5", "sighting--3f2e5216-6633-489b-8fb1-fef8b0a2f86f", "sighting--0c175c19-4046-465e-8312-59c127b84133", "sighting--e56a9047-bff9-4046-9fe4-bc7b9566a164", "sighting--8de74cf0-2acc-40d4-86c8-f06b8fa25a03", "sighting--395d6863-5099-48d6-97dc-16c6946188fe", "sighting--db8bf707-5bbd-4297-89cc-92e043d432fb", "sighting--252bcfe0-fb4f-4ebd-86dd-a9a0745126b0", "sighting--adfd6b61-46ef-49e5-9c02-4096d13def09", "sighting--49cfa75e-a19e-49ec-9476-96df0c482a95", "sighting--2624796d-81b9-4228-b02f-590606b4582d", "sighting--27d19c8f-36b2-4a6a-a8db-0123d9e154ec", "sighting--ad48f3b0-2a2a-47fe-8418-9cef97d223ad", "sighting--1f181fe9-45ad-4bd5-a9f9-006280d29a41", "sighting--e5b54d05-aa28-4eaa-acf8-35d1b61caf49", "sighting--f56667f1-1927-41f2-83a0-4775c07fcf7f", "sighting--5e0b2d89-f727-4073-8017-5e2a96a51058", "sighting--40c711bc-a256-4016-8d4e-25502a0de323", "sighting--0e1362fc-1278-4e13-85a4-579385677900", "sighting--e44575fd-7c7d-486b-925b-1daae8f26bba", "sighting--b13529c2-2385-4784-bd8d-7bfb40c8475c", "sighting--3680389d-73d3-4c71-acd9-f232b35e393c", "sighting--02047a62-4a37-4c03-99c1-ae0dff681ee8", "sighting--4c68b68c-d94d-474d-b32c-4a0e53964170", "sighting--e6e0b706-5696-4d86-aa42-37a42c0c1ff9", "sighting--1f5ded4e-7609-4717-9d0a-275b9f338b00", "sighting--9fe426c0-cde4-4c5d-9106-9407e79ee898", "sighting--02973d29-d2b1-45b9-876a-2ed42cb57862", "sighting--377017b5-f3b3-48be-95f0-2cb322db4a48", "sighting--51ba2d9e-555f-4a62-970a-0a105f430f35", "sighting--b7aff8e9-769d-481d-b88c-06add2fb22b6", "sighting--cadbbef8-790c-4c18-bd27-6396f665819c", "sighting--d17892c9-4eef-48ed-a1a2-76dfdbcb8024", "sighting--04f03c6e-dfcc-47af-9673-9269658ba937", "sighting--097f924f-3c15-4bf1-8594-50098d08fd5b", "sighting--6abdbd55-bd52-4a13-aa32-de11ece8d13e", "sighting--40faa45d-9f36-4df1-a9ff-81d388d673a2", "sighting--f3841663-6579-4800-8d91-e856363a1cea", "sighting--79892435-2317-40b8-a0c7-45b86e59da74", "sighting--27272134-aa83-48a6-b69a-0ff90a91373f", "sighting--fc0d0d9d-3b84-4f9c-9a10-65d53d766c4e", "sighting--d81dcfce-64f4-49d0-9f3c-7f9e30ad7d06", "sighting--81edf68c-c231-47ef-8013-4e24bfba8686", "sighting--d5f224c9-efe9-45b8-aecf-1ba4b934b860", "sighting--a0235d31-7ccd-408e-82b0-cfb30ffaf844", "sighting--cd42ac9d-717b-43ab-9775-2d64bed0820e", "sighting--ccbd51d6-3536-409f-8bd0-17c2d98e8e2e", "sighting--ee6ba7ae-0d95-405d-82df-5186afb81df6", "sighting--69b853ee-e6d6-43c0-bee3-c0fa5a9bda0c", "sighting--b8189fd2-c438-4647-88a4-602526ab5062", "sighting--4728e089-5d16-4003-a191-7be75f8cb8d6", "sighting--faff7546-abe4-4c20-b98e-b17d48d6fdd1", "sighting--8747f3b7-a342-4a32-bf36-505d4c28b990", "sighting--3949dc03-e8b3-4710-a5b9-7a9662317759", "sighting--d06cb10d-0987-428c-9e62-bd99f294a64f", "sighting--a5225602-239f-4a6b-bca0-be72670ab709", "sighting--57bf5b22-5462-40bc-9807-f5fa369ffdf3", "sighting--773b71fa-453a-4258-89d6-88651915ec81", "sighting--0ba16205-4a1a-4fcc-a84d-7c7ef8044e5d", "sighting--8af60e72-0b4f-42f5-b999-bb09fdd75e60", "sighting--6d1b35e2-9a49-4079-9d0e-0a970778d006", "sighting--85588111-bb41-48ed-bdf3-3efd9ed28918", "sighting--4011f293-61de-4b42-a987-7484d10c4cfe", "sighting--9061ad46-c394-4fd9-a6fc-9a61958dac84", "sighting--26a87695-f72c-48e2-9bf6-ce973a79d70a", "sighting--559dca41-e3f5-4bba-9fd5-85175c6a4d4c", "sighting--0b32e3ab-a732-42d5-ad7c-b9abb1332802", "sighting--e5c16d65-282e-45d5-9c78-e5498f6efe5d", "sighting--60e94590-168c-42c7-b19f-27fb35a4e5ef", "sighting--f748929b-c6dd-48d2-be32-281b3fa46f7c", "sighting--91271de9-7ab6-499f-8c06-4f9b88fc5960", "sighting--76b40a40-cf6e-4f43-9008-76e20a4ca456", "sighting--9947e2de-5c37-4595-8ca2-e3f0e3d52702", "sighting--891462a0-befd-41a7-a285-8438bc19d1cb", "sighting--d74c7c6a-fa81-43ac-b918-bba95221558c", "sighting--80dc1b56-e884-43aa-9671-763c53cfaf01", "sighting--346d573f-fb6c-4bf7-8ce9-fd3677d80b98", "sighting--bd0b6e16-34b1-4d5a-b0f7-136ed6d841df", "sighting--e68ecb6e-8a76-4602-ac58-cde2258ef9ee", "sighting--afa9a81a-da6d-4ce6-8ed6-1048ab78d7c1", "sighting--5905250b-017d-4f1d-a72b-2eb652b70550", "sighting--07e6f5b7-bc22-41fb-9d47-c93e1139adcf", "sighting--3821a827-a4d4-47e8-8d22-ed570501592d", "sighting--529c269d-0cd6-49c9-844e-4e62a04bd107", "sighting--1f6059d2-19ff-4abb-ae9f-02860ef68b0a", "sighting--64a7cab7-1cf8-4b9a-a24c-31dc225c4f87", "sighting--1a976a4e-ed33-4983-af55-47f3bb482de8", "sighting--b0aba65e-a466-4366-aeb6-7325ffbc1b17", "sighting--db30ce9c-2f42-4fe3-8f20-b527b6c3081e", "sighting--0cd12d93-5c8a-46a9-8911-bd006301e188", "sighting--b348d275-4922-4e2c-822a-bb16553d83df", "sighting--ee75910a-2a02-4ec8-9491-3f640b96eb03", "sighting--fd658fd7-a87b-4e61-b660-723c784132d6", "sighting--7b870f70-9348-40af-831e-068f61524d1a", "sighting--d1b6422d-4739-492b-a5cd-69ca967a895c", "sighting--4399f6f7-c8d9-440a-8667-fe81d87d1c6a", "sighting--5698bd22-3bd7-40fb-8aab-da16bae9f1f7", "sighting--fc043497-ffd3-4436-ab78-fad4c968ef40", "sighting--1c8a159b-4483-4237-b646-45af5f4e648e", "sighting--2f7a9b99-9334-4f48-86a9-94550013005c", "sighting--324adcf6-ac0b-444e-a5f6-f2a83c9e86fc", "sighting--596511f0-cf69-4252-bf8f-509b13bd52dc", "sighting--7332c1c0-cbd4-4d56-ab4e-7b2fb122af08", "sighting--6bd293b6-e171-45ae-b067-43ef376b8f50", "sighting--3e8533ba-2c97-4eb2-862f-e140aa4b4339", "sighting--c1ba01cb-f2e6-47ef-b55d-44b108324009", "sighting--7298aea4-8fec-4d42-ae42-6a19c7328d36", "sighting--bc5d48e7-2ac4-4095-9db9-4fa90770b773", "sighting--627ed7d3-23f7-42f5-a643-7d08c5c01082", "sighting--7d00899c-e7d8-4bd6-8422-631df6b0bbf6", "sighting--92f77e66-90eb-45de-af9c-e8449a699abf", "sighting--a4f8b585-f849-4660-8f49-4040fee532c5", "sighting--e109c9bc-178d-4a37-854b-a4ebbf91d0c9", "sighting--d8d62192-a7ba-4c60-8cca-3814928b7c9b", "sighting--66344137-ad34-4cd5-8a68-ed3557d9f826", "sighting--ce6e7672-b490-465c-959c-f4f9d6d2085a", "sighting--1390d59b-251d-46ba-b299-9d6d64bf320e", "sighting--12d06e22-d7d0-4599-83ea-e1c6d88dcd73", "sighting--5bec10c4-f0b1-40c4-aeb3-d4e56dbdbe53", "sighting--39fc86e3-a04f-47a6-a3e8-bb6bc10ac7f7", "sighting--17ecf30b-a2a4-4696-88b2-de203281aa38", "sighting--a40967ba-ea15-43e1-852f-83887d640cee", "sighting--c91fc5f2-f055-4d8c-ab50-4ee4679c11c8", "sighting--0bd07c2f-bd39-4c5a-9676-0be7b3eb3716", "sighting--a86e93fe-913d-4226-8364-4a342229de26", "sighting--ff6dacb4-7832-4f44-bc31-9793bc05f625", "sighting--925ca36a-b5f1-4cbf-90e2-f2d658569f68", "sighting--54617223-c254-4faf-b8e3-e057ac1df368", "sighting--6c263bbb-bbd6-4090-9dce-9527163fdec7", "sighting--15554d4c-a872-4aae-9ad3-19a9ffc2f1d6", "sighting--2ed3c2b9-5317-45d7-998b-22186848492c", "sighting--411504e2-92a8-4eb4-b526-b36148fb56d1", "sighting--49deda5b-a233-45dd-974a-1d0515d4c5aa", "sighting--ecf6f7bf-13aa-43c5-acbd-29d30b4f5524", "sighting--9604e6da-6626-47a3-bb0d-7a7d99663c9c", "sighting--ae108642-bd0b-4043-a0fa-903e2a0cf081", "sighting--23141785-ea8c-4a81-9d2e-05272b1344d3", "sighting--b81bddda-fea0-4238-aaf6-80d6d747db98", "sighting--ea7a8f3c-d4f2-44ab-bb7f-10fe1c062ead", "sighting--0022dd16-c59f-4404-8d30-13b26d7de84a", "sighting--e7995bce-2519-4d77-b760-eff9c2d2bacd", "sighting--1d446f65-1784-410d-9242-c081e5fa2611", "sighting--28ace7e0-5720-4f7d-949b-55e6f7969589", "sighting--3eddbdc0-e418-4a4b-bf29-9f057bacb3f6", "sighting--ef820fcd-9ca7-4eeb-b6bd-b9fcd16ab941", "sighting--6f407631-d8b1-43f8-b981-74f4a1334f15", "sighting--55979844-328c-4c4f-bc36-08baa432ef20", "sighting--cf1a6a38-6bba-45ed-9280-0b8294459741", "sighting--ee26c0b9-65cf-4b2f-a5a3-797fb74fbc3a", "sighting--b255b0be-6f1e-4a45-a0e1-ef6761c0af65", "sighting--e29c605d-0e5b-45ac-8aa0-598fd16a52ef", "sighting--4d06c9ab-973d-4fe9-a8fa-7cdb2acdcf69", "sighting--1d3615f1-a716-4f8e-b795-70296d5f5582", "sighting--1526ff44-cb07-49a6-a953-ba59f35fc01a", "sighting--5c7d6148-7056-4b5f-8e35-c4674bb3a290", "sighting--c3c667c3-9dd3-4563-96a3-fa40ab0428b7", "sighting--fc404dd8-291c-481e-ae67-7a335d0a42fc", "sighting--19b871bc-4325-45ce-bb69-acc5e8f8a1ec", "sighting--3d959e1e-a9af-4b10-aa84-6084d200fe98", "sighting--2408f884-b450-4d64-9955-016a1c1f76c9", "sighting--2c9cb269-6538-45b1-b539-a5691f16810b", "sighting--95900a25-d1aa-45cf-9164-477579f11e7e", "sighting--ef3a132e-ba53-4e46-91cc-6b4ce89d4271", "sighting--b9d5de2a-3054-4c60-9878-cd70efd5a320", "sighting--224dbfb4-0472-4beb-98b2-c23ff1c09288", "sighting--1cea6d97-6977-47ed-8199-4f9576e6b4bd", "sighting--29bb8b66-c57f-43a3-a7c8-23aae28c08e5", "sighting--7431216c-2540-4f2b-8536-33c21733f496", "sighting--61ca70f6-e0b0-487d-abad-34aedaee0030", "sighting--b523969f-45f5-400e-ba7c-e6de850518d4", "sighting--732b15ef-3d57-437a-a040-4a477be011a9", "sighting--e60eef29-26d2-4b10-a961-2f69e121bde1", "sighting--1001776c-3fc7-4aee-b429-bb7e84c06c56", "sighting--e35bd046-96e0-4f21-8b46-2861647dc6ba", "sighting--0cf46392-58d2-4f31-ac7c-31be02e8d54c", "sighting--9c5c4b4c-698f-47a0-85f6-8459d9d4729c", "sighting--7943bb69-0762-481f-91f8-3c61d926b20f", "sighting--e05a4d08-573d-4f1f-b3ea-1ee2284bef47", "sighting--04504c81-0027-4030-ad28-765bf50c7cd6", "sighting--6c7ddcc6-ffee-467c-8bf0-06c63b9b22e4", "sighting--8dd6fc1d-4489-4cbd-ab81-f2755c7fb1fe", "sighting--07c9db9c-154a-4487-b77d-26bd8229a804", "sighting--a4c5aaf7-8c43-45cf-bbd2-22133438ffa6", "sighting--a04f6a1a-d8df-4e27-b962-43e71d96212e", "sighting--e8490d29-aac6-49bf-a54e-4af7090ced45", "sighting--acc160a2-b4b0-4144-838d-dfbd4f6a9e91", "sighting--1cd45c54-2c23-47f3-8961-78c9b84f0dfb", "sighting--7d1c11f8-1e66-46c5-83b9-5f8b69c88e19", "sighting--d331ac55-5a01-44be-be0f-654ed6d0d0ae", "sighting--e2b30e4a-48ea-45c0-8996-3478596b4942", "sighting--7f6ae410-2e45-41fb-b8af-231d7eb274df", "sighting--b60660a0-d121-4e00-a79c-d92bcfcf1119", "sighting--c68322b1-ea0e-46aa-9d87-7032639b6a6a", "sighting--c9e9efcb-719a-4601-b1ed-d5aaa72ec5e5", "sighting--667f8dfb-bbae-403f-97ed-ff316d7b1b21", "sighting--bcf0dc28-7e5b-410b-9d6c-25ed5b32c1f7", "sighting--f14da6bc-371a-4258-b307-7a122fa31f82", "sighting--5fd3f40e-7e52-49f3-b179-285dd9dad01c", "sighting--463cfc3f-8a2d-4f28-a77f-23c7867a4357", "sighting--cfce98ef-88a3-404d-9eb5-b2a108d05a68", "sighting--a73eb847-d09f-47d2-a8d8-d0868984ad35", "sighting--a793d5fa-839e-48c1-82a5-db1c59fe0f91", "sighting--2043e02c-218a-46b0-8c18-8009aac32217", "sighting--f7af7c0a-e592-4d64-92a5-27bf9a8f381f", "sighting--f35c61ca-feeb-4276-8dc7-8de2287f1253", "sighting--e5120fd5-2827-4698-8159-63ad7828396b", "sighting--c184ef39-e48f-4791-a43d-67a17d000da2", "sighting--08574914-b900-4bed-9e60-88ee9ac8d073", "sighting--9028f8fd-07fd-4624-a77d-4521fb45bee0", "sighting--561b8cbf-350a-4910-bccb-26a267a077dd", "sighting--56c14ed5-a46a-47fe-98ab-5fab89944327", "sighting--664f9100-2f35-4328-ba3e-e9bb09f9d873", "sighting--cc5f57cf-54d4-42ed-af8d-2bc0028b73ad", "sighting--6a6f0da6-2b8e-44bd-89ec-f2567f20620b", "sighting--b4f5619c-f9d6-4864-81e8-95cb7965a9fa", "sighting--2f212dff-819b-4bf6-bbdf-6a5e00e8ffcc", "sighting--731dcce7-945d-4e63-b97e-117e7823cec0", "sighting--a0dded8f-3b56-44b5-89f6-987cd002f37a", "sighting--c896f42d-4c1a-421f-8b41-00037cf02ad6", "sighting--449a66c2-115e-44e2-8b81-31e3912cea01", "sighting--5e632e99-ed98-46c7-831c-9a3fa6afb71a", "sighting--4119f229-0228-404c-813a-f35218800930", "sighting--a9fcb01f-2da7-48cf-96f8-a3b64581b2e3", "sighting--f9cb6fd4-f8e7-42e9-91bc-65a1e4cc1620", "sighting--0ee9ff98-d37c-471a-b6f6-7aacb2d98d29", "sighting--5c21cdd1-2714-418a-8824-506c3d22870f", "sighting--0545bfaa-8857-4f85-a369-4e4c99319078", "sighting--c00e3103-229c-4a44-bd39-f43556c3959f", "sighting--9f48393b-0e08-4718-acca-7a6c5bdb3618", "sighting--bb048c1e-74a3-4b54-8f2a-e47b0690ce61", "sighting--cba80424-b19a-41f0-9486-1516efe4b164", "sighting--02c52e62-6d34-44b1-a703-94d9a779e3ea", "sighting--4c4eafef-52db-402d-8e13-abd3ade4af58", "sighting--6b91c23c-f4b5-4dff-913a-636fdeb7b94b", "sighting--29335d71-082c-4b45-bdea-02ce55cc3f01", "sighting--d08a6452-a196-418d-8c8f-2f68a2f23cae", "sighting--986529cf-41cb-4c78-8318-b8343a6d6d36", "sighting--9b426576-0e70-451f-b549-08118bc0a3e4", "sighting--90dbf8fa-fcf0-400c-a629-ff80195faec1", "sighting--8914c1ef-03eb-41b5-9c4b-e8716b5d3957", "sighting--dc3dd862-2c66-4e33-8dd4-bd4dca1b60d9", "sighting--488bb81a-942f-41b3-bcb3-10dd85e30f6b", "sighting--97fa7fe5-f98e-405d-aaf5-e61951207559", "sighting--2cb03538-3f4a-4926-9a90-da07abe692e3", "sighting--3f327ae7-d350-4252-a295-407133adfb43", "sighting--695960b6-8f5e-4c0e-8c34-34e5f9e56559", "sighting--b67b7e10-fb97-4e27-a061-fe3e774966af", "sighting--d4f5ef75-9483-497d-af56-1d8125534a5b", "sighting--5a02f7c0-41b7-4dd5-b2f2-6ae06093d5e7", "sighting--f14667fc-1cb4-40a9-8d22-259494fdf13e", "sighting--c9fc20de-e776-4274-84e4-1384587dc468", "sighting--eeacd583-d371-4070-bdcb-bd6ff3ac1d7b", "sighting--b48d4fa6-a714-459a-ae2e-113921de5d15", "sighting--ff123b8a-e196-473d-94f3-96ece9825061", "sighting--553da097-15f7-4c14-8bdd-1c75b28cbb86", "sighting--6dc3e01d-3eaf-4e5a-b076-fee2ef01dfd4", "sighting--6c750111-7984-4bd6-b0d6-f39bdecb85af", "sighting--3aa3702b-fe99-401e-9843-bbd0d99a4350", "sighting--216d8f80-e202-45a4-8c86-242ef1fe793c", "sighting--ed32db60-cb1a-4591-8604-a45f21ef12e6", "sighting--4f794906-9387-491b-98f3-9e8e38b9e8ea", "sighting--f198bf5b-72e0-4a4c-8b59-bd187df198c2", "sighting--eea00dc5-2ca4-45c5-8956-9fc9ed4a89d3", "sighting--18274b88-0048-4e1a-9286-e00437d7861e", "sighting--c90cfa9d-21c1-4d4e-932c-483bae31d6a0", "sighting--a899f544-49a6-408c-9fe8-f2c4b4650e00", "sighting--21c8293f-9eb8-4e5c-a618-301d9bedc290", "sighting--7e51771e-d0ca-487e-887e-b3a29f9e3a01", "sighting--02ba58f8-a158-4f2f-b1f7-1b6273c68dab", "sighting--8b0cd775-3d2a-4908-8273-76d7fcf7317a", "sighting--790edc3b-1fad-4d77-8b9e-e0b61c91258d", "sighting--2c88b84f-c865-44e4-9772-ab07234c5742", "sighting--e6e712f8-27ea-40cb-9b44-45d98083db3d", "sighting--cbd020ef-e4da-4a39-94b8-66544573be0a", "sighting--54681e97-8482-475e-825f-892e24534136", "sighting--616f17b1-8267-444f-a99d-eac67fabffc2", "sighting--00d3b84b-7a25-416f-a4ce-654e9b030b0a", "sighting--ec50fde3-1159-44d6-88d0-7e828cd5fed5", "sighting--f9cc383b-7469-4b12-9fc5-67d145a9ee66", "sighting--b713b98f-b911-4957-822c-7364b244ed7f", "sighting--235f8350-1c12-4eea-afb0-b86e6d0c9942", "sighting--23f22d70-f494-4dbc-9054-add800281515", "sighting--08a03792-9d70-464d-bb96-e8a50321a10c", "sighting--c95c1232-f208-4729-95a0-0ee1c913120e", "sighting--01a2f887-df25-46ca-ba6e-67e1b227c7e6", "sighting--68d67581-98f7-4c55-9edb-e4a8f0fddb9e", "sighting--503ff2d3-646a-409b-b1fb-7800e624f890", "sighting--9bdca79e-ebc0-4fae-8ae9-33965ef5c1da", "sighting--ed16ce72-3962-4e49-a92a-57fdd8fbe744", "sighting--4e601869-7480-4a6a-96d6-20f6ef6d3948", "sighting--424ec265-8918-4153-b43a-c56e959bb02b", "sighting--3229d9df-d736-4b6f-be06-2c8208a1afb1", "sighting--179ea4bf-3458-4a6a-b048-43a5bc875af1", "sighting--ac5aa1bc-e946-4fd8-a8d1-920be9a55924", "sighting--835a0208-fa70-4b28-9faa-e8d6c2fd6e37", "sighting--09f5660a-d32f-4498-9a7e-f4fbc7d86327", "sighting--e4b0d318-6c7d-495f-be45-0bbd96067d4f", "sighting--01863eee-f91a-493a-8250-1af17b691c12", "sighting--2f49760c-5686-48c0-b4fa-984e50961fe0", "sighting--95c36b78-ca5b-4f53-b614-11a9eeb9e976", "sighting--90e678a1-dfd1-42a5-be83-d5e82c1db8ba", "sighting--ae1e9bd5-946f-488f-9e48-e86451832bc0", "sighting--cdb599f4-d48e-4271-a995-32fd4ca0cf3f", "sighting--67e81661-1b54-42b5-9f4c-cee78dc6ae3e", "sighting--5cbf2d83-6925-46d9-941d-d44277316fae", "sighting--e7d08a83-76bd-49c3-b37d-221cba8f192d", "sighting--6af4ca73-d54e-468b-8961-c70fa030863f", "sighting--bc58a1aa-8200-4f3a-9197-a0ede267c132", "sighting--61778462-3e64-447d-b257-f7bcaf98d678", "sighting--e4532674-06db-4e9e-9695-ee2a97d6c4cb", "sighting--5c727d0b-a03f-4fea-a0e4-5e213eb28436", "sighting--edf9843d-4e57-4a8c-a299-7863e0108a28", "sighting--9d684ba7-ffa2-4b74-a610-b658b7747284", "sighting--eff2251d-2d75-494d-a534-48beec438fab", "sighting--d392e3fe-c5ac-4b1b-96e7-e987f00c3d14", "sighting--e5de1aea-7c4c-47d7-9a65-6f2a2e8bff1f", "sighting--3e28ecd1-2049-4ee0-8d6c-cc0419721752", "sighting--5b3e01f4-b18d-45b2-8d64-40fc3f825a8d", "sighting--e3412d97-21a1-4e46-ad82-3fceab3d2c53", "sighting--4841dedb-83a5-4a45-bb3b-360c0088d951", "sighting--de70c231-e045-4974-bdd4-66de903ef5e0", "sighting--20f57148-b80d-4331-9568-f7a7cf1c0c8a", "sighting--f0e3fe3c-ca1b-4049-bd78-283747820017", "sighting--3e0e15ec-fb0b-4428-8b80-caf0393714e6", "sighting--467f87a0-6d28-41a2-935b-dfe70d8d6b87", "sighting--c9fe9daf-162d-4956-acb8-a862212d7865", "sighting--c807678a-dbf1-4c12-b5aa-1201413e93fb", "sighting--090cf16b-a8c0-4a75-bada-5d8843779bef", "sighting--e73eafa1-c305-4026-9e23-93ca93a4eed8", "sighting--6989f3f4-e96c-4d67-9013-280178882093", "sighting--5b106540-c7c9-4ce1-bad9-af4907810b23", "sighting--76f0d872-bcc7-4044-89c7-f7ac8966250c", "sighting--a6c2289c-6aaf-4c4e-89be-131407ca0f49", "sighting--5346876a-5480-40d2-aa60-71dec1c31e83", "sighting--55a90e64-c386-43a9-b786-9e4a99769a06", "sighting--36eb05de-38ab-4b58-b510-925a055fee1c", "sighting--efba7b76-c191-4c36-b53e-268caef1d3c4", "sighting--54f3093f-3d8c-4c6d-9473-0d2f845216a6", "sighting--e1e6a808-9a62-4a5a-bd8a-a35fb3f0370d", "sighting--45a89ce2-3ac2-472a-adb6-455de889182a", "sighting--88185efc-e863-4787-8e78-46364565797b", "sighting--e323c2ad-583d-4cca-ba8d-733a308919de", "sighting--6aea48b2-b76d-4f19-b3b5-21b4a40551c0", "sighting--5ed1cce1-6e72-4fe1-9aec-6149fab177b5", "sighting--00c4ac63-3e8b-4f44-80e8-d7ebe50bff8e", "sighting--c030d02a-06e1-4372-9789-ed761f6b5059", "sighting--ef8aea42-550d-4765-9fb2-507f58e095a1", "sighting--5f38ba84-e725-4827-8a25-173ec7c93be3", "sighting--5a58d295-2817-4a0e-90a1-ba9ab3d721ba", "sighting--53fcf4dc-1ea7-4ed7-917d-b1be0fbe46e0", "sighting--9ccb2e25-7db1-468e-b36d-7f71ca72c437", "sighting--6d5386d9-e489-4648-873e-ed18edf80598", "sighting--bd079523-27b7-4f54-b3c1-cfda58ef261e", "sighting--7156b711-062f-42fc-b8c7-5ca8afb87b17", "sighting--feee38ed-9a15-4aff-9b42-8e8322a2ea0e", "sighting--a70c8412-3c3d-44e0-ab6c-f22ddb5d4ad5", "sighting--de65b497-2c16-4412-9a3e-d34e0340a928", "sighting--1479183c-f0cc-4fae-a92d-5a31f7f80818", "sighting--30b12492-f5e1-47f7-bf9c-e28ad6f9c339", "sighting--c7d90517-e53a-4b82-b0dd-ae7abef05d2b", "sighting--68474fc5-ee5e-4454-8980-ef76e419dbbb", "sighting--5cef96ec-07f6-439b-af2f-a23f517ea895", "sighting--e0fac18f-9db4-4af7-8a99-88fbec87c1b6", "sighting--2a4bfc4d-f18f-44bd-9726-a2bee4a482ab", "sighting--44641729-7f21-4e6a-8123-442a7bbcae0c", "sighting--29c00f93-a301-4d69-9b99-77d8ea2a83b0", "sighting--2cdb90c7-23d7-4a0f-9c4a-87b3d1c3a701", "sighting--84a60281-d6f5-4cbe-97f9-3c3269c21edb", "sighting--0c6b699f-c582-484e-b11c-58a7e7bcac04", "sighting--d7adee53-b5a5-40de-be0d-7cc7c2b1868f", "sighting--2fb51625-e709-4bc5-a19a-bbd6d29e5e5c", "sighting--543170de-7d3d-4502-a6d0-05692289b465", "sighting--74fade91-280e-49a4-b300-753e0e1c4490", "sighting--053a13cf-c059-4346-95b0-b35649db0487", "sighting--d083b525-a96d-4bcb-bd08-2d15ea3b2e02", "sighting--60eb6b4b-8c13-458d-a470-d8dee408b3c6", "sighting--3ee15055-16ce-49a9-b878-db64295bf913", "sighting--99a5de0b-c173-48ab-bcdd-2b871a1e0030", "sighting--60563815-5399-47cf-90e9-ece8c0f0ac21", "sighting--72091740-2f20-44bc-b59e-0593455e0bef", "sighting--572686dc-aee9-4ee0-ba63-b049475c20a4", "sighting--b42dab4b-519e-45ec-89b9-87df256975d3", "sighting--486e340f-f027-4d48-a362-28902f6d1ff5", "sighting--be1446bd-a40a-409e-82e1-8882c2f131d5", "sighting--cd89ffec-fc6d-49dc-82ea-3b869c42fcb4", "sighting--3b7667ef-871e-495f-a593-9ed1a4b8e8a5", "sighting--a127f780-cc05-4174-80e2-9a1d1430b6d9", "sighting--59e29292-6fb0-49e3-8ee1-c96c62d74a7d", "sighting--3b6b85aa-926a-4df0-be8e-50458798b50c", "sighting--d91858fa-7b03-4e68-9b6c-8462fb5e2dc0", "sighting--d0e583cd-93b9-4baf-9007-2a1ddf7f0e05", "sighting--cfb15cc6-ed85-4f85-b7d7-17e142437852", "sighting--2982761b-6f6c-4031-ad07-ee5a45d5ac0e", "sighting--c3647849-abeb-4689-a61d-9148bf3e4ebf", "sighting--1a447589-f1e4-460d-ac2b-0187ae18adfe", "sighting--8cc260e7-50f0-44fa-a7e0-dbc6c1e9d506", "sighting--fb8f01c5-cd6a-43d8-ba9b-20de719767f2", "sighting--7c97e080-ad2d-400c-a0f6-681c8865f78b", "sighting--36c43c68-2d61-459e-8ea5-f2f03119ccff", "sighting--3f8ee3cf-96b4-44e1-8597-3830228a04f0", "sighting--478bbfd1-502a-45f7-a1f2-626438b9e3ad", "sighting--d661a159-1062-420c-8505-7f1c79fce823", "sighting--3292e809-1ee5-4be9-9347-6c1e2b40a027", "sighting--1bde71a3-d456-4e6b-80c1-9102799c037d", "sighting--6d4516ee-2f8b-4236-860e-c5b00c7066ef", "sighting--d7925922-3e3f-4191-a99e-867b4b881a01", "sighting--80b92121-4964-41a2-8892-e32fc446f2e9", "sighting--645f5e6c-d888-4cae-ae37-ad05351e147f", "sighting--7f3aba9b-62db-4782-bb71-643dfcffbcab", "sighting--7c74c0ec-29ac-43d7-be68-e3676c426d1d", "sighting--517258ec-f492-4349-83dd-e04103572fee", "sighting--77e75ca2-9a74-4ace-b2d9-c35df0a7745f", "sighting--143819ef-9029-47e0-b754-fa26e29b97f4", "sighting--3b09e78a-fd5d-4b09-82c6-4b29247d3412", "sighting--2e6cf204-c660-4805-8021-210f73ebaed8", "sighting--12121f3f-dd42-496c-b269-d59bd4cb2375", "sighting--ce4d15ab-3375-462f-8ed7-dcdff76f14f1", "sighting--6ccef56c-6c2b-47c0-b3fe-494e4f3066d9", "sighting--b76134d5-a678-478e-acb5-418023bd5127", "sighting--0235a81c-6ffa-4a90-bb3f-c6b500e1cfd2", "sighting--552e3f2a-d9c0-4699-a649-7469ff0bd0d6", "sighting--96ceab89-0a73-456b-878e-0ef8416bb820", "sighting--483b5af8-c709-4afe-9ed8-6d7682e09a5a", "sighting--7952d8b8-a2ef-4245-aab6-71fa78db2dcc", "sighting--7ec208fe-cd6e-4c7f-9155-16887ce61679", "sighting--f374d7a1-a615-481f-8e33-debf4262db28", "sighting--53b986d8-b7f7-4449-a274-11b7a03cbf62", "sighting--4c657526-b781-45c0-a3c2-cf1a4f7253c2", "sighting--0ca2b95d-9223-43da-8e81-c1a74548b187", "sighting--c377dd06-f1cc-4a88-a259-b8dff59da771", "sighting--4cfeea59-d011-4d96-a8a4-34acb9d71389", "sighting--24417c6b-a742-4b49-ac73-1da544d82db4", "sighting--7d3497a1-ed15-4e75-aa74-9d8e655e06ef", "sighting--a5bda299-0108-437b-a2f8-bcaf2533259f", "sighting--eeab5968-b7b1-43cf-845f-cee8c12ce0dd", "sighting--1557ff18-3a98-4bf9-8fd6-2c71dcd30acd", "sighting--856aa5bb-c2fc-4e41-9875-f9cd0838d3c2", "sighting--79ea1480-8db1-445f-9bb2-ec0199d8c3e3", "sighting--28cf3efa-adbd-452f-b4a2-93468d8f5052", "sighting--ce1d8c31-fca5-4d7f-8019-e5c1bbccc39b", "sighting--3d146b93-642f-47c5-a161-d978af1c7902", "sighting--9314a283-564b-4fad-9651-8aba92091a02", "sighting--73561701-1d7b-4e45-ade9-1f90ce983834", "sighting--bf82b677-f66b-45cf-9247-28fb4197b469", "sighting--ff549390-6d65-4ba6-bc0c-89230759f5d9", "sighting--2eda50f1-577f-44c5-b8f5-976744b237be", "sighting--7c8dd97a-eaea-4b56-9834-6e3902aa3568", "sighting--23bd7bca-3209-4cc7-97c8-c1613c088ab7", "sighting--6dc962e1-ef4f-4568-9b78-994810f4ac47", "sighting--a57e339c-ecda-4584-96d9-e78c98f4a38e", "sighting--556ffc2c-ae5c-4624-8fbd-32769d2c8c24", "sighting--0b98bcf0-1f08-4edd-bd14-32b71ba10ca0", "sighting--65fe924c-eadb-43b7-95db-ee11277e6c0b", "sighting--5dcfafb0-1480-4985-95fe-4adbd17cf0de", "sighting--893cf804-cf82-4d62-b1d5-50eab725f145", "sighting--7576683c-cdbe-4120-bfab-dd3ba10a703e", "sighting--0a52c275-4dac-470c-b313-f2aff281ba90", "sighting--9cbd0b70-029a-4b66-9bec-062d8130ae05", "sighting--b467f0af-c588-4fa5-a05c-521c9f282b3e", "sighting--8442649e-34f7-416c-b7d7-daba06691cc9", "sighting--235eabf6-7fa9-4f1e-b94e-779f2e0f6c84", "sighting--ca6a80ed-a8a9-47a2-836d-7c4de49ce73c", "sighting--edf8fa76-4e8c-448b-9363-3585c5195212", "sighting--d319e7aa-51f9-46a4-9eef-475273b45149", "sighting--6f30471f-d184-4cd4-86fa-4abf11f56033", "sighting--9468e14f-481f-4c53-a15e-267fb084485b", "sighting--4ec3892c-2173-4d66-9739-6c5fe2645cf4", "sighting--834a6c37-69dd-470c-b0cf-5153a23c75b4", "sighting--38e93e49-85eb-444f-959c-1021515f539b", "sighting--aef25902-dc9e-446c-91c7-85ada7fe5011", "sighting--2cbee5db-e2fb-461e-a292-29d294f6f300", "sighting--b3f065af-6102-42f5-9547-8e3e6332de69", "sighting--f21b339b-c0d8-4f32-8e5a-5b4a6f7fc975", "sighting--e8314cc7-6e4d-4474-b48b-884fcbefcd1b", "sighting--53304b9f-ce5d-4b18-8ddf-58cb7d769966", "sighting--004a546d-b40e-496b-a26c-ed1e5f10b0e7", "sighting--3232b7b7-6fc8-4331-8be1-ed7c1717db4f", "sighting--e5cfde14-b9a2-4b0c-84ec-4762176554d7", "sighting--98aa5071-7b99-4296-8e0a-259edfecbd8f", "sighting--6b925c6d-d964-421e-8a55-3763d37967fc", "sighting--cf407c97-68db-4ec7-ba91-4db7f0f81dff", "sighting--1dbbcd7e-54a2-4b70-a0b0-d9bd8e6fdd3c", "sighting--31872e9f-1b14-49dc-8510-6bd6bb240ac0", "sighting--c9e05b55-516d-4a41-9698-6f4891d14d50", "sighting--a96b73da-a7ba-4c30-907c-227110a1b858", "sighting--3292dae0-7568-4da8-b7f7-d6fd1e5d054a", "sighting--910391c2-7229-45b0-8eb4-b729e9ea4c49", "sighting--a6292066-5a9c-4f71-ace1-a45e03e2dd0b", "sighting--e81b2569-3518-4712-b17d-bb0b77a52232", "sighting--affbe81e-82da-46f6-b7b2-0198d6e49771", "sighting--69d77d3f-a5d5-443a-b60d-6be52146ee82", "sighting--1359d51e-3bcf-4b40-b8ca-d861a68502be", "sighting--11f65e48-873d-4955-b359-7decd572cfcc", "sighting--82ff3f77-73fc-4585-a150-2cc2294d4973", "sighting--91ddf7ca-78bf-43a2-8a12-314f4edaa0e4", "sighting--9bcb7d9a-1969-4970-bb8f-34edc50038c4", "sighting--815fe89d-044f-4d62-aa07-2ad432a987eb", "sighting--8ca65ada-0553-42b0-b212-c962f4dc1358", "sighting--7dfb62ee-fd0e-4bc0-bf95-22e99e430fc6", "sighting--da586b65-19e1-4963-8660-54aa413cb735", "sighting--f574dd1f-90e2-4091-aae9-cf8731d310e8", "sighting--8e0ac491-51cf-436a-a2e9-480e1cd8a1e1", "sighting--5b56aa5e-b3b5-4789-8bcc-417d25d827c3", "sighting--80d995de-6968-4ca7-b6c5-93e23ff54589", "sighting--b2b2ed15-093a-480a-8e9f-4702547ac51d", "sighting--f380728b-665d-4473-9220-6126c80e432f", "sighting--4250be17-94d0-4005-8a4f-22cb9378689c", "sighting--8dca36d4-e303-4cc0-8691-e5502f26b080", "sighting--230d597f-f7ca-4745-b6bf-2a816386da32", "sighting--e5554034-1272-401a-9e18-a2b1b6a1e42c", "sighting--d6f93c59-4d85-430f-8522-4f55435809e8", "sighting--b3541934-99ae-409f-a902-90bbc650f6bf", "sighting--246649ae-f548-4492-8006-b33dd8e0d465", "sighting--ae6291f0-802d-40cc-890f-7acc23b1b861", "sighting--c2d4d73d-2956-4dbb-ba9b-92e06dd73aab", "sighting--c4b712bb-f1d8-4391-9847-bda57087c6a5", "sighting--0e40bfcb-4520-4571-b30f-9402af87ff79", "sighting--805074be-d686-4155-b58e-43a98e2b155c", "sighting--51da5f82-0f5b-4c9c-b509-beb28bda553a", "sighting--4ebeed3d-73c9-4a4d-9fee-b3d9b4c7a31e", "sighting--9a103a2e-eac2-4e63-b89a-8b7a993e8983", "sighting--5e31dfae-8756-4cca-967e-9d4f7292692d", "sighting--0f8daa31-9671-4e2d-9ad9-a6f23b1522f7", "sighting--d193aa3f-903d-4b60-bd04-58ed6075c3dc", "sighting--e07e1fac-5532-4ab2-badc-cbe3afa63892", "sighting--816435e1-7cce-4a6f-a5ea-ef834127da79", "sighting--69517d2d-8eb2-4d2e-845d-51673fa52d36", "sighting--5e8b49c0-f74b-4685-b0f5-3ded192f0cea", "sighting--ec3d25c1-6512-4813-b004-d34266f018e4", "sighting--a0099e59-a95a-4bd1-9204-65c35188a8a4", "sighting--aae172c6-78b6-48ac-9186-839139d4aad3", "sighting--ba444438-2221-4195-8858-69cfc0092efe", "sighting--8b2ea85f-29a8-4b3e-872f-070ef3f9d673", "sighting--04e454e3-7f5f-4a97-9528-f345f3e11adb", "sighting--699c07b0-88a1-4d2b-9225-23154a985729", "sighting--04fd54df-56c2-4f43-9119-d0689ff8d3bd", "sighting--34379bb2-1a33-4362-a5ed-64ab630f25ff", "sighting--b5d3a2fb-3eae-456d-9af7-39a788377b4b", "sighting--ed67400c-cbab-48aa-8bfe-18eb15d8e5bd", "sighting--26f21fa5-3be5-4bc9-badc-a57e57b4f187", "sighting--da9e1f27-170c-4350-ba43-5c934f31276e", "sighting--818a2505-fe75-4e49-850e-f518de6a4d7a", "sighting--bf3978ba-d789-49cc-894f-894ecba0e4cc", "sighting--0718e0f5-f2f8-4f9e-9241-24db41f5f789", "sighting--e5bd1245-638d-4d22-b2e7-584c744e4ddb", "sighting--7a9cf2fd-55c7-4d0f-9137-b40ee831a7d4", "sighting--d35c4d8b-40c1-4f0c-8108-10db511c71a3", "sighting--71a680d4-b9cf-4cbf-97aa-bf7f67f72138", "sighting--bb613404-2e70-41e2-8c8b-638c1f7c726a", "sighting--d0044dd2-f772-4f26-a6a6-d619a0cd81dd", "sighting--262ccefb-a136-4244-8053-927152cad624", "sighting--055c5574-bead-4b68-b482-1e890b7a0cfd", "sighting--f4c8446a-1093-446e-a29a-4056e688bd00", "sighting--fe8a0fb2-f1fb-4ff9-b351-0e490cb31975", "sighting--73cddf70-11b7-4c45-8d75-ab4ef81fae84", "sighting--faf4cd2a-080e-457e-aa90-2f3571f52c17", "sighting--7b1a186d-125d-4836-9f3a-0e7b21fcf379", "sighting--60608c00-1c0d-4245-88ab-a41d9d7df010", "sighting--5ac5636d-84b0-4973-bd5b-5bbf3f2c650d", "sighting--668531fb-87a0-4f27-9d70-e3f4880585af", "sighting--f2f2bd8e-5982-449b-8878-c6f5350de728", "sighting--d0e4e4d7-6a0f-4296-812a-e261f5fae393", "sighting--3b34e363-8864-49eb-af9d-7f5e12ba87fa", "sighting--fbcca3c1-9a2e-4b97-b31e-5653275acb31", "sighting--bd215dce-2119-4a18-bea3-17acc8525592", "sighting--a9acd34b-52eb-4058-a500-0cbb0729df17", "sighting--5b163267-ecb4-4e87-8861-ce8ea73c3164", "sighting--33c8216d-ddb5-48ed-8500-8ba8fcc68db9", "sighting--a077882f-e95e-4586-9470-39916bf87e5b", "sighting--8f0dfdf5-90d1-44dd-8546-aab30b4dcc77", "sighting--bd3950d6-b205-447d-9447-65187b82c454", "sighting--8591b3fc-5c0e-4b0e-81ef-3435176e3b31", "sighting--6ef3d3ca-e8f7-461e-9cd7-a277809f65d4", "sighting--87f08408-a59e-4817-ad06-1e0e74fe642f", "sighting--73730b52-7904-4c20-b168-47efdb335471", "sighting--8c079429-0460-4cc6-9694-13754d462bce", "sighting--e6c72456-b2bd-40af-9eb0-a58bebdaaa1d", "sighting--71bb5e08-3a4b-46f5-977b-4e93f53d5bb1", "sighting--5b9d5f9e-69f2-443c-9452-b8044d04b331", "sighting--59a4c195-fa73-4774-8d67-ee415c467a30", "sighting--7b2e11f7-9d42-47c7-b3a5-343520262342", "sighting--c3a3c970-a79c-4245-be27-a91a4b8a32b0", "sighting--18d492c2-e772-40bb-99d6-c47af7400e6e", "sighting--91d93d99-ba30-465b-89f2-d2a935db5f39", "sighting--78dee510-2dff-48cd-83ac-199604835a4f", "sighting--b926914e-bf36-435d-b2c6-7bbad3862627", "sighting--fcaf2508-5a55-41fe-8702-ba0a9f7df820", "sighting--d0134171-d139-4d39-b8a8-2708d914e293", "sighting--ee1b91ea-58b4-45f0-8db4-c78f105dd6dc", "sighting--6e7f9cfc-9c9f-4884-a182-ce458e985260", "sighting--63b7b835-6abc-44fc-af58-1103d62913ea", "sighting--7b818422-8753-4013-8db5-dae839cfc969", "sighting--ececae6b-97fb-4f13-a200-7fd3477c18eb", "sighting--1de1a2f4-ca7f-4cdd-b736-81805b67a7bd", "sighting--a564adcf-8a8c-42fd-a12c-d7086fc9f5ac", "sighting--bfea8157-00dd-4cbd-902f-1531dbbc8bd0", "sighting--9c2a8e34-00de-478a-b2ea-2d4b292a88f9", "sighting--cd7f0178-6582-4c30-bb32-49577a73fa29", "sighting--1c5cea0f-7beb-4345-8384-5a87300d0d23", "sighting--3c734edb-feb6-4c7a-9161-cd51e8f852bf", "sighting--18e6d9d3-ebc0-4df5-ad46-9f3b919ded63", "sighting--772bbfc1-8e4f-409a-a527-d34d501023cc", "sighting--80a701b4-7f16-475c-b8f3-2f7fe5669cfd", "sighting--d398c13b-f615-4e6f-83d3-061508e967d3", "sighting--efb5af64-6d5c-407e-a99b-51ec4ca6de76", "sighting--94f7fec9-8590-40d8-b480-5ca4e2188cf5", "sighting--0b08bb16-1b13-40f4-914a-bda206bd588e", "sighting--deb8e083-8c3a-41b8-b0cf-af46430d09be", "sighting--05fcc7db-8e78-46c3-8b82-9d9903cb8d08", "sighting--1bfe09cf-d8ed-48b1-8de9-7c72602a020e", "sighting--7c18ac30-dde8-4774-86d7-268a336e2c9e", "sighting--b73ef33b-7f8d-466a-a2b8-7de45132df49", "sighting--902fd6f6-e448-4981-bed4-2d65ce45d0c2", "sighting--b5e662eb-4fe5-4171-9a02-91f11823f71f", "sighting--b0587be9-3598-45a5-8b64-45cface70df9", "sighting--5592dda7-e028-4077-aaf2-0736497b5c4c", "sighting--54d6e9be-2492-463f-9a73-036d024ae3c8", "sighting--f347453b-f5fe-4d27-bdd9-99f8e5cfc5f9", "sighting--211a7649-1efb-4095-b8e7-9428de679781", "sighting--d9da7402-4102-44f1-9886-b938f55f39c8", "sighting--dc10fce6-26c6-48de-b7ea-d9b7ee7a46a8", "sighting--645a6e8a-0a6b-480a-9326-b0a931122043", "sighting--2c2ea798-5f59-4a2f-9cdd-b16eb328cad7", "sighting--29fda9d8-a2a5-4eb0-9968-b26aaa59d79f", "sighting--142d9df2-6211-45f0-acdf-50055f126f09", "sighting--c1888cb9-ce7b-451b-8977-ffb79716db38", "sighting--f7fa34c1-7525-4098-914e-f56c38eb76b2", "sighting--cd9f3632-258c-4c69-8ceb-535231b89bd9", "sighting--35d23ef1-1e4b-4de9-b04f-af5954e810cc", "sighting--1d4dd26c-6cd1-4196-a5d3-5150de8148e4", "sighting--1617f185-5d53-457d-bfce-90031fc60736", "sighting--1e5b1acc-5594-4d26-b838-61e67e0c34bb", "sighting--979d8006-8f06-4146-bd6d-c0f63a1eae63", "sighting--81c24ce2-f914-4986-a46e-dc5a61778855", "sighting--81f7f07f-a0d6-4beb-9ceb-7983c02e13cf", "sighting--704c4690-0125-44b6-84ec-560922e45a29", "sighting--1a2afa65-d2b0-4e02-a6c8-26e9d7200a35", "sighting--eaa664f4-8cba-4a26-87ef-54ba611d2a5b", "sighting--b8a2aeb9-6c98-4f4e-b777-f18a924108c9", "sighting--c616cf4b-e8c7-487f-9fe1-bdd4b661c367", "sighting--b3481e3e-1cf5-49b6-a4d1-9fa2fb137939", "sighting--99f99697-a324-48bf-bad1-8a2addb83bfc", "sighting--385783f6-a518-4cc7-b30d-ca7c47a8b735", "sighting--69a3d043-a26b-4faf-9703-2af9e7202e31", "sighting--f853c4a5-1b5b-45a1-a6c4-08b348925bef", "sighting--dfb66f4e-04d2-424f-a7cf-e48d5a4bf23c", "sighting--761780b3-6425-4148-ad40-9da944fec09e", "sighting--97ed6f7b-b39e-4e7c-a8b5-dae71567b4a5", "sighting--9777c114-5d8a-4021-b7ef-290a4d0dacad", "sighting--9281cf2a-07d2-4ded-af45-ee7d81db2028", "sighting--318c56c0-d8d4-4546-9da1-bea6f998e002", "sighting--ca1d61a6-3355-4350-8410-9b947b53e632", "sighting--03b84413-3b99-4745-b8f0-9862395ca1b7", "sighting--289ff0b2-c4ac-446e-9d5f-66e142132443", "sighting--31c1164f-e0cb-40b9-a764-a038c0f6db19", "sighting--3d5771e8-dc23-4ca1-8e10-6d710e9f2e05", "sighting--3d5bc611-50ae-4bb0-adf4-ce92bdce42d2", "sighting--816d4d4d-6470-4cc8-a40a-b216d70d17b2", "sighting--1c6509c1-551d-45b7-a960-83a560978722", "sighting--8d64c9ae-1ecd-4339-b3ce-cbc17d1ea69a", "sighting--695476e1-8a05-4ea5-8f17-588a76b47054", "sighting--0465633f-bd11-4b70-b644-f091a4d8e699", "sighting--491fddbb-a1b1-48d1-9ac2-ee36276ae5aa", "sighting--dccbe152-0fe7-47ab-b675-e67d4ccd2d5e", "sighting--6a93e0fd-13be-4856-92ff-b1c9f29c2667", "sighting--71acaa21-d2f4-4be2-818a-57c70b417474", "sighting--9b9d0ef2-c82b-4f2a-bbc2-65e4aee40bd1", "sighting--7175f5e1-2cdd-4e76-8ea3-4ef9fab1e0dd", "sighting--182e8449-8cd8-4e1f-bab3-dea9456dab2e", "sighting--a078f496-6745-4728-a9c9-fe8950ee7f90", "sighting--1dbcf558-7ed2-4bc1-9c2d-1ed76adf2058", "sighting--eb2c4e3f-4879-4bee-ac13-a3f61512b047", "sighting--fb01507b-9f34-46db-8d15-14ce224e7a53", "sighting--89580bbe-b059-4039-9b2b-4726abf40be8", "sighting--f7fc5697-12db-44c4-9f5a-3cb0650e35d0", "sighting--23d79f03-1e13-4096-b6a1-6808aaeccf49", "sighting--eaa8690b-9749-462b-9db7-f3d6ff981251", "sighting--b0ef87be-9974-4709-b59d-373095e30a86", "sighting--4043491c-601b-4fce-a0f0-0acf28481af0", "sighting--13738b93-8373-40bc-b6ef-58fd11cba984", "sighting--dc29d97f-3299-493e-96cb-08a57d520c5f", "sighting--02e43d97-73e8-40d7-a160-65a0d9ef0cef", "sighting--81f32702-1efb-45be-a173-9f6e7f7dbb1e", "sighting--0855818c-6ca1-4d60-8186-d6d365fcbdd3", "sighting--e391ab1b-c43d-4096-a6cd-44315a34872d", "sighting--90b20595-811d-41e3-8635-3ce21817569e", "sighting--5c731e49-2e25-4d08-8165-3c4a2154be1f", "sighting--7b1ef943-c2a9-443b-9d6e-e258187bd9c5", "sighting--f4a7629f-5850-47db-a0e3-67dcb4070eb5", "sighting--2949456d-a46a-4122-aba8-7186a0208918", "sighting--412a4f5a-3290-4b27-825f-1c27cf0b3dd4", "sighting--4482cd39-99e1-4003-ae52-a8fff646110e", "sighting--4e06e53e-2c2f-4ab0-87a4-df056bcae3bc", "sighting--f26b6665-de6a-4d4b-9e14-e40a365e9fd3", "sighting--5ad0fa70-ed30-4c81-964f-794be8c2a3a9", "sighting--b7c38021-75f9-4eb7-92f7-87f2ef46f605", "sighting--e067eb94-c0fc-40e1-9f15-1c5505e4638f", "sighting--5233002f-bdc2-4590-85a9-4e4f7ae282a8", "sighting--fd4cc7ce-543c-4dc5-9f34-071548a91c45", "sighting--14206cb3-5891-4d40-b9cc-47c276d2fa3d", "sighting--b4323a4b-d6d7-4346-9b90-e5d84ecc78cf", "sighting--e14a1eda-6573-4bcb-beee-f6864ee1fab4", "sighting--1bdd4088-0d1c-4da1-8945-d1f81006ba5b", "sighting--a92f9723-1e0f-43df-93b3-161f8f8bd402", "sighting--7d698bc2-3bba-443f-b532-28998a91b2bc", "sighting--3cf99b8b-d5fe-4511-b984-05cb9a71ac5e", "sighting--3009feab-f6bd-4f98-a28f-8c0921363126", "sighting--4fd4ffab-9873-4d43-b051-e72a13f760a2", "sighting--7cfcb516-359d-4516-a1c0-540a508369ae", "sighting--9e2470c1-33f5-4710-a3b9-e7b1143bb5d1", "sighting--5eb3c0db-ac7e-434e-82a4-d969fcf0c513", "sighting--e88a28b8-a978-47a7-ba15-e50907eb191b", "sighting--e4078930-5c38-4d08-8a76-414606c2b56f", "sighting--b0773412-9399-49cc-9b28-f41eda6bc831", "sighting--8494f5d3-3446-4d9c-8500-c3c25a0b7ea1", "sighting--44b40e98-2c1d-40c0-af4e-e19933eb8214", "sighting--6da00c8d-18cb-4be2-988b-4e210aac45fa", "sighting--312827fd-ee59-4910-a13d-fe8d44b54864", "sighting--7f1a85c8-ca68-4737-a0b3-51343cb35392", "sighting--7116fcaf-5299-4fe2-bd99-fdb5c48f820c", "sighting--89e37a15-3fa8-405b-a9ea-1df3ee5b1e95", "sighting--7dc4aabd-6bc0-4b4c-9082-0c60b869e791", "sighting--ccb6b265-9732-40d9-9eb5-67a347795d85", "sighting--e6296d4f-4ab5-463f-8855-7ce5323cbb6a", "sighting--5db8615c-c2e0-48c2-a1a8-6a0fa85db62b", "sighting--c48cc885-8cb8-4e53-99a5-e908616ee60c", "sighting--d7660185-c1ce-4907-8387-80324e1dc149", "sighting--dc27d3a5-fb21-40ca-b5b3-305365eeec3f", "sighting--8205396e-6d12-4359-822d-8f2968ffe6ef", "sighting--0e8782df-2e7d-4824-9598-52c185967703", "sighting--18ee5e7e-ffda-4f2c-886e-4fac43c5fc57", "sighting--61b55427-cadb-4503-a043-122ec45de6ad", "sighting--91117a59-6c4c-4d6b-b670-380e4145e9cd", "sighting--a05d70ba-d1ec-4e24-9063-71918b4c8292", "sighting--f5ba873f-a39d-4251-8b54-7d92844aafe7", "sighting--59c5a2bf-4684-4477-8682-c2b30a96a573", "sighting--60627a3c-d5e5-44b7-b9bc-afd2dbc2fe13", "sighting--444ad2f9-3d60-48ea-a5f7-942404a97898", "sighting--8a805be1-5a11-4ae2-bbb8-16f2eccf8ff7", "sighting--e6157c2c-383a-4896-acf3-ce2c48f9f304", "sighting--661911d4-c8e9-40e2-8ec3-e59a8dbe3c54", "sighting--915547ef-e883-45ae-af81-b1e856cc627b", "sighting--2188d4f5-4d9d-4371-812a-867724232205", "sighting--f236e1de-9b0e-4878-9cb5-f66aaad95338", "sighting--4677b1ec-609c-435c-a77d-583b0e493f28", "sighting--fc2a7c6b-1e0e-4ff6-ab96-c84f6bcc2e09", "sighting--3db8a6b2-5c3d-4310-b33f-348b732ad6e3", "sighting--6d2d888b-4d03-4db9-9867-40fbda3fb334", "sighting--444b1e5a-6801-4a18-a1f4-898b7339aeb0", "sighting--7cc58d9b-e440-450c-a190-016ce1f31a0c", "sighting--b4548138-7f3e-463c-8acd-be18f527c063", "sighting--c15197f8-13cc-4eaa-ae1e-c90ba1dfa980", "sighting--1e9fbd60-9f52-4b79-b920-6d7075b021ae", "sighting--9cc4c3c8-ee93-4437-93d9-9a2a41056a07", "sighting--c8db0259-55ef-414d-84e3-205c278be963", "sighting--973f6b5d-c3d6-49f2-9911-4cf21db63d12", "sighting--a6eb681c-7845-4979-9b54-779c9f7dbeae", "sighting--a928ae1d-96c1-4fc8-8f7f-6b737e5b7dea", "sighting--be53f504-d39a-41f5-b3d0-f942bf1fc047", "sighting--23059e0e-27a7-4753-904d-62ba2e64d7a2", "sighting--017970d5-58ed-48cb-8764-b83049b3ee2f", "sighting--285b307f-396f-440f-a638-7ff73ac04377", "sighting--512f42e6-cb52-4d69-9544-0fa9c557957d", "sighting--6f925160-0980-47f7-946b-aa41f5e6a5e4", "sighting--2587987a-21e0-4d0f-b2a8-37ccc77aecb5", "sighting--a5467d99-2bd0-4689-80e2-9a041b99c084", "sighting--d164508f-a9e4-4b3b-8c19-eca6bd871fa3", "sighting--0d492c6b-9ea0-4511-9119-3becc56af51c", "sighting--c08198bf-4871-4182-b963-c7ffc4f0ed80", "sighting--a59d452e-e129-40e6-8f80-fcf4509f64e7", "sighting--3c182339-e819-4de7-8947-807a6c26b019", "sighting--02d8c28d-14e7-4b4c-8711-83f3021cd12b", "sighting--06b2d805-ad7b-4154-9ffa-98de3ef4c1d3", "sighting--3fd0b07d-546c-4e63-9919-6b2ce0c74ead", "sighting--0247d64c-b93c-4047-adb3-c2995a52c864", "sighting--695d0f71-fe7a-4ee4-8149-e4166cc99c93", "sighting--8b6d5685-8ba4-4209-bcd2-4e9be28fd8df", "sighting--fe255d5a-f80d-4a2b-a525-544a8169ce8c", "sighting--8e19ed2b-9869-4d96-ac62-4239b1c5b2d1", "sighting--149eed15-9fcc-46e9-a56b-971f03be8bb9", "sighting--de093126-9f2e-4b30-8ff9-f3d4743d72b6", "sighting--505536d6-22af-47ba-9668-1e79ec9b02e3", "sighting--c91c584a-4ebd-4e10-9fdb-b829c418347e", "sighting--5af6b7b1-5847-4450-b668-b3a6217e0af3", "sighting--2dc4b8fd-ca6a-4cff-9c0a-9c5973df2a29", "sighting--3555d7f0-22dd-46e9-8b9a-056c4b4a4c9c", "sighting--26b2a68e-82d8-451d-83df-bd8dfbf74713", "sighting--cb218cc9-a97f-4e1a-ab94-621708973742", "sighting--ee96886c-ddfa-42fb-8d4f-071334391061", "sighting--8040ef93-8706-4780-8819-b8fe180dcd9d", "sighting--77b809e7-a8b3-46dc-a755-02049aec435b", "sighting--c510eae5-684e-4043-a1af-70c46cee376c", "sighting--de241674-27da-4a2c-9f3d-88482ebc20b9", "sighting--829a2bda-439f-423d-9b67-e08d13879177", "sighting--5862ec13-2033-4463-9f57-5b7166f45e6e", "sighting--c7aec6d0-f329-4ac5-9864-570ab389af3b", "sighting--0396723b-f423-4c92-9168-4b6bb4c23d8a", "sighting--e8d35359-f203-483e-ab38-3794fbd09063", "sighting--478f1c71-cd61-45e9-b62e-8f03e849f302", "sighting--df9bbb17-714a-4b27-b653-4e3e8f7e5adf", "sighting--32702e47-e91e-4fc2-b14d-f4d68c8a788b", "sighting--534ca7c0-f932-46e5-b4ce-588eccc440e5", "sighting--c09fcf55-8435-42f6-a292-3bcd246876a7", "sighting--288c0ca9-6986-4c33-a6f8-c72fbdfe03ba", "sighting--1338bf3f-b84a-4b95-90a9-b91e5ff37d10", "sighting--6bf9639e-e698-4a5a-b381-0f02dda1f93d", "sighting--a80ab7a6-b461-4793-82e0-a47d89e84648", "sighting--8be46b79-c62a-4ec7-a44d-25f705a9f1bf", "sighting--b9aa6540-b673-4ace-bea3-d793b91edf82", "sighting--b45cb2ed-2627-4816-9dfb-8ba1c264f089", "sighting--7fd1b6c7-6d8d-4678-be08-18bb241e8704", "sighting--9f9e4bf5-1b22-4d37-8338-5590e2278181", "sighting--89c946cd-dd55-4d4f-815b-ca3470d9940b", "sighting--88feb4b2-9093-420a-9a58-8f39a67304eb", "sighting--c4262edd-d788-44e5-ac90-b50f1221363f", "sighting--2ff447e4-77dd-47e8-affe-c0717a79368f", "sighting--d0d6167f-0e0d-4a11-a544-3058e1dcd974", "sighting--9c8a4034-d561-4f1f-be84-b01fd5008e7c", "sighting--2986828f-c7ec-4e69-82c4-27e662c14754", "sighting--e0edd14c-2fcc-4919-a3c2-0729018b3af7", "sighting--21256ea1-d6fb-4442-b9f7-5c8d715852ba", "sighting--3c5430ba-349e-4e4e-b0ab-56eefd807c48", "sighting--9cadebe3-dd56-4355-a3ae-bf697b514e19", "sighting--d7bdc5f3-307c-46d6-849e-822627a31ad2", "sighting--28ce2686-8b61-4290-84df-f366cc3c165b", "sighting--daf85272-899c-4394-ae9c-f4619137220b", "sighting--8eb353e1-5754-4882-b934-40597a9bbb8d", "sighting--a83f5dec-d8d1-49bd-a0a9-3ac0f8d86121", "sighting--afc74a7f-6232-4798-8048-8fa6f9d5a71e", "sighting--d30a55a7-ad6b-43a6-8eec-e7dcfbc55f51", "sighting--b165cb2b-956c-4334-8906-bc1ccec5417a", "sighting--cf91e967-5093-4a73-8840-7fab5be470e9", "sighting--1cf6a7e1-e441-4ebe-8191-4528002f19d4", "sighting--8aa5ae95-de8b-4a49-a90d-185637a5b298", "sighting--d23fe2a0-1d01-4d9e-a1f6-9905ec76dda4", "sighting--870e20c5-5adc-4759-b93c-05b3e72d5454", "sighting--f84e4043-23f7-4444-9b95-837956bc4520", "sighting--fe96be65-f88b-4d10-90f2-57bf5244a5a5", "sighting--41c543d9-0a6a-4d6d-9fd8-1b5ad3fb571f", "sighting--7a043a3c-1799-4481-8b73-74e47133bf6e", "sighting--fdab3343-6a92-49a0-a105-ec9479456882", "sighting--1f07e909-0476-40fc-81d8-65a7120d4238", "sighting--eca0baa4-06ac-450b-a52c-f9946b66df67", "sighting--335c4a54-9dc7-414a-a584-9a29320c724c", "sighting--ee941ae5-37e6-4490-92a0-696a38c940fd", "sighting--bdcc807c-b9f3-4860-ad31-ea514e94c101", "sighting--cafc5aa1-94dd-4380-9669-fdc65197e5c9", "sighting--0dab0c71-9bf7-421c-8ea0-d1bdabd128a9", "sighting--50077eaa-372e-4445-919d-b1734166694c", "sighting--32f45379-bdcb-4b29-8c27-75cc48c57d57", "sighting--2ec39a3a-da2c-4490-95b5-a2bf9b8689bf", "sighting--2627e1c4-4fc2-4a47-aca1-294bc1e4cac3", "sighting--ecb7fd68-dd56-45c3-8f74-e4f2d537e846", "sighting--452fb537-7340-4009-bc70-a8234740d1a9", "sighting--11ae508a-5a74-42cd-ba9e-3f3f4e4d6eb2", "sighting--564df28d-6408-4714-8f5d-f3ec32aad87c", "sighting--9d42723c-b8d3-4de4-9fba-ab9d81b43c0d", "sighting--206d6735-b24b-4e42-912f-62801aae10c9", "sighting--dd76b9b1-4637-4deb-bb9a-eff83b346be4", "sighting--659b3774-33c4-4c01-8710-ad6dc22469b3", "sighting--c6ac190c-40bc-4fc2-a3d4-60d24b6235d3", "sighting--ef327eff-a336-4af4-8685-19b7c84444b9", "sighting--e32be7b8-3076-49f2-8024-3463d0b682bd", "sighting--4cba1f3b-8da9-4275-8ade-871983109c7c", "sighting--c6ed9fb6-66cc-41c4-9c72-d452f140ce28", "sighting--aa7791a9-2d96-4fe1-980c-131737fa81ab", "sighting--65504ef8-12ac-49e7-ae0c-f5c7e5cf1294", "sighting--db0cfc07-de4f-48c6-a80e-1404d68bd7d9", "sighting--5db49b76-33ab-431f-89d3-7b47cf16ddaf", "sighting--5f5a6c12-6059-41c5-8239-8f6cf859e672", "sighting--8581bb0e-924e-4863-8dc2-64fb7086659b", "sighting--c10a4b53-4eec-4fba-b5f4-aaed3386b6b3", "sighting--40045b4d-338d-4a14-add5-e5ae2b042aa8", "sighting--1421fd25-4ff1-416a-9220-565fcf001ae5", "sighting--e3996a8a-683c-4360-9005-608d9a670fff", "sighting--b55a07dc-e686-44a2-b6e2-66bbedefb509", "sighting--d1c81d26-182f-48f3-a904-843b00defd52", "sighting--d797166f-7da2-4213-b559-0ca42f94ca6e", "sighting--34bcc588-c450-4b06-a31b-e57a8ea99957", "sighting--ce875c1d-0b9a-4ad7-81ad-7c9b1a310144", "sighting--4b6a5719-8acd-47bb-9e5a-393e31ff5a9f", "sighting--4e8923dc-3281-495c-a501-2a8bba62f02d", "sighting--db83eaeb-5799-4e02-ba9c-8bc741cc5450", "sighting--10ec0c33-8f7f-40af-8139-027d3cf5251a", "sighting--d3cf50f7-15a2-4b77-86e5-dfcad04ac5c4", "sighting--ab44f690-b061-448e-b12c-3c3205eeace6", "sighting--f449d978-666b-4683-93ff-4992eb50ce6d", "sighting--ee65cfbd-8f6a-4580-9d97-999c69a85b71", "sighting--60128dd7-4d32-45dd-96c1-679371d27e81", "sighting--1bc56864-9b9e-44e7-acdf-1f888b426c91", "sighting--0c2ed1c7-8134-4f16-9b11-5320dddfa986", "sighting--e0a5ec4b-3f00-4397-a73f-033abc18cbfb", "sighting--5c7c81a2-f0d5-48de-949d-0f25a7b0bdc7", "sighting--8debd914-90b2-42b5-9a7d-e0109cd9124e", "sighting--3ba9859d-d72a-43b9-b835-c79c8e1df16a", "sighting--e53d7edd-b3a5-4ec8-8792-e807a293c51a", "sighting--61f53a96-a6e8-4200-8ae8-5e5d9b747e50", "sighting--bca86269-05d2-400b-baee-eebae83e710b", "sighting--4a639bfa-816a-42da-85fc-0c78dc286ca7", "sighting--d90c44bc-4c86-4434-8e46-02a33a65f6f4", "sighting--ce485ae3-27ef-48dd-9570-d58062dcff4e", "sighting--7da94234-2231-465b-a91d-607465b4ff1c", "sighting--a1ff1e8b-7cb9-446e-acb7-35a6c4a5513b", "sighting--55a52375-2af7-4704-95e0-083a0f1b0c3d", "sighting--9940f72e-17d0-4536-ae04-c88d28045c7e", "sighting--ccd8636f-40ab-4a22-9366-183a242fd645", "sighting--b7a16915-124d-4300-b372-eb28faa4eb67", "sighting--d42e44c4-7d93-434b-a905-5b4e1234057c", "sighting--9ca71115-2718-4d72-b2ed-c4ab36ffb3a1", "sighting--03f61597-245f-4b9a-96b4-f6cba9c66490", "sighting--5cbd6d47-971d-4ea0-9380-a44a8030d97a", "sighting--0494a0fb-2016-4b70-bd0b-b7630141d14b", "sighting--64dfa63b-736b-4bc3-9486-73a699fc5c9b", "sighting--a1513961-bb67-4c0e-986b-3df2977ab8cb", "sighting--8328baeb-e204-4616-ab86-28b5aaef89e8", "sighting--14e6813f-71f0-4674-9660-a59f92a5d488", "sighting--5ada1026-85ca-4318-9293-4f18e4f8f8c9", "sighting--694a5b71-5fcf-4224-aa73-5bca7efa1cba", "sighting--1438e1fa-f376-43d3-b162-940b8bdb6195", "sighting--01042b47-e988-4819-b15d-3a8129d2f6a6", "sighting--36bd242a-1c71-4c3b-9b76-da083f36e970", "sighting--769e16db-781b-4399-aebe-5088ef198065", "sighting--72450e22-7b86-4057-a4f9-134709666510", "sighting--abe87182-2beb-45e0-bb07-5649783a90ee", "sighting--6a6efe42-949e-41a9-bdbe-d6b35e794ebe", "sighting--8341bb88-7170-4305-8732-831c240408be", "sighting--86680cc6-b6de-4612-97da-14e921a4c65a", "sighting--29adc55f-f2d6-4db6-a938-46c26c7b8549", "sighting--13d0d90a-ba67-4cb9-a947-b881798924d3", "sighting--818ef256-273a-4097-b2ad-444ca5bea2e7", "sighting--4108bc5a-759c-4af8-a93f-8963c07d2f3f", "sighting--6c03c4d3-df1c-48f3-9f27-5ac197beecd3", "sighting--6f44eb76-f4c7-4045-a3cd-f3372e337c75", "sighting--d5cfc0ce-ac01-42d2-98df-fd4250a4489f", "sighting--b2df1bc0-43fd-4b8f-879f-b99c7c7b35cc", "sighting--c36adf9d-56a0-451b-8dd4-fbdaf179756a", "sighting--68df55bd-9bfd-427c-b379-2d08abafa66f", "sighting--677b364f-c403-4ab0-8139-c8c6f1c17c59", "sighting--fdb4dec4-7f27-4e5e-904e-9fcb418debcc", "sighting--dceec9c0-062f-4e46-85ce-4c3ee87c44f7", "sighting--34ce04c8-9f2e-4286-96ab-c2e37b284a85", "sighting--3af6f0a1-6333-4ee7-bc2f-dd4d74d99ba8", "sighting--be4757a7-1507-4cbc-bcdc-43a2f49ace42", "sighting--46556190-b03b-4c4d-9ae3-6ae2e21f1646", "sighting--66206498-3a02-4fed-8739-ce25c9926d59", "sighting--984cbc90-7100-4204-bf9a-e57faee98643", "sighting--7996ac39-9df4-4877-83f7-0d8ab963d1df", "sighting--8c157eea-6d70-4f05-817e-09953df19bad", "sighting--bf5d06f5-cd86-41a7-8fdb-9c6cec897897", "sighting--e4772d94-56b9-4d24-8b31-05d28356e39c", "sighting--b836cf4e-b6af-45b7-9b81-7d9a1e409491", "sighting--25005b3f-0376-4f62-9d80-e56e28e5aff3", "sighting--8939c64a-15c2-4b1d-9795-bd81e94190a9", "sighting--6799941c-98c2-4b9a-8451-c1ab77e1a4f3", "sighting--cfe7f6df-372c-4980-855b-2698f674bcff", "sighting--d5095446-0c54-4eca-9f66-7daa1c2b0d51", "sighting--a785860f-e397-4299-83fe-d1eabbaa3563", "sighting--dffa0611-9773-4f25-9b7e-de024975af8b", "sighting--99c4530a-9157-41e1-bd88-fbbd7abd7703", "sighting--373430b7-747c-4863-8f61-a9ab0e03f153", "sighting--bda70216-3c6b-4f19-8896-58663784a559", "sighting--4c2bf5b0-1b49-435b-a13c-00a8487d9fd9", "sighting--b624944a-e953-42a3-8e08-c7b992e5f38d", "sighting--25ec8ba4-458a-4bce-b788-be661ea18a17", "sighting--0930703f-e6cf-43ee-b75a-77c61e180e80", "sighting--8a588f35-232b-4de5-8418-4c743958c947", "sighting--7851907c-f623-4a3c-82d8-d86748d6d9ae", "sighting--3f9f019d-cef1-4660-bac6-ad8e6eae4052", "sighting--5e16307c-265b-42a9-b008-0acc97d50670", "sighting--506fc18e-4d39-4f75-8cd3-8a4211b30bf4", "sighting--0e69bdaa-d45b-4474-8111-545e70b7531e", "sighting--240a3102-9770-48c7-b60b-e25c18b0f9d4", "sighting--aa84dd39-2c1b-4780-bcac-07990ffd0ba5", "sighting--51dedc3b-aa80-4174-b683-3265fd7a99a7", "sighting--3d40d82c-8fff-4c31-a906-29fb1082abfc", "sighting--e75e4802-cf47-4ed8-b458-a9bf349bb86b", "sighting--bd3b478f-fe11-485a-a634-9017f7176c9c", "sighting--0411fff5-45d1-47ca-8c04-bdd3508c44c4", "sighting--4e4118e2-3894-44dc-85ad-150d255fa285", "sighting--2c26580c-9bc9-4268-9d43-500dd20d9654", "sighting--1c058e31-118a-4042-bf04-870362511ee8", "sighting--6949cf13-29d2-430c-941a-8bf98386c2ea", "sighting--54746ba4-f3e3-4373-bb0f-a5d167c2bcc9", "sighting--9b9e3990-370e-4ead-bb89-bbeaf9a6e9f6", "sighting--01c72108-9eb3-45b9-9161-52f199de208c", "sighting--c2ef2507-95fe-4c28-962a-6e4401734c82", "sighting--ff8ce74c-cc39-4090-85fd-a7d3ea6363a4", "sighting--9b4341fe-63ed-4db7-882b-8efd28d06f61", "sighting--5ffe3c73-a95b-4d53-bff9-3566464aee9c", "sighting--c5e16590-8371-4008-ab81-fbe6263aeba2", "sighting--ead59029-411f-4aba-98ee-7c8b41e8b2c9", "sighting--1087a840-38d1-4f52-9953-d2d6aaaaf777", "sighting--a1b9c337-a5ba-4e24-a0c7-7c53deff39e5", "sighting--42c100b8-e3f9-4ae8-9c4c-ea64a40d491f", "sighting--6972788f-a931-4062-86f6-41c7e1ceb622", "sighting--e47b87ef-1de5-4a40-bbe9-100b0525ea16", "sighting--005bc244-1bff-4c23-a870-0d7863b15e36", "sighting--76ad7098-6fd4-4124-a676-0eaa31b6aa97", "sighting--8fdb37f8-d917-4c24-932b-471d4608dbd0", "sighting--ac2eb08e-8d0e-43f5-b647-1d26f4070530", "sighting--db304025-2941-49f6-a7e0-de19f59a79c6", "sighting--c3886a52-cc65-4454-91a0-adb1cbb8bb4a", "sighting--4b1ca66a-9467-4f59-8d16-946fae4b06d9", "sighting--a275a318-039c-4bdb-b22d-db34fc5ae918", "sighting--31747b1a-83b3-4a86-93fd-1e4b64251a0e", "sighting--33fd2f78-fd4c-4c9d-ab19-e2ea8fed0ebd", "sighting--47f7d5b6-8f99-405b-993e-cc9199e2922a", "sighting--e729c578-bd16-4078-9fc5-b8ccd99e7a2d", "sighting--09bf6848-da7a-466a-8273-6080571cf8e9", "sighting--6918d1d3-9817-4073-9ce2-806aa99e240b", "sighting--00aa994e-fc56-424a-8ca0-c54846c45824", "sighting--0a9915f6-6cf5-4679-8205-5d26a639fc1d", "sighting--dbd8e74b-fb33-4af4-b263-365d74d50348", "sighting--b37ef454-1a6d-4792-bf3f-e7c427e0957a", "sighting--d7382a8e-e54c-4a91-8eb7-7d076fdc0a7d", "sighting--4b861912-8bc5-4ae2-9e98-fd3b629ea887", "sighting--153bb47d-53b7-4c99-bba0-1b3521b4f48a", "sighting--4fb963ae-08e2-4f88-8ac8-51c448a9c675", "sighting--f743ef5d-cfc2-47ce-b89f-fda8ee02786a", "sighting--c87e2125-4af6-4985-9560-5a8cc9b2b932", "sighting--5775f9e5-3ac6-40d7-b5de-1060b5460526", "sighting--3cbffe82-f65d-48ac-bf98-6e1d6689b086", "sighting--bd1c9682-a1a2-4e32-92ae-f790e9c60624", "sighting--59c4f5b6-8f93-4549-ba56-d35b159c9385", "sighting--4f367bd2-cb1b-4df7-8525-213a3d21852e", "sighting--7ea851e8-b052-48fc-ad61-759e42e6f31b", "sighting--6d42af91-f67e-49bf-971a-36cdffba5f66", "sighting--100d55eb-76ea-4e79-8891-2ff8f1fbb429", "sighting--410aea1e-3cfa-46b4-89f9-dada05c0c2b1", "sighting--7a385e94-5614-4bbb-9a08-2914cb57cef1", "sighting--abc092c9-61e0-40b2-b4e9-ae66f3dd5e58", "sighting--c4b9a5b1-f4bd-4b13-805a-3d2a8234df24", "sighting--b581a751-00af-44f2-92ad-c620a56a5a91", "sighting--cda0fa0b-c4c4-4098-90f8-f168b2bbcd97", "sighting--03925d20-8e5c-46a9-b9a9-2dc0daef92a2", "sighting--690cd896-68f0-4045-9cda-8b5ee5a4f14c", "sighting--6a45989c-c3bf-48aa-b7bb-2f679e5a7809", "sighting--3ff68fc7-8e93-4140-bd40-aea8ae2c7bc8", "sighting--7541df9e-15e3-4857-bd02-6754250bc5ab", "sighting--1dee7d30-6e52-499d-89a5-de41f240cffe", "sighting--3ddedd40-937b-4d26-a34d-510576f35a78", "sighting--5dcd8be2-8c98-48fa-9179-362bb3734ae1", "sighting--5f7752e4-8bf9-4726-b219-63db61be40b1", "sighting--258f4f9a-d8c1-4d1c-b70b-117a25255d2a", "sighting--b0a510d2-ebb7-403e-9b15-d09a22e49f6d", "sighting--82e58990-7e2f-4ce7-9e31-2e5c4f9adbe0", "sighting--113c4ae5-182a-40b3-99d2-bc09d31196c3", "sighting--c728e94e-1335-4d06-9159-393f6dd99bd8", "sighting--22076489-135f-41bf-b458-8ab18a91cf6c", "sighting--f416d942-84da-43a7-8186-9ab35f8fe63a", "sighting--1e32e1b8-6abd-44ab-9a29-c9b8b17c20e3", "sighting--95f14c1e-d3fd-4b6a-929d-b4299334042d", "sighting--7dbfe448-63f1-4d64-9a71-0bd7264f0d10", "sighting--5ba6ee56-1683-433e-ad85-037ee8067791", "sighting--3a05c521-d204-4404-8bca-39ff67bcab75", "sighting--b6dc42ab-7fcf-4048-b3d5-d9dfbc351203", "sighting--9c5a7c0e-fc51-49c3-9469-71f943e60ead", "sighting--681e97c9-4a9b-485b-908e-bde88506bd37", "sighting--02edf7f7-a407-4d3f-b864-a5de3e3f11f9", "sighting--9ead1998-54c6-4624-909d-117b64b4bab6", "sighting--9ee2f667-08d1-42de-9bf7-0cecaf6bf149", "sighting--8e784f6f-0fe1-47d8-b0ef-493a4051cbaf", "sighting--325e41d1-4636-4c8a-9806-4fbd4a0a423b", "sighting--4ca486d0-75e7-4f34-939e-d86595d22b1c", "sighting--5810b494-a643-4551-a68c-713d469e98e3", "sighting--fbef9127-304b-403f-ac85-0f385ba16d1c", "sighting--a1eb781f-263f-4233-8f56-d9f9a670aba8", "sighting--4ed454ba-7df7-4b5b-934c-fa844b95fbe7", "sighting--3424bb81-4ec6-449c-8cdb-a3733d36144a", "sighting--9b119c55-f83e-4b07-b8b9-2b33367744b7", "sighting--83297694-445e-41af-8afe-9d320d1513e2", "sighting--7d18f3b9-2cbd-4f67-98ba-92ca7a4ddcdf", "sighting--3ddefd71-e072-47e9-add6-95e643cb30e3", "sighting--0d75af2d-21cf-4a2a-a270-77f34e91c6d1", "sighting--60221716-2705-4603-856e-d6e1026a88a8", "sighting--c530ede1-0d4e-4ce8-be0a-52b6a266548c", "sighting--d5a72150-b105-405b-9fa8-8daf7288cbf9", "sighting--62e80da5-ab04-41de-867d-53bb803a57f4", "sighting--6f3a7c3a-622f-4b0b-9bc5-02a7d4105467", "sighting--f5d75352-6254-40bb-9f98-683cfd2510b4", "sighting--015b7fae-bb97-44d0-82a9-793fa5c611e7", "sighting--f36050f0-b153-410f-91a5-ec46301cb770", "sighting--b7e7cd84-8e3b-42f2-b3a9-cf2e8b015a20", "sighting--ca64b872-3ee8-4c48-9d28-d7e3b45f601c", "sighting--4f0370d3-ea3a-48ab-b19a-f3f171409d28", "sighting--38402833-ffb6-453e-b343-a1fbbb4798ec", "sighting--324b6317-b46c-4a18-b013-21a12ffad135", "sighting--6efe8013-ba38-4bf6-8e9b-bdbef8151f43", "sighting--6661fc54-d48e-4dee-abf6-274638bbbab2", "sighting--5889f651-3f92-48bb-ae4e-fc10d89e568e", "sighting--ae4fcf37-7308-42ff-8fc9-45b2867100e9", "sighting--8c929280-bde7-4204-b741-ac20d5290c79", "sighting--95cec8d7-ed33-443f-afa2-a3b3d7b76276", "sighting--3532ac2e-a6c0-4f6f-8605-43869bd0bdc6", "sighting--5046a4d0-01da-43b7-be20-2787079340b7", "sighting--3d0bf5a3-a182-4fe9-8f0f-59b5d0744ecd", "sighting--a810aff0-db8d-4d7e-aaef-4e5b3a5695d5", "sighting--19438266-0e21-49a8-a194-7758cf59faab", "sighting--d709f900-3125-43d7-ad3c-0720b6f8f4bf", "sighting--b073719a-a27c-49dd-be91-96ef936f8b7d", "sighting--945c6439-08e7-4d98-898a-813c51adae25", "sighting--e3afa319-2c21-4bdd-8a6f-7c7923615f20", "sighting--b9838f2c-b430-4fb2-83a0-c8e9e6bddf9d", "sighting--cf96ffce-94f6-4348-b5f1-71ebdae402e3", "sighting--bbc36aff-1243-4701-bdfe-53a805b524f6", "sighting--a0c43934-5150-4579-8d20-321371f754aa", "sighting--a7026098-0d27-4dd2-aa9e-d0dfc6e5e12a", "sighting--f30798c8-7042-4a90-a854-6da767e29d8d", "sighting--afdd7575-ebfb-4ced-a1f9-c82d43ab8334", "sighting--35a69ec0-16ff-441a-a4da-56021c284f32", "sighting--252fb960-38d6-40ce-bc53-9f2fcc607a71", "sighting--ce8e680f-6066-430a-be23-bff4d2f4f1d0", "sighting--233f7082-9702-46f9-b213-f7dac8f2069f", "sighting--35ed93e3-7cf0-40a7-994c-0ad90e37aef5", "sighting--da9f6949-edd8-4f9c-b913-61f2f91210eb", "sighting--891c5fd5-00dc-4170-a62a-ec7082b3e604", "sighting--43f3707b-a0bf-4738-b927-d910148cdfb2", "sighting--24b7f0ea-0173-468a-915a-455cfaeb57c3", "sighting--12c164a3-52f7-4ab7-b591-1fd52a625365", "sighting--cd2c69ad-e568-41d2-943b-7c44cc458d06", "sighting--4119dcb6-236c-418e-91c7-e832765d1fe9", "sighting--63e03f1d-4e40-4768-8360-c944d9e92e8b", "sighting--d9e3f85c-a086-4cb7-9b48-d5115ad1b708", "sighting--86cac47a-04a2-4bdd-99f9-5055b47cdbbd", "sighting--9aeab277-36c1-4289-a2f7-d5ab94ec5ada", "sighting--2d0c1412-0933-4729-88d5-cd04c357e83e", "sighting--eae7c9b5-cd20-4d52-a3ac-24679d01dad7", "sighting--2c46e8a6-4914-41be-bc8c-00d64dc9a078", "sighting--76ae65ab-25dd-412a-90d9-b62c6fa6e1ec", "sighting--a0399689-118c-47c3-9a61-9fe5a17bd2a4", "sighting--1a388c44-9abf-4006-b457-92fb8073c4ea", "sighting--3d46848f-d445-4edc-8895-954054c93dca", "sighting--c1f401c7-0370-4ea7-b63f-7dc9c504cd2f", "sighting--62f27662-17ba-4a3f-a465-87841d518898", "sighting--bbc60aa5-1d0b-4653-8d84-2482853137b6", "sighting--e4211cc5-8cb6-468c-9e3e-85723dace4cc", "sighting--ff04760b-ceaf-4b4c-bdc6-4007e6f2949b", "sighting--9c2b0cfd-e209-49e3-92d3-28a246f19a0f", "sighting--181600aa-a122-4d8c-baa5-0c5a369c9d1d", "sighting--23536ab3-169c-4dcc-94de-4b860b4addc2", "sighting--6bdcc687-8932-4f3f-af19-1475ac64750b", "sighting--e864a467-ae3b-4543-8c78-60c35f55afb3", "sighting--97644ad4-8701-4615-ab60-703c9291e6ed", "sighting--297bbd7d-f1ee-4fca-abf4-b79a77ef23b0", "sighting--085bfaa0-c1ef-40cd-ae39-a4d8e1512fa6", "sighting--d4fc3746-ab38-4f62-9dcf-6102c724ffdc", "sighting--67354fc3-8504-40cc-a1db-8d6f49c8cb82", "sighting--2f676928-f9cc-488c-89b2-1c051dedccd1", "sighting--8d68dc1b-5c55-418c-93c9-42deb53b6385", "sighting--af2a366b-51e4-4db3-9962-533a19a15489", "sighting--b090d114-1436-49ea-a27e-635c3d9e2b3b", "sighting--9b53175a-c15f-4c50-bf48-5a816e9f70e5", "sighting--a3ce15ae-e274-47f1-a412-1b2a47f703ce", "sighting--8842e9dc-1108-4682-b7d3-dc9ca508e36e", "sighting--d14499f7-30c9-40b1-aded-e30f2d50dc48", "sighting--c9257640-c61e-4a7c-95eb-76607bb2f8d0", "sighting--fa7fd258-6f7d-4269-8e06-1147be3a4383", "sighting--9781b677-b64d-47e1-bd2b-7eae6e97ce78", "sighting--9b47d276-e373-4650-8598-2d1d79c96a52", "sighting--2c84cfc5-e89f-43f2-be24-ea9569a1ecdc", "sighting--0ed38abd-01e6-4668-a5bb-d5850826c2b3", "sighting--0d6f8f80-2a06-4966-88fc-1f2842795cec", "sighting--5479fa1c-f537-4654-bccc-f2cc24b61c4a", "sighting--535095a9-24f0-4825-ba64-553cccea953f", "sighting--1298583f-c474-44f9-80f5-e38de8e1cbe5", "sighting--f485d2c4-eb50-436e-aef6-afec49ce9a3b", "sighting--4a694013-4518-433f-a99f-7d56fdf6b0b6", "sighting--8cb3eda1-d463-44c6-a099-64eea89e0468", "sighting--378247e1-a962-4eb7-a9eb-25659d070dda", "sighting--163de201-06d2-44c6-827f-76149f72ad88", "sighting--0bd837f0-a836-4bf6-b86e-39b7d8a541fd", "sighting--5a2f36f2-89b5-4cbc-9701-fbeb462fef69", "sighting--f60926ef-7978-417d-b6ed-a74c30fc3580", "sighting--8b47aa70-3142-46ae-a08b-668288684c74", "sighting--acc0e00f-e994-405a-b626-276610a1fbcf", "sighting--06cfb42f-d70d-47a3-a92f-c40f831c335b", "sighting--6ea05d1c-197b-4f71-8e79-ed7ce500b41d", "sighting--a5cb424b-146a-4160-9526-196a6a2ce8aa", "sighting--593ede59-735a-4357-8b2f-1b54bf4170e3", "sighting--edac82a6-7ad1-4ae1-b58f-d91bb46840e5", "sighting--3c9e814b-af86-44dd-81a2-16cd4c3af4e4", "sighting--78b9d5fb-a8bb-427f-b1eb-25a1a4b9e935", "sighting--daa1d013-5ea8-4eb9-a9fb-0a43a481a811", "sighting--b11e0a00-2df7-4a39-904c-548b9f97c7d1", "sighting--5292f618-9d88-4ee6-bfcf-a73780250ff0", "sighting--68f6aaae-7276-4f8b-b6a0-a98fb6960eb9", "sighting--f4faf455-4b66-4dc0-bec7-a61b8978af8b", "sighting--49a84dc5-ffe6-4160-8f23-8d2f374f48c6", "sighting--ffba6131-a8d3-4217-83e3-196e5511adf2", "sighting--61cf5e43-9687-4f4f-b8c4-817074f6c537", "sighting--e0564e7b-cfa6-49db-b3e5-14e3d7f0f4b6", "sighting--6356d4a0-0f7d-498a-a201-a826b91588c2", "sighting--b250b01b-a199-4895-8d2b-e9482403ebe3", "sighting--e18c8ccc-8fe5-4699-981d-086e597b1930", "sighting--dc7ae00e-fdfa-49af-9644-27656f443945", "sighting--0c793190-828f-4e02-910e-476452a3f3b8", "sighting--366b1ab4-cb7d-49bf-a2fc-b3b84e9b9d84", "sighting--a6c024f0-1ba1-4ff8-a376-757cba75da06", "sighting--50e1a323-efd6-44b4-9cb0-bcf21540b37d", "sighting--9b852b58-de66-4583-803d-5c1aae34f4c4", "sighting--3f1ec094-042c-4379-9dc8-5bd13baa8b18", "sighting--80cef753-2412-402a-afad-0de799579963", "sighting--c19d9ed8-0e7f-4336-99e0-f2a84ac617cf", "sighting--d701d638-dd79-4ecc-a033-9a4fc5849035", "sighting--b171db22-b70b-4bb9-b67d-846f6a77f890", "sighting--5fd17709-5c45-452c-a5b6-13213c0b8eed", "sighting--a62acb04-4d56-4544-852c-9829d5060ca2", "sighting--bd916aee-fff9-46f7-b93c-47ca9f07cdb9", "sighting--bbade9e4-035a-44f9-872a-f2bf0d9161be", "sighting--8bb49b55-a9f2-42fd-ba12-10ed974927ad", "sighting--90d57f67-dab6-4d61-b0f9-eab0e712dac7", "sighting--91c1f0b0-9ed9-4e5e-8c13-d8c32dc0b591", "sighting--e8fd8fe1-cfe5-44eb-a350-7746e5ce232e", "sighting--7831bf6a-3ab7-49f8-aefb-5b35815b0ac0", "sighting--c6ed3c54-a203-4e9a-bcae-c0adb015736d", "sighting--8cb7a06c-7f94-4745-96c9-acb94d98dd21", "sighting--fc250416-62ea-43e0-8a71-a66177517960", "sighting--41b6b86e-dae1-4252-a747-7447e9ec0e4e", "sighting--f1bcdf03-386f-4aa4-a9e7-523242f8f7f5", "sighting--f756ef22-344b-492a-936e-516a305e0f84", "sighting--e062f87e-a68a-4ce7-9af1-b9a057553690", "sighting--a123f8a9-c137-41a7-8e83-6edfd0286487", "sighting--ebe4a46a-00e2-4bb5-98eb-d7bd8a7901e1", "sighting--7abbcc43-3375-4a8e-a750-8da56a4802ba", "sighting--413075de-d582-47dc-9c6e-44433fb9eef6", "sighting--e6c313b5-b836-4f09-a25f-4b7e254dcd65", "sighting--85452ac8-ab89-4b9b-aad0-084a39d462b8", "sighting--b9ec7520-57da-4e70-95c5-6d1237d497ec", "sighting--1ef53787-5200-4756-b853-adaf476965b4", "sighting--aa6d41ee-6e3a-406c-8b7d-22a6e1869911", "sighting--fc435605-12e5-4b3d-9d78-24b9c8ce6abd", "sighting--41e0d84a-50db-40b6-88ad-00a4207544b4", "sighting--a903478b-18a6-45fc-9ec0-f55173afaf03", "sighting--3d65a9c0-a71b-415e-a8c5-846760433826", "sighting--dea8d20a-7c53-4b40-87c1-9880df8c1512", "sighting--ce73e66f-4a1e-4353-8af9-e991146a2d35", "sighting--a121d844-6910-4551-b9a8-5243cc98ca98", "sighting--37544f4f-cb44-4eb3-b609-7349e200d016", "sighting--11db545a-1c0a-43bd-81d8-09818d550026", "sighting--09023110-efde-498a-beb9-9ec1bc7330eb", "sighting--fdd6bae1-7239-44fd-9c9b-883993a23d56", "sighting--014ab850-469d-456f-8dd8-fd4706d3e4dc", "sighting--8633abd9-c071-41f1-8a19-c78872f7f5b4", "sighting--b2581b5e-1b12-47a7-835f-feefd4c652f7", "sighting--82cd887d-6c8b-406a-9b24-b2f30436fba9", "sighting--46544e16-5585-4f78-ac7f-c1764a38ecd8", "sighting--c6c36823-7223-4906-a1d4-59045cced7c7", "sighting--c8ae1cd0-3034-4fd8-aea0-3860d65b6920", "sighting--aa74ea67-b511-49f5-8b2c-d5ef2f72a75c", "sighting--f8014d04-1e3e-44bd-b396-0c46902ee433", "sighting--70412642-9b59-493e-851c-e125df9075f6", "sighting--be64d87c-1eb2-4642-bfa2-668182da7ed2", "sighting--3fb88ea2-e8bf-4ea2-9349-a9fc3de1e6d6", "sighting--7a4c043f-4d6b-40be-89df-256c63e446ba", "sighting--7473f34e-69ab-4914-8af7-c04625c8ad8e", "sighting--73884706-50b6-4510-8353-bf96dc006649", "sighting--2a50c769-6ede-4b0a-acfa-ae47d207b395", "sighting--fb53647f-b9b7-46ac-a3ef-2f4dbba280b5", "sighting--c96d56cb-4a33-4e89-8d19-f4de2be6d803", "sighting--abc8b05a-10aa-4860-94da-1f5b89e5e4f7", "sighting--6b2d3f83-2ec3-4713-afe6-f843ba80c79d", "sighting--ba679e47-21da-43c2-8f93-4939c1b9ad36", "sighting--43914adf-eeb0-401b-83aa-ca7b1d01f376", "sighting--2e24b0fc-72cd-44c7-a809-4a3a83640830", "sighting--8ac95641-904b-4f2d-b449-85e5fc0a0fdc", "sighting--b8184455-87be-4e41-924f-5dec8ddd6929", "sighting--69786dbe-b156-4b98-be12-faf76c975eb9", "sighting--64009450-270a-42b4-aa34-9b771c5d3262", "sighting--f0f167ce-5691-44e4-a5dd-5f090312d892", "sighting--7a9098a8-b10c-4ce5-9569-9480f75ea369", "sighting--b1e002bd-e248-4e00-8798-bfba913b8390", "sighting--496a6e88-8663-4312-9e63-540438740d88", "sighting--55f8d2ca-4fc1-41a8-a779-1f4a0f910c59", "sighting--eebd2d9b-fe7c-492e-8c04-e497767b2bde", "sighting--4b1f2bc4-cc91-4c6d-ad94-e175a558c09f", "sighting--8369556a-055d-4899-962d-48a0bb4f5d2b", "sighting--5b582b6e-43a2-4b97-b85a-dd9c447d2544", "sighting--32a00960-85fd-479f-ad49-60d38e484444", "sighting--abf77bee-0a1e-4de3-a664-143ec87740d3", "sighting--6ed0764a-4d7d-43da-8d33-b92151db5d35", "sighting--9a9f9df6-c674-4acd-8cd0-4640269c9282", "sighting--8b4a3453-39c6-41af-ac01-e83a6075e4ad", "sighting--eb5ae93b-8c96-4f37-9a8a-d8157c0f4bcb", "sighting--bc64d346-3a0c-404d-aabd-78bc23b8c37c", "sighting--ab3470f0-acba-494f-b9c6-9e313fc6cd1c", "sighting--e185bf63-2720-42e9-8762-d3269de20c4e", "sighting--601d5183-03de-419d-a1ea-94c2ce908814", "sighting--a8103eb9-ee84-4fcb-8435-0fbc26f6e929", "sighting--4428cafb-b9e8-4e7e-bc98-cabb6fdbc352", "sighting--93927aea-ad70-4956-9514-b93508bd4320", "sighting--e6caa432-b345-46c3-8527-69a7eea96d1d", "sighting--de4713ff-6441-4e3b-a482-8ec618ed6c93", "sighting--f8c7d04a-d881-4af5-83a7-1beb3e507046", "sighting--9c26ec30-a06b-4294-a8f8-157e38a93c1a", "sighting--a292adfd-f9eb-47a3-a91d-9ceb72f34a62", "sighting--c5608355-aaa4-42a1-9978-be0741d00729", "sighting--a27d2dbe-0158-405b-8f8f-15a2e0e6e11e", "sighting--2f33af9b-b7ac-4b73-8cdf-40308fb5a0e1", "sighting--5b05a6fc-f168-447f-98e7-ac4a573e73e1", "sighting--41c800a1-185b-4718-bcd7-9966d20f1acd", "sighting--7e884815-61cc-4bde-89f1-da21581ed667", "sighting--4ab19819-f800-4a6d-a1c5-54606da90901", "sighting--f91f783d-4b25-40fc-a755-b30619d28820", "sighting--cb175c71-5f36-48f3-81d1-bba91f3d5b90", "sighting--fd2df61f-8afa-4b61-bffb-b5b4a093e65e", "sighting--daed861f-a104-4e13-b24b-190499acf7b0", "sighting--0241c110-6ecb-4b1a-8ba7-81d187bad069", "sighting--69ade6cc-33e6-4be4-9c4e-96401409f33b", "sighting--9eb1ae03-81e5-4786-98a7-6ce98bf5376e", "sighting--a50a73ee-2db7-414c-8be5-4a8b3d509d8a", "sighting--f29c046a-e7dc-438f-ae74-3ad337bf6cd5", "sighting--4591d80a-7e75-4429-bef1-d888b3167173", "sighting--e49d4803-670b-4d53-af72-123548322e6b", "sighting--93891cb0-32dc-4f98-b5f5-154cc0b69ec8", "sighting--23f0a060-8161-4d79-96d2-e0b3c6968776", "sighting--d6671212-a3a4-4b32-b1f7-b3c258f8b09f", "sighting--e4aa0df3-4de3-4c32-adbf-37d9a9be2375", "sighting--dd843c2f-7232-4022-a7fd-3e64e333bb1c", "sighting--322250c3-dbc3-44f9-9fae-4f3eaf64d1e1", "sighting--a93295f0-658d-47c4-ad0c-ce2920d661f6", "sighting--27d8182c-4f2c-48e1-bcee-f4a4e3611168", "sighting--a119a56e-e36d-4c53-bf03-82ce61fc94d9", "sighting--f5fad9a5-f05f-4381-8ca7-36f3d1bd26c3", "sighting--32fdfec1-a70f-4309-a5fc-5a603fe4b548", "sighting--987aaac1-6452-4e24-ae32-037852c8b3e2", "sighting--496ca922-b426-45c1-8a26-6b6638ff4862", "sighting--e381f051-22b3-42bf-a804-cc112e6b352f", "sighting--1e16ea02-6332-485c-a0fc-6dd7c129cfd1", "sighting--2b751b27-e528-426d-971c-22249e2caee9", "sighting--fe77241c-4b1f-4793-868a-7a075e1fde30", "sighting--d6908884-e434-42ec-ac97-07ade700cea1", "sighting--39f49de7-6d6d-4d79-832b-5d6144296a72", "sighting--4663b8b6-ab38-4ae9-8ac8-89f40d421981", "sighting--1a63ce06-9b11-4da6-89ba-ca515b6cad64", "sighting--ed1da88b-0b26-481e-9837-3fe2cf38ff11", "sighting--e3e4396f-70c5-45c9-9319-f3c8a2c668cc", "sighting--6ffb19e1-c71f-4605-ad64-33ba99d6b79f", "sighting--6e425a28-c943-427f-8c68-d1af06273f66", "sighting--31d72e80-2fbf-42e7-92e3-13c5f90b52f0", "sighting--71f0ca82-0175-4e71-a299-8fd07054a1d5", "sighting--3b45f8b2-77f6-4125-ac1b-dd53a65b6ec2", "sighting--fe9bb2c6-3333-473d-8daf-25b27262a614", "sighting--10137fa7-3545-4f0b-abd8-46f705e5a023", "sighting--32b3c61c-991d-4f2f-8929-ffc1239c8ca8", "sighting--41144561-0cfc-46b6-b3e2-d548bc3d9501", "sighting--7d86b58c-fcbd-433d-acc6-ce42a1638933", "sighting--559aa0e4-39e8-4b38-9b8d-0176b78d8388", "sighting--0deb62b8-d36e-47b2-a534-51455c46949d", "sighting--b66a0e4e-5efa-423d-9b71-f3be7b1143d2", "sighting--187834e2-5535-4c80-8a96-16c2b9e02a0f", "sighting--f619bc1e-f781-4ee6-aacb-162e0334a7d6", "sighting--60ab5354-15fc-4563-ac1f-d68ad85b64b5", "sighting--b4939396-836f-4e83-a2c1-8804b790aa34", "sighting--28ab95f3-ea46-4384-a3c9-4f136f676dfb", "sighting--6786261e-44c8-462b-ab82-b2b0bc1cf3b7", "sighting--c5242b23-c113-47e1-98c9-f15f0a0f33cb", "sighting--28583559-acf3-4460-9886-1c63ce6fea13", "sighting--071e62e8-6619-4baa-8677-49ca7f197f7b", "sighting--406ffb8c-f86b-45e9-b4e3-845c5f012cb4", "sighting--bef10a27-2393-483c-b49f-68ebd1e7076f", "sighting--ce7072f6-6669-4cd6-986a-e2ee0823c727", "sighting--604a1da7-9415-443e-b85a-65ba40f3873a", "sighting--3f93e8a4-0b12-4672-8ff9-7c63cfbe710d", "sighting--a8b10950-2a0c-49c9-8d62-490a264fc306", "sighting--4356f0dd-51f9-448d-b35b-3e7cfd19681a", "sighting--29ffba97-0def-4649-a9fb-249491391112", "sighting--d5d4a988-b2ca-49ae-82b1-3938dedc08a0", "sighting--370821bb-dc69-4663-a1b7-f00c4435577c", "sighting--1d7ecd33-7bcd-400a-993b-d4051e86eafd", "sighting--f3648954-6886-45fc-bc5b-4007533e2ddd", "sighting--892fba74-2b0d-43e5-90c0-bdd3662ff4d1", "sighting--88cb2213-5711-46c7-a586-4d27584063e0", "sighting--4c02d5d5-05fa-463a-85c8-1f26868fddb0", "sighting--09efc693-5bf4-47c6-a185-f4d6d3362aae", "sighting--99d0f289-925e-4269-a1d6-c0a86490fd99", "sighting--1ea4da5f-4901-4eb6-afdd-d0e457d7ef07", "sighting--0de79cbb-9a02-43de-b4be-11bbaa74c641", "sighting--14e51cae-2e49-47e6-96e4-5e0a3e680d33", "sighting--1fb5d275-5a49-4a39-803e-0f8b3b1f5c3a", "sighting--3686ec49-306d-4eb6-ab24-7ebbe6d7dbbc", "sighting--87dac3eb-ebea-495c-b3bb-f57e3e4156d7", "sighting--ebb887fb-0f53-47f1-8cf5-5724d5afa9b4", "sighting--20d3be00-34c2-41ea-a515-9a385d43e1c3", "sighting--7e695255-19eb-45bf-8426-a7a6c1311e3c", "sighting--18e24b09-2569-48e5-aa97-827c8af9bbe8", "sighting--5ccf0210-111b-402a-a7d9-95e1076e0966", "sighting--f2949503-c2c5-49f8-858e-67f0421fd1bb", "sighting--266d4ecf-fb60-4f21-87d7-5349843977f3", "sighting--f39ee6ff-2009-47ae-8339-97b29f265cb1", "sighting--751b70e1-247d-4a5e-8ae8-0e0da5ba9ebd", "sighting--f189bcc1-accf-42fe-9663-909650b00e34", "sighting--476bf6db-caf5-4938-9ebd-d72ebce4be2f", "sighting--36e251cd-dae9-4e8b-b77f-5591648c8bf2", "sighting--ea4f5bf4-7ec1-4594-835d-6ba0fe6e2db4", "sighting--5ad38cd6-85c4-47ea-aa06-35d33598ae76", "sighting--0d0663c9-7f64-4a94-b561-e9ef8598d71c", "sighting--c9ab59c7-9656-4175-8030-c955aa0e0ead", "sighting--b213fd13-7d0d-4e76-a865-7811be4611c3", "sighting--c08e27fa-2ad7-4bc5-861d-f75d9d1e522a", "sighting--0ab4b9dc-ef49-418e-a960-653f24581f1b", "sighting--b0188cc8-fa88-4fe7-8bcc-8945ce91a9bd", "sighting--e14bcd40-9fb5-47ff-9f13-0484365bc2b3", "sighting--f3e7de6d-8609-419f-8a05-da48d6bc0fc5", "sighting--02a7987f-f7f6-4c65-a87e-a62a1af5ca5a", "sighting--46fee25b-9981-4cf4-ae4c-84456d9e13da", "sighting--6461efe1-076b-4871-b88e-3aa0ca298d8e", "sighting--729b54df-53a1-4746-a662-b91a91af57af", "sighting--5d28c8c1-8c06-4c62-b803-a5bcac9bb384", "sighting--19095ea9-f07a-4e4f-b978-9d17f4cf4b55", "sighting--8a3fda62-fc54-43f0-b727-9a27e51388d8", "sighting--d97dea25-5881-4940-945b-ef21a940b86a", "sighting--37a47757-65c4-4e41-941b-af5ec893670d", "sighting--d60c6bfb-bade-4245-b0c8-44f022c51a0f", "sighting--de5fe6c4-7755-4853-8c4d-707de3c10b93", "sighting--ffb61aa8-2b12-48a3-ad48-cfe20678f12d", "sighting--21d944ea-810b-4cc4-8488-a844b91192b0", "sighting--8fa6dbb5-da75-4257-b440-9b5a7170cefe", "sighting--471ab54a-515a-458e-acd5-7f1db1fec8eb", "sighting--02b904c2-c290-4d58-b852-b5db8ad47139", "sighting--4890ab38-4034-4f90-a28b-77b37b9d32aa", "sighting--14e06a39-3b8c-4334-9547-3d6d86d05e4d", "sighting--da036ab4-a965-432b-a314-43c1ad78c9cc", "sighting--7d9d95f0-2ccd-4479-8989-f51687111051", "sighting--67bd0d69-36a4-43d4-96c1-3e4ce51ff9ec", "sighting--ebda512a-af7f-4fc7-b55b-7f5be6dadd66", "sighting--326f0c66-20ef-40c0-b043-ef746eb7c251", "sighting--ffded24d-c608-4e55-a0dc-29019ff2bfb8", "sighting--c90a5660-9986-4747-bee7-059a4faa8478", "sighting--7749400e-0e73-4edd-8774-356bd1e02131", "sighting--986b8fb1-977e-4f92-8b43-0ffbb7979c34", "sighting--7a2f15bb-6e47-44a4-bc71-0cf707f00378", "sighting--954bd466-4374-4d67-bb53-ccc02e179d2b", "sighting--9b820266-ea0e-492e-a3e2-f5668f8dbbe4", "sighting--fc37c000-0108-4eab-bcaf-90cd314c11ef", "sighting--e756b4c6-82e1-4032-906d-f9b5bfe22e1f", "sighting--600b69f2-e7c1-4a34-988f-ff1a03957fb8", "sighting--ab0943f7-b745-4c29-8f44-b64a68f88b8d", "sighting--bb5b4a09-5bab-460e-a2bb-1b2237fdb7b0", "sighting--bcfc39e2-cab6-4707-94cb-8a81198a1938", "sighting--3e3cf1fb-6213-4872-96ad-161453007f6f", "sighting--7002165c-dd62-4fea-9de9-dca40ceea4b6", "sighting--f1dccfd0-49bf-458d-8155-8354d526598a", "sighting--7e843801-4ae7-4906-a48a-a31806f0c43a", "sighting--e5375020-3594-4de8-aee0-844851fb4ac4", "sighting--55f04dd4-7271-4401-b0a2-2799f468da61", "sighting--97fa005d-3ffa-493d-b17b-faa3e24d1eed", "sighting--86776c3d-cdeb-4bca-9863-c80018780160", "sighting--5dda9f83-2fb9-4f54-90cb-4f62a206dae7", "sighting--cf4eed0a-d18d-4296-86d0-02619f5e4677", "sighting--9ab823e0-f753-45bf-aa82-ef39612249ae", "sighting--9a6138ca-49d0-42cb-a673-4397db20d381", "sighting--78bab361-8f63-43ef-a4c7-3216ea313960", "sighting--16ae8bca-fc1b-41ab-b3f2-4a9d419f0672", "sighting--e13b78fb-17b4-4836-8c0d-bbf5632a346a", "sighting--e368a8b5-4fa1-42e0-9f58-40f8940b1921", "sighting--88305cb0-627b-4aa7-bc79-7b9457f23fdb", "sighting--ff0817ff-8953-4563-ac8b-cfb66fde1a1e", "sighting--5e86317c-ce52-4d3f-9ddf-a882252adf9c", "sighting--46e866b9-8ad3-462b-b43d-91ff717647ae", "sighting--6132e71a-7ec2-427c-bbec-7bd94a1c24ed", "sighting--835436de-3c6e-4ea5-bf4f-32df9690092a", "sighting--c8cb2f39-164f-44be-aec8-72bb5a50d525", "sighting--7949dba0-497b-4fe4-b7c1-f64b3ddd4329", "sighting--0c65e4bf-56d4-46de-ae28-094db67f6bd2", "sighting--6e72ea31-adbc-4bf1-98a8-bb0db36b5a28", "sighting--29068c9c-6d86-4fe6-8c2c-043ceb959b14", "sighting--f28147bc-f204-43d5-9fd6-e05ee7e99564", "sighting--205b8c4a-51c5-48ff-9dc0-b2bc9e29b80e", "sighting--b4fb5c66-cd04-461d-aa3f-4ea888842ee5", "sighting--7c499704-6906-4bd0-a627-bacdc6b7f9ec", "sighting--5c8893a2-6abb-4bd2-8eb2-7df6cfeecb2d", "sighting--e5d0d3b8-6102-4c0c-99bf-3294926873d2", "sighting--c7b8e178-f034-41f8-8ec0-77902073af8f", "sighting--fd2402c2-0920-4f62-84f5-8c382a351285", "sighting--572ae9d3-e089-4a3e-a124-d3becc65d4a4", "sighting--77d152ca-df79-45be-ba98-8657fea2c7df", "sighting--8c47ff76-cb4f-47ba-84bb-9b7110ecbba7", "sighting--07fc93e6-f70f-4220-8554-61de79154170", "sighting--19d99c79-4c94-4988-95e0-b938e543d880", "sighting--7389bddd-10cb-444c-927b-24e48a927d5e", "sighting--359646f0-d2f0-4b95-aca6-d9560964b890", "sighting--10258ddb-f9d4-47a6-9500-2651f52e29f0", "sighting--ab747414-befe-4e9d-a314-4d0f112239b1", "sighting--980b1f08-7ea9-4761-96cc-b9cb9598421b", "sighting--e90abe45-f4bd-4a21-8d3e-61aaa072dab1", "sighting--6ddc529a-fe8f-4dc6-bc24-a92312348698", "sighting--6d40bd8a-c4a1-46fd-b92e-ba707f126266", "sighting--8deb4e6e-450d-4ac7-8b8b-abfaccdaddcc", "sighting--4d66df81-0cdb-4261-9c00-3987b0fcad05", "sighting--881ca87b-328c-4080-abf8-6b6803dc0720", "sighting--0f32f4d7-cdeb-4548-8e48-4a3a3045e394", "sighting--45e3852b-bfc1-444c-8286-63cb88bb0edf", "sighting--9abd5c53-8bdb-446b-81f2-f8df13287a5f", "sighting--b2ceed70-e9dc-4b4a-a59a-c4d0777b7398", "sighting--7820bac4-a06f-4d49-87dc-0108d4066d94", "sighting--8da8e3fb-e401-4e7b-bf64-4e1e00133052", "sighting--5514640e-e571-4dc0-a2ff-55baf69816d6", "sighting--42836a47-d752-4ebd-a9df-cb14e74907e2", "sighting--569334e6-8111-44f5-a423-2d3652afab4a", "sighting--08cc5293-7c2b-4825-949e-b766eb323614", "sighting--d6ac45db-2494-46b2-90ab-a3929449819b", "sighting--b9f7f81f-11e6-4a5a-8be8-be619f616e7c", "sighting--64e7b3a9-de68-4799-8227-2453fb1c45b0", "sighting--a8cf8fb5-038b-429f-ab59-a114f52afa5e", "sighting--3ccadfdd-7e15-4bda-8d88-dc1b64130ab1", "sighting--3cb4a935-4975-4c3f-b891-9101e89f638d", "sighting--d43f8d78-8501-47b9-a212-a7938e919dd1", "sighting--7a172a01-ebe0-4e45-b141-91b3fa8b4e42", "sighting--1c47f4e7-aae5-48e7-b7d8-49b9dbef6626", "sighting--c7b4f1ea-e87f-4aac-b47d-64d671caf6c9", "sighting--47972bbf-a2d5-4ff3-b2c7-33c2845b9977", "sighting--9604094a-29ed-401c-93a4-adf242110de3", "sighting--047137d2-71b6-4158-ba1b-74ddfb9c5bf7", "sighting--9ede9686-b125-4dcc-91d0-1d84acd294af", "sighting--c5407f1c-c9ea-4380-b608-29235d206518", "sighting--464779e1-3310-43df-8fb8-d86c5a9eb7f9", "sighting--d0358f88-bbdc-48d5-90a4-7c1ba24c9d2d", "sighting--cbdf2da9-a040-4131-8255-cfebd8c41948", "sighting--e20f01d8-d8d6-4237-950d-822cd7c9d8ed", "sighting--c226e69e-4fb5-44a0-b73f-982a5b7f4f26", "sighting--63094454-1146-4647-9904-3d1fb51a84b1", "sighting--d25e458f-ca3b-4093-864d-ad42f6a9cf7b", "sighting--c68cc3ba-15b9-408e-8f2e-1a685cb178a8", "sighting--071b1692-0196-4ec7-99c6-1e4b53230669", "sighting--92d921e2-fc60-44de-91f2-371e3a5c172e", "sighting--abe3cc37-76ce-4b2d-a2fd-a7fafab9f3ab", "sighting--be7c8140-9480-4194-a136-190c0d9a812d", "sighting--572a89ad-e30e-4082-b5b1-8d88f03b6a9f", "sighting--f4ad0965-2012-4103-8f6f-81fd8d06aee8", "sighting--703499f6-0db8-4814-96dd-d86e5f29ad03", "sighting--619fe4e1-25ec-402a-8a56-36345c7efb7d", "sighting--92990953-08ee-4e80-a161-0096b645ff3c", "sighting--18378af9-277e-4076-a5c1-fbb75e804d2c", "sighting--7ad4eadd-025b-42a5-8f90-7492dd573c05", "sighting--44664e75-cc4f-4098-b751-c790fca18b8d", "sighting--94dafb47-7859-4c7c-b98c-5bb38e95407b", "sighting--8f1ccdf8-742a-4b46-9caa-a77b6645b929", "sighting--8cfab1e7-7cab-4593-ab27-147f73581c2d", "sighting--033fb185-0e98-4c25-be0a-03a4a2a8d9a1", "sighting--95b2dc53-d2c9-47b8-a186-9c815bccd173", "sighting--e2794600-4a3f-4b28-a822-baa8e5a692f1", "sighting--6f65f7d7-82ca-48ab-a2f9-5088fcc4e79d", "sighting--155fd032-f742-48db-b6e0-2dca40d704e8", "sighting--5ac4f519-d7e8-426f-816d-13eaa518a795", "sighting--8324c118-5de6-478a-9132-0aa821b00864", "sighting--66ad3a37-523a-4fac-9751-5f50651eb798", "sighting--94b11005-f85c-42f5-b50e-b30e168af6e1", "sighting--d51d85a9-9ca3-4bab-99e4-c5efb7918845", "sighting--095caa2c-7b98-4aa8-87e1-bda76bd8beab", "sighting--a540e45d-7cad-4cc4-81fc-226af8f11fd0", "sighting--e852f057-f314-47c5-8229-7201e837891c", "sighting--49784961-5d2f-4c41-b6b3-bd205c5e3c79", "sighting--8881c1ed-b32f-423e-acff-ae53f1c53db2", "sighting--f1fec6c1-f719-4189-92ca-73cb36cd0a2e", "sighting--4c3344a0-465d-4685-82e0-b69cc4c32acc", "sighting--e869ce38-6c3a-4a4a-93ae-ad655ae44277", "sighting--e7df3f8b-6bc8-4ff6-b174-a232cb01d9ef", "sighting--2ac64c3f-d618-4138-81f9-468357a3a5c1", "sighting--fa765348-3f7c-4c64-8612-0504e61f95c1", "sighting--d88f8a3a-0690-4c44-a435-8d1a7a5a258b", "sighting--7c18155a-a315-45ac-b433-399bc01660e6", "sighting--32cd6c5f-0b89-4c19-8bf8-e71a5d556322", "sighting--f2724f39-6644-4cdf-86f5-385c76ca056d", "sighting--fe5ca9ee-2cba-4f5e-9a45-fb2efaa5088b", "sighting--87e351ee-878e-4d98-9f9a-77275ab5f47c", "sighting--922a16ff-3b79-49da-9cb3-6169c19ef2e6", "sighting--49014bdf-5edb-4228-98f8-d3bf1dae0b6b", "sighting--35c2bb85-cf2d-4bcd-ad4c-2e9463ef8aa7", "sighting--6284da0d-78fe-466e-8db5-b3fb47460e17", "sighting--a3fc3784-dff3-4e2d-9da7-e66790437ec2", "sighting--c3158ef4-0394-47a1-abdc-586164de0c6c", "sighting--cf7bfdd2-7b17-434b-9e33-87d88ac2b350", "sighting--b779fc97-899e-44aa-aa7e-5727f342d40a", "sighting--f668808e-ba09-4620-9a46-5f276d3d078f", "sighting--137a709c-64f4-4290-8148-b8fd921d854a", "sighting--eb6071a3-38ca-47d0-9745-808c4ab462a6", "sighting--b209721e-65ab-49c5-bf37-3ea10203cead", "sighting--9826d28e-da3a-4ed7-b0d6-507781a992e5", "sighting--8e25e84b-beb2-4fdc-9437-54b5a281d377", "sighting--bf223f6f-fb8c-4b22-b6d2-8f2e196288fd", "sighting--e97b111f-8ad3-41c6-89c5-8b6951d4421c", "sighting--0bcf228e-d958-4614-90b1-998afcb591aa", "sighting--4629b091-1d8a-49a3-bb7d-c599feb57930", "sighting--3ce746fd-146e-40d6-9ee3-1d0de2623e83", "sighting--ca1ca9fa-2588-4a9b-8f28-8c0c87283912", "sighting--7e7fd3a1-e2cd-4431-b50d-0fd183d9ba27", "sighting--97da1d87-08d9-47a7-946e-3a7ab81dacd7", "sighting--cd851ad3-ba03-4141-bd2b-412cd50dc67d", "sighting--3317ec13-0794-4528-a616-6e117a17afd6", "sighting--8df50a64-974d-444f-b40d-1a18a241616e", "sighting--814d6acc-3325-41c0-9f1c-4fbd77cb83cd", "sighting--3d6991bb-3ad9-45d1-b501-d5ce41945c3f", "sighting--b7f0b2e6-d8ec-471e-9072-86880d88136e", "sighting--88faad4c-4f85-4394-acf3-3356b884f0af", "sighting--00bc2ee8-3601-4eac-9919-8ce6f22f353b", "sighting--23aa83a2-4f5a-48a6-884a-2e49178e2b00", "sighting--db4382fd-b303-45f2-8f8a-9ac49c7966e7", "sighting--af9830ad-e0f1-46e5-a74c-b83b21af7092", "sighting--3ba01d37-524c-4973-95b9-278e26a06970", "sighting--10e8a2a6-19ff-455c-aa4d-76c67be03d98", "sighting--5716522b-a564-488a-99ce-2e1c5bc488fe", "sighting--54cb101e-9e26-45b6-8312-165be9250f04", "sighting--d9964fd7-930f-4065-a4a7-47ea933e2a4b", "sighting--3743bf30-fca9-45fb-b60b-2a802f0eb929", "sighting--e80ecca3-d998-45c5-8c24-8284d0e76d9f", "sighting--87913b99-28c9-4e17-9f26-69a69494988f", "sighting--cf3ca094-2bec-4a2c-8296-f35854c35bfc", "sighting--28be53c1-f065-49b0-97cf-a71d43a34df5", "sighting--bd89351e-cdab-4833-b8ab-2b1d74f5bd4f", "sighting--4610e24f-7c0c-4ec1-8340-63fd47051eb1", "sighting--465397da-d30b-4cc8-8ce4-7e2b0164c18c", "sighting--0e755989-ecc5-4b35-8079-0d9f2cf205d6", "sighting--2b9f91a8-3669-4438-b7c3-c8c95a8b06b4", "sighting--456efdac-4e57-4f97-aedc-5abcf9319f24", "sighting--fe6f54d3-f280-4738-bf09-0685e2486f9d", "sighting--5c067ac4-8ff3-4f3d-9a1a-41a33648169f", "sighting--edf99011-8398-4c1a-a228-2ae252de487a", "sighting--a6dfbbec-53f9-418c-affb-91377356f6f6", "sighting--a70ee560-e765-43f8-b6b5-c8ac7764a9c9", "sighting--b2c2b7c5-80df-4fb3-be10-e694c95440cc", "sighting--65776955-af07-433c-9b12-c7b299cf632d", "sighting--2d2c75c0-5c39-461f-b9be-3368483f2777", "sighting--b3fa0bf4-285e-4517-aea9-618322ee5cb3", "sighting--00b1012a-691a-4b59-90d3-bdbc80e2b66c", "sighting--2f96242f-f03b-4a33-88ac-0991985bd6f4", "sighting--3f138fb5-37b1-49e7-a578-25a0f9edaf64", "sighting--675a56ec-e284-441a-9524-9bd28bcb5bfd", "sighting--ec1155bf-7a07-4830-89fd-910d9cfcd553", "sighting--4d2edb2a-92f4-49bc-b7fa-ddeccf6f4613", "sighting--965084a5-b8f9-405e-9bc8-1684827f08f4", "sighting--0943f6b3-ec21-4c96-9de9-54ce4ddd5d0e", "sighting--ce9de87b-33be-438e-a02d-4b09c4b44436", "sighting--79a499a3-e0f4-450f-8d43-af5bbfdd1207", "sighting--a16fb2d2-73e8-4671-8370-c789ae2914e6", "sighting--a5ba409f-d9a4-4db4-993f-162f3a5459e8", "sighting--ac5657a8-3128-4571-bbb2-bfcb52ae002f", "sighting--6d70e92b-ffc7-4ee5-96fb-965d89571cff", "sighting--2780a1f1-ec49-477f-9a58-31be6385174b", "sighting--e332f3cc-dd88-4d0c-8b50-4967eea9529c", "sighting--941ee88d-eb4e-4d4b-af99-741fa5841130", "sighting--0f2a794b-5e7c-4066-ad86-356a1aa4a392", "sighting--dd273592-c0e2-407d-9846-5aa2a46f735d", "sighting--229c6f99-0dc1-4b87-94fe-509d499228b2", "sighting--1791f639-bea0-43e9-a053-b59a87d35adb", "sighting--bc608ea6-4a7f-481f-8c0e-106b7aa010f8", "sighting--9561b66c-2be5-4d4d-a187-6aad0e555616", "sighting--22b34a64-f3f5-4764-bab8-c75666c16c3a", "sighting--ff6b2ebe-242a-4655-988a-7fc4c1b89622", "sighting--a40b7422-128a-4507-b271-53a4e2aff7a8", "sighting--8d8a0b79-a354-4c6d-adc7-4421fedfbc69", "sighting--7098b5a6-3d13-4d98-af9a-3f0970983733", "sighting--c704127d-c011-4e41-961a-87451f7319fa", "sighting--50b1ce81-cccc-43dc-80b7-5bae474d9583", "sighting--206cb358-ccc8-4c14-8db1-a43be280a162", "sighting--91f8176d-0a02-4c89-a65e-9ebf0c6a5a22", "sighting--5c2cfbfc-24be-4f43-ac0d-672a78bafe69", "sighting--14d72c91-d33e-4b07-ac4a-15c276cce52d", "sighting--3835182b-8f72-45e9-b8b3-396dc30206c4", "sighting--faf42de6-27e6-4233-834f-0a9af24a3147", "sighting--a44324ef-3847-47ba-9112-b2c18f827962", "sighting--170ce405-328d-4bab-aee3-d36dd3c1dd46", "sighting--6a71e3dc-cc86-453b-9754-1d64b535a541", "sighting--2a804085-e78a-4731-b9f8-24ef440e642a", "sighting--22b07e8a-af7e-41a0-8add-e76e65b7932b", "sighting--92817b98-10d6-4da6-a94b-592347bc4ad3", "sighting--e143a824-5f8c-42e1-af59-5e42bed2ceee", "sighting--0a76da47-9276-4f73-b74d-77d459fc876a", "sighting--2afca75e-37d8-46f1-b7f8-ce39fd9f889f", "sighting--cef17240-1782-4a1d-a029-a95376fab912", "sighting--14b5913d-f538-454e-a31d-41c1f00232de", "sighting--b7885337-85d8-4964-865b-2cfe56a0490f", "sighting--2487da11-4971-42b8-9963-3572a05549d8", "sighting--81c637fe-81d3-4b0b-b28c-4cce07fccaac", "sighting--3ba8977b-5bc5-425c-b071-44fbb2a80970", "sighting--54995ab2-1081-4567-b5ee-0fada55f05f6", "sighting--9cad743d-e2bf-403c-aa47-cbf629e4fbc4", "sighting--c3cb5cea-c765-4452-b4bb-39fdde9421ad", "sighting--0d57f179-d610-433c-9d4b-8aedb387e639", "sighting--18be83fd-dca1-42e0-9848-910e8b7eccdf", "sighting--c92bdec7-7e69-487a-aa7a-c5472667f8d5", "sighting--58dd8412-5a54-484d-8e34-0d5963b0a52c", "sighting--6f343c3a-55b1-4c57-bf01-6139e9b3fbe8", "sighting--693a49ca-6c1d-4bc1-98f2-99078fed32ae", "sighting--654d6170-d86c-4214-a8ee-a5fc8bc62531", "sighting--36d54660-d400-46b5-8e65-c869e860a62e", "sighting--67946674-556f-4426-8421-73d40da9812a", "sighting--ffa13b16-6fa9-4e05-aaa3-3852961a88c7", "sighting--f72fa3a9-caf7-48b2-a199-164ac3e10a98", "sighting--345167e2-62ca-4245-bc8e-2d9a6cd8fa3f", "sighting--57fdad2c-40ed-4a17-9a69-a605e11af675", "sighting--d5d16a29-92d1-4372-9622-baec14cf692d", "sighting--8af23d84-912a-4751-a8bb-80f8722f4252", "sighting--861b0ef6-8201-442b-89fa-c9758a1f7474", "sighting--1b014193-4daa-468c-85c8-15417704c87c", "sighting--b47fd8f0-b82d-42a6-a35c-bad05efc196b", "sighting--38d92a10-1b5b-4aba-8d28-d7f3009463d8", "sighting--e314c11e-720c-49f1-a77d-477dbf04e1e7", "sighting--78b76685-e47e-4063-885a-03c4bd007ce5", "sighting--80cb9743-8273-466c-b885-a75c5b4ee8dc", "sighting--dae5edbf-9d61-4cc0-b780-8d5c1791ea7e", "sighting--0a28c7d7-3795-43da-bc30-de8a9196161e", "sighting--6ec6ccc7-28a4-4662-ba54-3921834863fb", "sighting--e9baf8f8-8ee2-4695-8b6b-f3ea9d907d81", "sighting--cb99009a-481f-464a-be9c-97eb5734c9f2", "sighting--af04c5cb-2c43-46ef-9c4b-965c6549c3f1", "sighting--8028b02c-72a1-4594-9868-3d4e35536048", "sighting--a3e37ff2-5a6a-4a3c-aac2-c76d87ca2f34", "sighting--204aac46-62e6-4178-b9f4-2fb3ec87850b", "sighting--bf6715a6-573b-4449-999c-3f4884eaaaf7", "sighting--8b55071f-076e-46e5-83ca-8d841b20378d", "sighting--64bd0c4d-89d6-4953-8ea2-80c3f11d13cf", "sighting--44e68b84-7fb3-4598-9693-eb4013b1d7b6", "sighting--663d7cfb-6e75-4526-bb93-eebdd38bf3c6", "sighting--4296afa9-182c-4428-a137-0b95657df73c", "sighting--ed75b646-80aa-48ea-8c9d-2142e16fa272", "sighting--05576484-5d4c-426c-b28a-481a6659940a", "sighting--0996bdac-ea6f-4560-b566-74ab5dcdb816", "sighting--089b9998-1f2b-4607-9db7-f84cdc7a4c40", "sighting--4425e764-d77f-464d-b621-6e741abf731f", "sighting--ca8815a1-c509-4df3-b3e4-fd4d80028c5e", "sighting--1a371508-adc8-404b-930d-842b554a2dfa", "sighting--cd0620bd-36ba-46f0-8620-4236a34eea38", "sighting--3278c614-b2e2-4779-8f10-35177d9e8a6a", "sighting--d4581fb1-f441-4489-a44b-c7e69cde5dd3", "sighting--2ad9b748-8948-4ee7-8178-44af05663486", "sighting--8b3e590b-2986-4696-ba9b-858e4acd3f73", "sighting--aea33b91-bd03-4ff3-a805-791a00ea45af", "sighting--1f97fc6e-20ec-4d4f-b60d-20a091a77217", "sighting--4b5b5fd9-cc91-47bb-9c57-7aacdc252dd9", "sighting--3f4d4e45-d2bf-4c76-bd1e-9be0bee0fc8e", "sighting--52188ae8-b9e6-40f9-87b0-fb1896ff15cb", "sighting--2bef0267-4b9f-48a0-bc2a-a2433d02cbb7", "sighting--ac0c45e5-b25e-40ea-992e-5b360e1c0b10", "sighting--ca0e1f64-a73a-4e2b-90c6-c2279b85a3a4", "sighting--0dd0badc-decf-4931-a932-2e31de74a3e2", "sighting--e48abd13-04b9-4ee2-877c-33997ca6a20a", "sighting--e431d442-981b-4f4a-967a-7f3a722d524d", "sighting--cf563006-88ab-46b0-8c4f-f149e1575af8", "sighting--6f4dcdc7-b018-4222-820e-71c2929028bf", "sighting--5e4467ac-aa7a-453f-9365-bbe46a844d45", "sighting--ef8392bf-19d3-42db-b635-eb2bb35d67bf", "sighting--a26de5a4-d679-42a9-bea3-d4ecd69702c9", "sighting--d22faa2c-755a-4353-9610-2f41a0dd83e0", "sighting--5b4653fc-300f-442d-aa7b-c45e102d98dc", "sighting--c008da71-547a-4b25-bfd6-1f9af50aa5d1", "sighting--6fe7c2ef-3a59-4dbf-8b07-e4821f182416", "sighting--b1747677-53f6-40dc-a6bd-3bde810f84bb", "sighting--7d097042-201e-4890-b089-d86cd61702f0", "sighting--e975b3d0-284e-4c36-a346-225c37667d6a", "sighting--c66201a4-45be-4184-a9cf-e485743d1610", "sighting--19fe5b9b-d62f-4c95-92eb-4e030894ba41", "sighting--17d69bc0-b209-46f0-9b69-9c4790a0d11d", "sighting--01241e28-be93-4cd9-a033-62d097f6b2c4", "sighting--3504ec10-a045-475e-8d79-68d1948f30aa", "sighting--73b01ee3-4ddb-4eec-ae92-0113c47c21be", "sighting--236cdd35-c383-4c00-a9ab-f73c5d66623a", "sighting--3a3c050b-dc23-40b8-9ba2-93b9f54a6cf2", "sighting--7a9e2e60-9020-4ec8-8b98-1af2fdd2893b", "sighting--61817cfb-bb73-45ac-90f6-6090c9177e40", "sighting--6d5eb6d0-ebbc-4ad5-ab57-15a9d06aa2ba", "sighting--80a9bd99-c6e4-4440-87b2-201134ad3b0c", "sighting--8dcbe7d8-0452-457e-922c-4e8d74f1ce21", "sighting--ae029843-b5e7-4ad4-84b5-9803404b83aa", "sighting--6dd1a0d8-0337-4dd7-8f0b-b85a04ce1020", "sighting--8fd6c415-ccd1-4709-a81e-36911c912287", "sighting--4e4f78e3-0236-48ac-86bb-05fe323005c8", "sighting--44e8db65-2a68-46f5-854f-7ffae8b35b96", "sighting--159d5676-2af4-4813-826f-964d8d70f98d", "sighting--8603b96e-4d92-4328-89a7-f77bd18338b7", "sighting--9913e4d2-151e-48d9-85ef-36515cdd229b", "sighting--9817c7b2-fada-4ebe-916a-58c10ab434ca", "sighting--eba97d8b-cd7c-41d9-a1e2-1685ea4f02d2", "sighting--78722850-a5d8-49df-a0aa-7f43f3d3d9ae", "sighting--6b1fc5f8-8a08-4f2c-901b-4a7781457c52", "sighting--500d4b9e-0f62-4a80-b0a6-a2683a05e93b", "sighting--f51954a8-42e0-4c7c-82a1-182ad0fca8a9", "sighting--d66dd232-5392-44c5-976f-a9479e024596", "sighting--1abd8222-7350-4554-a38a-b55cd1415afd", "sighting--be2d5839-1121-44ea-8948-20a891d8a0b7", "sighting--4b4ae1d8-da1a-408d-97b6-48ff2dbfa56e", "sighting--037dfd60-b796-4afd-8b3c-0abf7222bd26", "sighting--46e1ba03-ed84-4a68-ad5b-7ae4befc4dfd", "sighting--142ac4e6-9cdf-4805-b364-9833d94618e0", "sighting--59edbdaa-7e66-4d71-9c3b-aa0f00f75f2a", "sighting--a86aab4b-a442-4f16-bb86-f735921933a0", "sighting--e6f6eabd-dc98-4100-9309-5cfb6e637506", "sighting--524c4914-7a83-4028-b699-8a87b076d1f3", "sighting--1c57fca1-f3f2-45e4-9b47-aebb2376fa77", "sighting--0ba172e7-f5f1-4238-bffe-e4d7aba8d639", "sighting--4398be87-2d2a-4d0d-8e41-69082778076d", "sighting--51372bd4-654e-437e-a9fc-69bdc71fe877", "sighting--4bf1b0c2-23c3-4a39-93c3-92b0c792bf3c", "sighting--f2682012-cbae-484c-9ce0-9f20662891aa", "sighting--3ae67e48-7c68-4148-9420-445b1ec9a7cf", "sighting--cd5d7797-f717-4106-bcc8-081c62401c6a", "sighting--839193aa-8baf-491a-bd91-a94687a3db1f", "sighting--34659d69-e316-40cd-b629-7f0be4c7a551", "sighting--a3949eb2-f132-42b3-a1d9-d4656558ae34", "sighting--abc42faa-6e97-409e-acc1-a77ea35e68fa", "sighting--6d5ffa68-25d2-467e-a8e6-6b1af5e5ec34", "sighting--1ac30cc6-993a-40eb-b065-27ae18404601", "sighting--c1731c3b-8a4a-47bf-a275-fa292ec7b1fc", "sighting--0b5eb75b-b039-4674-bd43-aaf9fa671f8d", "sighting--28ad4754-2cc3-4b46-8db1-5d3ff765ee62", "sighting--0d43a454-716d-4720-9236-3bebc8c9e026", "sighting--33d5cdee-ce1f-4ce5-ba25-abbd55d8c41d", "sighting--1378d7e5-2942-4e12-ab43-fdb1e5b8582f", "sighting--da3445fc-a3ac-4b6f-8947-cb180e5a45f9", "sighting--ce286699-7dc1-43fb-af3b-d3a5d08fc128", "sighting--c2446c74-a364-44d4-94aa-92dc1cc382ca", "sighting--b6722745-72da-4bc2-9cbb-edbf9c7daf47", "sighting--a072d8d6-b2e6-4b48-b485-e3a0e62a40a3", "sighting--7c7c53dc-7e7e-42f5-80ff-da95a7ffa0d3", "sighting--5653c9a4-161b-41b5-8879-f00cb60b8168", "sighting--7fda9037-00c4-46a2-a1dc-36993de9098f", "sighting--84265aac-e351-461a-8bf3-ab64cba37865", "sighting--cdd5dd57-ab1d-47d1-aa20-61497b6a737a", "sighting--99041271-3889-414e-b83c-e636ef5c06ce", "sighting--38b26139-c0ca-4d0a-ab27-e5a9f0e8adb2", "sighting--e9594d5e-e235-41a0-a158-7a0bab4a83b1", "sighting--a7b38264-0d79-4b12-b739-1bd8ea71d7be", "sighting--d3e200dd-dc40-447a-9028-c428bc9d62cb", "sighting--55f26111-6a7e-4b8b-8ecb-9859bfd74e14", "sighting--0c585275-ea0f-474e-8fc4-9fb2f2b30e08", "sighting--91df443e-4928-410d-b05e-e9dc416c3ffe", "sighting--ea722ced-4a70-4e77-81e4-49f9d2b649bc", "sighting--fcf3e96d-1e09-45c2-85ee-a1ee5f865389", "sighting--38fc54e6-11a8-4822-9379-7c00011f486c", "sighting--72a1e166-a821-4c2b-93c4-88447ea39d12", "sighting--15a1086f-8c2e-4127-b4fb-3c689e07167e", "sighting--01b03085-60f1-47a7-874d-3167692096c7", "sighting--1360b69b-c11d-4405-a776-37d16fcb7b51", "sighting--2aa73a40-e894-4191-82c5-70a5c7bf705c", "sighting--79780e0c-4391-4b7e-b791-ed08c9aa690a", "sighting--7a9d858c-a48c-4803-9fd7-dfa1c45fe66d", "sighting--59b61f4c-3202-465a-a648-2e97ef1b9b8f", "sighting--93a0cdbc-1c0f-47d5-9d8e-920cd34a5ff4", "sighting--0040d3c9-88c7-4499-87c4-8b5ba8f68ad8", "sighting--917d9560-c342-43e5-9cd3-1cfa16aaf8d6", "sighting--f2eae4bf-05b0-4bf1-9043-c7726567ba92", "sighting--3c57059c-75f0-495d-a8d6-9adbf8663633", "sighting--398e8424-3e9a-438c-a92a-190fd7f1a929", "sighting--8f17b631-6682-49e7-a1da-5189c0adb48e", "sighting--c4ed9de3-32e2-4c8b-afed-8784b15520e6", "sighting--ada97d98-7a42-4c41-98fa-409056104b50", "sighting--be58d60f-7029-4c2e-9eee-6ec1d09cfeec", "sighting--816b9c24-88e3-40e0-82af-f3b6144a55dc", "sighting--352d1c1f-eac1-43ab-a0ca-1d747ec6d60d", "sighting--ed1cf273-a268-4ebe-818a-7b9e48f90b72", "sighting--37a1eb02-c49c-413e-b0d4-29389124f942", "sighting--d9bcc171-85d1-4c47-9ad4-d4a9792c7e80", "sighting--1e179501-87a4-4c16-b554-208563aaaf14", "sighting--5e3c71bb-18d5-45f8-a684-81ff429fc075", "sighting--c29053fe-0d9d-4459-8d5c-4c4d1f62f858", "sighting--c5527bd1-d17a-406e-a4da-487a49dff983", "sighting--a5a85b32-e49e-458a-b8a0-65d36cd8540d", "sighting--b0e4670e-92f8-42f1-94e3-b8f4f5bc4f78", "sighting--30ffaa5c-8d8d-4ab7-86ff-45438cd6e35a", "sighting--156368ae-a8a4-4a44-a6b3-42156d9bed79", "sighting--816943ac-7aa0-4abe-97c0-bbea978b063a", "sighting--8309119d-7fad-4638-9873-328292e54301", "sighting--aae49cff-5e50-43ee-9e94-8e9d4120bd8c", "sighting--e8933947-3378-49ed-8b28-909fce901662", "sighting--4bd85f74-3bda-4865-8aa8-fdf87c1bf5b1", "sighting--31c81c78-5cb2-4804-a22f-57ce92e0537d", "sighting--7d304a55-6da9-4293-920b-72700a30fd5a", "sighting--2eda6a7d-31e1-4cfa-b225-cb4b16d65474", "sighting--e4ff81c5-e98e-48f9-b1be-a26ab24b46ca", "sighting--8cb729ef-dffb-4b60-b7c7-797327f6df59", "sighting--925d9fc5-f119-4183-ac87-0527c9effe5e", "sighting--79dbad63-f80d-46c0-83b0-12756154bc68", "sighting--cc69a7cc-a338-4c04-87fe-04f7dbe8114e", "sighting--7e922328-8f39-47f6-ac1f-544aed54d229", "sighting--864538d0-f337-4c80-9ffb-12eb870e0bdf", "sighting--86ac1de9-7dad-49d3-bc76-ac316f12dcef", "sighting--1e7a8c89-d910-4036-a824-c7fb6a3695d9", "sighting--270e97cf-7445-4e13-b1f7-3e6b4f783bef", "sighting--614c49ec-2cdb-4269-b363-08b6e9d0b27a", "sighting--331a4fdc-f236-4f12-b74d-121a587d4073", "sighting--d192c1f6-b323-4ea1-8cdd-1ae784cc0ebc", "sighting--6706be66-a9af-440e-b8e5-548ba641dc78", "sighting--e5c31a25-c115-4200-981b-32c17a12e7d7", "sighting--158e3455-902c-47a0-b008-a41c455f9bef", "sighting--83b4e4f3-c691-47c4-a224-46883d873896", "sighting--c3ca62c9-2b58-4dae-aadf-1529011aafe5", "sighting--4d03dadb-84e0-4347-8b59-e10b2d0d7927", "sighting--426bacda-6523-4b28-92a1-07ec8ce923f0", "sighting--2b0d0315-d562-4e4f-b941-fac36f806a19", "sighting--e5753d51-3ab6-4d39-a698-0e8a970e9107", "sighting--0332b75d-5af3-48a3-940a-ee90cda2d41f", "sighting--53217d79-6804-4bae-84ec-8ee817146716", "sighting--60585352-0c57-4a75-a657-a5d09fb0641f", "sighting--591d200d-0e5a-46be-980d-73a12d2bb8ec", "sighting--9a804e4d-5021-40cf-968f-3643d314f75d", "sighting--17aafac4-817f-421d-bd09-46a20e33298d", "sighting--0350c464-0bb7-4660-9223-a03915e3dacd", "sighting--e0eaac28-6766-4075-afc6-bb79be5635e8", "sighting--b1903503-4273-4949-9512-ff86d99b53a7", "sighting--88142caf-0089-4d66-8141-04751398a8ed", "sighting--9ba99cfd-d7e4-4bfa-b98e-948cdc5090be", "sighting--2e1ea091-70b2-48e4-aef6-9fb3732f556a", "sighting--55ac6fba-ae1d-4885-84d8-1a6bbbe362ad", "sighting--f76548e7-eb5b-4281-8a64-4c8435c7087c", "sighting--0f008a06-fba1-4b7b-9836-a3495a573956", "sighting--2c90cadb-7513-49fe-9d4c-bb45773ab726", "sighting--e0fa18c0-9989-4dd7-9bee-c7e8244b194c", "sighting--44e2ac8c-7a0b-4ee0-afdf-6a03ed56a32f", "sighting--92195ebe-36a9-446f-9238-435ca190367b", "sighting--88632214-68a0-4304-89d7-091d1f27ca16", "sighting--1bb20e49-2fd0-4eff-a83b-ba31ba0fba9e", "sighting--32bde9a8-1a04-43e2-bf36-4a04557e3b53", "sighting--f282b93c-a2b6-43cb-8d4f-f2a768d22a75", "sighting--b154a45c-3411-4b4e-94fa-3db70d1889df", "sighting--b5ecdb58-0572-4799-9600-0b61906d11aa", "sighting--d2d9b329-1b7f-4713-b425-431669390637", "sighting--616785f8-c1ad-43c5-b689-b8b5eacc792c", "sighting--0532498b-f5ba-44bb-bc3e-51bfe531adc5", "sighting--6e941b77-4f1b-4715-9f3a-a29e4383d824", "sighting--f8b3daf5-377a-4c7a-aae5-e37d2cb34c66", "sighting--0b5b58d2-fd7f-4d87-8621-cb19bb15e764", "sighting--7ec93cb8-0718-408e-a930-d7db179a8608", "sighting--71646950-74a0-473f-99a7-af7508324890", "sighting--8c3237fb-1a0a-4366-b79a-9a21fbbd9961", "sighting--a07745cb-e772-4525-9622-0e37e14cba94", "sighting--808fc164-fd30-4387-be3e-f642e0d097dd", "sighting--ef199b69-5100-4f92-b94a-a46e2c2e6b44", "sighting--a88d6d76-5d74-4766-830f-1fe7c166173f", "sighting--518fbc7e-ff87-4e2b-8af3-787e747f4b45", "sighting--9af181f7-cb48-4b3f-b8dd-e5de152b14f2", "sighting--12d1619f-6c94-48db-abc8-af68c25427b2", "sighting--7cd0bf1f-84b4-4b49-8e38-b090514e6d95", "sighting--6e4d6187-4fc8-4375-840e-04fd21572d58", "sighting--3448b64d-44b2-421e-80b7-3991a88dcb76", "sighting--ca35d8d4-bf9d-4fdc-a08c-30f2b50cbd74", "sighting--e702698f-0ed1-4543-8001-b45d0c4cf354", "sighting--eeb96d58-7dae-41f4-a26f-75f34acc2e9a", "sighting--fd09d2ac-ecbf-4be6-94f8-7c8fe0758919", "sighting--686b0b95-9603-4a64-a28d-06c2d243f3c5", "sighting--b331bcda-94fe-409c-aa1c-a185e6cbbdf6", "sighting--d6ac74b6-70d2-4c69-adb8-564a30cd6771", "sighting--2380bfd7-b645-442e-8d13-2e171501987d", "sighting--4d3baad2-cd58-46b9-bd7b-ad2c3025636d", "sighting--3413af78-1bcd-4dff-9cf0-8ff991063cb5", "sighting--02d1f58e-e296-4a43-8723-ff862151c43c", "sighting--54234ac7-f823-4aff-815c-cecb099813f5", "sighting--cda01eee-4c6a-46a0-8c55-e4a3bf4cfd99", "sighting--65eefcc2-c304-4ff7-ae13-2a5cb4100f81", "sighting--deedfaa6-8861-4296-b300-16843bb26b9c", "sighting--1ab2f156-179c-4a7b-812d-4ef1115d6161", "sighting--4e135d56-8645-459f-b5e3-278b448e2ed0", "sighting--b26cf49d-e91c-4e61-b943-6ec66e016ef6", "sighting--5ae89c28-6757-4539-bf3b-f5aa9feaa7f1", "sighting--3398d33b-e737-49b4-a54d-668a76a62638", "sighting--f44d487e-8c6e-447a-a5cf-fe48360240c3", "sighting--d9e78403-c98d-4b9d-9ac0-39449ae771e8", "sighting--18668871-d6d0-48d5-bd4c-0a64d4629b55", "sighting--76a64f96-d9aa-42f0-9801-8d77ca833294", "sighting--77569a4f-ea6b-4aad-81ea-35c781d953c1", "sighting--06498b5a-02bc-4b25-8e66-889885669a1d", "sighting--ccd627ac-de30-4f4c-925c-f90d951404e4", "sighting--24700981-6d71-4656-9e7f-00436d3744f0", "sighting--0ee368a8-2366-4d05-8dcd-c93ba40544f1", "sighting--471ea782-28b8-4bc5-b43f-d2e1892e5d0c", "sighting--d17df167-3a0a-4631-9e2c-c35dba99cd09", "sighting--c5b8ab70-6cb1-4ea3-8c50-a2dca8e5a281", "sighting--db4b8ba9-4fa9-4459-8b70-4b26c583933e", "sighting--286b0b4c-e6ed-40a6-9301-e902574f9bea", "sighting--c70b4245-7acf-4b66-aa32-3b88fd11ac76", "sighting--c59d66d1-9526-403c-81a2-5ba7ef29ca75", "sighting--da6ff9fe-e967-4b63-bc23-d7ed3720a0fc", "sighting--6c7f5cb9-c729-4f19-bcd9-e571726d11cc", "sighting--b0692f9b-1f0a-4dca-a29c-cda3f4590a45", "sighting--46d56d61-e929-4e8a-a415-5a5363d63abc", "sighting--3e41b0c3-cfc4-413f-a507-e16a1588f817", "sighting--fbf19c4e-3cff-4857-8cb0-1c226c33c9e4", "sighting--cef40e92-ceff-43e0-9afd-3d9b72c48b60", "sighting--8d932ed0-2d2c-4209-877d-529984f14d70", "sighting--0032f7e6-95b9-4e76-ac2b-89ba525da21d", "sighting--c412b2b2-9164-4cd4-a8f7-fcbf796bb3de", "sighting--61ae1f68-b56f-444b-b461-e4c8a83088c4", "sighting--9a85437b-1f1a-4f4c-9cf0-2b62d59ff9b6", "sighting--6cb6a9d1-12aa-40fe-811b-891670cef134", "sighting--77c25115-9bd6-494d-8cdc-2852fd49190c", "sighting--889572f3-4695-4ef5-919b-7e28fc8e0687", "sighting--f8f7e13a-7338-462e-88a5-a3b851a3b799", "sighting--2d3a40ed-cf4b-41ea-96e5-19b97f64e5be", "sighting--5e3cdaee-b2f8-442b-9f18-31d27158ac69", "sighting--4c6710cc-a5c9-4ec4-8ef6-b8c52f119fdd", "sighting--ac619bc5-7c70-4b8a-84f1-a359ea01c830", "sighting--d533aeff-4b25-42d6-9b3f-0d49f871924b", "sighting--8cbeb71a-a37f-4782-9244-1c5260944402", "sighting--9d4bd952-aab9-4b38-8ea4-0d50363ffdea", "sighting--ae4fa61d-33f6-4baf-a175-f6da1fdb77d8", "sighting--84bcf901-f5e0-455d-b009-694c7bebef4c", "sighting--36585351-745d-4563-8d94-f530f1d2b6da", "sighting--72569ec0-470e-48ff-bb78-61a0c941a819", "sighting--563685e8-e88a-43b7-993b-b8a9e64e431d", "sighting--f616fe41-eba7-4f66-a09f-f2156c61df6d", "sighting--0601d591-e9b9-4232-8fe3-e90d4adc222e", "sighting--2c1b376f-e55f-4f0c-b726-4282b1306108", "sighting--63012e58-be82-419f-a67e-b9827aeb5b4a", "sighting--b90668b9-bcc5-4135-9b45-f803a3e4fad3", "sighting--45eb64a6-9236-40df-a085-33768e13fb35", "sighting--8ddcb84c-9193-4ecf-ba7d-2fb0f4621b70", "sighting--ef373480-ba38-4585-9aa8-e196f585e1ad", "sighting--d67715bf-16f6-48c3-8104-c91943c9ffa2", "sighting--b908dd3e-73e2-4108-bedc-ee0007d10cb4", "sighting--0c3dcda5-65c2-48e3-a685-e0f23c44a518", "sighting--655cc237-7f9f-4abd-8774-e93fd33257c5", "sighting--b8e2a01d-767d-4d59-bed7-7d1514e136d8", "sighting--c1826b26-d6da-474c-a2f1-441aff73ca11", "sighting--c098fd96-7921-4d33-80b2-1a79c8ec5d8f", "sighting--329e5bf0-cf7e-4400-996d-9eb524760954", "sighting--bf175adf-e79f-4822-b4cc-58af093e1e6d", "sighting--e0434608-1162-4df6-9f1d-5d5395ab9bac", "sighting--9fb90022-fd29-469d-8634-5d690c9cabfc", "sighting--8db8cfa4-e193-45d7-ae08-49ab16019cf6", "sighting--356aecf7-b133-4509-8f96-275de2703c04", "sighting--f1335b12-6cb5-4b4f-a650-0ebdac53b1cb", "sighting--fa4b6ea0-ec0b-42e6-b929-efdc17887660", "sighting--91582dea-1a22-4980-966f-62ab0bd26e33", "sighting--d4060a0d-2f8a-4067-954c-fec5eab160b2", "sighting--5a2718b4-5bb9-4368-b23e-6725c64b976f", "sighting--7ca981f6-68ec-4c94-91c3-9ea4509f2104", "sighting--baddbc0d-1aca-41f8-b65f-3f534c1188a3", "sighting--9e6c8782-03bd-499d-8da4-fcb9d86450f7", "sighting--a26c3233-4520-4f4c-bddf-93b26d185a2a", "sighting--daa2847b-1941-4b86-93b3-aeb14f120773", "sighting--82f424c3-4205-4d9c-956b-aeec4618017c", "sighting--5e2ab14e-7e06-42fb-8050-5c58af6a04b5", "sighting--13659c07-fa54-4d70-940e-2c251a1cce66", "sighting--83e1a521-6cc0-417b-8ead-29a9ffd00a0e", "sighting--8ac6ca6f-7f70-401d-8081-eeba4d2b6d74", "sighting--30c2fa65-f7d4-4603-bc02-e2af69c0cf25", "sighting--7317b8bd-eac7-42ee-9735-92bdbf600eaf", "sighting--6fb50020-d33a-43bd-9a8b-57720a795251", "sighting--e9654405-6cc5-4049-a482-bceb13783436", "sighting--b245ee59-7d72-4fea-b385-178064ddfe09", "sighting--01d1c574-0353-499d-b35d-b167392ceff0", "sighting--51c0bc0e-2aa5-4e3b-847a-4074f413a839", "sighting--c394cc2f-0534-4cff-960e-0455ebb603fb", "sighting--a088ff9f-4f14-4a16-b212-3f0baca36fdb", "sighting--e3319377-346b-4b5a-a299-f6716a622658", "sighting--663c4326-d90b-413f-9519-cc83ca21a5a6", "sighting--84321064-9fcb-41f4-b116-2f49b76d117d", "sighting--b8f98b71-ee25-4c63-9ce3-33422d0c3649", "sighting--96aab574-23a4-49ab-87e5-ebcafca935dc", "sighting--698a31fc-bb3e-4aa5-9ae3-c80169295e09", "sighting--18b344ee-3967-4a32-89f1-2130f1fcbd49", "sighting--e4c151be-656f-494b-aceb-8c4daeba1ce4", "sighting--e5a01bbe-bdd8-48f3-9805-ec21acd132fd", "sighting--9222188c-3347-471b-8de9-66468000deda", "sighting--a4bacb74-2fdb-4a82-8e6e-df9fc1ac42b7", "sighting--014d9b46-2337-4ec2-abef-052cfabf51ed", "sighting--53186f09-8b8f-4556-9c02-b8a6011e047f", "sighting--38235229-e58c-4c06-b3ca-771814360991", "sighting--c96ed04e-61b5-446e-87cc-c6b68a605863", "sighting--ab790e25-855e-4c7c-b739-4e9079c75002", "sighting--3b36bc91-e6b0-4b7d-b1fd-7fc3c3184db6", "sighting--5ac86cf7-1724-47ae-9791-662eeccf8713", "sighting--fd42904c-917b-4853-98be-8091483cc446", "sighting--3bed5e97-9a7f-451b-8171-2a4aacf73930", "sighting--07da83bc-5614-424f-a8e1-16cc88bd0018", "sighting--c47ea94b-766c-4f7d-8b78-8515d32ef618", "sighting--1ad405a1-ec32-428a-86da-10d2df8d4cdc", "sighting--fe40b07d-dae0-4a63-b7f8-86ad9c1f7484", "sighting--b66d18a4-71c4-40b5-8537-27d5f2745394", "sighting--ef2a165e-bce4-499a-bbc8-5280e3e7f476", "sighting--c8dc1284-26cb-488e-a5b5-b33a2449f561", "sighting--5cb007aa-4863-4946-84c0-577bffeb1d4a", "sighting--8501261a-1a95-41f1-88cd-99d187d2944d", "sighting--7c015d4b-ab54-47ba-9e42-143ab5239b5e", "sighting--a13f0fcf-9180-442a-93bb-7fd987727cd9", "sighting--699bc416-898e-4456-bd03-8bc5b6fa78bf", "sighting--6ddda417-84a7-47dd-b7fc-85f8ebce2913", "sighting--3d58caab-abbb-41ed-bafa-699d781380c8", "sighting--97c6360e-f509-441d-8b48-5f4e8a63ff34", "sighting--f91a44cb-c2d8-41bf-ac81-e94f8caa3f56", "sighting--18bf7ec8-516f-4c0f-9400-47cf392466e4", "sighting--f7b28223-2030-4675-b6a2-b1eb1d431062", "sighting--c6915eb3-6230-44ad-ac3c-9f114ca492d4", "sighting--ba8ab4b0-4e46-4d47-80ec-2652e5d38b2c", "sighting--04c66e3a-00a5-472d-bedf-d3c05206bfbc", "sighting--ce8fe925-c194-4a86-8e75-6126fa2e4e40", "sighting--25b9a21f-8bc9-46b2-ace6-2e0db890e738", "sighting--d26e1256-929e-4f6b-820d-ea76c16a5c52", "sighting--9dde4bf3-5419-4a11-b75e-0afba93e5d0d", "sighting--abc2c6f1-ea68-44dc-a5aa-b5c6d964f554", "sighting--e8de7171-4d38-44a7-9525-dc62d4a52586", "sighting--146482ac-a76b-4b33-8781-13d448b37e5d", "sighting--515e229f-54d9-43a0-9a77-8676fe2cdb7a", "sighting--9f258899-97f7-4fb0-b722-eced9bf668d6", "sighting--1a5d0880-e0d0-42e6-9fb4-a9fbc6304c81", "sighting--b00ccaa5-6f96-4471-a106-d6748daa9cb1", "sighting--be8c3579-4075-4662-9ff7-78de2f7c4707", "sighting--df3b2612-f01b-459d-8470-351357ea89cb", "sighting--d135b2a3-eef1-420f-a956-362d0d547753", "sighting--998483b5-1b6e-42c5-a92b-ce0503a32242", "sighting--f636d7f7-03ae-4a05-bcd6-f43b28d908fa", "sighting--6fc17398-d84d-4a4a-9791-bfb6875e0aeb", "sighting--55a10a31-640d-4acd-abcd-f39fbadb1174", "sighting--9488cd6b-1aae-405e-8550-5fb16d9a4e5d", "sighting--91b5c3d3-6881-4685-b665-d1c7a2ec397a", "sighting--f93fdc80-f8d9-4f7c-9285-b58c214df91d", "sighting--8e70755e-f824-4994-a216-e83d0ff51c92", "sighting--ca869a56-9be9-4b3f-bc03-6ce4de6f90d8", "sighting--a341f761-f0cb-4757-be4a-f249886ac22c", "sighting--2274875b-ccc2-480c-a6ba-c25548631d87", "sighting--6341f252-f30d-41ea-ae61-87a7dd9ccc9f", "sighting--84b63c32-e1ae-45cd-a3ea-df55944bf60d", "sighting--370293ab-7bfa-4306-b8f0-64ccc6080ca1", "sighting--90e1a4fd-b9f6-4316-a2c5-6136e809c629", "sighting--99ab7305-cb17-445e-9714-2b1475571249", "sighting--cac78afa-f0b8-400f-be56-feb4b8582034", "sighting--d5edda10-7337-48d7-b78d-3dc60f82487f", "sighting--f41d1676-e772-44ea-bd5e-953e02f55b35", "sighting--c0a1ca1e-ea01-4c1d-bb38-2c087fdf3309", "sighting--4c80f594-2769-4a91-892a-b8c35ef772b4", "sighting--24b56dd6-fd72-4447-becb-99442e3fdc25", "sighting--8b309d84-ef87-448a-a9fa-6ad0cfc28f29", "sighting--bd84696b-01ae-491b-9bc0-474a877d3f18", "sighting--876206d0-0252-43f2-b4e1-b6307efcf5ed", "sighting--02792683-b010-4588-9460-ba24bc3e99d5", "sighting--f50f4cd7-334e-4dc8-b181-b170dd07ec2d", "sighting--c037b207-b5f8-4f59-8ccf-bb930a920db6", "sighting--0f020c2a-3b47-49fa-b8d6-60c9e07dfd0a", "sighting--45b8bcd9-a7c2-434a-a250-75817cabfc23", "sighting--4493038b-df4a-4876-a447-de151ee7ddf2", "sighting--c315073b-c157-4ffd-bd95-2f859e6fdac3", "sighting--cd0cf73c-055f-4611-8121-dc36ca685ff2", "sighting--0c00db31-7527-43f0-a352-f4fcd7174df2", "sighting--fc4af37f-91cf-4ce8-af9c-41f833803d90", "sighting--323e29f1-72a3-4f64-8d18-9ce676ff7ef0", "sighting--2185aed8-e4a8-4fe4-9cec-b4578806f71f", "sighting--ec0d0bda-95f9-4456-890b-51a5569cb01b", "sighting--0cb5c1df-603e-4374-b59a-b470a1fd3a17", "sighting--54f9dd35-8d7a-4c53-9c83-4e4e88fd42ce", "sighting--5eda8330-43e4-42bb-960b-a8b53e24b441", "sighting--2be4f1bf-c9e4-4a99-a874-2177c639cded", "sighting--5e777881-b0ca-4594-87b4-8f9431dfd832", "sighting--33a6748e-7f11-47a1-8c68-37ee00141242", "sighting--a1aaf7e0-ffa2-44d4-b276-b67684246f7a", "sighting--36ccfd5a-761d-474e-900c-228f23f9a90b", "sighting--ddebf474-a26f-44bf-9c2f-59778f556ad8", "sighting--d087c767-ed4d-4650-bab7-9ee7128d67e1", "sighting--1ffb8ae6-f10c-4d39-8a30-044cea1359ed", "sighting--0f52ae11-f70c-4219-a4d4-47b67a124adf", "sighting--30ebd8cf-a079-4e30-aedd-cb62d6fa143e", "sighting--9e44fd16-2396-484d-bdc6-459b743e9dc4", "sighting--624685be-1671-4774-bce2-4448a97c2d7c", "sighting--509dbb6d-2e27-4ebc-a242-c9187943f12d", "sighting--01c72907-a886-4a44-98c2-9216291e83a3", "sighting--bc9384d6-c13a-4e6e-8182-76fcbbd976ec", "sighting--810eda5f-0a19-45fe-bb90-b1543c374ccb", "sighting--7f353d45-3762-4bff-b444-ad2da76c3cb0", "sighting--b4dac2da-a1c2-46cb-a21a-ed28e9d4b74d", "sighting--eb05e43d-e64f-4511-9fe1-24a8d8d39097", "sighting--e9e1d641-7da9-401b-98d0-2ce95817d018", "sighting--e40dd460-cbad-4ee2-8119-a86830c02cf8", "sighting--0c781f0a-cf1a-4432-902b-71cbd98e82c7", "sighting--b3a8af20-331f-42fb-ab0c-f996568d1619", "sighting--4a090b49-704c-408b-929f-dcf85e6bc8d9", "sighting--c4645081-5396-4d88-97eb-17a9f41dc99e", "sighting--7f29f678-4f87-47e9-8f2f-25ca00b755f8", "sighting--80bcf35c-9b49-4c84-b7f3-0c9a7b4a67a0", "sighting--1be4569b-0e5f-4f26-bd8d-f0954a111900", "sighting--d46b12df-4261-46cb-be6d-6cf35ac73a04", "sighting--f7b820f3-f158-4c7e-b2e4-619633b2d2c8", "sighting--d826f8c3-9481-45e9-90e3-964032a2062d", "sighting--02e0db5a-4110-4663-b04f-bb0624ed6604", "sighting--e11aae41-89a0-4cad-a451-1229e7daf714", "sighting--f833406f-211c-48fc-93d3-ebae4c7787e9", "sighting--3c219953-6da0-4ff2-81f0-10cc75f61be6", "sighting--fa22cca4-a8ee-4e24-ba95-c6757642f7da", "sighting--5b43ebab-f9dd-4e9d-ac0a-c78e05244411", "sighting--81572a1e-dc33-440b-9cd1-0b6d7c5e7f29", "sighting--7c68165e-7fa1-4054-9b74-60a615d294ad", "sighting--b6bbd5e9-0172-44af-acad-1d01ebab0cae", "sighting--c589287f-8e2e-406e-a90a-11d83879717c", "sighting--f2c0e5aa-b81c-49b9-902e-b8990d3d86d4", "sighting--05ec701a-4692-4971-87a0-15e060d5db2b", "sighting--27d432ee-fca2-4745-92bb-41b83a97b230", "sighting--ee79e4e0-6f76-45fe-b100-a3640ace5931", "sighting--e262673b-81b7-4409-972b-9553d3f7e2ce", "sighting--a08ebe21-1b9c-4898-be7d-bdbcbce428df", "sighting--8d33bf9a-6c73-432d-9c90-0c125713f8b0", "sighting--45568311-4cdb-48fb-8bb0-1d63e39c66d7", "sighting--4012707e-e159-4871-a9b6-24db36e29879", "sighting--297ab05e-5d7d-4b36-8944-837ac3ce2748", "sighting--a36fc1e3-2df1-453c-9235-fbf4a242ec36", "sighting--b5429dd4-0f7d-4a5e-854c-4a9ee60296bc", "sighting--ff0a978c-8e48-4e4c-a7d5-047f58ca70c2", "sighting--bad307b8-27ae-4dc8-95c8-7037c0769cde", "sighting--65609356-87f3-4fb4-b4f4-b8a4bd70a5fb", "sighting--e1e0970e-00e6-43a7-98cf-b37087f19b37", "sighting--b1013c31-9373-4d98-8142-ae22ad990138", "sighting--ac543e5d-f922-4409-aa6a-989b4c2e5227", "sighting--9269be3a-0b1d-4243-8a1c-2e628ba37bfc", "sighting--3a58dd07-f02e-4df9-90d2-bd30916bc1f2", "sighting--7945d350-bf79-49dc-85d6-275ad1d75843", "sighting--7564d1d0-8ed0-4b86-9b55-fc0026cdf807", "sighting--95ec265c-01b7-4aa2-8569-b14960d7fd48", "sighting--263dea82-ee09-4d73-a95f-4517bfe6d351", "sighting--92a6b6b3-ef8d-4c2f-8fc9-1b46a52398d1", "sighting--f267bfb1-e5de-46a0-afec-9ce4212c1ce0", "sighting--93e5d6a4-08ac-44c2-b2f7-2d854e870249", "sighting--c603aa99-f0f7-4010-addb-0f89f1f700ae", "sighting--742262be-56f8-4604-9edf-41e64489a65d", "sighting--64688ead-84b6-40b4-8709-5a5bee34913a", "sighting--99c93826-a219-4759-9042-1275db7a4c5c", "sighting--5578a58f-c086-477e-a93c-512992408f64", "sighting--3be7c932-fda9-4a12-9567-92a5ade6312b", "sighting--4cbcfae7-9e74-4f0c-b4a2-ac241b4723ee", "sighting--840069e5-9840-4222-94c8-22841a7c1891", "sighting--8416386c-82f7-4e76-962a-5217d0872617", "sighting--e450f90e-7ca6-4278-aa4a-7eaffe8180d7", "sighting--3b8bff10-d1d1-4a3e-b964-460f63165c61", "sighting--ae874779-bd61-4fa6-b8fa-970ad3c3ed57", "sighting--7e24bbce-569e-407b-b842-fcb394623e31", "sighting--2c04caf0-dd42-4b37-9901-90ae84703e6a", "sighting--f24986eb-f7ed-4e5e-bd24-4f219997d97f", "sighting--10e84a9d-5662-4205-b567-9fdf1610f920", "sighting--1a987beb-7895-4a3d-900f-4a71a0ce87e3", "sighting--048a794a-6677-494a-9f1d-7904099e7014", "sighting--4afb5830-4505-419c-8622-4943864958a7", "sighting--5afa51cf-a99b-473d-87dc-b8dacd54cfd0", "sighting--42195420-a6ae-40a0-8c42-3dd0505421ea", "sighting--6288863d-8180-4cdf-a493-209facf37001", "sighting--7556f4d3-dc45-40d9-9d2d-9abad7d214b6", "sighting--a7202a9c-8de8-48a4-a212-7317a22ecef0", "sighting--006af28d-31ac-45d9-88ea-f485d9d43f97", "sighting--db428081-b340-40b1-9841-24c0e18cb2ac", "sighting--6caf8f24-0dc1-4bdf-b9a7-68615573efa8", "sighting--71c34c4f-4f51-4d62-bf48-66c2806967e5", "sighting--75dacc76-dffb-4d92-b96a-4423f76391f5", "sighting--eb8450a1-5664-4bb1-8aae-af54ae9a99fb", "sighting--c1802f93-1346-408e-b6d0-8149bf3f2b73", "sighting--a8b5d36c-fc1c-4b47-a4ee-4bb586cacf06", "sighting--b0cd6bd4-9636-44ae-a39b-9c40f41071bd", "sighting--1899033d-2cc1-40d0-8e79-51603a64b183", "sighting--55ca9b0b-56d9-4a7f-b7dd-1c6552dcf68c", "sighting--013ce215-7895-4929-8661-0635003efdaa", "sighting--e8f82d47-50c3-4f36-8b28-adfd885dc191", "sighting--ffd3f667-5ec1-46fd-bb3c-474f59d0d889", "sighting--fc3858c8-7c13-45fa-8923-7f4ef399da32", "sighting--9e66f70c-d6b6-4870-bad7-86dc981b20b3", "sighting--a2c6cbb9-bced-4646-81df-1e153f1d75dc", "sighting--9d1a5053-6d90-4913-a2bb-39f5e8be8c65", "sighting--b7b3eafd-b465-429e-b01c-7a62e7e248b8", "sighting--5f2fe915-4246-4558-b0d6-9483f46fc7f8", "sighting--3844fe27-4aa3-4711-b1b3-05874217fcd0", "sighting--d7bc08cd-5e6a-42ae-915e-16e30bd0d47d", "sighting--55d43a0a-6e6f-491b-8e92-7b9f92fcf5b3", "sighting--fbd2903c-d56e-4129-8b3e-686664289fce", "sighting--c1a95550-123f-4765-a52b-d5427db32584", "sighting--2b1eee47-80e9-4b8d-9f79-14b01f15c893", "sighting--334fcf05-c3c9-46b1-9480-3b28da74a552", "sighting--810214bf-674c-4491-aabc-401d3d84a1d3", "sighting--43bf86b7-8631-45dd-91f0-8aedd0c0240b", "sighting--851ed2fb-9172-44b2-8bc4-4e473cb0722b", "sighting--09a5bbce-1202-45ca-b558-e1d8e8d666d3", "sighting--dd0348a9-9f83-4882-b3cc-4e8fc4b66309", "sighting--3e011184-d673-4282-ae4b-2271a4a2e7ed", "sighting--df84c117-4f6a-424e-849c-f1d1b424e9fa", "sighting--75066a8b-9c3f-44f6-8bfc-69783d2f052c", "sighting--3cc09454-4d5d-4bf3-9421-5f7239d9319b", "sighting--f0f0c533-651e-4cf7-b67c-f176c27b7d06", "sighting--24f8aea1-a4f9-452f-ab98-a3fd6f86d589", "sighting--d68226bd-e58c-4f79-a004-333d559adf63", "sighting--c1eac78b-ddff-45d6-a299-98705c07ef04", "sighting--7afc740f-c935-44e5-93c7-c6f36fee4864", "sighting--9aa90c06-739a-45dd-a219-9580d9f3097a", "sighting--e695f79a-baf8-4b62-87e3-3a9ed9e8ea29", "sighting--7d6f43f3-6f2c-465f-bd77-ab4d14c22a70", "sighting--21e6332d-6a66-4fa0-ab2c-23b6a9ed2353", "sighting--51b17b84-1819-4a2b-99f3-cb5898de3fd1", "sighting--81255f94-6ffd-40e0-b1be-1ea3dd407ea0", "sighting--efd1cd83-3a90-4bf5-977e-8f7d2077ad78", "sighting--0b577273-caaf-4d7e-9b16-71243d8170c9", "sighting--e07acd8b-1756-43ab-9f35-38ea73a19d09", "sighting--e16f4635-d356-45f4-aa7d-a2671775768c", "sighting--45805c47-09ec-4c16-ba6b-561785c80076", "sighting--3aaf4085-e1e3-4337-b2c2-1441f1f8db58", "sighting--fcd8f40e-6924-43e5-af06-a58b43796088", "sighting--1c26ff45-c754-4f15-ab0f-b3a2e5354bca", "sighting--c56ded3c-78f5-4ea2-b0ce-61384053f3fd", "sighting--e1a3c4ad-ce33-4cf5-abd8-cc5404594dbc", "sighting--d8e3557b-6789-4794-819b-ff93c739104e", "sighting--91613f4b-5242-4e75-979e-d5b511404a61", "sighting--7a91635d-f7d3-4a35-88ff-2cbdd14913c4", "sighting--d1c008e0-eaec-44fc-b543-79a62c94159b", "sighting--d2c9a18e-d5fc-4f3f-b71b-b1635e5bf4a7", "sighting--007a908b-2bab-4c27-ac41-ffc79dd0b3d5", "sighting--c926ecef-0825-4ba4-9be9-30e15129018e", "sighting--28f5c0b9-eebd-4332-a6e2-9de85af68212", "sighting--7d2e451f-7b57-47be-b363-5d942fb41363", "sighting--a1e39b78-2088-43fe-9793-b534bbb88bee", "sighting--10dcfa88-867b-4541-ac75-17488b6a07a9", "sighting--f4225e7d-ed55-46e3-ab37-dbfcf2d21a3c", "sighting--f23a9664-1a32-4198-88f2-a6c6ee42f25f", "sighting--d5fd68d9-a09e-44b4-9d94-263efae7cf8b", "sighting--dc9bc617-efd1-48a4-9b61-735d93237284", "sighting--81012fb1-5b16-4b2e-abbb-f277c10d2543", "sighting--f945bd8b-aaaa-49b2-9554-bcb88a09ff56", "sighting--98499ba7-d064-48da-92a8-acbd87b7708c", "sighting--8d52c588-3e4c-41a3-8145-4f3524bd5a89", "sighting--fa8ed94f-b1f5-4e08-948c-34672e9c8841", "sighting--cbe2a00b-96ec-4e4e-b28b-ebbba21bbd0a", "sighting--9803c73d-fd31-48e2-86fa-a5bef59df49a", "sighting--aaecb4cd-c0bb-49a5-811b-fcd280279445", "sighting--25b24e71-5791-4821-845a-a7cd0a396f39", "sighting--0ff2204a-10df-468c-af6f-fb0c97d5d45c", "sighting--72622468-2242-42aa-ac00-5ba60d4476ec", "sighting--91135a69-fc5f-495d-8907-ccf665713095", "sighting--c18998ce-3849-475f-a4f8-286997b6793d", "sighting--ebe542d7-9354-4630-b7c5-04caf4f99803", "sighting--e0c80799-1056-4e23-9454-88ec47b0fce8", "sighting--c37e9338-d03b-4e55-9051-3292fda97277", "sighting--4a8ad86c-2854-4baf-a195-f3c77ca4f662", "sighting--89ea4238-e720-4563-ae40-ca2fd5a36b35", "sighting--cbccf7d1-8471-461d-a585-fe5456f7c379", "sighting--40270ede-f1b1-41ec-9a24-63e72061f546", "sighting--9755103f-4535-45b1-a69c-bc4edb3190e4", "sighting--2daab7bf-70e0-4c5e-8d46-f2d66bb53ac2", "sighting--20f761c8-9e49-49a8-9c4d-cd1d227b3a01", "sighting--2e6dcacf-475c-492e-b4ce-959dccd930cd", "sighting--a825393a-8bce-403a-aa5e-4542a0b28e22", "sighting--02fe26cb-af68-4bb4-bacf-92e86aa5dd59", "sighting--b762607f-d729-4bee-9c50-316e26fae13e", "sighting--1642aa9d-45d2-4cf7-a236-4d54b10d292d", "sighting--d3fb1721-2b73-4934-814f-1d313cd96823", "sighting--20756f02-7198-4584-bfd2-e7f6c726f4b2", "sighting--ef91266c-3ce8-4a03-b91b-7f45abbd7fd0", "sighting--28f9cf85-0b5c-4081-b52c-77b54e8c2b2e", "sighting--89dfe16e-82ee-46c6-a467-13342e82d1ed", "sighting--c1e892a8-d427-40a2-b161-12e32c669b5e", "sighting--95487162-26ec-441b-bf22-6502db4ea7b5", "sighting--13267e82-1caf-46e1-9904-6cdebf062533", "sighting--91303b14-ea95-46d8-9c22-c2d01baa2062", "sighting--9776842e-b111-4b0d-8db6-c6365c3bff59", "sighting--7a939cd8-d627-4a33-b31f-768b951d761c", "sighting--3a1e5b9b-7740-4ec5-9d50-b3885007adc7", "sighting--2959de8f-7b04-4b07-8b24-db8bf4f72cad", "sighting--9ca8e510-4369-444c-9ca7-218bccd0ffb3", "sighting--bf6492a4-dc85-4d0f-96a9-c89ab2985a61", "sighting--def02561-8b0c-40c5-9ee8-9248fef28c11", "sighting--5f81e4f1-db33-4aa5-b1d0-11b0f7166cc4", "sighting--40016947-5dca-487c-8aa8-8c62bb074441", "sighting--84093a50-b213-4b66-a4d5-865eba3a6325", "sighting--6b413c8f-0225-449d-8a26-23f4cd7c0172", "sighting--89612dd6-3bd5-4f17-aadd-8c796c6aeecf", "sighting--2414359a-7ad6-4d5d-b6f1-1cb4b917ee3f", "sighting--86ca8782-5cac-49fe-b8fe-735c8ebfe5de", "sighting--6c8ef344-5710-4315-a404-4f42c961c14f", "sighting--21ad4109-f361-4176-9877-63c60bc3b561", "sighting--3e77b7b5-6363-4533-8cc4-80b9da995aa3", "sighting--ad966615-9d60-4eca-b613-5f79e1cf63a5", "sighting--dc6c49c5-6c74-47be-858d-42a5723cb119", "sighting--9770515a-09fd-4c4c-956a-b7e10298bd40", "sighting--9008b5b5-7b97-40d2-a113-cb833567b84f", "sighting--d6ae9e17-e6c3-4441-bfac-7af9d6589571", "sighting--8b806893-a79d-41d7-81ad-e2f1b25a852d", "sighting--42d5f9c7-31c6-48e8-8224-334801794983", "sighting--e497dfee-4bb2-437c-98d0-2419634783ac", "sighting--45c1eaa7-f5dd-4a98-b980-2ad51c26e134", "sighting--1493dee0-b031-4936-9431-6f70692349ba", "sighting--7e80b60e-7b16-4883-b8b8-29d7b9eb79c7", "sighting--5904441c-698e-44db-98de-7790817543c3", "sighting--8050a475-0d17-4c5b-b685-b89a84df9e01", "sighting--a9dc51d9-8b22-4fa1-a606-a23eb9852236", "sighting--1e6a8df3-8cbe-42d4-b733-27ec659e8c8e", "sighting--010cae55-4777-47e3-87a2-7b3345f6e4e0", "sighting--69a57304-a474-4d55-b1b6-18d8acb2b5ac", "sighting--65157915-61b9-4ee4-a7fe-7176b613bb88", "sighting--20145605-5991-4439-8edd-e1d8d378d251", "sighting--5130bed0-33dd-41b7-a455-7aba5e5faa6e", "sighting--14972c22-c41d-43ea-b041-3de1541c2e1a", "sighting--f3fa18c6-b38b-46a6-a045-1a31ca30a35c", "sighting--b2aa9a8e-6f3d-4b84-a450-ab47ad73b0a0", "sighting--1ba3ffce-8833-4bb6-9e40-e4981359403d", "sighting--6d747af2-6ec9-4019-8ea7-030853b4d1f8", "sighting--4b450d17-42f6-4db9-92a1-430e9d6bad83", "sighting--957adada-dd62-401b-a3ce-b57ed0954443", "sighting--2f6efd6a-b44e-4511-b76a-0a374c880283", "sighting--0d485ff5-adeb-4f2b-8fe3-1a9553fa88e5", "sighting--9cf5ac84-ca91-4ae1-b935-c730a16cc60b", "sighting--f39c5185-1961-4861-85e0-d0ad6fe67e47", "sighting--564a26b4-11ae-4c4d-9443-05c7298cfa6c", "sighting--75653a13-4c96-4a97-8c79-fa3c719d5d25", "sighting--b3c13e63-5ac4-47c4-9f0e-bfdd9095b057", "sighting--4e06aa95-d60e-4954-8085-c3d74dd81431", "sighting--ecaf2d18-9df8-4089-b03f-973d68934939", "sighting--e8024508-fa82-4f51-81b8-70a592fd3499", "sighting--a715d98c-5c31-4f58-bc22-a5e50728a888", "sighting--29cab54a-01f2-4dc8-b467-0dfea2a15e98", "sighting--0bb481b1-421b-4d82-8c95-157a14ee966b", "sighting--3a7cb6a9-02e0-4e3f-8704-232383374a0f", "sighting--fec9a4e4-2d88-4552-9444-f54615afd116", "sighting--d2042e1b-c61d-4022-b1dd-bcd340d06d35", "sighting--40f4b6ba-0824-4bcc-9b2b-43b586aa4fa9", "sighting--0544925c-b810-4712-8d6b-fb38c3c0868d", "sighting--7706e154-f9dd-4fbd-b383-7821b8bdd849", "sighting--6bdcabc1-7afd-4d07-855b-a5b2e666ca17", "sighting--743a3e5c-591d-476c-b586-1e20468542f5", "sighting--4c33e8c1-c244-4f60-9c8c-c43fec8abab4", "sighting--3f36b916-2241-4dce-9b1b-07814ff4dc45", "sighting--646fbb75-7098-408a-9c76-d6f8eeaca2f8", "sighting--cdfdcced-3b6d-43a6-920c-c18cc6f4e11f", "sighting--54add69b-3749-4b12-91f3-0dc0799f8a19", "sighting--917ee9ec-b7bb-4270-b7d3-70275c088639", "sighting--46cba04a-3b34-4e6f-8859-ec839113ee90", "sighting--98ecb0af-1b51-4642-bb6a-49ddbefc77d4", "sighting--09d2882c-2226-4646-8e59-4e3506fc1d2e", "sighting--cf07a3b5-c019-4774-9702-549082ac212d", "sighting--a2b9f6e9-aa64-47d4-8144-f9f7fda92a46", "sighting--cf500e9f-e281-4ded-9a1a-b505b80af3a0", "sighting--353bbd1b-80a6-4783-bbb5-f725ec5f03c2", "sighting--bb77972c-bcb7-45c2-9a70-deebce7ad740", "sighting--a4997fa0-7466-4375-9337-1c7d2db163f1", "sighting--fabb34e9-bc09-4ba1-aaac-0a8f6012381c", "sighting--0410ddbc-54f3-41d3-b45c-08ca021759f6", "sighting--4085ec01-6b97-4fef-88d1-427d48f3350d", "sighting--8a1e8f75-d55b-46eb-95cc-2fa8cc6ec16c", "sighting--3238f400-d965-481c-8fb7-430ca5becebf", "sighting--042aa897-7f57-49be-96e0-2d721d65d5bb", "sighting--0a47759d-c025-48c0-b52a-348d7f929ae1", "sighting--3c3cebcd-e882-4529-ba29-61ad21ce2df1", "sighting--279ce6e1-2821-41db-8e7d-3e94c363ab17", "sighting--d7feb475-408f-4377-99f3-dd3625bbf90b", "sighting--7c753f0f-6568-4c33-b935-f63149597d14", "sighting--e231abdd-03c5-422a-9a1a-dff79410be72", "sighting--69b85769-604e-4ad1-938e-1c3eb28476ec", "sighting--1cadb3cd-63f2-4c7b-9fc6-5ff953c4a191", "sighting--9d26d3b0-f89e-4930-b18b-710cdbaa98e4", "sighting--f738c8e8-5ddb-4bc8-be82-7b179bcce96f", "sighting--9cd00dc8-25a7-4d7d-a1bc-51cb22043d80", "sighting--1b310b2e-751f-4485-904c-cc30fba3884b", "sighting--3f1b67e7-0046-46d6-9f4f-ae5a23f5e290", "sighting--8d842373-38bd-40e5-bbcd-b0258a9040f8", "sighting--62bceff2-bbf6-414c-9c25-a1450760e704", "sighting--cdca1cb9-6339-4f59-918b-e4f631e3a98b", "sighting--808bb720-b2f3-410c-b318-dc049bc0d7bd", "sighting--ec481754-f6ff-4fe6-aafa-6bd4c4bb55c3", "sighting--b8c6401c-db8a-452c-a730-eb1e9b30fb94", "sighting--ce0dbd39-fe7f-492a-9168-d8ab232008a7", "sighting--80b2d852-cb27-4c45-ab60-b01cf05661d1", "sighting--af3e38e5-3361-431e-bf50-dbdd862c13a0", "sighting--fc3e10e9-f4c6-41c1-8e90-737af615deb3", "sighting--90ee8cae-df68-48b5-a637-e91e746984a4", "sighting--c57a4c67-97b5-4ae4-9062-6f09fa7e7cc5", "sighting--e57b9b1c-2ef6-4891-82c8-a2f7da9300f5", "sighting--3125a65c-2e97-465c-b889-bba27c6b7964", "sighting--2fd80c33-ab3d-4e6c-ac50-c3d15a1260a4", "sighting--18695873-1b68-45e7-9809-f3684ec40f7d", "sighting--5e21417a-4981-4ebf-b70b-779af0dc4f89", "sighting--037e73e0-a15f-4b23-ae5b-6cb12229e08f", "sighting--5ea6d677-5521-4273-936d-fee789814f3e", "sighting--5e62cf56-1eea-449b-9484-d8a17b26f64e", "sighting--7d6af44f-c37d-4b59-999b-1c48d3b3036d", "sighting--9aa4c2c7-b444-47c2-a5a8-3070930e1fe5", "sighting--a4fca775-569a-4623-aee0-7d56b49415ac", "sighting--ac8071ed-8096-41d8-8eb7-bd7ca1328ccc", "sighting--add5e453-359a-4784-9810-d001d5bc5bc4", "sighting--0ffdf532-0d8c-4396-ae6b-19cc7cb81671", "sighting--3ceaf488-ee94-4757-abd1-e2bb10f7649f", "sighting--c1b55c86-11cd-40a0-a8eb-468fa6eb451d", "sighting--8ffa4924-ebd4-4d1a-bdd9-4e6208fd411c", "sighting--0ef221c7-497f-4dbc-9b6a-310852ba0ed5", "sighting--e33b2aaa-985c-4e6e-bfee-7c9aa7f28198", "sighting--fa080250-1fe4-49c2-b5d5-b92af254de97", "sighting--e8b07a23-3c8d-4801-9413-cacfd58992d7", "sighting--2869ba0a-244e-4a88-af25-381411064ee7", "sighting--bbd264ba-c8a8-4cfc-b491-4070149fcffa", "sighting--b5ee1795-203f-4a3d-84a7-70cc31bdf69c", "sighting--91a7e0e3-a882-4e79-9775-debc60fc64f4", "sighting--c91c9076-4db3-429f-9836-1d903c604b8e", "sighting--5510e28b-6406-4ce3-905d-9cc03adbfe28", "sighting--bafc742e-4479-4656-b7b3-9ab979fe6bc5", "sighting--b613e9d3-ab32-4de6-8a76-cf99304fa1fa", "sighting--dbccd52b-7c44-43eb-9278-6bd5c5dffec3", "sighting--c1448f11-e04e-46b7-8d21-3bc03d814d63", "sighting--90a0ed85-32ff-4a81-bf25-336db4ee22de", "sighting--ae7d261c-a399-44cb-b61f-0dedbf55f699", "sighting--b25fbd61-89eb-49eb-8f5a-63393e4cd389", "sighting--0edd3765-a6fe-423d-ac91-ea62735cdeec", "sighting--4661054f-b9df-4757-81ab-934c7a0c8bf7", "sighting--fb568a5b-9884-4e51-b3fc-dff2e13d44c1", "sighting--cdd6584d-651e-46bb-b732-801034f74561", "sighting--b06dd5de-fc95-4ff9-ab2e-322a94659a99", "sighting--eddecd5b-9263-41af-ae66-72eb3dd83e21", "sighting--d1aa1bfe-03e7-41f1-abfe-0c8e5dbcf1f5", "sighting--2107706a-3f48-4ed3-87e6-3cf44f836b85", "sighting--79f8f1d5-89a9-4bef-8871-03dc1407ff6e", "sighting--049af53c-366d-4350-bca8-d674a9404275", "sighting--3fcda2be-5ca9-4612-a26f-e1ed004530ca", "sighting--39eb137f-bc20-41cf-9791-6ed17f23c13f", "sighting--4dc22a01-3e7f-4275-b289-ace8f1a6c02e", "sighting--083ff8d4-792e-4fdf-a02b-99564b0c4db0", "sighting--3fe0fd75-efa8-416f-90ff-829f9ba80334", "sighting--651ce830-bb7b-4af1-a5ec-756cda07ab9a", "sighting--d9c4b6c8-b8a2-4f5f-a2d9-bc5a4bf2871d", "sighting--77207d20-3168-47be-939a-ee4cb58c12b2", "sighting--55c6290d-aefa-47d8-b59f-dff35b47a7c7", "sighting--923f2b08-610c-47a1-98a2-6459fdc9ae69", "sighting--5017905c-f445-4a93-a6ae-452477b3ac8f", "sighting--119b0867-7d9d-4fbb-8452-f2d39cf11e9d", "sighting--d10290b8-66c7-451b-8f4e-eecf7435d66a", "sighting--5c97f2ed-59fc-456e-bdd2-9726b6c04b97", "sighting--4cb63259-1469-4949-b55b-2621620ccd2b", "sighting--f5e10cd7-d9df-48bf-ae31-037dab22bdda", "sighting--85b763cd-a9dd-4bb4-86b9-832cc3427522", "sighting--2e2a3c5b-cd25-4977-927a-5a7af471029e", "sighting--4fb562d5-bde0-47f8-b3d6-3305dfdb02a1", "sighting--4e5ae300-4470-4419-87f3-6db6fb251c43", "sighting--58696545-2bbb-4f1d-8b4d-5645e61ee58a", "sighting--3fadc4b1-6511-4acc-aabe-6c6c8c3cdceb", "sighting--40846204-fbf2-41cf-b12a-2363785a6acb", "sighting--fe6ba5c8-6957-4e3c-9610-f74d2b451971", "sighting--6a163ae9-e7eb-4d2b-b580-937913e0385b", "sighting--1025a25f-42c2-487d-b590-4bc9bce3a3f0", "sighting--2608db62-e0b0-41d6-8f84-0204c5dfbdaf", "sighting--1670d514-1643-4acd-947b-ce92e748113c", "sighting--ff009595-d572-4e78-ba56-a1805eac9b96", "sighting--4853b1db-7538-4188-bd0a-7509260deacd", "sighting--647d2635-e838-442e-bb32-2161ebdee12b", "sighting--2f302be8-1902-4bc7-b2b9-e89760e95fcd", "sighting--d42e7972-9dbc-4988-b84e-8d445cccf1e6", "sighting--5c747a81-c664-4f1f-88d1-d60ebe5a7c92", "sighting--0f2227d6-bc1e-455b-9468-a07d6adb7636", "sighting--9f0427c4-74ec-45d6-beef-9e7b7349d3d6", "sighting--b7f5db93-0879-4bae-acf8-9e1aee5175b1", "sighting--09b381a6-76c0-469d-b35e-f0a2be6e7a2d", "sighting--e5af6824-a8db-47a4-8bcf-d34e96ff7911", "sighting--496519ec-f19d-4875-a7d2-0148a4b14498", "sighting--4b1038fe-e720-4e7a-9e29-f16d44d572cf", "sighting--00087ecf-11bf-4f6e-bf3b-4fe84bd94f7f", "sighting--7951f355-db61-4b6e-889e-0872d30954d5", "sighting--e563526e-dc49-4710-be9e-0415a1fe96fc", "sighting--4e85c2e1-8ad1-4c79-b0ed-d058a0516298", "sighting--9e18b60b-20bd-40ce-a382-1b3fa10219f9", "sighting--904314fe-931e-4b8c-9656-bab6085a9cc5", "sighting--94ca4e3e-9b6b-49b1-80ee-13670f923dc8", "sighting--48208d0e-37b3-4fa5-b072-3f5854e90049", "sighting--007ec683-79f6-4e59-8d79-14e47c407fcf", "sighting--8f2ebb19-101c-4f09-b727-fb6f10d8d2bc", "sighting--c33d19b5-fe6b-4c1a-9213-6939d3af41d2", "sighting--cb8581ce-ad3a-4559-a153-393a3fac8ecd", "sighting--307eb267-9c60-410f-b02e-bf11e674d230", "sighting--586cd06f-2a06-41e0-8bb1-72c9a6f9b0e6", "sighting--b0e42cc2-b804-42cd-916a-7e8587b41ae8", "sighting--a9705b0f-ac64-4a44-8b50-88120af773d4", "sighting--cc1fb8db-10ed-41a4-b66b-c26e9027d2b7", "sighting--1a7f8bd2-5f99-41a0-8953-f6a8bc499e77", "sighting--5f7ac6e3-f2d0-4a7e-a6ff-dbf31d9d18bc", "sighting--c87159dc-0098-4443-8eed-efffa510743f", "sighting--2055b293-8472-4f63-9d45-184dd356547d", "sighting--845f8965-cd70-4ccb-95f0-b99073ca530b", "sighting--2bc488d8-0321-4933-8fd7-3b85dad96282", "sighting--708b7201-7ffb-4803-b8fd-de85adb4034a", "sighting--61aabc4f-0492-4912-8cfb-05c7a954d4a7", "sighting--8e3c0b8e-098d-485e-a487-5d1c5302d6ca", "sighting--cbed0c42-712e-4141-89e5-5dcb9cb33de4", "sighting--de7e9037-93e1-4f41-ba5e-7457857986d6", "sighting--041c1d0c-619e-4509-8c9d-18b0fbee510c", "sighting--ad4c2fda-5b2d-4737-a3ae-62c32f502f7c", "sighting--80cf1d7a-cc88-4de3-9448-7ef787690120", "sighting--fb6d785f-9a43-4308-b8c4-3e0e7a80dc1d", "sighting--1bb55e66-ebc6-4294-b72b-99b54def1dd9", "sighting--c3b2fac8-ef87-4033-808e-1624e98a23a9", "sighting--ba1129c2-4a87-4f81-a1e1-5edd5320394d", "sighting--d1b53683-a702-4827-b358-d62b0ba37388", "sighting--64cd2781-a016-42c3-9491-723a7e7a0fab", "sighting--41af85b5-c92a-4709-b516-ee3c299b85aa", "sighting--fa331b94-8c4f-48b7-ac9f-24961cb7bc59", "sighting--e34a2da6-c224-414a-b48a-85525cfdc1eb", "sighting--345cc1e3-6179-4f71-a78b-a22fb45705de", "sighting--0a58f5f1-e898-44e7-a4e0-42af8b7f623c", "sighting--04448fa2-d428-4ae9-affd-7048bcbe158b", "sighting--3d129fd2-5c01-4a66-88af-0246c0ec3006", "sighting--20f0fbec-4255-42c4-a069-6676e2d570a9", "sighting--ce278fc4-f174-40f0-99e9-6e78238d12db", "sighting--4cf29c4e-9721-472a-bdae-35228184c3e7", "sighting--59009ee1-f63c-4000-8536-7d88ab2be62d", "sighting--f05561b7-5610-4ab2-9faa-08f14ddf4f84", "sighting--0f6491a5-def8-4d5a-93c6-bd5ccb8f76a6", "sighting--40833be2-8277-4fe9-9415-8f5b122b7f80", "sighting--16b4ba3c-ae4d-4681-b0a9-82bfaf1481b7", "sighting--bcd927d7-3143-4c6b-82a9-d93bed72a5ad", "sighting--e1fba83a-8177-4813-89e2-63921feebcf6", "sighting--d7c3f01b-179f-4f2a-9bc6-f7910a38820b", "sighting--43bd80fc-55d6-4dbe-be4d-3e61324374e4", "sighting--7cd7a049-3c54-41ea-b1cb-9e0369c7528f", "sighting--8369c162-3990-4b49-acbb-4f154d7f3347", "sighting--2769f5eb-6050-4259-8029-1ca1da68e1c4", "sighting--947807a6-92de-46a7-8f99-0c5c6bdcf86e", "sighting--caa40c57-eac9-44c2-b52c-f59babf17d7a", "sighting--84a4c8e7-4496-4456-b77f-cfdfbdb9fe72", "sighting--820f168f-fb64-4aea-a0cb-5afe2f37ce20", "sighting--1270d4ca-86e3-4180-a08e-0c958d307f28", "sighting--71820a15-e2f3-4fa4-b3ba-d8ac3c9588df", "sighting--62063479-ac55-46da-b1b4-564c1eefcdd8", "sighting--17abdd27-8ac2-43fb-81a1-16bd7731a505", "sighting--2369fdc2-6081-45c8-934e-ff03f2b48207", "sighting--79537d0e-4212-4948-b4a5-9c598a3fac1d", "sighting--fc543c17-8b05-4a05-868b-794bf86b659c", "sighting--a7bbfeb8-e397-4a74-be06-c42882996bff", "sighting--14e96473-f9dd-4f41-be6d-b0edac1ed1cf", "sighting--9f70ff3a-5b51-437c-99d3-0a1baaf906d8", "sighting--0ce19963-f9b7-46c0-8c8a-3fc72b870a08", "sighting--69b1635b-2544-483a-ac7a-f2ffa70edc98", "sighting--da02029c-8646-4722-97cc-e78436daf89e", "sighting--8f7c74a3-d81c-4e3a-880b-52e4e99f679c", "sighting--2ae46832-61d4-4cd7-b652-f0d9ca3defa5", "sighting--68c88851-a166-4886-b2ca-95cff3df8403", "sighting--72489b4a-97a8-49be-ab72-392e21dd8c41", "sighting--d1f85f4b-9c5e-43ca-818b-66db64a89f25", "sighting--06fac60a-7c3f-4ce3-bf78-b04997b601fb", "sighting--6274f053-54bd-42e3-b4b0-e8b886fb7e65", "sighting--c47a5ab4-8839-4670-8f2f-ccbde2b34a5e", "sighting--ec97bca9-5ae4-4887-be75-43c623ce4503", "sighting--b1c0a515-74a5-4d16-a734-70cc2053ffd3", "sighting--d37a8f49-9c12-49df-922e-8f62d428b4f4", "sighting--01a836a6-a438-4155-8162-00b205a55ef2", "sighting--f520e6fe-e1fc-44ef-b4af-6f39122fda9d", "sighting--6cf65bcb-9c62-4405-b888-15e5f301c1e0", "sighting--facb3c0d-f288-4358-9321-a670aa75d4ed", "sighting--836a2d1f-4de8-4f3a-b3c8-fc50f7a76b43", "sighting--6580459e-e941-4efd-8373-11e2454e5247", "sighting--bd4e0634-f83b-4c66-b853-499dd3856f38", "sighting--b5b075f0-8d9c-4648-8c2e-bce73e5b610a", "sighting--c473d9e2-4384-4eed-8f7f-b85003337d4b", "sighting--275d2db5-dd42-4a0a-af22-09bc6a539b2b", "sighting--af42fcd3-19d9-4970-8c27-0630c253ddc9", "sighting--75349aad-41da-42d3-938c-183fe60d594f", "sighting--04cf2b86-d180-490d-b372-32a6b55b25cc", "sighting--2d625734-0a2a-4dbe-8a64-02643ead4515", "sighting--95b1e73e-9d62-4943-b8b6-fa7bc8484b75", "sighting--1dfa547a-c7d5-4b1e-b62d-92dc0497be62", "sighting--8dec2cee-e3e5-4d01-aff1-203ccd97d526", "sighting--a2221ddb-cb84-483c-8891-bb22275277f1", "sighting--7417823d-db10-42f8-8bcf-f55bf68275e5", "sighting--bef82fa7-5a66-4b1b-8376-7bd4d7985b3b", "sighting--173cfa04-ffb8-4e7e-8914-ea61dac9be34", "sighting--b301887e-50b1-4b04-963f-76b87b8992a5", "sighting--1f099fbe-403a-4d9c-8125-5428d894613a", "sighting--9e06849b-e022-4958-a5ae-b1c31e318a7c", "sighting--7db6923b-7266-44d3-889e-de74cc83c793", "sighting--6b50d872-9f18-4d97-a15f-d741812862b0", "sighting--92298f41-ab7d-4f51-b846-71727847be4e", "sighting--8244b9b7-d14e-4566-83ed-f3f6d6427dbe", "sighting--1fda72a0-b869-484f-8d0d-2acbd63ad81c", "sighting--6046a222-8bda-458f-9d9c-655c144f984a", "sighting--e1a31548-108e-422b-b71c-0c823a9e2fcf", "sighting--67701ace-f8ce-44d2-8f1d-3115ce330524", "sighting--082dac82-de8a-45db-b73c-b2afb54aa0b6", "sighting--b0da1d72-8404-4d5f-b02b-3134a1dd7a03", "sighting--ff3d9839-bb53-4271-b58e-f751af2f3f70", "sighting--8d66b76f-c367-47d0-b56f-1d35aa280d0a", "sighting--2b0e7f9f-ba3d-4594-abf6-72a173aa34db", "sighting--849cd4c1-3ecb-43a8-a959-233408ca56bc", "sighting--6b700e9c-ae3d-4a9d-83f3-f58469c847c0", "sighting--d0bbd394-15b0-47c9-8306-d06088687ab1", "sighting--3a1cf366-0fab-4fd6-8c4a-93d690f1d2cb", "sighting--d4d03d35-bb1b-4244-b5c1-d9a975000a19", "sighting--00d7b942-72e1-4049-aa58-df92ee3fef4e", "sighting--3993e21b-0e47-4308-bd48-14ead0beabb5", "sighting--cb9e19ab-8e07-477d-8aaa-cebd34ffdf04", "sighting--d499a190-c41e-4d94-bd11-61fa1892a080", "sighting--88fea9af-2bad-45a0-ae8e-12129ccd8765", "sighting--78f36c68-c929-4eee-b5a2-75fa06721ea9", "sighting--0e4353cd-4bf8-45ff-86d3-bc073951566e", "sighting--7447163b-8b81-49be-bf24-2160f3c03956", "sighting--a9efb172-7687-4e38-9132-2f715573fe8c", "sighting--394ebacf-5313-41c0-aa55-708951266ba8", "sighting--6305fdf1-7af8-4dde-b23d-4f770a667752", "sighting--98567b80-2245-40f1-a7d7-b0920e4d6d9c", "sighting--da2cc29d-fe19-4558-b7a4-e2c129e8b4b8", "sighting--5c9a7131-6503-47e2-9898-fd87a3cc531b", "sighting--e70a8525-08f0-426d-babd-cfc6fc068ef1", "sighting--a21813e4-1d5b-44ce-9297-fc3904b20394", "sighting--049335ab-5626-478c-b154-2f4f543f56d8", "sighting--1ead8777-723c-4961-9ab3-65da302ad8fc", "sighting--5c57c35a-4041-4a6c-ba03-8b1b628bb40d", "sighting--d8e493a8-281a-4069-835f-012f4da2df66", "sighting--ab44d96b-effb-4f03-adf2-5e864d2a4272", "sighting--2d37ebd9-c856-4bfc-aa2a-2f17df0be3b1", "sighting--d4e2b373-2235-4370-b5be-312f15ca2afa", "sighting--5dfca23e-48fb-4119-8ab2-e07f17d82730", "sighting--d9c7cd4b-9586-4f94-98ae-a28139b47c37", "sighting--04178dcf-df58-4fe6-899e-4a5e33e44ca4", "sighting--1ceba6e2-1299-4ed6-8fd2-5847a35b6f5f", "sighting--a4de0c53-60d4-46ee-a3ed-e6e1a8a5a0ed", "sighting--0c9517c1-fab3-49f6-bc3c-3e7f2c0cc056", "sighting--cb27ad52-4bde-4dd9-b390-02cdda60bbd1", "sighting--f984563d-31e1-4a33-9c43-15a0de428740", "sighting--cf0d9f82-244d-49e0-82ff-d46311d6901a", "sighting--7d4c46d1-37d1-4a43-81bb-580d82a9533d", "sighting--6a7a9612-dda6-437e-b052-416f659e663a", "sighting--ca060b76-2e3d-49a0-8b96-bda6256e6109", "sighting--0b8d6695-d610-459d-9775-1ebd18eda6ef", "sighting--2229225f-248b-47a8-8a4c-f4c925c42dd8", "sighting--2a3abdbc-a677-491d-a39f-07306b316e23", "sighting--02e41714-4a80-40a6-acf5-9cfd29dbbe35", "sighting--163c09c1-189b-4f96-89ec-b94674d97aa9", "sighting--2c45e4de-ffb4-4d20-8337-26be25324647", "sighting--9e62af0b-b6bc-4b11-b749-123d546fbf3d", "sighting--36f96248-32f9-45c8-873e-a30d74ea5734", "sighting--c1442499-0015-4a34-b9ec-05b4b0c35051", "sighting--19804c41-1ba6-4e1a-8f53-577eca9141e7", "sighting--6a4236bf-fb39-4d6d-88e8-34e9b3437e29", "sighting--6b700d3c-4bad-483c-bcd0-b99bf65e5c67", "sighting--92607aae-69af-4b4b-be5f-848264a7d4fd", "sighting--5dc58452-4eff-43f0-897e-6ad0b00e2639", "sighting--157ff671-a36f-4c16-90b5-9d602fb541c2", "sighting--2f8180e6-57a5-4a65-b6bb-0c8f73616053", "sighting--3c46c590-de8e-419b-848e-3779c8439389", "sighting--0c49a409-0d8f-46ee-9ffe-232dc19ab99e", "sighting--796bb7ef-4b28-4752-94a9-a3ce8bf5d466", "sighting--6bc2dcf0-383e-400d-8a68-dd8847ecce59", "sighting--ac816fbd-286e-4937-b1f1-903c31170eb3", "sighting--2aabe5cc-4054-474d-af5a-c42f50f133ce", "sighting--18441ceb-5fbb-4080-966c-1857d032fb92", "sighting--84792db6-be72-4a8b-8ff9-ba891f903794", "sighting--a0e5f976-5fd8-400b-bc25-0c84496d7e1d", "sighting--7bfe683a-e373-4411-a112-856ef99e3395", "sighting--67e6ce85-452a-472f-ab82-01210c1b296e", "sighting--eb7d5be9-2d24-4534-830a-f5997cf3978d", "sighting--3a7920be-a12a-4860-b20b-b0f3ffbf7911", "sighting--29893308-f0ac-41e1-877c-ba9521c8a3c4", "sighting--e7141c1a-be85-4242-b967-7640060d895a", "sighting--7cde3f69-2d9f-4fda-b613-c4986330a669", "sighting--eff3502c-7d20-480a-b4a9-70b6ace46e0c", "sighting--6539a9c4-78d6-430e-894e-3316c3e9a08e", "sighting--cd2aff48-d6e4-40e8-8af7-da364f962db1", "sighting--4544c934-b7bc-4558-b77d-288ff5353a48", "sighting--f3d27809-8696-4819-8169-a8a7b880c354", "sighting--7606ade0-0836-4006-9996-f19a11cc7cc6", "sighting--1a18b2f8-26fe-4504-90a6-6066257ccb09", "sighting--87d93cde-67f6-4e42-b2a9-c219e74e3aa3", "sighting--89afa83e-2831-4912-8bc6-3c15bbd8c23f", "sighting--2a671bd2-f5c3-4d18-b72d-416061b4f258", "sighting--6e0c2415-7a90-4ff1-a59a-fe706820a8c9", "sighting--3d1e5800-170a-452c-82e3-3182918c35c5", "sighting--78965897-14a4-4685-8d89-4702e2a1f86a", "sighting--9bea79eb-22f1-4f48-90a4-2e3c8d5dff1c", "sighting--cc01131c-2c84-4b71-9012-b46093b86a37", "sighting--48d78f85-783b-4ec2-8354-376ba34367a2", "sighting--7060ceea-6077-48a2-9699-9546881ebd51", "sighting--d367b1d3-318d-407a-b3f1-a2ffb0e9ae30", "sighting--0545d99d-0184-4be4-bc86-813547710dbe", "sighting--ca561190-c4bc-4b24-bd76-611149450853", "sighting--187f9c01-6bed-45da-a69c-8a6dbc4e4113", "sighting--46fef442-5df9-4702-9365-4377b8007e35", "sighting--a9cdc8b0-684b-471d-8a7c-6e5803ae7f5c", "sighting--b40ee46a-1772-44ad-a6ee-b8f7bed8e6ee", "sighting--28aebc5c-6278-4709-9356-daa07b8ae028", "sighting--80fc0733-48ba-428d-9b9a-6950fc53ae9c", "sighting--dd58d1c8-01ee-4a61-a393-a9be37056729", "sighting--5c37fddd-62d9-40d4-ab48-ac7e2d976d7d", "sighting--68c3d923-b104-4edf-a18d-0c0361f4cf72", "sighting--df32b43a-2729-4921-ad9d-e41bc7414549", "sighting--1038baf8-829b-47ba-859b-6647a1ad64ec", "sighting--bc153c2f-9989-40fb-9fc4-c1dd3d72e07e", "sighting--02a9d6b6-4ed8-4b2f-b664-5e0f275070c4", "sighting--a88aef5c-e006-4d1d-bbf2-f249eaa6eb68", "sighting--0d449dea-fcd0-429c-b091-2ec87ce76a86", "sighting--96761b74-c50d-4a4a-8fe6-16d312d9ef32", "sighting--a5127da4-996d-48e1-82e2-94e88c5064e4", "sighting--6e1e6a89-c11e-4d12-89f6-bec814435cd6", "sighting--90f06d1d-e491-4702-8812-86271a421860", "sighting--26da6138-ea73-4b02-adfd-e0a778d2d260", "sighting--e355d2a0-227b-4777-8b22-c06eb7ad3c7d", "sighting--c881138f-b145-4bd4-bd46-a3827fdb53d5", "sighting--8bd71d2c-b402-4bfa-ae31-c5deed618627", "sighting--d422b8f5-e5dd-4907-94df-4385f8a07864", "sighting--e35d7237-2bdc-4974-bd63-99e7eb87ad27", "sighting--70ccc6c9-f3c4-40cd-9b2a-0d82d5c37005", "sighting--cabc1bcc-3eb7-4b82-b538-838fdbdc050a", "sighting--f66a7cec-96a9-4d0c-a27d-0528323f0e9e", "sighting--63810498-70cb-4e27-84aa-3fed174feb51", "sighting--870227ef-e0c6-4fb8-9dad-6dc2271904cc", "sighting--a9e9754f-e736-450c-8cfd-e80a77e3e73d", "sighting--313ba4d5-8b6c-448f-a2bd-c5db2df24e97", "sighting--fee9d832-dd6c-4092-8da4-f293b9650181", "sighting--3bd86d8d-e462-4cbf-9785-4368b1666c3b", "sighting--cf5c001c-4181-4400-a6b7-75fbd469115b", "sighting--ae21a5c1-c22d-4dcc-9e76-129b45839746", "sighting--f0ece336-100d-43a4-bfb0-b83111ef71e9", "sighting--c85247a9-eed4-411d-bc0c-3761d956d697", "sighting--944369e8-bd44-4463-b25e-ed32451424a4", "sighting--8df597f0-7c26-4013-a7b0-63826fec9be6", "sighting--552eb649-6ebb-48e0-b1af-ae3ffe26ff6f", "sighting--4b44ea2f-8128-4019-896c-044e081434c1", "sighting--5e69d909-74c9-4b3c-8827-eba4b1e0e7ea", "sighting--7885454d-6248-451f-a27d-6253e1617336", "sighting--4a210b08-e225-467f-bd1d-2e299afbab34", "sighting--a1b9aa46-d78d-4080-8775-9347418b216f", "sighting--67646912-1e97-4b65-be3d-dad04f4f3585", "sighting--2e7aaf92-a9bf-4bd0-a3e3-c053b1ea6dbb", "sighting--dba4619d-0e98-4ef1-b1f5-80387cc66c06", "sighting--4b650ac1-61f4-4ee7-a129-5e6fdb3700a4", "sighting--72139522-8535-4cdd-a5c3-45f48b6a1b72", "sighting--46741e0e-f7b0-4e59-8705-057e3a755533", "sighting--5a425df5-2d7b-4329-a80d-87701712cc36", "sighting--7762bee7-7d92-4561-8bce-3e122cfd18f3", "sighting--95d947d8-67d1-4279-b323-6084ead6c3a8", "sighting--d6d7f063-8510-4f47-9f49-0653ee025173", "sighting--4b4d1e3e-675a-4ced-b932-0aafacc02143", "sighting--26161191-dce3-48c1-b72c-3bcc077c4d48", "sighting--262447bd-785e-4ac4-8234-fd9fa6fdf2c8", "sighting--2fdf9503-ffb0-49ee-b722-10fb73aa3726", "sighting--3e529a98-cdad-41b7-ae71-9778b21f70c4", "sighting--8ba4bb69-3a4e-45ab-9bca-45deba39a648", "sighting--67a6d5f2-1a42-4df6-9b1f-e0cdaa37e195", "sighting--7acdab47-5c36-4d5f-a166-dac0dcd3feaa", "sighting--9f06ef46-d094-427c-84a5-9729467ffe24", "sighting--777d3d7f-8d27-4172-b5a4-0d5f6ff5986b", "sighting--239395a8-b855-4fb4-93e7-8655e757c3af", "sighting--91b1cc78-32a7-4df5-b046-6040080997bf", "sighting--d60ab313-0ab1-4c6d-b9c4-37f13eebafd7", "sighting--0f6eb428-1539-44b5-8e3e-3ecaecc98c5f", "sighting--08be71d2-9188-4d6e-a88d-c55867bfdb6f", "sighting--deacf3fd-31b4-4068-b643-2e24c2e6552e", "sighting--fd52e538-f5ad-4f7b-a944-65f2e5c540dc", "sighting--ae9b1b5c-8952-4c1d-b40f-69e751eec8a9", "sighting--2059a87f-25c9-4750-9b3c-e8d745fd1ab0", "sighting--0a87f095-e8a4-436d-ace9-6711b31202b8", "sighting--5267004a-d5ef-4ec4-bb53-82fb7614ff8a", "sighting--57e7acf3-ee37-4798-af65-6cb269d9406d", "sighting--c34f97de-50fa-47cf-a88a-8a5cd593b4b8", "sighting--4c0f2155-3224-46f1-b462-33e57427e421", "sighting--d5dd0013-3ee2-4ece-b26d-2cd51751e496", "sighting--2bed7b64-8195-46a8-ab89-52d8a97afbdf", "sighting--0f19f67b-0e6c-4a51-8ca8-3c570545d660", "sighting--ae1d6c4a-2273-4300-b236-a199e7c32204", "sighting--b9211d82-124d-4da8-bf12-3df8a851ba57", "sighting--f4d1bc63-3bdc-435a-a9e6-a60369b68db7", "sighting--029d9879-ca25-43e9-8299-67d0ccbe18ec", "sighting--d85de2b5-5ccc-459a-9050-41babbd8ef93", "sighting--4440d9e3-7bbc-45c0-9fdd-0d899d31d394", "sighting--90295185-4188-459c-a06d-e35556d57ae0", "sighting--cf52d026-ef6e-457a-a9ed-73be021a9fac", "sighting--5d0d2229-b569-4c29-8cc8-662e8d38dd2e", "sighting--1079cbdd-ce21-4bbf-8b23-23f7c55e7353", "sighting--acbeff4c-2ae3-4603-b8f2-191c0e2d4b58", "sighting--04006617-fa7a-4ac6-93e3-0267503f0dcc", "sighting--88ee220e-ae2f-4162-978a-e813a2a3ac74", "sighting--c02d29dd-a49d-44e2-a890-b0cef8505db7", "sighting--cf991e82-69ba-42dc-a0f7-ee1acd732023", "sighting--85c02fd1-f95d-4b31-8931-d2176b59eb40", "sighting--814d3b8f-d248-4537-b7ef-e65fb87f205b", "sighting--3183bb1b-0008-4474-b4ab-c609d2839128", "sighting--3a84b44c-dfd1-4e4e-b71b-f5344a2020e6", "sighting--eefc2768-08cc-4e0d-be9c-1c6971356efa", "sighting--3c1725ca-f8cd-4970-bb2a-fba90202a35d", "sighting--e19e7166-bf21-478a-a7bb-f733fd39aa82", "sighting--2dbeb0c1-3aed-4a27-b4af-289a81f548ba", "sighting--e63e3e33-09b4-45ae-8892-a47e50d4676a", "sighting--43816ded-13e1-4dee-9a02-1cb261457467", "sighting--b53fb22c-7278-463a-9d21-f54abed99e8e", "sighting--f4beff53-f94b-412e-90fb-4b142708ff1d", "sighting--27db74cd-6c7d-4d03-a52a-e88fd8e7b8a5", "sighting--42c97909-e457-4f52-a222-cc0c5585ceb1", "sighting--0ecabbcc-236a-4bc3-999d-b3c4b81355d7", "sighting--4201824d-2cbe-4ec5-adf8-531fd10925ea", "sighting--8a1803d8-9be9-4d04-bb8a-9e6d98449161", "sighting--7bf36b1d-c4a1-40cb-ac1c-a1c7b69eb1ce", "sighting--7b1e8c8c-7f9e-4816-b47c-b805ce126959", "sighting--059e67a1-f46c-437a-ad3b-31ff9e5ada4a", "sighting--0b94d374-739c-4ae2-94be-7cf5e70acffd", "sighting--3ca9f936-474e-47be-983a-4bed0f445513", "sighting--615ff5c0-6304-4011-b7c8-badb87ba9a34", "sighting--1ae7177b-0022-4b78-b287-435bbf99dd55", "sighting--35b459ea-9b8c-40bd-9a72-4bf24c614e29", "sighting--36411bf8-5aed-4004-b550-f43b4a5717d6", "sighting--1ef9d206-9d40-465b-b84a-59dc1e7fa97d", "sighting--8e0950c5-2c46-42e5-afc1-fd4bb77d7fad", "sighting--ef1fbc25-878d-4c9a-b386-d847c011e184", "sighting--50aa3758-0371-4ed6-8b48-f1af2e40b5a8", "sighting--f53e8061-25d6-4b1a-8f12-8b8325874cf0", "sighting--6eaad533-e3e1-4d5c-a140-90201718dec1", "sighting--d80f813b-8637-4fd6-8a99-cc599c00dded", "sighting--a4fd223f-9152-4977-9b0f-8dca6d968ef4", "sighting--1573bdb0-3adf-4aca-a775-7c3695616aa1", "sighting--6dcd1b05-13bd-4807-8309-2eaf752c329e", "sighting--c6f920f9-f57d-4e84-ab24-d50717621c47", "sighting--ce4986ae-6b58-4611-8fd9-db007566202f", "sighting--526950d3-1ed2-45eb-9596-c9aa2ba21ec6", "sighting--64480c58-b1b1-415f-af65-ab488872dca1", "sighting--9737759d-a698-4808-9767-1e6cd11c6912", "sighting--5270f419-9151-4e78-9a15-ea396d472dc5", "sighting--f8b413a2-d264-4e66-9d72-4badda1b21b1", "sighting--2e9367d8-99a7-4c1e-9b24-a2f2f7324f23", "sighting--ae2eeac4-eeed-42d5-ac1e-184e8948489f", "sighting--b9b1b9a6-32c4-412b-a953-d07d14603887", "sighting--ece5f8b9-5b3f-49ce-96db-9ce4ad03c563", "sighting--22e24a65-0ae0-497c-876a-71748cc7fff1", "sighting--36c45d16-d3fb-48dd-9c27-d5879587ad8e", "sighting--3caab52a-3203-4808-91b1-777b0eaa3743", "sighting--ff942492-64d9-4e8c-83bc-3a2e88653195", "sighting--eda01534-2c93-4e7a-9cee-d295e6ada25e", "sighting--2224d4be-2630-498a-b2fe-cd88b594f2cd", "sighting--a1dba5a0-dd22-4d71-ba27-0e3283040d14", "sighting--8f3869b4-7c45-42f7-8c96-60d9cc342d08", "sighting--7447a407-664a-4886-bf1d-8008b1af58a9", "sighting--b367c955-ece3-4cf9-8a27-563e41e36af3", "sighting--8ec6796b-6d2b-4b2d-9154-e9495cc1756d", "sighting--50b822ae-d07f-4c68-a5a5-35f57adcd7be", "sighting--5b986153-2f1d-4443-9260-47a3ad63544d", "sighting--d028b8d1-0f94-4309-b90a-42de99cbf0ba", "sighting--88e950b4-d391-462d-84b4-af723c2d01e8", "sighting--a6f7083a-3764-469c-98e8-f1b7635dbb45", "sighting--2327b3a8-3055-4010-ba4f-452508da6b9b", "sighting--99ab3151-34d3-4cdd-a25b-11b3fcd8ca1e", "sighting--cfbaac44-369a-4c9d-8d87-3f87570f1201", "sighting--693711ca-78c2-481f-9459-0191b2348d32", "sighting--f8f2dbc2-3255-4fdb-bfab-ec9b2ee25ae4", "sighting--521d5474-0c33-4f71-ab94-33e51bd68ce9", "sighting--94296d4b-154e-4c50-b59e-dd21075f2473", "sighting--442f1009-5076-45c4-a199-c6cd45ba4892", "sighting--f9144b48-76c6-46f5-8762-6b5495f33735", "sighting--edcb3bf3-341d-46ca-adfe-5c03be2b0e73", "sighting--ad165fbd-d4b3-4de5-9576-3397cc2cc778", "sighting--24078e24-239a-4ab3-9ef0-db832b022b06", "sighting--fcece142-9c73-401b-a664-c0af21060f9f", "sighting--4a769857-4214-417e-8bbf-d1c77da2f0e8", "sighting--4f991862-55f7-43bb-85cc-a689fe3b4967", "sighting--10f79924-04bd-4e1e-a29a-ac4f45076b8c", "sighting--262cba16-f97d-46e8-9381-566f6ab3a325", "sighting--7ce71d99-32b8-47e5-9bc1-5d6baad4222e", "sighting--02f419f2-edd9-41f1-b215-8e76aab66259", "sighting--32510692-76ea-4d3c-8e27-a5adddc4ce86", "sighting--373a61f2-aa09-451f-afec-49584be5230d", "sighting--5b666027-8a0b-4a00-80ce-b602e2cf5d7e", "sighting--2e259a53-fd53-43ec-877b-26452570a905", "sighting--acd0b3ec-6651-4e90-8625-5b039bfa336e", "sighting--e910bfca-0fab-43d6-97e5-3460ce4bae65", "sighting--f3b5bde2-bf6e-4df4-8764-0ef9d8a698b5", "sighting--fc22cfda-a407-467f-8efe-b903b311040e", "sighting--115b61cd-b840-4324-a8d1-964ae5ac51ed", "sighting--5c90e44e-a134-42f0-bafa-d01222bb677e", "sighting--65d46e77-2b46-402b-855a-195766b9f3c6", "sighting--1664a5c0-620c-48bd-affd-cba4a247894b", "sighting--982184fb-88fc-4c94-9c4e-dc437ab6595d", "sighting--167d9291-68a1-4916-a158-ced48081f71b", "sighting--e74e3ebe-0e28-405b-8e37-d10104f14aa7", "sighting--8fd39bc2-3a06-4a01-adc4-58af6f1fa844", "sighting--ef82d2f3-3239-40eb-a90b-07b5f6adb3be", "sighting--45071558-1753-4c34-8eda-b20966c776d4", "sighting--1f9341e9-5e0c-4d82-a349-c9f6a539c2b9", "sighting--0336914a-09c4-4810-97f2-499225fc1a33", "sighting--3bb5a614-12e6-4931-8fd0-2c6c4cc5ee33", "sighting--58bf4fcc-299d-47aa-8ba0-72259d4aa65d", "sighting--6d01f83f-e526-47bf-85b9-9ced6cd6f7a5", "sighting--538718f3-aa12-42e7-9603-9b28867e9971", "sighting--46b331f4-3467-45aa-b65d-b33e1ec6ecef", "sighting--eda3bdb5-7cea-4237-b213-10479f9e83c8", "sighting--ee616b70-a69e-4ed9-b93f-748f790a7ee4", "sighting--cd66cc27-5bb2-4faa-be1b-52a5f5cd8b44", "sighting--3938f94f-a4d0-4e13-85e0-d71c6960872b", "sighting--92d2932d-cd22-4533-b124-b7c44da9e60b", "sighting--1a9a849a-9f17-4d64-bd7c-066772018a7e", "sighting--461659f4-df5f-45d4-8f0b-b7237c83b74a", "sighting--6689d6e6-c63b-48de-91bf-06f52f80b324", "sighting--3be82915-2238-4204-9cef-7d2363efe661", "sighting--97b2c5bb-4efb-4088-9d4d-776e47116221", "sighting--339537c9-838a-422e-9f82-b51189972b50", "sighting--8513ff5e-526a-4ddb-90f9-3edd9ed9aa86", "sighting--6419215c-5d4f-41a7-a29c-a5ea1fc708b1", "sighting--3b694ee7-2fa6-4165-91ed-9809bd706e19", "sighting--b5643411-b787-482c-9c14-6ef68f837013", "sighting--8d95d419-26d4-4512-b994-ff45bdd57a39", "sighting--2036f812-c4d6-48c6-93e9-ff986675acae", "sighting--2baae5f6-8543-4ec5-be22-e32e6b7aaeae", "sighting--3ca17792-4aff-4712-a798-58b171266523", "sighting--4d5f1bbc-c76f-461a-8925-8cf5fd93f45c", "sighting--8f7ce754-fd99-4157-9c86-120dd6709ff8", "sighting--e7d1c242-613d-42dd-a50d-61bd4a3ac21f", "sighting--2a8c61ea-8020-4a0c-9c19-97bce469ca51", "sighting--c652c9a5-5259-4c00-9956-72e6acdedd34", "sighting--d4b9ae3d-1124-451d-a178-425407bef795", "sighting--5c3400ce-047d-4132-adfa-ed23762dd507", "sighting--1e0b951f-00e5-49e1-b9f4-7f380ea1b6e0", "sighting--c7b1f351-3801-4d82-ab46-6e8644ee0c62", "sighting--7b13046c-0d40-4f3a-ad59-79f0f75720e9", "sighting--f11e73fd-2669-487e-8d8a-797a16deda15", "sighting--c02e6123-205b-4e5e-b155-08a156c81980", "sighting--8304d266-a8c3-44c5-8f37-a81744703369", "sighting--33ee2d15-9bb5-4718-b444-ea1ea9c1d459", "sighting--49b6bb08-5acd-43e1-aca3-edd6393746b6", "sighting--8fbe6121-c059-4c22-bbce-5968dae9839c", "sighting--5d5fea29-dcca-4e7a-9a16-36c295482d3c", "sighting--b7f78514-31ae-4ba9-8ed8-e20f478faee0", "sighting--02a5933a-b758-479c-8653-4bbdc63fd942", "sighting--394cd9e0-d7c9-4174-8a39-af1f982e04f1", "sighting--f6155964-014b-4bab-ba5e-babbb84aa609", "sighting--54b215f6-777c-4916-b650-eabb4153f36d", "sighting--fff6153a-8d91-4946-931f-373c061d6668", "sighting--a98cceb3-7315-448d-bd7c-b660bac011de", "sighting--63ad4c8c-0ee5-4d9b-904d-037f6c1c246d", "sighting--2aa4e5f1-337d-47ef-9e0f-7da0272a7cf7", "sighting--4050ed24-cace-4e82-8a0f-f9e04f027fa5", "sighting--57773530-cd7f-450f-9288-6444d2cc57e5", "sighting--f5ee5beb-4f67-4f92-b502-01b47590058f", "sighting--31791b37-27fe-4fe8-bae6-c6a6494c4a5a", "sighting--96c5cb7d-3659-4601-b1dc-50cd8b6c630c", "sighting--a1f2524d-2889-479b-93ab-8a5a62f6098e", "sighting--f5478e66-7e65-4f79-b3f4-41ccec8056fc", "sighting--e78b3fbc-b514-4ad4-b637-c00e20893d04", "sighting--9354009a-24aa-4d92-99a9-13a267fcbe74", "sighting--de86a113-e921-461a-a89e-2141b7e36941", "sighting--bb14c022-28ac-4a47-b5d4-cb6c8778d0a9", "sighting--ce21de74-3654-4fb9-8487-9ccb9bbbdebf", "sighting--0eefd3ba-f5b0-4e9c-a74a-47d3a7be11c2", "sighting--05fc00be-d5cb-4542-a1d4-caecf95c36e8", "sighting--f79adc57-df5c-4fea-a983-8e1de59b98a7", "sighting--7328af4f-55f3-418c-a5b3-a804df483261", "sighting--010b7ee6-fbe0-4cd0-bdb1-c3c533c5a7d0", "sighting--04e090e1-79b6-4653-a5a5-7b0cd4e56681", "sighting--31f3a52e-eda8-45bc-9e10-0bb3d32a2aa1", "sighting--4e8ce76b-39a1-4742-a463-dee4689c980b", "sighting--fd228210-ea93-4910-94ee-f721f5c0d3d9", "sighting--dfe8ed7a-9235-4350-ab03-a1dede6c306e", "sighting--946d24bb-9315-4d65-b967-06380bbbf34d", "sighting--4293bc08-7710-4194-aac7-847fd327a8b1", "sighting--9226b602-0193-4b82-b3b7-de97b2f3455f", "sighting--9fc9a29d-4432-4b91-978f-f2b941a1fd90", "sighting--3276b12d-cda7-4767-8240-a3b808d93a7e", "sighting--4f59dc2f-7ccd-41d8-860b-acb81d45118a", "sighting--70436739-d413-4028-a879-b08d61469a23", "sighting--a3781e7d-dcac-4ed7-b2f4-2295438ca8ec", "sighting--ce85d3c7-afd2-4089-a6b6-1eceddd4f6d7", "sighting--4bac41a0-43ee-4be6-8241-38b32b5e09aa", "sighting--a03338fd-587e-4766-969c-072ebb3fb2b4", "sighting--98ca1384-68bd-490e-91a0-3167c7f6c3ca", "sighting--7121a19b-48ea-4b92-82c3-291c43eadb1a", "sighting--989dd49d-ace7-46b3-8299-00b1d2ec2812", "sighting--44adeec5-1d79-4f30-8f5a-48f25d8659c3", "sighting--e613d65f-b9f3-4325-a170-6b494172689e", "sighting--38558016-58f9-4047-af33-13e6cf6d6308", "sighting--fc40cb35-f9f7-418f-8092-274810a5a8ad", "sighting--e61fdd9e-d110-44bf-83f3-eef4ee5b7a7f", "sighting--3bedcd12-e84d-451c-974a-875d0cbe5988", "sighting--6c25cd6c-94d8-4974-9259-0664026d4887", "sighting--3d13c2d8-a526-4202-812d-f8523f95b97c", "sighting--d80399e6-31bb-4f87-8964-aaa387f72b01", "sighting--1b3c454a-405a-4de9-ae49-038bcdcdda0c", "sighting--4cf018b3-e801-4fe1-a6e7-362d416851b7", "sighting--3ec61c66-272e-4eb0-9c5c-729ac2153075", "sighting--b59824e4-dda4-4d6c-b800-5e60ed74442c", "sighting--a17efbbc-6f0c-4767-9ccb-a7f93d16a301", "sighting--2c8c1c0b-6344-4a0f-b371-5b440c13bb33", "sighting--a8ac25c9-d753-498b-9f04-2ead5dc31f62", "sighting--a4ddd85a-a3bb-44c9-bc2d-568e132b4a70", "sighting--6c7d3453-722f-451c-89a5-4e681543d567", "sighting--c79d7ef5-0ffd-47f8-aa79-a4a032372041", "sighting--fe7edade-a670-4a4a-818b-2f39dd859678", "sighting--de9d4f98-1a1d-4479-859f-e8b1b99a691a", "sighting--7b0806c5-77eb-4756-af2c-5b08f3708beb", "sighting--a049d622-dd10-4483-9563-7190ff4ac5a0", "sighting--769b082b-bf41-4db7-bcbb-a6be6ed9e6b5", "sighting--77097547-2c49-4208-a147-9f8dee338bd7", "sighting--3a89dd95-2af8-43ae-b5af-a155a4166a70", "sighting--063b9eae-b34b-458e-a0b2-dee97764512f", "sighting--3f3e47bb-05a1-4244-bf3a-63b0b8440e0e", "sighting--375c6aa8-7597-435f-b55d-8a5571dce668", "sighting--795e5194-e793-4225-a293-96460c8e96d4", "sighting--b970e4e2-dc6d-4383-8fe6-a2842f69dff1", "sighting--cb471b56-4d4c-4388-ac32-b19aeff6ee11", "sighting--eaf58bfe-f7f0-4970-ac0e-94407d779de1", "sighting--06939bbf-4068-4b62-8fb8-e67f2b23fa96", "sighting--90424149-abeb-4d19-9bce-311dcb5aa552", "sighting--40b851a5-c05b-459c-87cf-e874c21fb382", "sighting--d9befb1b-69bf-4e98-aad0-a7f08f77951b", "sighting--2c054320-84d3-4d66-b58c-82ed742b6515", "sighting--43c09d33-0a51-4279-9a1e-64b6d44d1d54", "sighting--1287e8c9-88e8-4db7-8f42-09dc7ef63bfb", "sighting--15d663e1-5452-4880-9e48-50d765f2a07c", "sighting--84b18045-d86d-440b-8b1c-4b5a8ec8debb", "sighting--cac50985-c972-44a1-b63f-52a4335efdcd", "sighting--a4b75423-8723-4255-9e92-936824d70adf", "sighting--9f3066ed-bc8d-471c-95b3-ecba8f7a151b", "sighting--984d607c-cc67-45a0-8c13-be4be82075b2", "sighting--624016d2-b810-4887-bf2a-36a309507c24", "sighting--30e28a03-da1b-435d-a41f-e7c5cd1b88a0", "sighting--462790df-a093-4836-9385-4a065dd35dac", "sighting--1323d532-5408-4a8a-a6da-1a780351a5a8", "sighting--2c54310d-cb5a-4ec2-b65d-0491654210a9", "sighting--31a233ea-9556-4268-855c-818432c8fcbb", "sighting--ec2a3130-f627-4bb6-acd4-526e0578942c", "sighting--419d6b3c-ca4e-45e7-9d3a-cf70dcee2b25", "sighting--183b6057-b8bb-42d0-bc49-daf240de088b", "sighting--d5c5bedc-794e-49ff-a598-bb087e7f1a7a", "sighting--5008aacc-31f5-450e-9070-55c2869d07c3", "sighting--3f843f5b-c799-4efc-b690-8705a1bc75ec", "sighting--de26fdca-d510-40e0-ade3-f3a5b0a589d1", "sighting--727ab559-89ab-4c59-8fcf-1f850cc4fdbd", "sighting--c4614971-70c5-4969-ae60-c0180eb8b25b", "sighting--320f6948-1316-45c7-89ab-c06329ce2ca2", "sighting--d9d410e7-2d01-4955-b021-1ef733d5a532", "sighting--8aa5e1d0-dfc4-4d9d-886e-cded72950d40", "sighting--8ff02840-b0be-4f66-8c4e-88299ed0a331", "sighting--724f14d6-c4dd-44e8-ae0a-ff811adf7aa2", "sighting--6aa42f9c-85b0-4dcc-bbf8-105892a6ec75", "sighting--befed047-15e2-484d-bc03-e88c90db5317", "sighting--f2ac4d9e-e1d1-4c65-b28d-abefc380078e", "sighting--63fb92d5-10d4-48c2-9de9-88879700db32", "sighting--897f930f-0c50-42f8-8231-7d0cdde68860", "sighting--6b68b720-c0f5-4011-98de-668af201a73c", "sighting--80ef3c73-dc55-42fe-9500-d9f2bd605b70", "sighting--ed962833-2839-4ab7-9688-067b94d38225", "sighting--fa6b7bde-3bb6-4687-9c86-75196200f4db", "sighting--fa98f5b0-88cb-41db-acae-994618fd0042", "sighting--3553e6e3-5577-477c-9e6c-02816c1e3d53", "sighting--31a29fc3-c3d9-4218-b138-24e9cf2c1013", "sighting--6031ddd6-e3ee-4a6d-99dc-61bfe88f7521", "sighting--812c42c5-d38c-49c5-8977-0cbfeefbe87b", "sighting--7e17a9b1-d326-4a34-8d11-44efa709fc45", "sighting--00a5c05a-dbdb-4d94-b42b-ce04f7116f9a", "sighting--d5990869-ad91-4175-a3e6-e77e82faa5af", "sighting--46307878-188d-46cf-aa6e-33dccac4e19a", "sighting--420387ca-ca42-42f2-97bc-02174049b02a", "sighting--ce3121f4-bc02-4bf0-bfb7-0950eff95ac9", "sighting--8f780cba-3784-49ab-ac9c-8b0a82eaeaad", "sighting--d02d32ed-16ac-4af2-997d-f77d2e031d16", "sighting--dc2f19e7-e48e-4a6d-a4ee-ffcf22feaff3", "sighting--e2f8261f-821b-4bfd-901c-91b4f865ab81", "sighting--60f00bc2-49ac-4f46-b2f6-c95eeaf07235", "sighting--8ba58318-223d-4463-90f1-2e010fa5ee15", "sighting--ea0de5e3-33c2-4b2f-81fb-a2c2dffd2cc0", "sighting--4e1c0d85-831a-4665-ab7c-f851b7f224b0", "sighting--5f565697-c613-460b-aa5a-7ffe2aeba6d2", "sighting--26708c18-1ccc-40d1-adac-26f05a49b5d9", "sighting--b9f4a377-2213-482e-9ae6-2b9c11634c04", "sighting--abd4329a-3a01-46dd-b6cd-ff7988fa0700", "sighting--82a1e808-8539-421d-9ad6-205eaaaa20ca", "sighting--f3be0dd5-fffd-43e5-94d9-51bcd96eba86", "sighting--4520b437-dce1-422a-ad5b-50275cda4e00", "sighting--1e7347c5-3df3-4844-a918-73c4d6b5912f", "sighting--2d1670f9-5b4b-42ad-bb50-d2b41d1709e7", "sighting--7b276b48-f14d-4398-8649-3e9d67c5b68e", "sighting--ff0e5f20-0eb5-4bc1-a3f3-983d4284d3e9", "sighting--3f9c7184-eb97-4685-a687-d8d591344e21", "sighting--9d15d750-c5ae-4946-94a7-86693ecdb405", "sighting--63f62bcd-7f7d-4617-b8c9-db5f80398c6b", "sighting--71dae773-bf7a-4dad-8cc1-b0dd1a1c3bd8", "sighting--0bdcda93-8a74-4941-a15f-24d2310b6849", "sighting--197087dd-7d88-40fd-a514-998d8bbd07dc", "sighting--7163fb1c-5b6f-416b-be62-138c6a924e6b", "sighting--4c651b6f-6d8c-4cd3-84c9-8245f2a93c9d", "sighting--c370803c-5fee-4786-80b1-176713f95591", "sighting--0d101c6f-6613-4531-9f67-2e4e11dd4491", "sighting--a1e90c9f-1521-466b-a66a-94d7915c9e2a", "sighting--39384b19-6b7f-4321-bb64-0a180c4d6da9", "sighting--e651a037-4aef-41ac-9629-dbc6a0c7e18d", "sighting--b26660a0-52ff-4912-9376-4463303814f0", "sighting--a89254cf-bb2e-40b2-92ae-77d24039ce89", "sighting--735aefdd-5dfa-4098-84ef-9229384ef1c4", "sighting--225616bb-1a09-43e9-82dc-640bb9d7c8b7", "sighting--5367f3a9-dc91-436a-9c9e-9fb88d16c13d", "sighting--dc606467-2303-45ba-bff5-4017fbd69bdc", "sighting--f4ef4541-220e-419c-959f-3d8ea6d2312c", "sighting--7f3e0224-533a-40b9-9439-9a54f1889809", "sighting--72c51923-62e8-4425-b640-686e1f79c5ac", "sighting--a3143f4e-7272-456c-acd7-afc33597ba28", "sighting--8ba6e2e0-9fa2-432a-bda8-6ac198f02d41", "sighting--196a2935-629f-4386-8221-cf996c75514d", "sighting--45b4c5c3-f03e-4c8c-90f1-3be0c6279758", "sighting--22664ea3-4270-4a0e-9882-da2c4d9b674a", "sighting--02955c49-83fa-4b59-9d38-5e1d5c5fae68", "sighting--b46393a2-eff4-4b05-9923-bd85bc8710a5", "sighting--e38ef7ef-2fde-4185-ac26-f9829846dfa7", "sighting--b5010746-b78d-43a3-bd56-8228e01805f4", "sighting--4a1d3494-a466-438f-9020-b2a32a6a4009", "sighting--50cccacd-0c27-44d0-975d-3af41b30af1d", "sighting--94212860-3356-4be5-b045-1223916f7ea1", "sighting--846631b8-e9a5-4cb0-80c1-4ec98899cf4d", "sighting--ccf15654-cda9-4ac9-9ee3-5f9754763c49", "sighting--fc470fa6-068c-482a-961a-1a98faf3cfea", "sighting--09b29790-a79f-4170-822b-2b9631bbe8dd", "sighting--98cc9c19-5503-4735-a65d-c4ba515cc5d6", "sighting--27d3efb8-ab06-48f3-b7e2-735b90d412bd", "sighting--7b84c63b-c365-4853-86d2-371db52d3ffc", "sighting--d641b0c8-7625-42e2-ba8c-964f4aa347f7", "sighting--feea84e5-7ebd-4e60-975d-fa1f37854178", "sighting--8d2882ee-d589-46ce-a909-1902fda347d1", "sighting--e7a04008-ddca-4783-a1b6-ee752fec68d5", "sighting--bdd4ab64-4724-4490-92ce-013ff93e944a", "sighting--eaa5c11a-7a5e-461e-8e65-6ffcc8cc45b7", "sighting--88ca0296-014b-4f05-9491-daf7ec73337c", "sighting--284d7628-ea18-4fb8-a2a1-fe9118003937", "sighting--11b3a7dd-57a3-4e5b-a9ae-268f6a06d550", "sighting--74cec8e0-4b83-4911-97b6-58f695cffd8e", "sighting--e3ad05ea-4faf-4fda-9474-b6dd26131f3f", "sighting--f3a974bb-5f7f-46f9-8085-f64acdac120a", "sighting--a5f12ee4-286c-41a9-8f87-916e1b4c9ede", "sighting--6e30d5e6-4b6d-4226-90bf-cfe33ebdfc65", "sighting--b457a973-d2e6-4407-b800-26c2f3ee03bb", "sighting--d739503e-e2b7-482c-9e7e-98ce6dd83ac9", "sighting--fab952bf-df2c-460b-99c5-63298d202a95", "sighting--1b08475d-1267-4689-8388-ae4e641def49", "sighting--6cfc0eaa-7a6e-4b07-bce2-20910b093f5a", "sighting--055bf2f4-4e21-470e-be4d-8e5b168515ff", "sighting--d2750d80-ed34-423b-ae9e-7194443eb46d", "sighting--cc859598-37c9-481a-8cd5-2f9731909d56", "sighting--629b7553-b539-4065-a2e2-5bfaabaac715", "sighting--c9858405-a6a3-4696-9b54-81c5cd6a807c", "sighting--0356e0ca-050d-4153-b9f6-0c53abbaaa5d", "sighting--ee76fae7-4a07-47c5-a61a-2bbfcc1010a4", "sighting--3cde88b4-d397-4cd5-8a06-24b6b28094d3", "sighting--f69c289b-fbe9-428e-a2a8-3addeca3760d", "sighting--8417a71a-e04a-4863-9185-3c1ac25ff89e", "sighting--650bfdf4-3e8f-48f1-9c3a-54c214fd5215", "sighting--5bbdee37-2417-4a24-b580-e7705df50ed2", "sighting--5dbfe397-9bb7-4070-988a-1c3e25714df8", "sighting--a02ca4e0-02c9-40bf-b496-5699df0f17f9", "sighting--b823a062-61ea-4262-87a7-6571b05e145a", "sighting--f8ffa44f-e5a7-4572-b31f-90dc1c5110d0", "sighting--5cf56a26-4651-45e8-ac71-67bcf42ce940", "sighting--73bdcb10-c49a-42b4-ab31-e0a7c89741d8", "sighting--326e932b-a395-4058-bd3f-f2cd84429c76", "sighting--efedf6cc-ed5b-4a5c-88c5-73d396029f69", "sighting--be129e18-a369-455f-9b32-fc02ba5b85d2", "sighting--2de6949c-fdc0-4a27-a5ef-b448320f5bfc", "sighting--9a3f7d22-950b-48f8-9135-67efe9762aa9", "sighting--7abe67ae-f4be-4bf2-867e-e69e1aa16054", "sighting--dc500839-0dd7-466f-9b56-c612aef6e08c", "sighting--70915042-19e0-45c2-8429-21b8122c907f", "sighting--c8378a77-6c05-45c0-b378-298cb8f06dcb", "sighting--ca9b7f80-a95b-48d8-9894-55d22eb95f39", "sighting--a36387b2-365b-4578-9de9-6180a455e35d", "sighting--fb1e79ea-972d-4a40-b4a6-19f6871d34fd", "sighting--7329b706-d645-4114-a812-f2745cf3e48a", "sighting--e203a3a1-a38f-4fc4-8767-5bab488336ae", "sighting--e6041ceb-e6ec-464e-be0a-88ee40a8f015", "sighting--2ee117e4-d2d3-427d-b7a9-8e5dacae8e1b", "sighting--2d40b5f1-8c36-4d48-a4a3-7469cfeace6c", "sighting--0e7cdbc1-4473-4c06-97fe-4c7974ba12a0", "sighting--1112124f-5105-47c1-90b0-a7eee205dee4", "sighting--670b8e30-303c-4806-b6ef-de0a4d755902", "sighting--819245c2-4c33-416c-a489-8ee6e9cecefa", "sighting--87e4c076-715c-4831-ba7e-2b3c71af2792", "sighting--0c871a48-5dc8-4463-9e86-9b29e3b66494", "sighting--f7b8a3dd-4012-4aa8-a177-2124c454705f", "sighting--e3836971-98e2-4fc0-b784-51fe7a152dc0", "sighting--d16ad800-e79a-4669-8650-263047504996", "sighting--3a81f88c-be5e-4317-92fc-cd41de37a2e4", "sighting--a399c687-5de0-4589-8a23-445c1d216794", "sighting--898d41a9-3d1b-43c9-8991-2174fa1de808", "sighting--b23421b5-e776-48cf-bc20-a2ab8e00b28f", "sighting--b8bcd722-21c2-4f9a-b7fe-f6af0eaf9d73", "sighting--efa30611-d165-4525-8cae-a637b2fd21b2", "sighting--e6caa950-e3ba-4fc1-a925-8ef862cacec0", "sighting--270f2891-64f9-4b05-93a1-1c0b7d426c13", "sighting--d0593ac4-b0f7-4ed6-99aa-8ce343f26e72", "sighting--a73d42ca-26b9-483e-987a-e8f916715f85", "sighting--6182f23f-4357-400b-8a92-248a2a66a58d", "sighting--22477cc3-e9cb-4bc4-8841-d4b83cbbbd44", "sighting--750dff36-60dd-4e9a-ad04-0fdb3d784bb3", "sighting--91bab90b-e9f6-4019-8940-f72f55f48d05", "sighting--f58f4f28-0a93-45db-b564-6dc1235c5a62", "sighting--55a0e19a-0530-444d-a0b9-e09867f105c6", "sighting--8e9a6d16-85c0-4394-8ed1-05a7e695aad2", "sighting--a66b3034-d51e-48ef-95a8-2c6e21f21a53", "sighting--3c9c982c-ea64-4992-83aa-7d779c371d0f", "sighting--a620612e-2b0d-4450-afc5-050e5f4950ce", "sighting--75a3bf26-beae-46c0-bb1c-520711e583d7", "sighting--a995ec2a-0399-4510-97c5-c518b4b58ef4", "sighting--14cc0c83-3a82-4358-9406-e9df65e5a846", "sighting--7de78ee5-40e2-47c0-ac5f-7350e79f0f81", "sighting--30ed3f6d-98a6-48b3-ac08-d6d69dbe0752", "sighting--45180115-b6b5-46aa-97a5-a44f965155ea", "sighting--9eaf59cf-fcc0-47d9-86cc-315940e3296c", "sighting--4134020a-617e-4856-ad1f-55f907f9ed68", "sighting--cd41492a-f123-415e-ac33-9ba39ff256af", "sighting--633ff797-db3f-4318-b7f6-3b52d0b0c032", "sighting--647e9c78-bb1a-4f77-9933-e4773a93c625", "sighting--ce07165e-d88b-4dec-9c49-db4d221715b7", "sighting--00699fd5-175e-4586-bdb2-3d8bb087c657", "sighting--973e6f38-1182-44e3-99fa-fd21b871883c", "sighting--b4169cfc-04e5-476a-b116-6d7b372f9a6e", "sighting--d818930b-34ba-4946-837d-fd5066caec69", "sighting--4018c785-7818-4515-b546-7a03e774b15a", "sighting--2d2cc184-dde5-4a5e-8ee6-ca5f74a3fa09", "sighting--4664e424-65d1-47a1-8c8f-aa27b4a1ae24", "sighting--7f25ba44-84a7-4f87-8fba-38bb01202a11", "sighting--9aad1419-b44a-4d55-91cc-f6bdb697ae10", "sighting--9bfbea31-93e9-48e7-afa2-2c157d0673e3", "sighting--2b7683c3-3591-45f1-ad0d-d9ba6f875443", "sighting--f2c357ff-ee9a-479a-b31f-94669271dc40", "sighting--8b872e79-2fd3-4f57-b949-7b37e5b5a5f8", "sighting--59c99f31-a1fa-40ed-af79-febfe03196ec", "sighting--c2494d82-ff42-4803-8fd8-0b9c5bb7e30b", "sighting--a3813a1f-e24e-429d-9bfc-30e6d0424d2d", "sighting--937686e9-4731-431d-afaf-eba8dfd1b04e", "sighting--82d0b31f-1a00-468a-bcde-4dfb3d9d0711", "sighting--e824eda1-6489-41bd-898a-d332df8c1aaf", "sighting--a85b0757-9ca3-4657-8068-38ca937d6558", "sighting--44d2eda4-e56f-48d6-b98c-9acc9fd1b083", "sighting--4eb6dc0d-eacc-442a-9301-23a88c1ae21b", "sighting--b10abc67-b50c-4367-b42d-a6dff6b17c6e", "sighting--29da8855-e30f-459e-8d67-ae6e4b7eeaa3", "sighting--fa45254f-a57e-470c-b328-03855a4d42b6", "sighting--f220db87-85b0-464a-a548-cb6d91c9dd5e", "sighting--8fc1d6af-7011-4adb-856d-e96261bbd4a4", "sighting--b36f2257-ba52-4aaf-94b9-24415bed7eb5", "sighting--50cdf655-55cc-4c7f-bb55-e42edef0741e", "sighting--aa794af5-2223-4f20-9f7f-c79936ed09e6", "sighting--7b38fb2d-aca1-43e5-9ef5-9338a14318a6", "sighting--9431f5a0-8139-4b30-adca-977d15aeaace", "sighting--902a0e7e-fba1-4fd4-b4d5-5a691b62d573", "sighting--ff0c3d2a-4492-491f-b68b-47101856c9ee", "sighting--fbea8982-2d7c-48fb-9493-f4f7916d69cd", "sighting--b35e045e-33f0-4a58-9729-fe72d0d830f8", "sighting--50b89475-2008-47b7-a213-628d34a6420d", "sighting--02e4a094-ad33-4f37-91fd-313e1f4be9a5", "sighting--fc2174fe-bfc8-45eb-b7ad-0d172605f3c8", "sighting--b2de86a6-25f4-4fa8-aa27-542a550701dc", "sighting--1fd257c2-9378-4d28-b695-a6e3a0003660", "sighting--c72513d3-1b2a-4e60-a1e2-a38026354985", "sighting--cb902bf5-878b-4654-b029-aa58306813c6", "sighting--3db41104-8775-4658-8e6e-edb1f3b3ad4f", "sighting--11a8da4f-2f72-4575-8acc-4c657a159aca", "sighting--3ce08de9-a1da-43dd-b343-144d24511cd5", "sighting--d98794f3-dc83-40a5-a554-830eb51b771e", "sighting--0ca5acd6-b107-4759-8aa4-cb97d98a4ede", "sighting--f6a76b1d-c4ee-4394-8ea8-442bc34b62e4", "sighting--e9a2b2c0-722b-4257-9b00-3e488c7da70f", "sighting--fee2d8a0-a7c2-40fa-898d-c22acec00a8c", "sighting--3374cd63-e442-4bc9-9910-6cbe445176da", "sighting--e62e385f-3215-49b5-b1fa-35ee0e291d12", "sighting--573f1b4b-2ef7-4b11-b4c4-b177c91b9662", "sighting--b7a1d31b-243a-4867-b138-7780521f23bf", "sighting--01df92f1-37b7-437c-96d3-8833e579ab31", "sighting--2a92abd2-98fa-46ea-a7e1-1be9d56fbe87", "sighting--99ed1678-a765-47d1-96a9-dc0b40b40184", "sighting--75dd2eb0-2c1d-4812-9980-c792bc8efca6", "sighting--1e9da86c-9e2a-4aba-9b4a-4605e37d6f95", "sighting--7d48bda0-cbcc-4aca-aaf5-9d0ab560703d", "sighting--e7896b08-e109-4902-9503-f7d2fdeef004", "sighting--d0862c6a-f5c3-459a-866d-db8e681aa734", "sighting--313eb832-eaa5-428f-b92b-735c7c806d8b", "sighting--184ba36d-c15a-4b89-a227-d07ae46a1d5e", "sighting--d9da6926-8ce2-44bc-b198-354aad536f9e", "sighting--ac1e5eb8-3445-4fe3-9cee-496e17a6489f", "sighting--4495023e-9ee5-4ace-b073-cc4ea2d50423", "sighting--f2b51f05-a9b2-4817-b74a-524e78b62607", "sighting--a3b480fa-7144-43fd-81c8-293ba5d5bd25", "sighting--669cc641-096c-4f89-bc7d-54bf0a5e0a35", "sighting--9cc10e7b-db76-4cef-9627-3936e6ade7f7", "sighting--ba2abea0-62fb-46b4-bac2-33688bbc0e62", "sighting--7df40c36-0eba-46d8-8893-86e8d32fdf62", "sighting--30a4ecca-1af2-42bf-ab68-8f97ff65a467", "sighting--6c75b611-3830-43e3-b829-0c687c3f4aeb", "sighting--c7762908-4d1f-4683-ae2f-0ce58f26689c", "sighting--13f0045f-0c28-4a84-b0fd-74adbfd21813", "sighting--0fd9244d-eb9b-4377-afee-bc7398c622b5", "sighting--67dd384f-c673-4b73-9eed-aaf99f22480d", "sighting--f0973d5b-7e70-497f-93b1-cd8a0b1792c1", "sighting--b979ecb2-7bc1-4058-b06c-72d661926a98", "sighting--8f5d1794-14b9-43bd-8ecd-ceaf8b43be26", "sighting--544eb31a-b9db-4b5d-b9c3-154b6ec79e07", "sighting--058769e1-0f49-434b-a8cc-12c21f028a09", "sighting--c2e61a6d-2793-4f33-8c1e-46ea788e3c1e", "sighting--9a3c8482-a7ed-4fb3-a026-1496759eee15", "sighting--00fb524b-9d97-4995-b569-79a649d1db9e", "sighting--6d300fc2-4ec9-487a-99d6-439353341288", "sighting--3d323a93-ae7f-499a-acb0-2e128987d490", "sighting--248f8144-e29a-4c7a-bda0-3f22bcd35bc4", "sighting--8bccd238-3830-4779-b122-392b7a21be0d", "sighting--35167656-1032-42b2-af27-f10ca65393ff", "sighting--a8fe0d1e-6eae-4d74-bab6-17df23146d12", "sighting--499b2f91-43bc-493e-ae6a-7b5161b87d6a", "sighting--a729032e-9385-4530-87b4-210d95b9612f", "sighting--cd44aa76-a992-418d-b978-524dc3646e21", "sighting--c71c39de-a24c-4b1a-836b-082b8b6ba456", "sighting--1d891af0-a4a2-41d5-95b9-4de52ec2dba9", "sighting--32d2d426-67a2-4016-acf8-a47e5494cb32", "sighting--2e6d5e30-8421-4af2-b6cd-1cb21ab05b02", "sighting--2e0b421e-c2da-4f17-8bb1-b0b3d94488a2", "sighting--8e7af6a9-0d9e-48d3-a32a-210c85e9ea89", "sighting--38802d0d-2f0e-4f62-b25a-2d0b7575d8eb", "sighting--d307c7cb-8fe9-4ea0-9cc7-c5b489b8fb3d", "sighting--d28ad84e-52f7-42aa-ba25-5a5a4884986f", "sighting--8ae4c2c0-243f-4082-aec8-70ba861dc219", "sighting--6c0067a7-e980-42ce-b9ab-ca4de8fb39f4", "sighting--04ec3486-a0b2-49e5-b2c7-8d9d080df6b3", "sighting--b7f89d7f-8ca8-4dbf-8c5b-ccca0122ad84", "sighting--e2b4a96f-2a39-4219-a447-72aaa0de9721", "sighting--c1d32e22-0923-425d-90c4-dbf58cec7ee6", "sighting--c61178e1-ef4c-46e0-8bf8-e007b6d25e65", "sighting--9520f9c8-7a8e-48ad-9742-3439ebe01df4", "sighting--4a9fb720-f124-4e05-b7ec-a6971de65855", "sighting--853b1620-7c49-44fe-a902-dd07e803a077", "sighting--7e209b26-991f-414e-bb3e-bd8ead9e4590", "sighting--31c199d6-924f-4319-8907-bfe2b557701f", "sighting--766a7b7a-711a-42d0-bfe6-62ec25af5559", "sighting--c037567e-f8eb-4d83-90e6-3e14219db8e5", "sighting--e427dede-a4db-4550-b736-23d0b64f2a23", "sighting--b2db3278-9a66-4de0-af11-1f9e72d63871", "sighting--dacfb33f-b3a1-4997-95af-b92dba28759f", "sighting--b16e7679-73d6-4a1a-8c8d-164688db7ae8", "sighting--a2461b12-78ef-4c4e-acd9-77c3d6763426", "sighting--2e3e42ac-a471-474a-908a-e4d914f9a076", "sighting--0a7075d1-db03-462f-b72b-d3dff3925c3c", "sighting--bf822c09-161c-4cd4-836b-5f922a6ce514", "sighting--21f3fdbd-bfa3-4a44-9e07-4750d367a0c9", "sighting--997254bd-7576-488d-bf6a-7a13c5efa876", "sighting--45d4ce09-fb55-407b-9a67-4ee3de7fc014", "sighting--487d5ee5-781f-4ae1-b237-37860dbaafce", "sighting--e70788d0-0c97-4a7d-95ea-fc0983cf8730", "sighting--1d936bf6-d288-40eb-a470-eb2d39de88fd", "sighting--986c4883-f13f-41fd-bd63-545f457e937e", "sighting--ec2102f5-a852-4cfe-b3b8-32b3c110363a", "sighting--954c2062-ac20-4cd2-b153-004f5fb155db", "sighting--39001666-d629-436b-8e9a-20326f3ef583", "sighting--a117dd17-5944-4e8a-8c87-bfb47dcb8795", "sighting--88a7bb37-ea0f-4b6c-8c17-904e97b67ab1", "sighting--b2f4b6c1-dc51-42e0-bf23-df9b7392ca42", "sighting--00932cd9-74fa-4ac1-8af9-fdd9e3baf91d", "sighting--c0ed2aae-2fc6-4018-a33a-c955f3146392", "sighting--d77db850-c3df-485a-9234-3b88a68deb57", "sighting--b716a3d4-be96-48ae-9def-c1f9c8dccbd8", "sighting--3fbcb2d5-78bb-4480-89d6-38b76a35ed8f", "sighting--782354a0-ff4f-4331-8f35-05beaec3bb76", "sighting--8f91ab3e-d471-4c26-8505-c138cde1a900", "sighting--48366531-a773-4e56-ac1c-8c4312535818", "sighting--aee2ade9-4e2c-4d4c-95f6-5c2a67a21b75", "sighting--2d00648a-bf96-4c63-9f05-d0d1e57f5cfc", "sighting--15696eb4-eaa6-49db-adcf-edb321656306", "sighting--60b9a468-3c2e-42fc-a01b-c4c633da9011", "sighting--776aa678-7c1b-4309-af7f-80ba2c83a8f0", "sighting--8ac2683a-85b7-4271-bad1-05fb0b618f36", "sighting--0703c34d-8059-4bb6-ad3a-18fd6f53698f", "sighting--94836c11-2f38-48b5-b9e2-a77ed70765a6", "sighting--4a703c87-b535-4daa-9255-aeed8d03ac87", "sighting--16bdb879-06a8-4261-97cc-d94ef437f7a8", "sighting--91c0e35e-ef31-4760-b8c4-5b77cdf7d5dd", "sighting--667d45c4-738a-4b15-b3fc-f4c52959d4ab", "sighting--0d1314d6-359c-4220-9ca2-ab53c575976b", "sighting--ecf3873e-da46-4c8e-92b1-da055dd72171", "sighting--ed8dd71d-d148-48bf-8b3a-77ddc0582c5e", "sighting--0853f1ea-e92d-414f-a50c-251307ca42c6", "sighting--304d7cd7-8413-4073-81c2-8660ec7e1b61", "sighting--8c8aab82-9fb8-4fe1-a128-411d8191b982", "sighting--f5e52f4c-e9c6-4739-8ab0-c30cd8703f1e", "sighting--69989cc8-400d-48ac-b724-ce00bd02ea42", "sighting--c0619df4-b824-4d6c-9587-266a7abe3ee8", "sighting--bb0572bf-a19a-4b03-8011-1f9fa35e1403", "sighting--1afd14ca-8d17-43b1-be53-f58ac6dd26b5", "sighting--9eca5ad3-7ff0-479e-b728-22f29f90e79d", "sighting--ef2a237d-4955-4e19-8e6b-fc007a74ebee", "sighting--50cd3a54-c477-41a7-980a-1aed272e0a7d", "sighting--4f60e8ad-852f-4726-b6f2-e261d5590cb5", "sighting--ac7b4002-fc95-4678-9a57-deeab901b1d7", "sighting--4674a1ea-06dc-445a-805b-10fe3248266a", "sighting--f76b1892-a933-48fd-bc6b-015c78af7a66", "sighting--8b6bc2d2-2596-431c-b96b-2510411eb69a", "sighting--ba4a07e9-a00b-447d-9286-23ce63f7cc5b", "sighting--03cf7205-1a4d-4988-bb1c-fed1162ae01f", "sighting--e2e9268f-e32a-4071-9811-74c75ae88eb8", "sighting--7969748e-8282-443a-a419-a360b94e6dae", "sighting--c9361436-aac3-44b7-8d65-37011cf025b1", "sighting--7894d1cd-f779-4d6f-8e87-e20a4c17e617", "sighting--e5a13e16-a831-4179-b973-330296c8c250", "sighting--22b1568c-7dfa-4412-baea-098179f06bc8", "sighting--65947f34-167e-4743-bdcc-86d74c991261", "sighting--73fcda48-4cc4-40be-b266-7c04262048e0", "sighting--8f22f461-d1cc-4056-9467-660b81ce1567", "sighting--dbff52df-293d-4e17-a076-222970954f9e", "sighting--90b28230-e8c9-44dd-8a5d-48d19ca89d2b", "sighting--b7d58d4c-8918-463a-9e49-bd6fe64ce485", "sighting--0c27c383-4a09-4b51-84c7-75e94e882f9b", "sighting--086b9dbc-703c-4cd9-bada-861e3e44930e", "sighting--e719a905-15d3-40bc-9e10-0636adaeee95", "sighting--f8633f23-0735-4852-abf8-db24cad3f814", "sighting--cf082cc1-a38a-4ca5-b6b0-b9d226048649", "sighting--b23d154f-3145-47b8-b943-3663e1b59e30", "sighting--b0e1af62-52a6-4bea-a40b-6f8d464f7835", "sighting--6c4ba486-9ded-4445-ac4d-472370fa6c84", "sighting--955a1183-711d-40ec-841a-b61a7ecbc66b", "sighting--39379c41-7430-42e8-83c9-3263b1a802e4", "sighting--8a8d862c-4346-4523-92e8-5871b8e8a8a2", "sighting--2897cafd-78c4-4cf8-9d46-78b16c8e66fe", "sighting--9a6e3dfe-8340-4ac9-9703-ef23155ae051", "sighting--5ce744b1-a693-466a-99e2-a2911349c129", "sighting--7f812ce4-3847-48a7-a33d-ec5d2b96d4f3", "sighting--159cdd91-9045-4545-98d3-2c493ef1de98", "sighting--0e9d69fe-93f5-4718-9301-84695f5b0f16", "sighting--bc1b20c2-06c8-4172-9b8e-0cd9feb1c35b", "sighting--34081fa1-67fc-4d8d-a1b9-df15b1056401", "sighting--8275f464-0114-4936-849f-b7068a5fa06d", "sighting--77a69e89-26b9-4868-b4f4-24cfde9962d9", "sighting--9c59c023-0605-4f41-9594-1911fee38033", "sighting--db59a7d4-c27d-4b76-acb9-5bd710694f23", "sighting--c3f1d429-3534-4276-8a2b-dfe24efee36e", "sighting--ff5650b6-40ef-4050-a52c-83040345212a", "sighting--e258f3d5-dd07-425b-acc4-8e332d5714e2", "sighting--b255aef0-0e49-4897-9e7b-9d596022e09b", "sighting--db1fd789-1840-4e17-99f2-b853bd61bb2a", "sighting--e4e662c4-f9ab-4cc6-a61e-47b8b136834e", "sighting--9cbcf09d-884c-4ea1-885c-fd8a4f56f31e", "sighting--7b6a3f8e-a449-4c20-95fc-0e503b2118c5", "sighting--df2a3218-8f92-4e39-a1a3-cfbc3bdddb1c", "sighting--f2dc3a3c-4bff-46c4-9d9b-592963d196d8", "sighting--ea7e3cae-675b-4636-8817-06378f2c6183", "sighting--8266930f-f9f6-4b45-8a02-7860772aa05c", "sighting--5ad02675-7a6a-4fef-897d-bb27891a4ae6", "sighting--ede9bdf1-5767-48a5-aaea-e38d580c232d", "sighting--7ef4fd87-01db-4a7e-adb6-ec4e9785faaa", "sighting--f37193f6-7fa6-4268-89e7-92fdf7c25c90", "sighting--0eb9c0bf-ac14-4db3-b044-0e81eb4d7259", "sighting--433b0afd-3a37-4862-be8d-4d719c05ad03", "sighting--d6083493-03b3-41a1-a535-b3a3603de4e2", "sighting--ab51defe-8c60-4ec8-a501-95cdf24b3c15", "sighting--52f683b6-f4eb-4cc7-8031-b68faf5eafbb", "sighting--b3dcf7b3-2145-4ea2-af3e-32d514925a7b", "sighting--371c1ea4-df1f-44d7-95f3-534ec434612f", "sighting--6186920b-53d5-4de6-bc00-cf6f78efd63f", "sighting--853c434b-eda6-425a-91e0-02e423cd07dc", "sighting--ff29abda-482b-4a57-8267-a7af84b41a2a", "sighting--14e95f36-cee1-41d2-b097-b65d7edc2bfb", "sighting--8cc7e1a2-247a-48e2-9aa2-09743f30fd8c", "sighting--25be8715-e6f4-4abf-b81d-315e6582289d", "sighting--f65aed35-aa43-45bc-ab56-18d1f8f6899a", "sighting--46c44a77-324e-4cb9-9f18-f67e587ec69a", "sighting--1216bb3d-7e86-423b-ae73-492ccc72fcbd", "sighting--2b926c35-64e2-4588-8403-9b66abcd3b28", "sighting--923e5e9c-7242-4910-b4d5-2adeaf922d15", "sighting--4a91904c-ea2c-4df4-875e-a2f473ac3911", "sighting--d0216597-f293-401c-a766-c740849e37b6", "sighting--2a88142d-abd6-40a8-899d-e993d4311175", "sighting--2d3438a2-40a5-4838-8cc0-f36827fe1bbc", "sighting--225dd66e-530c-4d31-8e4f-50a449199bca", "sighting--450528ab-2329-43dd-9112-a306fb84b90c", "sighting--b755ae51-c2bb-41c1-9610-3c5baf83e4d4", "sighting--0941dbb0-c9ef-481e-a4da-70331ad6ea2c", "sighting--b34c435a-4b94-4c5a-8ddb-cb68f20382e5", "sighting--4fda8675-033f-4d69-b0c8-9f4d3160a5ed", "sighting--d896632e-6b83-4ceb-a8cd-9cc932ae605d", "sighting--a1a77b26-fa55-401f-9093-3e370157903f", "sighting--239209f8-0809-4464-961a-00c97c537d66", "sighting--ebc73716-3a28-4a67-9c57-9021e44868f9", "sighting--86163b5c-ab39-4f88-8a83-f6e2d3a59731", "sighting--8209eb6e-58f4-420d-a0fc-eb674e843e99", "sighting--1c8f2737-edd6-4f96-8868-35f68136631e", "sighting--2e58c017-41e7-4d6b-a6cb-b4ea321a8797", "sighting--4cd65fe5-9e01-4c46-af6a-a35c3ebbc7a1", "sighting--6afe4889-5258-4fb8-9ecf-6e9a5cb411fc", "sighting--4256cee2-56e1-4a8f-b6d4-6b6bddf5312f", "sighting--8e6bb47d-abff-4838-b16d-ef4c114e3ccd", "sighting--1dbdb325-4df8-4b05-9e0b-f797ccc935d2", "sighting--53cafd12-e1a2-4ca0-bd86-d10fa2d6e14f", "sighting--cd45d274-f867-4f73-81b9-2f63d6bbb793", "sighting--32d898b4-8e69-4be5-84fd-0c6c07c313a9", "sighting--22a4b924-941f-445c-9fea-f3a8c1f756e7", "sighting--25cb16f1-6292-474b-8eac-d9fec98b8d2f", "sighting--476ddf94-37e6-4b1f-a214-78146c8f597f", "sighting--bd01e7b0-4ea7-496e-ae17-886946032590", "sighting--02b217be-8f63-4bc3-aa0d-5ba9bda2ef08", "sighting--d286e10e-1d38-4a1e-858a-106483a78c87", "sighting--bcb7b815-6e16-416e-97d3-7e3b42f4eb6b", "sighting--a14c17e1-9b0b-4297-aace-ae79a4db90c1", "sighting--207f9a6e-2681-4ab6-80f7-0c98debcc933", "sighting--8035a842-69d3-45a0-bf86-c53b84931edc", "sighting--2ff34cac-1f70-4819-a5a6-877b3eef43cf", "sighting--d8cf0e36-cd2d-42e5-865b-304f430539f3", "sighting--6aafbb3b-ef8f-43bf-b360-241eb9a8e01f", "sighting--cf0595cd-2103-4d51-8f96-92cddc12f7ef", "sighting--9a6cdcd7-c3c2-43b8-a53e-0709f5e087e7", "sighting--79e2094a-fdd7-4fa4-a67d-0d6802248912", "sighting--e0878e1d-f724-4609-8a82-25cdbfb4ee0e", "sighting--22ef5411-e54d-48ec-85f1-85b94c137a04", "sighting--cadaa78c-1235-4e6a-9009-dd1547069885", "sighting--c737a28a-a74b-48bf-a886-76bb0dc434f7", "sighting--aad75975-c08d-4a21-966b-e939693fde79", "sighting--38509c7c-7110-4f7d-8190-9e73b57e0257", "sighting--2f8ead10-da58-4611-8631-c7f7e7e42406", "sighting--9b14d69a-45f9-4f83-abe7-4e8192e87774", "sighting--7445be3d-3e8f-4e80-937e-511fb0dd2c3d", "sighting--08304df5-b283-4502-8697-518cbea68dbd", "sighting--21b6e4b7-2abd-4aea-828a-761a84fd2eb1", "sighting--5ede1e26-9fe1-4baf-815b-530ca7d5bae6", "sighting--be17a007-96a2-4495-b8a0-4291a38d4bc5", "sighting--6bc4cff3-7534-4340-89cc-3b56f3d42862", "sighting--8d44338b-ef74-43f3-b18c-8fc9c9e2e017", "sighting--9ce04bbe-cdc0-47d0-8a5a-e229d9e7cc4d", "sighting--895d7a03-5ba9-4b33-b71d-3a171dee342f", "sighting--0f569f69-5649-4d60-a271-7465ac850681", "sighting--5f93c327-76a3-43ad-abb3-2079f3d1f5be", "sighting--a7268466-677e-487b-ad8f-6db737915a6f", "sighting--9cb2d94e-fca0-4c5b-83e4-897ae7a412a8", "sighting--de254db3-4d97-4050-bedd-f5bc02378ac7", "sighting--e14e65f7-abaf-409c-b899-512d56c47c6b", "sighting--91558d2e-2f75-464c-818b-209b9882cda6", "sighting--19d00096-47b3-450b-b730-e27003dc2b36", "sighting--a658e462-8f50-44af-b976-7eca897f0db3", "sighting--ec735155-a9b6-4ea7-8bb1-ba062c8b35b1", "sighting--353de151-1643-4845-bab5-f3c004585136", "sighting--52af957c-0aa2-493c-a055-3ab317a0a87c", "sighting--b136691e-6247-4a8a-8b63-c8f944ab7224", "sighting--819dfbc8-07fa-4359-a739-eed48cb820d6", "sighting--417c3b04-dc07-468b-a658-704b745ddfee", "sighting--ee7506eb-7353-4cdb-819e-7599b4e47a44", "sighting--261708d7-658a-4e0e-9bc8-8648c6d7cc78", "sighting--0f9a5dd0-23c1-4a2d-948e-4450e434d5f8", "sighting--c35b9b48-72e7-424f-8a3f-4be9a3f7b2eb", "sighting--ec2ba4c3-b485-4cee-999d-9587cbccdd6e", "sighting--2f494bbb-6f97-436d-89d4-cf3315b58761", "sighting--59d991c7-c379-4556-a548-a27c1a2eb4d1", "sighting--873f9171-1f51-4aa3-9b05-6da32b0acf6e", "sighting--9226951c-fcf4-4a25-bf7f-088cb865e0bf", "sighting--3e826ff7-93ae-41e5-bc75-e72235b9f7c7", "sighting--671afb3f-112e-433a-9824-80eaf803c309", "sighting--69367583-eb7c-4570-a44b-cf2d279e3075", "sighting--64dfcfb1-fe22-4e9e-aae3-7ecc349c1a00", "sighting--146b305d-02f7-4a22-b4d3-045971019a9f", "sighting--56d3c268-c79f-497d-aa9b-8ea022b76f7e", "sighting--eb0eb982-e160-4624-8a2e-0a1181cf1c8a", "sighting--806165f4-50b6-439d-b829-dea98facf722", "sighting--bf817c91-7ef4-4884-b345-ac22d82d3483", "sighting--944eab1f-108c-44e1-a652-f8f803d3bf81", "sighting--1ca5bc33-9495-49ce-9ef6-c6bf0f78c34b", "sighting--5c332041-cd7d-4524-8cf4-fbb05b626842", "sighting--0f844065-967d-4255-980d-359f0cd1f350", "sighting--0ecd93d7-d8d9-4413-ae18-7a728686cb83", "sighting--aa1c43a0-ce38-4427-9a63-256fbb870ddf", "sighting--34b7e618-86e8-47ff-82d6-d3d9783d92c4", "sighting--49b5ada1-600a-499a-9cba-28ce8a1eb599", "sighting--1e9ee74c-a338-4366-a1d1-be59ed2fb4bd", "sighting--3a31e44a-401e-4a8d-9da8-ee808a45ed58", "sighting--fc4fc6a6-f962-4a24-992e-e562134a27bb", "sighting--e89e327f-066b-4036-9771-4012906234b5", "sighting--eaaa3410-e07b-4764-8f53-caffc3198f45", "sighting--e9921ce0-be52-4102-a042-2892d5a4aba0", "sighting--9c5872fe-68b9-452d-9c9d-46c172d2b69a", "sighting--c00cff52-bd1d-47b2-b857-22715039359b", "sighting--03de547c-731a-49a9-9832-67b1882760c9", "sighting--cd0dc54c-4bcb-498b-955f-95300da28782", "sighting--0a3682f7-1c8e-4c72-8a32-be2a719835d3", "sighting--e448f0aa-5b63-4047-a50c-0428a9a96cbf", "sighting--6a3bec04-e291-446e-b42f-0de505d42174", "sighting--90cf3605-cab6-4352-8974-396d3bd5df52", "sighting--4eafd4c8-821c-4475-ac74-5c0bd127b247", "sighting--0d17bf4d-42ab-4ee2-bbf3-7f0606ebeeba", "sighting--25ae5cad-2840-4508-a618-13c2884f7d5a", "sighting--79105664-2f96-4d30-b2b2-e0099043f453", "sighting--e4148bb0-e0f1-4e95-a6a6-df6201e87c25", "sighting--690619e9-fbf3-4828-91f2-df614c521971", "sighting--54473470-13cb-437f-9310-7df21e8887fc", "sighting--9e8cc1dd-6c99-408e-bdc1-e12872ad5aec", "sighting--b36cbd16-e3fc-4b9b-8e33-073bdea83872", "sighting--38435227-6629-450d-80d0-453a70efdb96", "sighting--21e9960b-6a65-4f8b-ba17-388b7ccb7359", "sighting--e8af7828-efa0-43fe-b225-f9bcf83c869b", "sighting--478387d4-730f-4ab1-80cd-b07244f382e8", "sighting--63bda83e-927c-40b1-87a3-64f14c8fea05", "sighting--dc13f41d-5343-4a48-944f-f0e25aa03106", "sighting--cce18820-6f34-4faf-a5b5-9f2cc86323f6", "sighting--4204d2f6-7fef-432a-a497-ec4e7ca5b6dd", "sighting--fd7c355e-8991-4d26-9b68-d632052d2bbe", "sighting--6ec84cb3-ba74-42c1-8c59-195688e84fb6", "sighting--d4277bf2-a607-4d90-a25a-d2cf4e854e78", "sighting--78064c3e-8a84-4655-8f86-2721694bfcc4", "sighting--91ed9cac-4050-4310-ae76-40885c9b8daa", "sighting--cb6bb705-0cea-491b-bb27-d8fa751eb28f", "sighting--cea7eb83-34bd-4b22-962d-c57baa297c43", "sighting--c0597453-7673-4ffa-9e83-94d8efa75c3e", "sighting--54c4fb6f-a4e5-46a6-80e3-05bff11b0ae8", "sighting--f7ddad13-ded5-46da-a29c-d15b13854c6c", "sighting--8b4e2a90-81c6-4ee7-9db5-8931c0702b75", "sighting--694648b6-ecdc-4391-8afa-fba33ea223d9", "sighting--21e0cb8d-dbb2-447b-9553-d8ed1b93a843", "sighting--a26887af-263d-4444-a71a-2123deeb759c", "sighting--0740ddf4-9182-465d-9aaa-f13d3636ef07", "sighting--a37fc9cf-ed2f-43c4-b980-735d7588acb5", "sighting--31df5382-8488-48fe-bba6-596823c97b22", "sighting--2f970145-beef-4873-9d39-d80ee55d47ad", "sighting--94f3b426-d19b-445f-a858-5c5c19a0a46d", "sighting--3f8b625b-fb29-4900-8030-85e726577e31", "sighting--c1cbb3b1-02ef-4680-a0f4-57824f5f3579", "sighting--e73d77d7-d860-4b5f-a037-198c8b78940e", "sighting--1b832ab3-8d4b-4129-9268-8a4a48e9a5d7", "sighting--22d7e55c-a5cd-4d9b-b8ff-21cffdc7dd05", "sighting--7bd7d642-0a45-472c-ba4a-9154b1982307", "sighting--2f38af8f-78ef-4b2b-96d2-0117f803704e", "sighting--93de5674-a0fc-4d53-913b-5f877e0eb490", "sighting--e8ee4d2f-f6e7-45db-9daf-990a75623df6", "sighting--509f4213-0158-43dd-a1e5-4e3fbba966d5", "sighting--18d38f94-42de-4101-8f05-db1cbbeddded", "sighting--670ace98-9c56-4db5-ac1a-4311a36adb38", "sighting--a2205c9f-f885-47f9-918a-e9fbc33defff", "sighting--2e99410d-b50e-45ab-8be0-427000026cea", "sighting--ed6dc726-f741-4740-9560-fd4d6e04af8c", "sighting--d47435d1-ee59-4355-9716-bbb857b52987", "sighting--e42c40b0-8760-4b21-a4d0-a207dc877907", "sighting--9a91145b-5593-47db-964b-ac0555c47f32", "sighting--761858b3-4f44-42e1-b72c-73a6d3e78933", "sighting--927a599b-3437-431d-bb48-830fc0f3baa9", "sighting--24c1b008-340b-43c4-aed5-c4b5231d491f", "sighting--6dad3794-a2e8-4dfa-a38d-b10681c9ed0a", "sighting--9c321ea6-827d-4c1c-a370-54539dbfb446", "sighting--feb4735f-ddb6-48fd-a210-b9d5c59c4213", "sighting--7b5e6481-aebb-40a1-8a6e-212ae47cbd54", "sighting--414aa24c-71b2-42a1-82ba-c83e914a0896", "sighting--df78898a-c53a-4338-bc36-f3f66d7d275a", "sighting--ec1d31e0-f107-4be3-8e05-4285d2fe17b2", "sighting--945d318d-7f93-472a-a480-a3e4a1910287", "sighting--759ac60c-2618-4c14-8c5b-9a3a8f51cabb", "sighting--529e51da-f88b-446c-8278-12e4d271e69d", "sighting--356ce4ab-ab75-410a-96cb-273305378944", "sighting--939fc9fe-aab9-48f9-a1f0-cb856af7cd43", "sighting--e09bd4a2-74a5-4eba-b10f-2fff253471a0", "sighting--ba8e5316-2351-469f-8083-2bbdcf348461", "sighting--78c9612e-95ac-456f-8566-2378df7a6311", "sighting--a6b25e6b-ed76-43b9-9cd9-796f74c2f96b", "sighting--fce4498c-654a-4e61-a177-be0c69e79976", "sighting--6e659a7a-2660-4250-a9b1-8e9f83bce90f", "sighting--e0384a0c-9801-4c8f-a3e3-dcf1136b9da4", "sighting--181d8211-47c5-48b7-9171-df5f61dd7349", "sighting--a10ad7b4-9f41-4bff-8063-b23267ef02d4", "sighting--a0eb871d-afcd-4d65-b587-522323f6d420", "sighting--d0018d75-4a24-4797-87f5-7ddabf79b7ad", "sighting--0fdb3823-fda3-4fb9-a162-8f9171346c51", "sighting--4c0ff82e-fa77-4b29-b442-69457d040e03", "sighting--e1016d68-5f57-4538-974d-11960915e75e", "sighting--2f510e20-49c0-4d78-afc2-0cdbca806e8f", "sighting--3595f056-6c8d-4bca-92e1-686ba7486f00", "sighting--d03fc117-6a46-44b0-a804-a05cce90583e", "sighting--f1e15904-ec03-40e9-b210-ca9dd7e09348", "sighting--41091c4b-cd94-433e-a778-867fa82d564e", "sighting--92f77287-3803-402b-9b40-1c2c6b27eee3", "sighting--d506757d-9b7e-429c-bf52-142d7d7e1acc", "sighting--5f8a16e0-c0af-4f2f-86f7-8c2338e9985b", "sighting--7f8a5e6d-c61c-47bd-97d0-6fd06848d115", "sighting--64fd4905-55d1-4a32-a148-0695159aa455", "sighting--94bbbee4-d1c6-40d4-a9f6-9222aa3921b4", "sighting--f823d7b1-9bd2-47e0-a978-ea8ac571398d", "sighting--e637d291-cc9d-4868-91d2-d85fe80050ce", "sighting--227970f1-d857-4713-bd98-e7ea8c899037", "sighting--898bb278-d8a0-4d70-9dcc-70db4ec0f227", "sighting--c061df8e-9229-4578-83b1-f6b90362cbaf", "sighting--dfe1b79d-88ca-4651-80f1-d092939cde8c", "sighting--c577abfb-4052-4187-82e2-f5e251967b69", "sighting--21a4b1fb-5715-43f5-8e39-976bcc773d6d", "sighting--db7656ec-d3ab-48c1-b22a-093b929eafc5", "sighting--571ac973-9e7d-4318-91aa-6cdcd89c288e", "sighting--49550b91-7f9f-46dd-ba37-fe8bf972ccdd", "sighting--9f84298c-c318-4f62-a10a-8e17088998f3", "sighting--5a2110e7-2472-4868-903e-a40c924bcea7", "sighting--73160f17-1bc4-4bc4-85bf-d62221c7957f", "sighting--8e16d364-25a0-4186-b8ca-6a45854bf1f5", "sighting--cdef328f-4070-4e7d-b524-401bfa31af29", "sighting--50a1aee1-db10-490b-8809-aa6358b11a4c", "sighting--f56a2671-84c2-411a-b9f1-404eabdd980a", "sighting--6518df0f-e35e-474c-870f-ad0504d7de9f", "sighting--ecdcdfa0-2150-4ff3-9966-7508f057c489", "sighting--2eb7235a-7d31-4bbb-a690-e476987f9ea7", "sighting--b85de275-9068-44dc-a02b-22e5900f64a6", "sighting--5d1aef56-adf2-46f5-83a9-710497dfe82c", "sighting--29d7d9d0-e522-43b3-818c-723159090571", "sighting--d2925908-2f47-4dd9-8c20-9dddda8f10b9", "sighting--49d543c9-a0eb-49ef-b0bc-41d774e88dbe", "sighting--8ae93178-e62c-4c00-a07f-f145fc5dd45a", "sighting--a4ddb918-df7d-4e9b-ab60-b3eaf0c7ba66", "sighting--8fdb206e-41fd-451d-a898-e115bf32d0aa", "sighting--451a02ab-dab8-45d5-8882-7083b5e56ea5", "sighting--221346e1-dbba-4591-9f8a-a1a012b80a99", "sighting--a612fec7-f697-4123-8328-a65965634a55", "sighting--c240e1cc-2f5f-49e4-91c7-b5a717c70cf4", "sighting--d4f3539a-38c0-4d88-b54c-68e3e8a62200", "sighting--69299a43-2140-47e9-9058-6d6c0a45ca23", "sighting--c1bac17a-acee-478b-9069-b31a0976277f", "sighting--88c3deeb-3896-4db5-837e-0ee9c31ae50f", "sighting--40230721-814f-42c3-9e53-a4017ce627ae", "sighting--8766010e-ee7c-4ef8-bcd9-90a5e785a4df", "sighting--60460883-2d3d-41a5-925b-661ce290320e", "sighting--410c6005-8432-45c5-a1d5-fe328848aeb4", "sighting--d87950ff-3120-4f33-8d9a-c5cea4dccab8", "sighting--9be18062-15c6-4bbd-aeab-21dbadd6ca19", "sighting--6c958f34-4719-4448-9205-eb8a13c14e3f", "sighting--2e986cb1-ee67-4aeb-9938-4f255206911e", "sighting--1ec651ee-3383-4d39-af4d-202ef04f6c2c", "sighting--0eb35d00-7537-41c0-800a-018e4243caa5", "sighting--fccb1248-d159-4621-b5cc-098b1eefda67", "sighting--2a7f1c12-7886-4907-b961-e7abe88849af", "sighting--1a39175d-6765-40e5-9f01-6a6fb8f0baae", "sighting--8d549850-e4b3-4e7b-94eb-cf8b9f4637e0", "sighting--29812887-a07b-4d7b-b401-e3440a9546a4", "sighting--5f82b32c-3796-4205-a973-b17194e41f32", "sighting--68b86571-75d2-4324-b8e3-b4ea45ba6310", "sighting--a68366ba-669e-49bb-aaa6-60345efa4467", "sighting--da1d1015-bea1-4a67-8b85-e338019ba92e", "sighting--5960596e-ac2e-4d7c-9ce7-f3f0596a7756", "sighting--380d11a0-0780-4c15-a5a1-d05092657605", "sighting--2078dabb-8acf-473d-8d00-f43fafc01b9b", "sighting--f1e8766c-1149-40c4-9ae8-763ac45ca788", "sighting--cd9149b9-8dd9-41b2-8bdb-fcb12a78e4f2", "sighting--37ab99c5-0c38-48c4-a716-58ab30908fcf", "sighting--75a6fd3b-1fea-4f55-aa44-b72b2722e27f", "sighting--3a3ad13c-fcf2-4f74-96ce-94dc8e3251e6", "sighting--c3106aa1-3c65-4db8-96f6-be50dc97efbe", "sighting--63ef289e-ff1d-445f-bdde-cc6bde4e5e64", "sighting--c3cbc895-1dff-4d0e-83cf-183ebbb5e508", "sighting--4fb8e48c-a1d0-4ce7-83d5-3285fe922332", "sighting--cd95f8a7-f8eb-4a3a-8553-aa2379119a9a", "sighting--5164ea58-7b10-43ad-a425-f50c694be772", "sighting--88e7c7cd-ba29-47a6-a0fc-748bca2079c1", "sighting--fa198cb1-fe81-46a5-b306-b25390f7a1aa", "sighting--604bc696-32a8-444e-8e95-a13dd384edcd", "sighting--99022360-8149-4e09-b01d-52aa409fb8a0", "sighting--ebd0d364-4c76-4cf1-9070-df448abc350d", "sighting--5b90ae7b-779f-48cb-aa7c-39f2e71971f0", "sighting--f2c4078e-e8dc-4966-9dd3-31c9c7f43352", "sighting--73dd0c7a-7451-4486-94a7-5f0e9b4d0ec6", "sighting--0199bc62-cad7-4769-a65d-509baab11fa5", "sighting--59c78348-3c72-43fb-990b-33d8db3c3cd8", "sighting--74c00416-7854-4f0e-82b3-eef437e6c9f2", "sighting--f3515635-3fca-46fc-ac4c-922a6345d8dd", "sighting--f6d5f1bd-fdf4-4908-b9ec-4e7105c03423", "sighting--1a8fdc0b-89a4-4d78-a11c-d13d00a047db", "sighting--d97090ed-e54c-4255-9fea-e86b8e555b82", "sighting--bf756004-bc92-4845-b852-8daa55ad1cba", "sighting--8a3a0c7a-00b3-4f21-96fa-6db9da86371c", "sighting--50d5ad8e-5406-4c50-8ad9-e22eef994238", "sighting--30f7696c-3f01-49d6-9912-2bedecd8dd24", "sighting--de8c2faa-37e5-4264-933b-7661570819b8", "sighting--2b7441f0-95dd-4cb6-a516-45d0d1ebfb01", "sighting--5e76915b-5cdc-41b5-b6ef-38190d635221", "sighting--a7cca8d5-a80e-4685-9d01-ec7dc6cf7309", "sighting--58e4c8d6-3580-4ee5-8b5c-163e5e925f98", "sighting--5df5fc9b-0f10-4cbb-93a7-4042242e3d69", "sighting--01bb6700-2b84-46c2-83e3-0ee66d60d2a4", "sighting--00d04f50-035d-452a-9fd5-fca46fe74573", "sighting--463d6448-dd54-411a-a19c-9e180b2f0abd", "sighting--fcbfdb01-7134-481c-9d2e-43c2d734ce99", "sighting--e4ab735c-eaa1-42b5-970a-7bbe1ba4a39b", "sighting--197e3055-5128-47ab-a568-0e7907f6700c", "sighting--5bb6759a-ead0-4ffc-95c7-8ba4aaba5ddb", "sighting--d735247b-d4c3-44f6-93ac-714bd904f92a", "sighting--1281a9d1-2254-48f7-af01-6a8e4d2131fe", "sighting--67b52826-ec54-4fc4-8599-28d35186c7fd", "sighting--cfc37f0a-fb6b-41e6-b67a-d02c680a0497", "sighting--3dc9ac40-24d1-4586-9c0e-d48e06bf4541", "sighting--6f84d76d-b58e-4bba-bf19-df80a2aaae7e", "sighting--b39371c3-7147-4c23-84f1-9ea885847bbc", "sighting--5847394f-5e87-4f00-a5b0-39636bc61d19", "sighting--e21e87ba-c01f-4f8a-8537-5cecb5b8d8df", "sighting--0993d40a-2319-410e-9c28-7fab4fae4cae", "sighting--c565b05f-2ad0-484d-9aa0-9ac2de948f8c", "sighting--f05f9b63-dca0-4b36-90da-3af84e249d7c", "sighting--57cc1ffe-f548-4e6c-830f-c80d0cdd940e", "sighting--9844e828-2cfd-41d2-b0f4-2137eb94d69f", "sighting--3eb6b142-c28a-48cd-b443-25982d68ffd9", "sighting--4c3e21ab-9cfc-4892-ac35-412946404d90", "sighting--39c7738c-93bd-42d3-aa04-e010c88e0f80", "sighting--9fa67482-f857-448d-972b-6f56d7db92c1", "sighting--08fe67d0-fe1f-4a91-8669-4da24cd91c4a", "sighting--0d194bbd-77b1-4701-9869-21bc6309befa", "sighting--8a443021-b050-4f0b-9acc-6dc404f252e7", "sighting--ff449be8-9f30-4aa4-a48f-a32a5d3151ed", "sighting--1cbe8d05-d46c-438a-9a6f-e80dd7cf9034", "sighting--f5a562cb-6b01-43e2-9219-3ec07aa80f1e", "sighting--8ba4e601-7ef1-4d3d-9360-4b085216a828", "sighting--48e7f54b-526a-449d-98ca-fbcf2f556b1e", "sighting--8205c20e-b508-4bcf-912b-f990d74d660e", "sighting--ca2bed79-e904-468b-b5c6-2f99d65a37ec", "sighting--fbfd8342-82a6-4210-978b-04ebd3a91d80", "sighting--3c8c39c4-d2a5-48f9-84e2-dcf07e7be738", "sighting--526134e7-5f15-41aa-b9f6-9308eaa5dbe5", "sighting--fd3678d9-a7fa-45f5-b2d6-f1e6cd8bbe78", "sighting--e354aa30-6cc1-4fbe-bc8d-fe4b39f30017", "sighting--d5666407-8d37-4487-b348-29e968088498", "sighting--b89592b2-5f2b-4e3e-8e03-925b1fb680d5", "sighting--3c1e6262-cfe0-4f22-b126-04146921dcaf", "sighting--b9a7c1a6-d9f0-46e3-90a0-b29c35b32a45", "sighting--044f351e-ed92-41ec-953a-0578923eb804", "sighting--3a88164d-bbd8-4401-9ab6-765de243905f", "sighting--7198637a-cf3f-4a92-a3ce-b3b818fd8f98", "sighting--60d1954c-8d55-4287-a0e9-6958095b0399", "sighting--bff99a86-ff21-4c7e-b22b-02dbba250c71", "sighting--7681e5ba-3aee-4e2c-8350-a099eec13e34", "sighting--1e3b86ed-07a5-4401-b6d4-32bcc04a3233", "sighting--4eeacebe-79c8-48b6-872c-08286a293a3a", "sighting--48386dab-d484-4f0d-afa6-d0b2e458762d", "sighting--3c5e678b-8f30-4573-b3bc-ed2af574909c", "sighting--f1278fa4-82aa-4c9a-b622-b38203c423da", "sighting--a9b770a0-f1ed-4a85-a552-041adc56c18d", "sighting--15e39992-d05b-40f3-8ec9-cb112aec6499", "sighting--615e741f-96d4-4584-ba97-c01e8c945ee5", "sighting--22d2da21-35a7-47d6-9ff4-3e4c1d969c93", "sighting--7cea0675-bd7e-4a4e-80a7-988ed77c6348", "sighting--a24a9edd-8f1f-4a8a-970b-51a26f85ea22", "sighting--7378a45d-9f6e-4e93-8ee8-0ca107383250", "sighting--64af9283-2d43-4777-a3b8-1c3d78604a66", "sighting--a2a121de-a3e8-42b8-baba-060f80de1aa3", "sighting--8737e268-12c8-47fb-bf6c-0e5852676be3", "sighting--6616ca15-e074-4265-b06e-bcdbb42fcade", "sighting--bcf76664-8640-44ea-a894-a9bb0b458b7f", "sighting--80e9448d-c85e-4428-a7f6-bb3e4415f62d", "sighting--255dbb4a-05f0-4bad-bc01-a8ce21c5f36e", "sighting--34ef62ce-dcc2-4451-b05a-de94084ca083", "sighting--3e4af134-ce0f-4fb9-b3a7-0a3889807f5b", "sighting--2b922c11-4ef2-426b-aa73-8d3edc706ace", "sighting--05f8e1fd-d8e7-4b5f-adcb-24856ac5a7c2", "sighting--d6c3423f-53cd-4fdf-b787-bc382d113f0c", "sighting--8bb7beb9-16ed-489d-b8f8-b813444db789", "sighting--ab0fcafc-45cd-45ae-bf66-8f4a24cce1ea", "sighting--e531c7f1-2b18-4d02-911e-62b61e37b220", "sighting--0018786e-d491-4dcd-a748-255c1d2f3fc3", "sighting--7b1cdcc1-0d3e-429d-a0d3-c3125ac1e32b", "sighting--e7c1bffd-970f-45f6-9e82-832ce366a2ed", "sighting--ea137042-4a97-40ed-8ba2-0dc6b7545fe8", "sighting--5d8b3cfb-2848-4684-9bdc-33e534cb883b", "sighting--7a61bbff-9453-4642-bd50-af4c21a27ea4", "sighting--05461f5a-e2b9-4564-98ed-67ec85dddd98", "sighting--b36a2e8b-212d-4b53-abbc-032772685405", "sighting--0493255e-b450-47cb-a23f-8843568a959e", "sighting--38d43e6e-5bab-4e99-83a9-5e74760de09d", "sighting--4a199f2f-4c11-485d-b3f0-80c70db90115", "sighting--49ee1439-ce19-4b12-a812-a25426659206", "sighting--6d7edecb-3357-4628-b793-842aa36949be", "sighting--2d0e4a00-faa6-4bd5-a65a-b31f6592de0e", "sighting--1c60df08-0873-4d3f-b921-5daa1c181677", "sighting--eb0e07eb-a023-40e9-abfb-d48d8ad815da", "sighting--3da95d50-71a1-4c46-a67d-378172ea5811", "sighting--85a7bdcd-b834-4feb-af5a-89832b52dae1", "sighting--5d160cb0-5947-46d0-99ed-bf4e7218eb0b", "sighting--e0ed6731-91cb-4e56-8a8c-f067743c2543", "sighting--e39f638b-dacc-4402-b656-c788ec0a347c", "sighting--19a89dd1-cc99-4336-99e5-cbf9e6048736", "sighting--770e08db-712b-49b8-a5e5-bfef40de33d5", "sighting--d027ae82-a16c-4541-ba64-9591fa3abeeb", "sighting--380dcabb-9cce-44fa-a4b9-e63732937dda", "sighting--02ccf228-f034-4be5-b4f0-bb2e1ccb3483", "sighting--46e78b83-7a73-42fe-8106-0d0493a7258a", "sighting--be4cf427-7c49-4451-a50b-2de085ca9443", "sighting--3cb17a5b-6398-49d9-9a45-fcd706385517", "sighting--dfb86b33-94c4-434c-99c8-d0288ed4abb7", "sighting--2b1b9121-3a38-497c-a95e-e2ee2b5b56ef", "sighting--9c26ff8c-7083-41eb-a18e-76eef2c0a9f3", "sighting--d711c87e-ae91-4629-9bb1-896edf8c6aec", "sighting--f04c73e4-ff57-4f76-ab8e-9e8b17e26e4e", "sighting--4b311ab1-d56c-450e-946a-6ac2a473f19d", "sighting--00c6e17b-a46b-4664-abb0-49809fe7c4ec", "sighting--5e135416-ec68-4334-8954-853d2fefdb88", "sighting--096bef77-6d37-4800-aa41-c1b7b55c2079", "sighting--294d9d76-9598-4c0b-99dd-a3363cd816a4", "sighting--83e605fe-0aa1-4e7c-8b2c-6dc0f652bcf6", "sighting--307902a4-6d60-420d-a957-9f3493fa5ddf", "sighting--64a8b745-b199-4a73-84d9-7a71b19599e1", "sighting--f1a39800-6f9e-476e-8a1d-e9990fdd9ca0", "sighting--7453c949-0b66-4942-bce8-7a273a2af438", "sighting--f0e25422-8a3c-4c41-81bd-f3906a139f78", "sighting--b5062de2-36cd-46a5-96dd-ccdf376b44cc", "sighting--ee6d1328-cb2b-499c-9a40-f3ab899ddeb4", "sighting--0dac6c98-311c-4171-8bd4-e7fe17313cc8", "sighting--e2aec278-7abc-4594-9d08-caec1c73e817", "sighting--4107228c-113a-4d04-9fb0-c66cb5550a0b", "sighting--1d082b2b-9edc-40f0-bbce-6516d8f99fd9", "sighting--06956928-5e5b-473c-b916-ae9ab475406e", "sighting--a7ae3d4d-2041-4e20-909b-6bce3780994d", "sighting--c2ac9bd8-852e-4b21-a191-be6a0a7f8e74", "sighting--bf7d7091-1030-4fe3-a69d-b832d73a97c5", "sighting--1e2c1378-d315-447d-a2a7-87d060b933cb", "sighting--f63f6013-403c-430f-a311-5f0ac7969eb6", "sighting--328ed303-3158-4208-9d26-5e8049543efa", "sighting--b7ad3f7f-9530-40f5-b9d2-8c098c27991c", "sighting--3195b7e1-90ba-4411-a4b6-b438ac039a54", "sighting--e7182c8f-058c-45d3-b010-d51d80f26f00", "sighting--0a1a1139-fe37-4aa1-b7c4-87301dbbdf2f", "sighting--77c4883c-784b-4e2c-8d8a-71be08d0033e", "sighting--01de0f42-c42e-43a0-9d69-85f10ff493c2", "sighting--bf5fe4e9-98ec-4a1b-9c58-55e822f42d7f", "sighting--4183f235-789c-4321-a392-7509a9ee9930", "sighting--8324aad7-58ef-4655-b7a4-582c396564bf", "sighting--2bbc332e-1921-46cb-83a3-876627797248", "sighting--b6cd90e4-403d-4b43-a64e-5ddf909a819d", "sighting--6ef9407f-d68e-4cc1-8358-9226871c310e", "sighting--19619b1a-60e6-488a-914e-62e6a3d9ca02", "sighting--1529e7c4-616f-4dd5-b2eb-890cb332233d", "sighting--53c5f22c-656e-4e03-ac39-c35bbeb73496", "sighting--b6ee9b0a-2800-418c-9035-38785331ad0a", "sighting--da894ad9-d932-4067-acb7-856693604bbb", "sighting--1beb44fe-3619-49c7-af57-39b432991d18", "sighting--a856de02-b019-464a-b338-e3e65a8f8c27", "sighting--db8c6056-e94f-49c9-b7fa-598341a8e2ba", "sighting--391fa808-7c6a-452b-b6c9-95f494ae5bdb", "sighting--5b2eb37b-a04a-4c3f-bf86-da3439d2ae63", "sighting--30d3c7c4-bc86-4263-97fb-96587a7140a2", "sighting--3dbec414-78f3-47e2-90d9-6b78f0fafcb2", "sighting--7960f0a1-c09e-4a3c-a21b-719adc101f51", "sighting--3fd7262a-99e1-446b-8056-638617a7ee6c", "sighting--3c370a03-72ce-4e5a-aed6-26fa63a7f6ed", "sighting--8489e1ca-57fa-4566-92f0-86ea00fb95df", "sighting--4dce23c0-7a6d-4981-b349-d2b88d403835", "sighting--996e1c86-90a7-43e1-a5fe-1d0095f66712", "sighting--cc3f88e9-5120-41ae-89d4-4bd1584ca046", "sighting--0ccd37ad-86de-4835-a712-cb54d29360ff", "sighting--b73d6831-ca2a-47c6-a346-01be3a27de86", "sighting--f0c9b0e4-7c1a-4bcf-bd70-0b9039a98a68", "sighting--3ebfdfcd-5540-4068-bd18-d4c1f1316355", "sighting--076654a7-e318-4118-a84c-25ac68a05e18", "sighting--b7489cb5-2de6-46b7-993f-78e2edafb160", "sighting--ebd77725-3fd3-4fe6-a32f-5b629e2d7d10", "sighting--98891a67-7252-4eaa-9967-c7251a9dac84", "sighting--37a061ee-570c-4bbb-84ed-570fc2502678", "sighting--10205577-54c8-42f6-afa1-8ad083e0654a", "sighting--e813eab9-151a-4700-b182-6a4d41eca841", "sighting--0953571f-9c17-4cd7-84c3-402aaa155ce4", "sighting--938ce1bc-4f3e-4a1c-a663-c1ba8c2dafc4", "sighting--30cf65e3-32a4-44d2-ae78-add0a92eb302", "sighting--55ab1202-55aa-4338-9aa1-f192eab6643e", "sighting--c3ff4e3d-7f24-454c-8b2f-d61940baef0f", "sighting--52ed796d-963b-45fb-ab80-f281f39903e8", "sighting--fcaf9e1c-7c34-4bdf-a079-2ea8840f23dc", "sighting--d7efdbcf-57b3-4b89-bad9-61745cb574e3", "sighting--a4dbc393-523c-49b9-bed3-76d494af0eda", "sighting--2a4cec9f-3293-406d-a65b-355f278129d3", "sighting--761bc0ec-1f8c-445a-8d22-aec608908ffa", "sighting--e0a92f7e-95f5-46f0-a9fc-4a7a3983dfd9", "sighting--aa2ef957-c3dc-40c2-ad39-92d6361baa72", "sighting--928fc66a-615f-4fde-8c6f-bc120c83abc5", "sighting--3893c755-1892-4c5a-aaee-a6e0312c2ac2", "sighting--a7ad3aff-dba5-4ff0-867b-c559b34d808f", "sighting--5e7d09dd-b52a-4e81-93ba-48cba2faf468", "sighting--c9390d30-182f-4d83-bf93-2bf054a7611e", "sighting--b0b2df4b-c1aa-4a29-abcd-81dc5766d75c", "sighting--39076d41-2d4f-453c-b6f6-5d93cdc93535", "sighting--3d2833b9-bfb3-4f5c-a331-ef056010abb8", "sighting--97b95dd2-17f9-4e1a-96dd-c69354c15d31", "sighting--eddd1561-3f34-40d2-9913-b06c1e51a0ca", "sighting--b0fa29fe-9475-47a3-911e-4bb29952b3c1", "sighting--0f366d9d-7c5f-441f-8c93-2d02eed625df", "sighting--faae81a4-87fb-43bc-90b5-6af33e6d9824", "sighting--2b8ec768-f6c8-45da-874a-cc89ebad6e5b", "sighting--72e30498-1dc6-475b-91c6-7d64d4ae1db8", "sighting--ac86b4b5-89ee-4e59-b0e5-24627ba1f06b", "sighting--4ba2eb42-14c7-4798-a2ac-36ec4d1a35ef", "sighting--77675eca-6d99-41c6-9bd6-9089ac0aa93c", "sighting--6d0d2ba6-003c-49fd-9fb4-6fb11e0263cd", "sighting--eb12475a-de9d-4038-8490-ab260ad8ad35", "sighting--f03f7578-0932-4a46-b919-cc8876098592", "sighting--a9f477d7-fd69-44a4-bce1-a3d556a82304", "sighting--6cd75c23-8623-4d0c-95a6-638b7cbbdf0c", "sighting--5dbc89ff-412d-4a5a-9972-2ba2c2f601b0", "sighting--3597f837-768b-43f0-afed-5f862f35c2b2", "sighting--3835b6ae-8928-48bc-8f77-d0083668661e", "sighting--dd75ea91-17ac-4b20-94f9-44e95793fbe5", "sighting--67df6d09-4d1a-44be-b737-e523d231d641", "sighting--c5a3de68-475d-4d45-bf49-222cc830bada", "sighting--b0970607-2feb-4ca8-ba1d-8aa969ef50f8", "sighting--833b145f-dc5a-4b4f-abeb-83f73f5f9ab5", "sighting--1853d300-687b-4390-95dd-1df676060ba6", "sighting--f9a5ea07-5018-41ad-9a0e-57d0bd0abce4", "sighting--3cbd09e9-8f14-4a7f-8b1d-0b23251f84c6", "sighting--95c9e484-5702-4e10-8c96-861da6ef259c", "sighting--3655c4a0-aef9-43a4-8a2e-aead2293729a", "sighting--54875f41-edd2-47fa-bac0-d7c6465db875", "sighting--ff4e4f07-2282-4c15-bef1-3046d9d1e061", "sighting--d7012042-14b6-4777-859d-a41bcb133d69", "sighting--8730cad6-2d5b-4607-9e55-f7658d449792", "sighting--ea6472f7-2425-4bee-990e-42e9918a7fef", "sighting--1ccae086-b43e-4c9a-b69f-26fd2287ef6a", "sighting--6b2c5626-f40c-4f4a-9279-4d0e86173aa5", "sighting--8afc4826-08db-4638-bdba-73dbc8e1f892", "sighting--bdf91f6f-8e2f-41e9-a430-a5bf9a471569", "sighting--d3b2ceaf-5380-46e9-bb30-19537102a68f", "sighting--82e36c36-7189-474c-b7b8-6ab1c1b876fb", "sighting--7bda6838-475c-4e64-9005-976465867919", "sighting--e0ac7d90-4ef7-424a-929f-a6533e8b8416", "sighting--603300b8-eb26-498c-80f5-ce564369ead0", "sighting--5a888b32-4781-4d48-9020-accbb73090fe", "sighting--7b9ca81e-1ce4-4395-b05e-62d130d974a4", "sighting--6c2af824-bee3-4281-ae26-5ff99ffb693c", "sighting--e0743194-6818-4fe2-99bf-0b59ced817cd", "sighting--168d1582-a3b1-458b-b5b7-45e431628bd8", "sighting--1d5953fe-e783-4135-8c06-1043522b2bb7", "sighting--5748352e-338d-4dc7-89bd-05393f89b187", "sighting--a31c648c-3f55-4707-a85d-b2544a3948eb", "sighting--a8d007e8-685f-49da-ba07-43d83ebe8a1b", "sighting--88704d46-2c84-411b-85f8-6d16007c2059", "sighting--cde0395c-9048-4df3-9c10-943fde98aa2d", "sighting--9acbbcf6-90ba-421c-9e04-5afeee5bef95", "sighting--61debd7a-ae26-484c-ad20-9c645d7e46e7", "sighting--343284a6-2484-4e1a-8184-8e5e8dcc83f9", "sighting--cdddfef3-91e0-431a-9f87-925ff0f86e85", "sighting--9f3f6896-7489-4b68-8e8c-787bda0b7cc0", "sighting--6f64432d-2e9a-4d63-892d-599e902be37f", "sighting--54066d55-685b-4c76-be06-2b437bd2d4c9", "sighting--c5644895-4fe9-42c7-b573-b63c2f46647a", "sighting--683b1f54-7280-4492-819b-7e7e72361022", "sighting--68f66303-2324-4e40-ab32-f69ebeea07f8", "sighting--2ad6b30f-b1e8-48dd-ae09-61c3db8d8603", "sighting--7d4dc2c6-6b2a-4bfc-8994-4db19535fe5d", "sighting--cb38c5ce-d0e7-4209-a94c-b1c26de61bec", "sighting--5805c541-d18a-4179-bedf-8d0346f11e59", "sighting--cdcbe13a-030f-49ac-a4ef-47a2bacb2665", "sighting--1649b880-d355-430a-b1b9-af7a4f46f151", "sighting--2393f1a9-1626-4ab6-af4f-3fb5538566d8", "sighting--543fd8a1-76ac-45ef-bc48-ef741e6294ab", "sighting--df159a4d-e7ce-4fac-9b58-ec8e44fb4378", "sighting--95ab84ec-0abd-4cb0-a18d-3a46978038a9", "sighting--37a0229e-cc61-4498-99e4-dfbf9b7b43e8", "sighting--feceb166-b0b7-4594-85ba-9dd997940178", "sighting--8aba3d94-5c99-48b9-a658-e9abb17d8cf9", "sighting--73447cf6-e008-47b6-9227-5201730f8556", "sighting--a7bd3070-7fcd-4f82-9b7f-1c24674d3cdb", "sighting--5cf0fc10-6fb5-4d1f-be52-0c96ab5d318f", "sighting--e9e2d189-ffd1-4582-98d4-b1e45f57c7a1", "sighting--70940049-888c-4ccc-b013-dffed92556f3", "sighting--2e371ba1-bdea-4e33-8399-4cd84efa66d6", "sighting--0bd81868-dc6e-4870-80f7-dae07505140d", "sighting--882fb652-961c-46b8-abc9-0597c59edd79", "sighting--601d79f2-72df-4e52-bd05-3d2b719ae21d", "sighting--8b922e8c-0670-4e32-bc0c-e2adcc429645", "sighting--ae33ce02-fb13-4159-94d2-f9ca015839fc", "sighting--4c5f40d0-d594-490a-b153-4043a4c289ac", "sighting--d9b4c101-4107-4a18-ae3a-3a90790b4a7b", "sighting--b0490600-fe3a-417f-9ec6-9b2cbd30a931", "sighting--1ae5d232-99a1-481b-9d22-2d56ab3d7601", "sighting--c638da3a-2a8f-47b0-bbe2-6730675d9574", "sighting--9c5cf06d-13b9-4413-8e80-f5055dc8549f", "sighting--2d70bc1b-b1ef-49be-b865-176f95fabea2", "sighting--f4bb7bed-b7fe-451d-a1ee-32d893b63f17", "sighting--6bfc012d-bc76-484c-8bc5-042c601c9fef", "sighting--9629c726-b3e2-4fe5-b67d-1c9153d6d2b6", "sighting--3fcd8133-71dd-452c-8a94-48b4dcd67832", "sighting--d41a0a93-d093-4bf7-b1db-e61e18702180", "sighting--64d50e34-d8b1-4d29-9114-34297b509d64", "sighting--1139183f-1a4a-43f4-928c-6254a10a6133", "sighting--e57895b3-4f31-4da8-bea5-6945df0b014f", "sighting--117489f1-c597-4204-922a-018b64f96241", "sighting--9c191a30-08f9-4605-97ff-3968f5e9e480", "sighting--7a2f906a-88b4-47ed-93ef-f446be05da8a", "sighting--cb35fe96-6458-4336-9ce6-d3e72d6b0b5c", "sighting--8a4b6cb1-c8a9-424d-a1c9-0b2248d2db8f", "sighting--9c05335e-dbb8-49e9-80ab-cb4b7d97f611", "sighting--eeba6c06-5bf5-4ff7-9bcb-f003ae20c842", "sighting--e10fc888-f125-49ce-890f-b689b4f8b0f6", "sighting--0bffd68e-fbf5-44e3-8060-52569d122154", "sighting--5256af3f-9256-4af2-8c9b-543ea61eec4b", "sighting--1d98dce9-2348-4dd1-afe7-ac06e7ec61b4", "sighting--fd5461ee-50f4-42ce-96cd-0a035e2af79e", "sighting--a120078d-93ff-465d-998f-be6e1a9afded", "sighting--721e1b15-90c4-4065-91b0-fc77ffd837ae", "sighting--3af3fabb-3e2f-4d2f-acc8-ab162c65085d", "sighting--2cc9d585-2b94-4e33-83e3-89b2a28261a1", "sighting--b568e731-5c9f-4cca-bb99-517c76d418dd", "sighting--2b811640-b571-4f2f-9954-531c1574c2c8", "sighting--9b793846-53cc-48a8-bbf7-adcd9b18431c", "sighting--6b4ef8ae-98c1-48dc-ba43-9823ba4a8271", "sighting--8aefe7ec-295e-4654-a162-bf571bb97b78", "sighting--d8958667-19a4-4f85-8037-98b95bd3be17", "sighting--d3da446c-b101-45c3-8394-60403ef15a29", "sighting--5a79caf8-2a8a-473a-a6d9-838e119e0cbf", "sighting--307254f9-eb58-49b3-b748-ecd6df1881e8", "sighting--7eb3cbfe-bcd1-4a2b-bf43-e4e7d627c16b", "sighting--5334b4f7-4b42-4eda-92a0-029eb3a74b43", "sighting--54ff10fd-ec0e-4b42-b3bc-7c6706b62bc0", "sighting--f7787fdd-2d90-46ee-8255-8cd5cc8f14e2", "sighting--86876f13-83b3-4b4a-baa9-521e0091d96f", "sighting--19249ebb-9632-4228-8efd-bbd5efdab001", "sighting--9ebf81f0-afeb-445a-88f1-5bc66ae7187f", "sighting--73c53ea2-1be7-4716-a3c6-0c637b8169c5", "sighting--c0562af0-a916-4f58-8a7d-f072473e8662", "sighting--d45c364f-ba05-4af5-88aa-3063b5d32435", "sighting--f38fe8e5-d6c2-48d9-b591-7118fc8715f2", "sighting--d3d31cd5-6cb9-4a7a-a2cb-40456dae46b2", "sighting--29554aad-31bb-422d-881a-64980025701c", "sighting--30235aab-1548-4801-8124-cc61d02c0a5e", "sighting--51279dbe-780f-4bfb-bfd7-35fe648f3d7d", "sighting--65b2ea8b-a787-48c8-8fe6-f51a2fadfdf8", "sighting--f62dd726-d556-4cd1-bcec-d5ad586f08f7", "sighting--adc981e7-9cac-4e20-9434-8cc3016ec16b", "sighting--d2ec9e86-5394-4719-af6c-45de4adcd581", "sighting--554ef91e-3dc7-45ab-8d0d-2684f3c324d2", "sighting--621f1a30-6dfc-4c2e-977e-64f1ead8ac7b", "sighting--2670034b-1fcf-4fe1-9e5a-e7bae57ddae6", "sighting--d459f7da-afb6-4c6b-8b2d-4e19d1fd2b2b", "sighting--a46a28ae-8d74-4a33-8da2-62ca0737b324", "sighting--791a9af1-f69a-4885-91c9-07fa4971e607", "sighting--68cebe1a-8e2d-4a52-b6ed-dd938cd1192a", "sighting--4b49667e-c7f1-4b99-8a69-ee6127cacd2d", "sighting--ec98e44b-3a85-414a-bbfc-fd9b8f872a14", "sighting--450ef2e1-ba15-4bf9-bc9d-1d267742f1a5", "sighting--78d5047a-8b4b-4e8d-a6f6-8f401e1c03d9", "sighting--ca2e5f32-b1aa-4885-bf7a-c566cf1c6bb0", "sighting--a3415a39-a22a-433f-afd8-488e4999b0e2", "sighting--18c0777f-b6fe-463a-9bd9-cfeb058efd71", "sighting--4aae7169-98e4-4346-b090-93ca815aa38a", "sighting--92a78391-25f2-4b82-a7c1-7bcdefcca770", "sighting--31737705-e307-4eae-a723-4b433cbcb9ea", "sighting--ba3617ab-dd6d-4a40-9d94-987e41dc7b96", "sighting--1aa50af6-760a-4018-a60e-08c4d7c6521e", "sighting--d484eaa0-267f-4f94-8bba-10870b9989e2", "sighting--35c869d6-aa3e-47f2-8979-58070d4968f7", "sighting--fb7dc0bc-cc45-471e-bbe0-835e8696fc01", "sighting--53573eac-ae29-487c-9106-3e35c8cea7c5", "sighting--37401082-1239-45d6-ad8d-9512d7df6645", "sighting--d3b54442-b3b0-4d04-869c-17d96aacdf35", "sighting--76dd1d2e-5e7e-4c9c-b6a0-798e40643d24", "sighting--7ca88e50-3f36-4078-bbae-2e5bc4f2167d", "sighting--6b51cfa7-0201-4481-92a3-46b1aae4f896", "sighting--c35246f0-30a3-4a58-8c1d-8f35cbf44b50", "sighting--7a785dfa-4465-4498-8c68-eae2a1cb5b0f", "sighting--7ef1f05e-de35-41f2-bcb0-a40f939bac81", "sighting--4ea881f9-37fb-49bc-b664-857651bd8888", "sighting--d580091a-319e-40f4-b7da-cc9a742fc0fc", "sighting--39b0bcdb-8b99-4c75-91c7-cd5325824c32", "sighting--207c8263-a562-4313-89d5-8d6e923e10c8", "sighting--a5afb1d8-5825-4b35-a2c0-03e8e64d45b9", "sighting--fdfe0d0f-d397-46fb-b9bc-cb75b794d05a", "sighting--fd9ad47e-347b-422a-9563-07d293d2ac86", "sighting--637ceddc-e91d-4bf6-98b2-d2a90998e9ec", "sighting--1344e80b-3e83-4bc0-86fd-04f95d0c791d", "sighting--60fd1d39-4a62-499e-88f2-3785c23ea340", "sighting--4ef3e401-e48e-498f-9d41-be7662c4b245", "sighting--d678bebf-d812-4076-a334-82af36941187", "sighting--6be7763b-c880-4c53-971a-8d314bb57301", "sighting--87827c26-b51d-47ab-a421-fa3196b5b4f1", "sighting--6745da76-dd4e-4368-836c-c8676816866d", "sighting--09582769-7ac6-43c5-9b87-096833eeb667", "sighting--153950e3-bad9-437f-b673-6f43db9f1228", "sighting--28ad4ff8-a811-465c-a0e7-63786270dad2", "sighting--a01f7958-7e34-4b80-ba5c-459f0b992407", "sighting--cd208d49-24bd-46ef-8a2b-44e9473e0805", "sighting--ab957382-b338-4527-9b2c-9c9bb63c6576", "sighting--4c4ddaa8-6335-4cc5-b838-06c07c015b24", "sighting--97858622-7aa5-4939-b1fb-2ca16559342c", "sighting--5c5a1bbc-de99-423c-b409-10a5283e9063", "sighting--bc44a801-e7d6-4233-a1a5-209f7647e5da", "sighting--646a4962-2753-4530-877d-8a838dbc898c", "sighting--688b8a59-1545-424a-9a53-542d3e115e7e", "sighting--96f9bb20-b8cf-437d-b45f-d88260e93772", "sighting--7f5155b0-34f3-44b7-b758-560435feb838", "sighting--c153fe7a-6bad-4602-8967-57ccef9b9c80", "sighting--c67288fc-8051-4202-aa36-efec95a674ff", "sighting--4c645074-9944-4881-81ef-f7c779b4a27e", "sighting--941028ac-36b8-438f-8dec-eb7a74de2a0c", "sighting--7a383666-a9be-4255-8c5e-0b6fb2234f74", "sighting--7c049536-2ae6-4f04-bb9e-d39087e3c1a4", "sighting--ac6923ce-ea7a-45a0-b026-ffc26863ea25", "sighting--8f43037f-e7d8-4836-bbb8-2b80886f319a", "sighting--f934acdb-ef72-4c4e-91f2-ee6aa21b4e63", "sighting--df94b2aa-0528-4f49-9bab-91e33f149cb2", "sighting--74a9cc89-ca57-48b6-8193-1365208c4ba2", "sighting--104f8d2c-9f48-4994-871e-fa0b1d69609c", "sighting--ff9038b6-d687-4248-98da-51faa819dd1d", "sighting--c80a46f8-29a3-4ac7-9702-a80a212d9750", "sighting--406723c0-3277-40c1-9074-f760ce7591a3", "sighting--04a1c81f-0fb8-4e20-8944-6e8840410a6d", "sighting--93a65938-124f-4e66-af48-5bfedb6147c6", "sighting--b7acd152-5f78-4c8e-9c58-b374f6c980c7", "sighting--84ad06ec-6196-45fe-80f0-4bc1fe297367", "sighting--c047d96d-34d2-4cc2-9916-20d420586245", "sighting--9dc717f3-779f-4ba5-b23f-116f594dcf19", "sighting--58066104-c095-4ac2-a1e2-6ec050db6cc9", "sighting--7996897e-cba1-48ac-b11e-dd3c8a37ecdf", "sighting--79f8fc14-9adf-4527-bc60-8d98d3744fc9", "sighting--3966d27b-0a82-421b-959c-06b406b1be7b", "sighting--332d8c17-c71f-4ff9-b9ee-f3a168104d8b", "sighting--0e4fdeda-2e0b-490b-a2fb-55f13d3fce9b", "sighting--f69b8439-7cf3-4fe8-8084-1e4bb4676b08", "sighting--494121e0-bf15-4407-8f11-d235f642abf3", "sighting--a8c99586-81f6-4da6-9665-2742b1bf5b85", "sighting--5d5dcac9-aef5-42aa-8b1b-53760057fd80", "sighting--b2712013-919e-406e-9fe8-9bef70989426", "sighting--8fb1a402-fb02-4159-9215-d0ad1b89172a", "sighting--f7f3563e-4f2f-426b-934b-39506e389109", "sighting--a9592372-2a30-477a-b6b9-1f9993006c32", "sighting--d576b4cc-568f-4884-a7d4-ae3c00d3a2ff", "sighting--b8698150-c914-409e-b6f7-2b825653dbbd", "sighting--5c4f506a-1039-430c-954a-2042689f825d", "sighting--354f8889-4df4-4c40-8240-9fc78fbe4029", "sighting--31efda40-5e8a-4acc-9bc9-1366d9f829a4", "sighting--a75d6db3-a79a-4ba6-9890-717e91af7eb7", "sighting--0cfec353-c7ad-4c97-a8b9-d8c1100ad47a", "sighting--21d5a7d0-e170-4bfe-900d-242523bae998", "sighting--97eb2264-fe5d-4825-996b-c5476f8ddd95", "sighting--7bc075d3-dd9a-4561-bf61-41b7c3c6c7d3", "sighting--bd1d7e8a-320c-4e66-9316-1390cbfe3c23", "sighting--0cf7bb95-7a2a-4c92-b40f-4ee61441102d", "sighting--f59677c7-1ee0-4fc8-a4e9-1d5328b90848", "sighting--e1009eeb-34d1-4e46-a375-cdce31e165c9", "sighting--d95c6c10-d6b6-43ab-b4e8-c686f9c22ed9", "sighting--622bee40-6dfa-4c10-8520-7f6fdbd3bb3a", "sighting--de3aa748-759f-4010-a1a1-d85bcaffd7cb", "sighting--1f0e82e8-e4f4-49ee-9165-ce61fb4b6322", "sighting--7805452a-4e83-4d1e-bda1-242b94c02d62", "sighting--b2b8eb7d-9a7d-49af-b334-355ea89365b2", "sighting--b348c0d2-cb94-40c1-ac1e-594954f680f0", "sighting--6c38e9fc-27ac-445b-9659-605cf821b855", "sighting--f89f779f-159e-4499-962b-b7b2a4198df2", "sighting--7a4995fe-c406-4cce-8e30-b5d08f96067b", "sighting--8a78f0f5-cf4f-4162-8401-3b3edb9ce3a5", "sighting--7628e65f-7539-4f28-b4b0-6f80a6fce343", "sighting--25e976df-89ff-4c4e-b73c-fb9b5209a0b7", "sighting--e0945ab7-e8f6-4de1-a227-2c91aec9df89", "sighting--0fa07016-3638-4850-aa37-ce23894a037e", "sighting--c718d6d5-721b-4019-8671-1b88c28c8091", "sighting--260e8935-91d0-49f3-a40f-5b887e54cc77", "sighting--d75a8965-a0b2-4965-b27b-5dceb7c1c8e3", "sighting--79a7bde9-8f42-49e4-b7f2-4d57360d1e89", "sighting--68db0e52-7310-4546-bed3-5576a17ea8e5", "sighting--3a6a9c10-1f4d-4307-9e63-37e4cc525568", "sighting--923c4270-0843-4b3b-904b-f8af7edd3ba4", "sighting--402827a6-ea19-4641-85bb-6bae0a419f94", "sighting--cbca7af9-4064-48f2-9c3a-2fe137fd4360", "sighting--b9e95943-31b1-4aa3-a0a5-8f14cc55f682", "sighting--948a1bc1-0159-41f6-a36b-538a88ac5913", "sighting--934447fa-2795-4e38-a9ff-2386810bdd35", "sighting--f0754fcd-157f-4ec7-8cd0-69ca24ac457c", "sighting--54ed68f9-e13b-4fbd-b4d6-79e458178ba8", "sighting--9f2f148e-2b5b-4934-8c5d-61e416938ae9", "sighting--1bd51e3b-2720-4249-bdad-2ffaedc51b0f", "sighting--45fbeb67-597a-48bc-a4fe-8e28796d5f05", "sighting--ef85f3ab-446b-4ddf-b25a-d7e09755f3dc", "sighting--2df1cb0a-9a4e-469e-9905-dbbda0c8a58d", "sighting--3559deba-7240-4365-8e0a-4a393adc06c2", "sighting--a07b2fd5-da8f-4199-a0b8-4469e756abb6", "sighting--94e04d7b-37d6-4a62-9b19-03773a6e4b4a", "sighting--6607f83e-04d0-4c63-ba64-309338533892", "sighting--ea7f3a0e-8190-4f07-973f-b0a5e1aa467b", "sighting--57047a99-2078-4158-80cf-7ffe818d110b", "sighting--dc317810-530e-424a-a9e4-b15c05110dfd", "sighting--ea00a5eb-353b-4ca0-8beb-bcecd98a8f21", "sighting--08309623-f0e5-4419-a97c-af76827a6960", "sighting--424c9651-a573-4c96-8336-7821860679c1", "sighting--34c97de7-60bc-48fd-aa06-231e254fe147", "sighting--18a233a8-2acc-4c06-ad19-893cfb6a4034", "sighting--52c51139-60d8-44e9-be1a-f8088500c0ef", "sighting--63f63570-e4e5-4e31-b5f6-f0213e3e33e5", "sighting--323dfcb4-a3d8-40ac-a385-29d1145c4cb5", "sighting--7276a46f-78f2-4e5b-b656-6052c74a877e", "sighting--68def72e-b0df-4cd2-9139-1133d7a16e30", "sighting--151429f6-9f8c-4a67-90e5-192a03ee84a8", "sighting--6268fb8a-9b17-458e-8ccd-0418398888ad", "sighting--88fab292-ac71-4dc7-b26b-896019d1fe8a", "sighting--f8351027-e622-417e-94a5-4aa31554385f", "sighting--7e60a695-eef3-4548-a583-c527e80f5547", "sighting--ff5b17c4-d22d-4b0d-bff2-cf765cc69e1d", "sighting--802cab84-b7d9-4f13-93b5-5013baa19faa", "sighting--3fac11c8-7abe-4e3a-b5dc-95dc12a924e6", "sighting--6a0f735e-c90a-4002-ae23-7c89e7d49511", "sighting--104620d3-5468-4dd9-a8c2-75c9d4027993", "sighting--8e1faf65-b9cb-4965-a257-e12aa1b4d47f", "sighting--53107dbe-fe2b-493e-90fb-b80c722a7bd6", "sighting--93a10be1-76e1-45f6-af9b-67445c584f9d", "sighting--b95ac713-cdee-4981-b221-d23b1a1c4bdd", "sighting--5d35a8fb-fa19-4b0c-b51c-513ca1529ad4", "sighting--ed81816a-68f5-4f1c-bb4c-6b7ab353431b", "sighting--041ea3dd-10f0-4580-bb78-b33f7adc23eb", "sighting--bc039a8b-07a3-46a7-abc4-5cc5c5f9cb20", "sighting--d7cf35fd-5f90-49e9-9e7d-6e9a6a651171", "sighting--bf513381-1dda-400c-a214-cfadb4470cad", "sighting--c863a820-9bf1-4542-8104-14cc0463f2e2", "sighting--54b7e3a6-2fe2-450b-be87-23b108703d0c", "sighting--f9ae7ba0-1880-4157-97e1-77a6f9ab7302", "sighting--413e51ce-b161-4ee8-82b1-995659ef8171", "sighting--c967afe7-c362-49fc-b3a1-e86dab246dc1", "sighting--a472302b-eb27-40b2-863a-e01f81546da2", "sighting--2df0d1fd-84d5-4606-8fef-50138f22c3af", "sighting--833b494a-1169-45f5-91ce-4c2fad394ec8", "sighting--aee3f61a-552a-4d72-8786-ce1629c15a57", "sighting--1838116c-3851-4f7d-ac66-bf60a19fc892", "sighting--79adc811-3b38-486b-88fd-baaf1cf52e66", "sighting--bba0652c-74f7-403d-a665-1326b1b962e0", "sighting--b9da2545-8b8f-4b17-a7e6-69088b82fb44", "sighting--d8ecf40c-b232-46f1-b83d-3ae4317adf07", "sighting--b6febbaf-04b1-4206-ae5d-f436449a2c3e", "sighting--ea93e7d3-ea10-4fa9-8a19-bb0709858dba", "sighting--98f45fee-8b4e-4f26-a914-aced1a23b9ad", "sighting--99eb7572-acd7-4649-b4c1-62821ffb0633", "sighting--7216bf1f-f4c6-46b2-9425-3ae7a72af6f0", "sighting--51ba7231-4505-4abd-9ce0-83941f3efac8", "sighting--8fc76d61-7e7e-4bfc-9e75-b7c3a5cc8838", "sighting--d99f51e1-a316-438e-86a6-fb8f72027fea", "sighting--db7f7de8-7108-4635-b6c4-e6912e0bc0b5", "sighting--d9c05084-7368-428b-aec6-b9ff4f2b4243", "sighting--a59979c7-a0e9-49b3-9807-178123acc703", "sighting--b2d9e8c3-5da7-4848-94d5-5d9f1d79feea", "sighting--89a9b913-fce7-4c99-84fb-a258560f9496", "sighting--ee657b2c-06d7-47a6-81fa-b2b2d502843c", "sighting--ed2f2d6a-a1e0-4655-8033-878ad15d8217", "sighting--69fd338a-34a2-4769-a8da-acec49ab47fb", "sighting--ba5e6cf7-f23d-4b8d-b322-c7ade7c2f360", "sighting--7838f0b9-8eac-4171-bb3b-ba97bf24cb3f", "sighting--cdc324d2-6f76-4642-8080-4cb5b6d8fb01", "sighting--317ee57d-1dc3-45e4-85e9-6d2071fb45c8", "sighting--6d8b35d9-bc53-40c4-bd62-d53064456a00", "sighting--487d094a-4d0b-4638-8a51-9db6432347d2", "sighting--034fa372-ee71-4f91-8505-3c6368d0ea60", "sighting--6038e9da-8179-4b4a-9eb8-e7efd1f044a6", "sighting--823cbd9a-795d-42e0-bafd-f09796da8ea3", "sighting--0603cadf-12b3-4f66-8048-25e5d6040e0d", "sighting--bf5271cb-4e0b-49a7-8f2b-069f1b344e10", "sighting--83700c46-6eaf-4332-b764-c4c7d298c4a1", "sighting--b5e61ea2-bc57-411a-bf73-710018d4cb62", "sighting--9b6c291b-f6ab-406d-b9d8-8c985818bb8c", "sighting--1fa62a2f-fc7a-43ff-948b-43f8b78172c0", "sighting--a605d5bf-f849-4e9e-994e-e661abad3231", "sighting--ac4a30c5-802c-4f59-944a-54cb990feb0a", "sighting--04ec68ca-6c79-4e7a-b3b8-f5288ccbde54", "sighting--815decd1-9f45-4835-83d8-87300cbde5d1", "sighting--9e352645-32aa-4494-9319-84addd9ac79b", "sighting--5c7213e5-e0af-43d9-8993-e2d1a37f2923", "sighting--a627f79e-70b5-43bc-999f-1513a437c4d0", "sighting--d9b8f62d-4d25-4ab1-8753-75d7232723f3", "sighting--2abadd6c-b953-49c8-b974-b65e59ba38fa", "sighting--f7726209-3b6e-407f-9a49-f69576981306", "sighting--1f98a516-53dd-486f-8995-6cf1b25ea061", "sighting--d0bc9f45-9a80-4918-82ec-aed5bfa54799", "sighting--8b4a96b1-530a-4dc9-b35f-3f360098e4c2", "sighting--a65cfa48-cbce-467e-9c2a-3f4904034b04", "sighting--cd52a13d-578e-4814-999f-cd165513e582", "sighting--a5c8c20c-5731-44e4-a60f-938fe014d980", "sighting--f786214b-9fa0-4249-aeec-1f1ba9b9d131", "sighting--26c381dc-e6ba-4435-aa0d-02fa544fa3f0", "sighting--a90846a6-856c-4e64-a49d-33f625ee9cbd", "sighting--ca71227e-48cc-4376-8272-6aa100eca5cd", "sighting--caa4517e-a713-42ab-96db-badcaa6bd4bc", "sighting--32a874cc-33f3-4bce-ad2f-ad6a09c01001", "sighting--4df31adc-9f1e-441e-949e-fb3986d70ef9", "sighting--cfb959a7-f4d0-4388-8068-b2153adbb56c", "sighting--d1c17117-3b5c-4f0d-8225-5769ac9b83ce", "sighting--703049e1-24e3-4086-96f6-e4a02ec88a0e", "sighting--6f18304a-840b-498d-b57f-ddc7b5b3deb1", "sighting--a21f7947-cb92-4308-bb02-7902b79700ab", "sighting--326dcf27-5244-441b-ad17-42aa87198429", "sighting--73d0609c-0f2c-4fdf-8cec-e373d53bc3b8", "sighting--b9b0cbe7-28c9-44fd-a240-e03736624dcf", "sighting--7d50e902-f4aa-438b-a4ac-32a6419b1ad3", "sighting--d143b18e-478d-445b-b0ed-abb610fdc57c", "sighting--289968b0-a45a-404d-8721-6bc6aec745ba", "sighting--d71716ae-8513-41b8-89c7-5da512ea1796", "sighting--c8aee467-25d9-4b37-9b3b-b4c7c0b943a8", "sighting--3dfca9ac-5320-49f1-a407-53923dbe2ff2", "sighting--fadcbd87-9855-44a2-8e7f-cd8f92dd43a9", "sighting--3e784bd0-06b8-4c11-93af-4ba7bd86a83d", "sighting--0f5c8f15-6f86-4c33-993d-89f4d5840d60", "sighting--661a7a01-e4bb-4e76-a3af-82622e2e077e", "sighting--70cb67b6-5f2e-41dc-8c35-75f1c7b454fc", "sighting--f2d01ca6-1143-4ef1-9a96-f466cd1f36b6", "sighting--60523bda-abfc-4a9b-9122-42ef0e8ce176", "sighting--ae266b61-407e-4cbd-83cb-d78aaf5336df", "sighting--69d6ae50-5fe5-46a7-89a0-ff48229ad0b2", "sighting--4f1c1acb-21e6-4560-b680-dc58a869bd8f", "sighting--51a348a6-bf60-4847-9463-9499e196e787", "sighting--8abbdfcc-e1e7-4fd7-b0a5-309a439cdeef", "sighting--2b6d8ba8-1b6a-4f04-ba7e-cb8e8d00f393", "sighting--258632ce-37c3-497c-b5dc-c5fbca22440d", "sighting--90da9ea7-93f9-41b2-8b9a-587141b44ee6", "sighting--7545a571-7335-4971-9cd1-99c383b4a26b", "sighting--2eba5878-22c8-4380-89e6-d522e869eebb", "sighting--6d6ef2e4-47ef-44b6-b629-353794749458", "sighting--c0b960f5-3663-4e33-af4d-90063384f818", "sighting--a6b026f1-23df-4f9d-a24c-4f4836b07b18", "sighting--a6bf23db-35e7-48ad-a4fe-588f94d1615a", "sighting--21a4ab12-7457-43bb-96fb-d8834c9fe383", "sighting--dcd94d3a-b80f-4434-8c9d-430ee7b20849", "sighting--dc7cf7c3-8597-47e5-a11f-a325b9bd8754", "sighting--eb7311b4-ef9a-4661-ad74-327ebc911d5d", "sighting--d424d113-685f-48dd-872b-2a9ea73392ba", "sighting--a6f73ac8-adeb-488d-b873-fe66fce98c74", "sighting--87f2d619-dc73-4b4f-a2a3-97947c38c788", "sighting--5ec2bfee-27e4-45f4-87da-24b1517d56ff", "sighting--73280904-9c95-4306-99ec-5c63075bfdd4", "sighting--2bba17cb-74d8-4913-a3b6-a19901490764", "sighting--5903f412-f7b5-4f22-a4b2-d40cc05f29b5", "sighting--c0d718fa-3a98-4122-ac1e-a5031700e836", "sighting--8fffd455-5ef1-4311-910d-4a4ecf6a00da", "sighting--9f995950-8bc6-491c-a8b7-beb86578c34e", "sighting--9c77d282-a2de-4c6c-ae1b-319bf9a5348d", "sighting--91cb0820-55ee-41ac-a2cd-077ad91811bc", "sighting--88667136-6c81-421c-ac70-a398be3c0d76", "sighting--fc82b7b6-e75f-4baa-b49d-0fc35cfba9b8", "sighting--b9e30025-f84d-47f1-9c37-8d565bb3af38", "sighting--9478b5e4-6360-4544-a366-c422a7f29dfc", "sighting--567798a9-b909-4e99-883e-47324442c94c", "sighting--841fa751-9e23-4d45-89e0-12d632ac6227", "sighting--d84b8a73-236a-4770-a2d3-4720b2c73125", "sighting--b4d18af7-0032-4eb7-aa1d-5aa9a3c2c5a0", "sighting--3df82ff9-513d-4e42-bd12-5ee45795cbba", "sighting--3688865c-2039-4669-9a70-558e5895f5d7", "sighting--4f0339d9-6fd3-4894-9e8d-5c468cf4c0b4", "sighting--5a7c49a5-2bae-41b5-9129-8e065f208e9b", "sighting--2cfb950b-c871-44d7-b23b-1226691bf482", "sighting--ca8a2769-88a3-4f59-9d62-3e9107b67449", "sighting--0f7d191a-5e1d-4d67-8bbf-7b6061a82fe2", "sighting--e68a46c9-84c3-4d05-943f-57ead8e9b38a", "sighting--6ff7037d-568b-4540-a484-6ec5ee77ed35", "sighting--047e472e-6c35-4582-8326-a055dc863535", "sighting--3f59a3db-5c00-49de-9297-53c0e6e5db71", "sighting--ce3cd0ae-6b73-41db-8e68-c72ed79f6b72", "sighting--9418fde5-6539-45a0-91a6-0d4f335444a6", "sighting--13cf5c84-43c7-4102-bb74-6b4602038a96", "sighting--657eb765-d525-407e-8478-7a50bee09df3", "sighting--8f66a38f-2fcb-41f5-9dc4-3824bbb95618", "sighting--6368b2d7-cfb8-4d28-a5b5-12f1ddfd8a45", "sighting--e8d79b8a-cf41-41cd-977c-432cf2b72a30", "sighting--1509168b-08da-4bfd-a679-c4dbeacaafbd", "sighting--22c85e29-771f-4f8d-a44c-a0e630e4b626", "sighting--b0528b8c-e476-49f9-b2e7-d0e74e0369af", "sighting--4b436cab-b055-43c4-9771-83839731e0e7", "sighting--5a15d0cf-08b7-4ade-95a9-1017af5c9092", "sighting--a800acce-6026-43ba-a648-f8f717e00e03", "sighting--0b3ecfd2-2395-4c63-9240-4e0aa12e8588", "sighting--a418027d-9773-4671-a65e-69aefacd8c18", "sighting--765ddb69-ee32-4f5c-b758-ba3b34f2ddaf", "sighting--5bcd6180-4f79-49c3-8f7c-fabb76390b40", "sighting--42f1bea7-c746-4700-bb11-98998a37a5d4", "sighting--4fb17f4f-eb02-44e9-b1b2-26c30f1f16e1", "sighting--45caaff3-353f-441b-9090-64d312697d2f", "sighting--0f8fda2f-b939-4466-b68f-29e20230f198", "sighting--f0fe661b-5589-4a99-abbe-495dfbe3a0ef", "sighting--32e81643-5e36-44dd-bb95-b0e8923b0e01", "sighting--42418e6b-e123-4598-9732-d44fb2992d74", "sighting--4469ae4e-7f6d-4029-8d94-69a7634bf73f", "sighting--08be47a4-579f-4dbe-b00c-ab4cce4d165a", "sighting--82c70840-60ab-488c-815d-b49781a259dd", "sighting--d12a6d2a-9450-4ad2-bb80-18c0d1b40fb1", "sighting--dc2e2ca0-75cd-4055-b5e0-3e3dfbf3da65", "sighting--a833e1f6-6b9d-4f37-85a7-da01546f9fb6", "sighting--7948054a-7834-454c-be98-20abe5eaa71c", "sighting--63ddd953-3091-4792-8d3c-873674119fce", "sighting--06703f98-f6db-48cb-8b69-8a0a0eae0ee8", "sighting--ef2e550f-d02d-4ded-90d5-49faf3c21549", "sighting--dd166c3d-064c-4c8e-b4b9-7fd91c32af67", "sighting--a189f408-f420-4f4c-b49c-80623762482c", "sighting--21aef694-fd5d-453a-b0ec-dc325edb7c14", "sighting--9005e577-23df-4df5-9ca2-67e6a5ff1b37", "sighting--52ae34bc-3a35-4af6-bdff-e9e8c2f202d4", "sighting--04d4acd7-f167-415c-8240-c15883ab7d31", "sighting--4284fe1c-db2b-4942-9101-6f570663a9c7", "sighting--3b66ba2d-41fd-4e08-a7e9-287aea059fdd", "sighting--edfcec00-dcd5-4b5d-8a37-789b6bb975fe"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-09T11:00:01.585Z", "modified": "2026-06-09T11:00:01.585Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}